$ rpki-client -vvf repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.mft File: 798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.mft (raw, json) Hash identifier: FFRG8dOwgHm5SpaJreAZ0bekUuuxTUNJcQ3sNOycfN4= Subject key identifier: 13:58:75:A8:7D:9E:BA:9C:7D:C2:21:0C:9A:A1:05:B1:73:82:56:0A Authority key identifier: 79:89:44:F7:FB:C5:7D:5C:FB:F5:F1:BB:68:0F:2D:73:CA:D2:6D:D5 Certificate issuer: /CN=798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5 Certificate serial: 5BBBD3E7FA01F956F8602090DBFF4D7C44534D12 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.mft Manifest number: 01C5 Signing time: Fri 09 May 2025 15:21:22 +0000 Manifest this update: Fri 09 May 2025 15:16:22 +0000 Manifest next update: Mon 12 May 2025 21:31:22 +0000 Files and hashes: 1: 798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.crl (hash: imy7/tJb2pKUjJrfIIMNHtZx6dkZTO8RidML65y4vYQ=) 2: 3130332e3135372e36322e302f32332d3234203d3e20313439393736.roa (hash: 9eTzVSPH+omA3cV5yyIW0hWjWwQg4yB4G18BN8FCyjg=) 3: 3130332e3135372e36332e302f32342d3234203d3e20313439393736.roa (hash: wSYZIy/Q8ccBsJqK4uM7q0oCtCAJQMxXc4OdmK06W68=) 4: 3130332e3135372e36322e302f32342d3234203d3e20313439393736.roa (hash: rz//m1AmxOQCkyd1XS4RHRE7cEAFgR3CPVfRkSd+ImY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.crl rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 21:31:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:bb:d3:e7:fa:01:f9:56:f8:60:20:90:db:ff:4d:7c:44:53:4d:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5 Validity Not Before: May 9 15:16:22 2025 GMT Not After : May 12 21:31:22 2025 GMT Subject: CN=135875A87D9EBA9C7DC2210C9AA105B17382560A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9e:21:12:5c:95:f0:5b:b0:7f:8e:16:ec:85: fb:16:fc:67:8d:da:19:ed:78:bb:fc:52:00:f5:d8: 4a:13:b5:fe:63:6d:c0:f3:67:e6:fa:70:43:ac:6e: 62:74:18:51:4d:52:1c:7b:68:75:c5:5e:20:cf:35: 37:f2:e5:65:ed:6f:4b:47:68:dc:d9:d9:b2:11:f1: 8c:34:fb:2b:20:ff:f4:5e:32:c3:11:4e:12:0b:ea: 5d:24:1f:3f:65:c5:75:9d:d6:b5:98:ab:87:3c:95: 7f:f5:3d:01:59:19:66:73:bd:f9:60:8e:75:51:f9: 71:55:47:24:c0:f0:8f:e2:6e:9b:be:e3:30:2b:f6: d5:56:1f:15:f3:45:88:bc:6c:f1:1a:ab:b9:ee:aa: 3e:a3:be:4a:ad:91:a2:63:a8:2c:49:ad:60:5e:07: af:de:83:f1:ba:ec:70:db:2a:bd:89:61:52:09:eb: 78:36:72:3d:27:a6:1d:c2:89:38:33:1f:76:c3:ca: 2f:44:8d:04:98:fd:2c:64:48:e4:69:03:a2:42:1d: a7:9d:ca:f3:f8:5f:22:d5:a6:df:66:da:5d:42:f8: 60:fb:de:fa:1d:70:72:46:29:f4:a1:82:3b:cd:df: 3d:78:ad:5e:28:30:9f:6e:2a:40:d1:4d:b7:6d:3e: 9e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:58:75:A8:7D:9E:BA:9C:7D:C2:21:0C:9A:A1:05:B1:73:82:56:0A X509v3 Authority Key Identifier: keyid:79:89:44:F7:FB:C5:7D:5C:FB:F5:F1:BB:68:0F:2D:73:CA:D2:6D:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2bd30587-a7ca-4195-a359-0c0f627af8da/0/798944F7FBC57D5CFBF5F1BB680F2D73CAD26DD5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:e9:a6:d7:00:20:7a:9a:ee:92:03:4c:dd:35:64:63:c8:61: de:2c:9a:57:5d:29:58:db:2b:89:49:1e:22:d9:cc:83:37:d7: 2c:55:e1:63:f0:ad:5e:73:69:af:56:dc:f2:3e:05:f6:7b:80: 80:b9:66:5e:79:3a:0d:41:4d:eb:6f:65:e0:63:1a:df:2a:15: d6:09:01:54:b3:08:e9:c9:82:b4:b8:c6:dc:15:5d:cf:6c:bd: c4:2d:63:fa:5b:09:82:7b:e1:40:9f:2d:c7:da:9d:15:ed:a6: 81:bc:1c:86:cd:29:f5:ee:5a:3d:1a:3b:ce:ad:cb:51:28:eb: 3b:a9:87:dd:03:61:e3:4b:71:a7:2d:88:02:ba:ce:ac:68:5b: 73:4b:61:1e:1a:5d:42:f2:3a:cf:bb:bc:26:bf:5f:25:06:f0: bb:ba:19:a1:14:07:43:d4:19:c3:7d:5a:ef:e4:58:92:02:d1: 36:a7:dd:a9:8d:2f:30:42:e8:7f:b0:48:ae:db:9b:0f:73:8d: ba:a6:31:7c:9c:aa:18:8a:0e:26:c0:3e:4e:92:4b:d5:8f:77: 13:d3:d3:43:0f:55:a7:cd:95:79:87:e1:a0:f4:a4:a0:20:a4: 89:2b:ee:4a:7e:b4:15:35:87:15:e1:82:9a:c1:dc:89:49:f8: c0:dc:06:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW7vT5/oB+Vb4YCCQ2/9NfERTTRIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzk4OTQ0RjdGQkM1N0Q1Q0ZCRjVGMUJCNjgwRjJENzND QUQyNkRENTAeFw0yNTA1MDkxNTE2MjJaFw0yNTA1MTIyMTMxMjJaMDMxMTAvBgNV BAMTKDEzNTg3NUE4N0Q5RUJBOUM3REMyMjEwQzlBQTEwNUIxNzM4MjU2MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7niESXJXwW7B/jhbshfsW/GeN 2hnteLv8UgD12EoTtf5jbcDzZ+b6cEOsbmJ0GFFNUhx7aHXFXiDPNTfy5WXtb0tH aNzZ2bIR8Yw0+ysg//ReMsMRThIL6l0kHz9lxXWd1rWYq4c8lX/1PQFZGWZzvflg jnVR+XFVRyTA8I/ibpu+4zAr9tVWHxXzRYi8bPEaq7nuqj6jvkqtkaJjqCxJrWBe B6/eg/G67HDbKr2JYVIJ63g2cj0nph3CiTgzH3bDyi9EjQSY/SxkSORpA6JCHaed yvP4XyLVpt9m2l1C+GD73vodcHJGKfShgjvN3z14rV4oMJ9uKkDRTbdtPp5xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE1h1qH2eupx9wiEMmqEFsXOCVgowHwYDVR0j BBgwFoAUeYlE9/vFfVz79fG7aA8tc8rSbdUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YmQzMDU4Ny1hN2NhLTQxOTUtYTM1OS0wYzBmNjI3YWY4ZGEvMC83OTg5NDRGN0ZC QzU3RDVDRkJGNUYxQkI2ODBGMkQ3M0NBRDI2REQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzk4OTQ0RjdGQkM1N0Q1Q0ZCRjVGMUJCNjgwRjJENzNDQUQy NkRENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmJkMzA1ODctYTdjYS00MTk1LWEz NTktMGMwZjYyN2FmOGRhLzAvNzk4OTQ0RjdGQkM1N0Q1Q0ZCRjVGMUJCNjgwRjJE NzNDQUQyNkRENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMPpptcAIHqa7pIDTN01ZGPIYd4smlddKVjb K4lJHiLZzIM31yxV4WPwrV5zaa9W3PI+BfZ7gIC5Zl55Og1BTetvZeBjGt8qFdYJ AVSzCOnJgrS4xtwVXc9svcQtY/pbCYJ74UCfLcfanRXtpoG8HIbNKfXuWj0aO86t y1Eo6zuph90DYeNLcactiAK6zqxoW3NLYR4aXULyOs+7vCa/XyUG8Lu6GaEUB0PU GcN9Wu/kWJIC0Tan3amNLzBC6H+wSK7bmw9zjbqmMXycqhiKDibAPk6SS9WPdxPT 00MPVafNlXmH4aD0pKAgpIkr7kp+tBU1hxXhgprB3IlJ+MDcBmg= -----END CERTIFICATE-----Generated at Fri May 9 21:41:56 2025 by rpki-client