$ rpki-client -vvf repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft File: 5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft (raw, json) Hash identifier: gfcCyCzuQRR4GzK0JTpkqhxhSve2J4Lb+rwrmqEvMfQ= Subject key identifier: 20:15:04:B0:AD:20:63:7E:0F:35:AD:6E:2E:2C:75:A0:51:93:47:21 Authority key identifier: 5A:D1:91:73:FE:66:EE:2B:9E:99:5A:99:ED:7D:C4:23:01:13:BD:EF Certificate issuer: /CN=5AD19173FE66EE2B9E995A99ED7DC4230113BDEF Certificate serial: 122C5497E8B277CD4577541B6647EFE7CD989637 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft Manifest number: 013A Signing time: Sun 04 May 2025 10:01:50 +0000 Manifest this update: Sun 04 May 2025 09:56:50 +0000 Manifest next update: Wed 07 May 2025 12:26:50 +0000 Files and hashes: 1: 3130332e3132332e3137342e302f32332d3233203d3e20313530393638.roa (hash: 5XRHZIZI1oj83KHXG7v/4Bg68uKlgADqYmMHikLr/vU=) 2: 3130332e3132332e3137352e302f32342d3234203d3e20313530393638.roa (hash: dqxRLNjaP87/BAjwkFlOT+1aQilVY6SUF3ZdlXMJQnY=) 3: 5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.crl (hash: bqarUeZnCzEgyii+VAfUuYiay57tkBWwKiG5x50ItUo=) 4: 3130332e3132332e3137342e302f32342d3234203d3e20313530393638.roa (hash: HBPJroPXGy8LUopobuBKzRyp/rbJ8xWZnNOPphW6Qlg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.crl rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 12:26:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:2c:54:97:e8:b2:77:cd:45:77:54:1b:66:47:ef:e7:cd:98:96:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AD19173FE66EE2B9E995A99ED7DC4230113BDEF Validity Not Before: May 4 09:56:50 2025 GMT Not After : May 7 12:26:50 2025 GMT Subject: CN=201504B0AD20637E0F35AD6E2E2C75A051934721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:44:fa:78:bd:27:2d:f4:e1:b4:5f:53:51:94: d2:41:93:a4:ce:39:ab:56:86:da:cb:91:ee:6e:8d: db:9e:07:74:3c:c4:5d:a9:11:b5:17:ca:75:1a:62: 33:7b:aa:52:97:91:81:5a:0b:52:bb:8c:d2:46:6a: d0:77:7f:51:ba:3e:98:c0:da:77:69:e7:b7:ae:8b: 9f:c4:9f:95:e2:6d:2b:8c:dd:01:a0:34:19:92:58: 18:60:87:69:a3:95:a4:c5:32:34:ee:12:41:a3:63: 89:39:10:60:14:2f:63:c2:2b:28:07:d4:7f:8d:4e: ae:e3:d1:d7:08:59:6d:a9:36:3f:5e:81:ad:04:01: 51:fc:ac:d9:b8:40:e0:2f:62:93:33:b8:84:46:f1: fa:e8:1b:77:9b:a6:4e:b5:64:95:d2:5f:a8:ed:1f: f3:27:5c:2c:9e:3d:7b:78:54:7c:c3:4e:0f:08:f7: 66:8d:5f:cb:ab:c9:d0:1c:7f:1a:56:ee:67:ea:94: ae:f8:8d:b1:4d:3d:e2:b8:0b:56:10:29:c2:b4:2d: d7:62:e2:e2:eb:e7:54:e9:2a:f3:8b:ae:86:b3:3d: 38:07:44:cd:4d:fb:b2:1f:8a:23:63:63:8a:b1:de: 85:74:16:03:0b:ad:77:4f:b0:32:9a:c1:b1:65:8d: d2:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:15:04:B0:AD:20:63:7E:0F:35:AD:6E:2E:2C:75:A0:51:93:47:21 X509v3 