$ rpki-client -vvf repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.mft File: B5787D648E70D60E0E09510EBF1809D686E83D03.mft (raw, json) Hash identifier: pxlzdwVeOuS5S1GRuSrW2b8SHtZVfZAhk5qe7hVD/FQ= Subject key identifier: DD:69:E5:D1:11:58:5D:BB:91:66:71:8F:83:9A:DC:08:94:91:21:1F Authority key identifier: B5:78:7D:64:8E:70:D6:0E:0E:09:51:0E:BF:18:09:D6:86:E8:3D:03 Certificate issuer: /CN=B5787D648E70D60E0E09510EBF1809D686E83D03 Certificate serial: 1B9329AF8E1F9CAD720BCB4EA548DBAEB68FFA3A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5787D648E70D60E0E09510EBF1809D686E83D03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.mft Manifest number: 02FD Signing time: Tue 06 May 2025 14:41:59 +0000 Manifest this update: Tue 06 May 2025 14:36:59 +0000 Manifest next update: Sat 10 May 2025 00:43:59 +0000 Files and hashes: 1: 3130332e3137322e3138372e302f32342d3234203d3e20313432343030.roa (hash: tQ4vZuhFeMHPG6Q4JsAfSDt09xj/628G92eqdEQqJxg=) 2: 3130332e3137322e3138362e302f32342d3234203d3e20313432343030.roa (hash: YPeNafffbCxEDeGWTOYrUeYYiluS0g8ccyYN1CwbY9k=) 3: 3130332e3137322e3138362e302f32332d3233203d3e20313432343030.roa (hash: zkB5HXDUn4hIZM8BxR9vmf/Op1/JEHll9O9rPcOFDt0=) 4: B5787D648E70D60E0E09510EBF1809D686E83D03.crl (hash: bXZaJkKwu/oCo0KkaALmSSS17/RmcpWwH7GIPcqXinI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.crl rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5787D648E70D60E0E09510EBF1809D686E83D03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 00:43:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:93:29:af:8e:1f:9c:ad:72:0b:cb:4e:a5:48:db:ae:b6:8f:fa:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5787D648E70D60E0E09510EBF1809D686E83D03 Validity Not Before: May 6 14:36:59 2025 GMT Not After : May 10 00:43:59 2025 GMT Subject: CN=DD69E5D111585DBB9166718F839ADC089491211F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:26:e0:77:bf:d8:d1:bc:18:a8:e9:00:ac:37: 0c:31:14:49:7b:30:3f:16:b5:d0:a1:27:7c:e4:22: 03:e2:02:eb:85:9d:90:13:e3:a6:ca:88:9d:78:9a: 01:7f:12:95:86:83:5c:b1:d0:16:82:b8:59:16:38: 07:6e:11:e1:fa:5d:8a:98:79:c9:1c:dc:48:9d:3b: 4b:e8:14:ce:6d:fa:16:51:37:72:d9:bc:09:25:6e: e2:68:8e:6e:9e:cf:97:c7:94:e0:4b:f6:43:49:4a: 0f:9a:b1:f1:23:b7:ad:bc:b1:1e:2c:ee:9c:ea:ea: 7e:ac:38:80:36:b1:8f:5f:f7:18:b0:dd:49:0b:b2: 32:80:79:7f:fb:3c:7f:a8:0d:02:00:f7:cf:84:41: c1:66:fc:b8:e5:f6:e1:b6:83:3e:35:85:12:cb:74: 2b:bb:d5:8e:ac:c2:95:ce:66:2a:e8:70:e9:60:86: 17:3b:80:65:c7:de:f1:3a:bc:cc:b9:67:30:70:0d: 09:45:14:6c:32:f9:5a:c2:9a:fe:f6:78:3a:47:c8: e2:8f:3d:6b:9f:a8:38:3e:ac:f8:01:a0:7b:c6:12: 82:13:a9:f5:c6:99:f1:f2:13:2a:04:9f:5d:5e:5d: 8d:38:8e:fb:6d:f0:8f:ae:f6:06:9e:6d:e7:71:a0: 7e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:69:E5:D1:11:58:5D:BB:91:66:71:8F:83:9A:DC:08:94:91:21:1F X509v3 Authority Key Identifier: