$ rpki-client -vvf repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft File: 5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft (raw, json) Hash identifier: lcfRiQxR+1zqCOZT/xKIxuoaOsZ59++3IqSWZ8clReQ= Subject key identifier: 22:4E:0C:2F:71:D3:6F:70:BA:19:E0:B7:5C:C1:01:9C:D7:A7:2E:73 Authority key identifier: 51:31:74:3F:5E:95:BB:0A:D5:AE:61:B0:BD:C1:88:4C:10:21:B4:76 Certificate issuer: /CN=5131743F5E95BB0AD5AE61B0BDC1884C1021B476 Certificate serial: 7C8852D8C0BC9D3F304DDB86D933250586ADB456 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft Manifest number: 9E Signing time: Mon 12 May 2025 14:21:57 +0000 Manifest this update: Mon 12 May 2025 14:16:57 +0000 Manifest next update: Thu 15 May 2025 22:10:57 +0000 Files and hashes: 1: 5131743F5E95BB0AD5AE61B0BDC1884C1021B476.crl (hash: qUZUVLL78V9WWL1TIO+wkJToYc6DJ1Y4myj9Yr00qas=) 2: 3135372e36362e35362e302f32342d3234203d3e203538343737.roa (hash: mNyigsx6fiPTgdjz6nFdMMBq/cl8SacZCUjTw8QheXg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.crl rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 22:10:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:88:52:d8:c0:bc:9d:3f:30:4d:db:86:d9:33:25:05:86:ad:b4:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5131743F5E95BB0AD5AE61B0BDC1884C1021B476 Validity Not Before: May 12 14:16:57 2025 GMT Not After : May 15 22:10:57 2025 GMT Subject: CN=224E0C2F71D36F70BA19E0B75CC1019CD7A72E73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1d:5e:80:f3:48:a7:8f:98:71:2c:01:0f:22: 62:4f:e6:de:cc:e0:09:38:23:94:ef:3c:cf:73:ee: 9b:63:18:65:48:0c:ce:ad:de:e9:ac:63:7d:00:06: f4:09:60:48:75:bc:38:28:0b:53:7c:97:e2:a0:dc: d7:20:29:16:dc:a2:32:bf:5a:ca:5b:e5:9e:67:a5: 2e:67:21:46:f7:1c:2f:6d:29:51:1f:77:69:fb:b1: 20:54:a1:6a:8e:72:4c:b7:7c:6e:4c:d4:fe:c3:c7: b7:52:1c:55:13:4f:94:7b:a7:bc:10:96:91:b5:4a: ea:42:a0:74:35:66:70:10:44:79:bc:ce:40:e0:f8: 4b:4c:10:37:c3:86:49:e4:57:1d:70:ef:6f:d8:6b: 13:18:67:62:78:df:49:28:d2:d2:b8:41:d5:c2:1b: 91:ee:2f:51:5b:5d:5a:3b:81:b0:aa:4f:f4:e2:d8: 01:45:fb:b0:06:9a:80:ae:22:7d:56:4b:32:e6:ef: e0:e1:15:fa:2f:29:56:6c:73:30:2f:2e:66:de:dd: 0d:40:a8:5a:4d:56:60:b7:d4:dc:c5:d3:52:62:90: 1a:f4:87:0b:b6:25:30:2d:9e:b3:3c:77:cf:bc:f0: 33:f8:db:64:21:08:9d:ad:55:a4:05:2f:c4:78:e7: 67:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:4E:0C:2F:71:D3:6F:70:BA:19:E0:B7:5C:C1:01:9C:D7:A7:2E:73 X509v3 Authority Key Identifier: keyid:51:31:74:3F:5E:95:BB:0A:D5:AE:61:B0:BD:C1:88:4C:10:21:B4:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1d755347-6b1c-42c1-9f54-d7eab22e182c/0/5131743F5E95BB0AD5AE61B0BDC1884C1021B476.