Authority Key Identifier: keyid:5A:D1:91:73:FE:66:EE:2B:9E:99:5A:99:ED:7D:C4:23:01:13:BD:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:93:49:04:f8:c4:34:1d:9b:58:90:1a:1d:d1:7a:88:e8:fd: e0:ee:b4:94:0b:33:89:dc:49:b6:2d:79:9a:11:73:f7:94:10: 56:c3:32:5e:5f:8b:cf:9f:91:51:f0:48:43:e1:c4:3b:65:4f: e6:ce:ff:ee:80:7d:55:4e:86:f7:d5:48:b0:1b:3d:6c:9a:07: 5f:b6:1a:e2:03:d4:ae:86:4c:2a:14:54:82:03:33:03:c5:3b: 42:c8:e1:86:73:59:55:76:67:90:97:00:b0:85:71:10:ee:44: 0d:28:7b:5f:9d:bd:7a:a4:69:19:34:f9:b8:26:4d:43:0d:dd: 46:54:a5:39:50:7b:3d:85:f0:38:bb:f4:ba:e5:3a:74:30:4d: e8:1c:4b:65:5f:a2:21:9e:1d:38:ca:f4:fa:b0:8d:6c:3d:8a: 1d:71:66:61:4e:8d:d3:6c:7a:a9:87:7b:50:84:ec:35:a8:71: 6d:d1:fd:17:ff:18:4d:13:ca:ff:c3:0e:94:16:ef:58:c2:7c: 56:12:79:90:fb:4d:b5:50:df:b7:67:bb:47:4b:8e:ba:ff:64: 29:bb:56:89:37:c7:e2:61:20:87:dd:4e:a3:b0:ac:29:de:c3: 52:25:9a:80:c2:91:8a:be:92:11:08:f2:29:00:e5:96:8b:26: 05:73:b4:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEixUl+iyd81Fd1QbZkfv582YljcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFEMTkxNzNGRTY2RUUyQjlFOTk1QTk5RUQ3REM0MjMw MTEzQkRFRjAeFw0yNTA1MDQwOTU2NTBaFw0yNTA1MDcxMjI2NTBaMDMxMTAvBgNV BAMTKDIwMTUwNEIwQUQyMDYzN0UwRjM1QUQ2RTJFMkM3NUEwNTE5MzQ3MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFRPp4vSct9OG0X1NRlNJBk6TO OatWhtrLke5ujdueB3Q8xF2pEbUXynUaYjN7qlKXkYFaC1K7jNJGatB3f1G6PpjA 2ndp57eui5/En5XibSuM3QGgNBmSWBhgh2mjlaTFMjTuEkGjY4k5EGAUL2PCKygH 1H+NTq7j0dcIWW2pNj9ega0EAVH8rNm4QOAvYpMzuIRG8froG3ebpk61ZJXSX6jt H/MnXCyePXt4VHzDTg8I92aNX8urydAcfxpW7mfqlK74jbFNPeK4C1YQKcK0Lddi 4uLr51TpKvOLroazPTgHRM1N+7IfiiNjY4qx3oV0FgMLrXdPsDKawbFljdJHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIBUEsK0gY34PNa1uLix1oFGTRyEwHwYDVR0j BBgwFoAUWtGRc/5m7iuemVqZ7X3EIwETve8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZmVkYjI4Zi1mM2Y5LTQxOTktODVhMy1jOWJmOWE3YTdkZjgvMC81QUQxOTE3M0ZF NjZFRTJCOUU5OTVBOTlFRDdEQzQyMzAxMTNCREVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUFEMTkxNzNGRTY2RUUyQjlFOTk1QTk5RUQ3REM0MjMwMTEz QkRFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWZlZGIyOGYtZjNmOS00MTk5LTg1 YTMtYzliZjlhN2E3ZGY4LzAvNUFEMTkxNzNGRTY2RUUyQjlFOTk1QTk5RUQ3REM0 MjMwMTEzQkRFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI6TSQT4xDQdm1iQGh3Reojo/eDutJQLM4nc SbYteZoRc/eUEFbDMl5fi8+fkVHwSEPhxDtlT+bO/+6AfVVOhvfVSLAbPWyaB1+2 GuID1K6GTCoUVIIDMwPFO0LI4YZzWVV2Z5CXALCFcRDuRA0oe1+dvXqkaRk0+bgm TUMN3UZUpTlQez2F8Di79LrlOnQwTegcS2VfoiGeHTjK9PqwjWw9ih1xZmFOjdNs eqmHe1CE7DWocW3R/Rf/GE0Tyv/DDpQW71jCfFYSeZD7TbVQ37dnu0dLjrr/ZCm7 Vok3x+JhIIfdTqOwrCnew1IlmoDCkYq+khEI8ikA5ZaLJgVztCg= -----END CERTIFICATE-----Generated at Mon May 5 23:57:18 2025 by rpki-client