keyid:B5:78:7D:64:8E:70:D6:0E:0E:09:51:0E:BF:18:09:D6:86:E8:3D:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5787D648E70D60E0E09510EBF1809D686E83D03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/22f5f07c-f07b-4aaa-a0c2-df17c910c586/0/B5787D648E70D60E0E09510EBF1809D686E83D03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:93:6f:fa:73:0a:a6:d7:60:8a:5e:c2:d4:38:06:cb:9e:0a: 20:b2:a1:f3:9a:a3:20:7c:3d:5c:e5:b0:f8:39:53:de:6e:54: 5b:d8:e2:78:44:4f:16:59:b8:31:e1:fa:9a:1f:d7:cb:c5:f2: eb:bb:ed:d7:18:30:c3:85:36:7a:e9:e0:ce:b7:40:8b:b3:46: a1:64:e1:7c:5f:47:3d:be:8e:80:6d:b4:23:19:89:bc:92:4c: 28:d5:a9:9f:29:f0:d2:0a:7f:6d:87:91:21:d4:2d:8f:b3:5b: ba:e7:98:69:1d:c7:90:7b:b2:1e:1f:6f:c0:40:fb:71:92:d9: 49:59:98:98:68:dc:57:69:cf:84:02:9c:db:75:69:b3:9e:c8: 3a:de:18:b2:8c:19:a1:60:26:b3:51:b9:0e:43:92:f1:78:98: 7c:d5:6c:98:21:e9:c2:f8:05:7e:d6:53:23:3c:63:f3:b8:a9: 36:ff:ef:36:75:20:71:a2:c9:86:3d:01:6e:e1:15:b3:55:be: d8:e5:94:52:75:52:bd:30:18:90:7e:ca:e5:ef:ab:c6:39:f5: 59:e8:0f:4e:0e:7d:1d:f9:d8:23:4f:ef:51:40:d9:14:61:ba: 73:87:a9:c8:a3:3e:1c:d7:a9:89:5a:78:6f:b4:2d:11:0b:f3: fb:ac:7a:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG5Mpr44fnK1yC8tOpUjbrraP+jowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjU3ODdENjQ4RTcwRDYwRTBFMDk1MTBFQkYxODA5RDY4 NkU4M0QwMzAeFw0yNTA1MDYxNDM2NTlaFw0yNTA1MTAwMDQzNTlaMDMxMTAvBgNV BAMTKERENjlFNUQxMTE1ODVEQkI5MTY2NzE4RjgzOUFEQzA4OTQ5MTIxMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyJuB3v9jRvBio6QCsNwwxFEl7 MD8WtdChJ3zkIgPiAuuFnZAT46bKiJ14mgF/EpWGg1yx0BaCuFkWOAduEeH6XYqY eckc3EidO0voFM5t+hZRN3LZvAklbuJojm6ez5fHlOBL9kNJSg+asfEjt628sR4s 7pzq6n6sOIA2sY9f9xiw3UkLsjKAeX/7PH+oDQIA98+EQcFm/Ljl9uG2gz41hRLL dCu71Y6swpXOZirocOlghhc7gGXH3vE6vMy5ZzBwDQlFFGwy+VrCmv72eDpHyOKP PWufqDg+rPgBoHvGEoITqfXGmfHyEyoEn11eXY04jvtt8I+u9gaebedxoH4xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3Wnl0RFYXbuRZnGPg5rcCJSRIR8wHwYDVR0j BBgwFoAUtXh9ZI5w1g4OCVEOvxgJ1oboPQMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MmY1ZjA3Yy1mMDdiLTRhYWEtYTBjMi1kZjE3YzkxMGM1ODYvMC9CNTc4N0Q2NDhF NzBENjBFMEUwOTUxMEVCRjE4MDlENjg2RTgzRDAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjU3ODdENjQ4RTcwRDYwRTBFMDk1MTBFQkYxODA5RDY4NkU4 M0QwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjJmNWYwN2MtZjA3Yi00YWFhLWEw YzItZGYxN2M5MTBjNTg2LzAvQjU3ODdENjQ4RTcwRDYwRTBFMDk1MTBFQkYxODA5 RDY4NkU4M0QwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD+Tb/pzCqbXYIpewtQ4BsueCiCyofOaoyB8 PVzlsPg5U95uVFvY4nhETxZZuDHh+pof18vF8uu77dcYMMOFNnrp4M63QIuzRqFk 4XxfRz2+joBttCMZibySTCjVqZ8p8NIKf22HkSHULY+zW7rnmGkdx5B7sh4fb8BA +3GS2UlZmJho3Fdpz4QCnNt1abOeyDreGLKMGaFgJrNRuQ5DkvF4mHzVbJgh6cL4 BX7WUyM8Y/O4qTb/7zZ1IHGiyYY9AW7hFbNVvtjllFJ1Ur0wGJB+yuXvq8Y59Vno D04OfR352CNP71FA2RRhunOHqcijPhzXqYlaeG+0LREL8/useqg= -----END CERTIFICATE-----Generated at Thu May 8 15:45:02 2025 by rpki-client