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:26:d2:80:ad:dd:df:1d:e2:3a:5d:2a:33:ef:3d:65:97:96: b0:ac:2e:e0:87:a1:b8:aa:9a:24:fc:ca:25:cd:71:f8:79:fb: 98:44:25:89:a3:08:cd:95:4a:47:16:34:af:0d:78:e2:13:1b: ee:8b:78:cd:0e:46:a0:b5:0c:c6:d5:08:ee:60:06:93:dd:67: 42:42:31:12:22:4f:9e:39:8d:26:c9:3e:1c:2e:72:5c:03:a4: b9:20:79:e7:a4:29:db:dd:fa:82:eb:05:44:08:d6:76:ea:de: 72:e8:3b:e5:82:e6:ca:b4:57:66:c8:c3:e6:73:04:3a:7a:2d: 44:9c:0b:b1:2f:ad:7f:e4:af:a7:b3:82:ca:27:26:ba:9c:cc: af:82:8f:04:b8:b7:ca:cb:22:be:ef:1e:d8:88:5d:9f:74:0c: b7:0f:c9:96:da:c0:0a:02:5c:ba:6d:3f:55:5e:5e:9f:d6:b6: bb:58:27:fd:ca:9c:35:0b:db:2d:24:b2:9f:d6:b6:59:51:95: 10:41:fd:2d:33:a1:93:0f:45:f4:64:7a:d3:29:7b:cb:80:4e: 2d:9c:72:70:c5:0e:b6:8b:df:63:a4:78:c2:68:ce:ba:12:c9: 4b:3f:80:0a:3f:c3:26:5e:83:94:14:d0:8e:10:2d:c4:f1:f1: 11:99:8a:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfIhS2MC8nT8wTduG2TMlBYattFYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTEzMTc0M0Y1RTk1QkIwQUQ1QUU2MUIwQkRDMTg4NEMx MDIxQjQ3NjAeFw0yNTA1MTIxNDE2NTdaFw0yNTA1MTUyMjEwNTdaMDMxMTAvBgNV BAMTKDIyNEUwQzJGNzFEMzZGNzBCQTE5RTBCNzVDQzEwMTlDRDdBNzJFNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5HV6A80inj5hxLAEPImJP5t7M 4Ak4I5TvPM9z7ptjGGVIDM6t3umsY30ABvQJYEh1vDgoC1N8l+Kg3NcgKRbcojK/ Wspb5Z5npS5nIUb3HC9tKVEfd2n7sSBUoWqOcky3fG5M1P7Dx7dSHFUTT5R7p7wQ lpG1SupCoHQ1ZnAQRHm8zkDg+EtMEDfDhknkVx1w72/YaxMYZ2J430ko0tK4QdXC G5HuL1FbXVo7gbCqT/Ti2AFF+7AGmoCuIn1WSzLm7+DhFfovKVZsczAvLmbe3Q1A qFpNVmC31NzF01JikBr0hwu2JTAtnrM8d8+88DP422QhCJ2tVaQFL8R452dJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIk4ML3HTb3C6GeC3XMEBnNenLnMwHwYDVR0j BBgwFoAUUTF0P16VuwrVrmGwvcGITBAhtHYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZDc1NTM0Ny02YjFjLTQyYzEtOWY1NC1kN2VhYjIyZTE4MmMvMC81MTMxNzQzRjVF OTVCQjBBRDVBRTYxQjBCREMxODg0QzEwMjFCNDc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTEzMTc0M0Y1RTk1QkIwQUQ1QUU2MUIwQkRDMTg4NEMxMDIx QjQ3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWQ3NTUzNDctNmIxYy00MmMxLTlm NTQtZDdlYWIyMmUxODJjLzAvNTEzMTc0M0Y1RTk1QkIwQUQ1QUU2MUIwQkRDMTg4 NEMxMDIxQjQ3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMEm0oCt3d8d4jpdKjPvPWWXlrCsLuCHobiq miT8yiXNcfh5+5hEJYmjCM2VSkcWNK8NeOITG+6LeM0ORqC1DMbVCO5gBpPdZ0JC MRIiT545jSbJPhwuclwDpLkgeeekKdvd+oLrBUQI1nbq3nLoO+WC5sq0V2bIw+Zz BDp6LUScC7EvrX/kr6ezgsonJrqczK+CjwS4t8rLIr7vHtiIXZ90DLcPyZbawAoC XLptP1VeXp/WtrtYJ/3KnDUL2y0ksp/WtllRlRBB/S0zoZMPRfRketMpe8uATi2c cnDFDraL32OkeMJozroSyUs/gAo/wyZeg5QU0I4QLcTx8RGZiqo= -----END CERTIFICATE-----Generated at Wed May 14 15:33:49 2025 by rpki-client