$ rpki-client -vvf repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft File: D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft (raw, json) Hash identifier: TEJNnCu+W64PH3SvS/PCX2X+vAHwwpa5N1Y8dFkpN4E= Subject key identifier: 58:C3:19:68:0C:47:F4:3A:8C:C4:EE:9B:0E:CE:EC:6A:CA:FF:93:6D Authority key identifier: D5:C9:29:9A:E0:0F:00:35:70:4B:10:A8:43:10:B3:C3:DA:D9:BE:19 Certificate issuer: /CN=D5C9299AE00F0035704B10A84310B3C3DAD9BE19 Certificate serial: 7A487801C03D76736A788D136C33106C994ABFF6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft Manifest number: A1 Signing time: Tue 06 May 2025 08:32:13 +0000 Manifest this update: Tue 06 May 2025 08:27:13 +0000 Manifest next update: Fri 09 May 2025 10:28:13 +0000 Files and hashes: 1: 3130332e3136302e3230312e302f32342d3234203d3e20313431363030.roa (hash: K3ZH6ZIWAcw45r2g/qdIM9HAVNibF7452ItmA+/7HTE=) 2: D5C9299AE00F0035704B10A84310B3C3DAD9BE19.crl (hash: Dzb6220+/VmopOpuDJaqkGwwfXUZQ5WTqw4xC7H2hZs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.crl rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 10:28:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:48:78:01:c0:3d:76:73:6a:78:8d:13:6c:33:10:6c:99:4a:bf:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5C9299AE00F0035704B10A84310B3C3DAD9BE19 Validity Not Before: May 6 08:27:13 2025 GMT Not After : May 9 10:28:13 2025 GMT Subject: CN=58C319680C47F43A8CC4EE9B0ECEEC6ACAFF936D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:3f:36:c5:40:0c:54:68:35:41:ca:f1:61:fe: af:e0:9d:64:5a:e0:b4:a3:dc:b5:e3:83:b0:6f:79: fa:32:0b:3b:db:a0:fb:22:f3:47:27:ae:08:8c:59: c7:08:09:79:81:a2:0d:cb:c1:73:4c:a7:b0:89:03: 3e:d4:1c:75:0d:c2:8e:99:6b:bd:46:80:ee:f3:e7: 79:3c:c9:7b:78:88:1a:5f:a1:25:c8:74:26:52:ad: a7:1f:ed:a5:5a:c3:fb:7f:f2:6c:26:84:ef:b1:6c: f9:a6:15:de:35:33:52:a6:d3:e2:53:03:29:f6:16: 51:cb:5d:6c:42:8f:fd:c9:1a:c4:58:a6:cf:3d:a1: 53:47:8c:66:e6:26:1c:2c:82:f7:62:f0:e1:25:ed: 2b:be:91:7f:19:68:41:61:21:94:1b:18:05:24:15: 92:78:76:04:6d:af:83:7f:15:3f:a6:57:79:d0:4b: fe:16:26:82:68:65:06:25:f4:6f:40:0b:8b:5b:d7: b2:51:1b:1b:b6:22:eb:5d:2b:22:4d:b9:c6:e5:3d: cb:d7:4d:91:e4:23:8d:d4:9a:47:64:d3:b3:6e:4a: 75:7b:c7:7b:a0:61:88:4b:7b:25:8d:bf:db:7e:d0: 7c:c2:c4:41:93:0b:29:63:e8:4d:21:1e:49:d7:97: 79:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:C3:19:68:0C:47:F4:3A:8C:C4:EE:9B:0E:CE:EC:6A:CA:FF:93:6D X509v3 Authority Key Identifier: keyid:D5:C9:29:9A:E0:0F:00:35:70:4B:10:A8:43:10:B3:C3:DA:D9:BE:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/1/D5C9299AE00F0035704B10A84310B3C3DAD9BE19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:09:05:9d:c7:d2:e8:48:00:d2:8e:ed:30:30:21:27:95:ec: d7:80:77:98:e3:58:bf:1d:5a:6b:64:15:50:0f:a1:29:d9:3d: 9a:39:48:ce:df:c4:1d:09:27:23:f1:74:ce:5c:c5:db:a3:6c: 9e:48:f6:4d:ef:6b:f2:20:c3:22:17:01:d5:04:e3:ac:7b:17: 30:23:cb:64:95:ea:64:d0:9e:c1:ab:f3:28:75:ba:12:b8:ca: d1:68:da:3d:ad:22:8e:32:e0:f2:37:a3:44:20:75:db:b2:eb: bc:d7:67:01:d7:86:7b:c9:1c:b3:3d:7f:60:42:dd:85:78:57: 3f:18:e9:da:6c:7e:4a:e2:1e:1a:21:18:80:91:97:fd:4a:b5: ba:88:b3:79:86:5c:f3:c6:02:7a:cd:a8:50:99:9a:7b:f9:7e: 1c:a5:59:28:25:cb:b5:e8:a7:ff:a9:10:12:58:78:49:80:e9: 54:bf:92:8d:ef:9d:2f:aa:d6:33:45:84:f6:0d:49:ef:81:a7: 84:66:eb:d3:59:12:76:e0:fe:b7:7d:f7:98:62:c9:ae:a8:e3: 82:e7:27:c4:fc:cf:e4:bb:80:0c:14:9e:f3:b2:94:cf:20:a9: c0:bf:98:34:9d:12:46:00:fb:e7:3b:6c:2a:bd:04:33:4d:28: 5f:11:bf:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUekh4AcA9dnNqeI0TbDMQbJlKv/YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVDOTI5OUFFMDBGMDAzNTcwNEIxMEE4NDMxMEIzQzNE QUQ5QkUxOTAeFw0yNTA1MDYwODI3MTNaFw0yNTA1MDkxMDI4MTNaMDMxMTAvBgNV BAMTKDU4QzMxOTY4MEM0N0Y0M0E4Q0M0RUU5QjBFQ0VFQzZBQ0FGRjkzNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfPzbFQAxUaDVByvFh/q/gnWRa 4LSj3LXjg7BvefoyCzvboPsi80cnrgiMWccICXmBog3LwXNMp7CJAz7UHHUNwo6Z a71GgO7z53k8yXt4iBpfoSXIdCZSracf7aVaw/t/8mwmhO+xbPmmFd41M1Km0+JT Ayn2FlHLXWxCj/3JGsRYps89oVNHjGbmJhwsgvdi8OEl7Su+kX8ZaEFhIZQbGAUk FZJ4dgRtr4N/FT+mV3nQS/4WJoJoZQYl9G9AC4tb17JRGxu2IutdKyJNucblPcvX TZHkI43Umkdk07NuSnV7x3ugYYhLeyWNv9t+0HzCxEGTCylj6E0hHknXl3lBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWMMZaAxH9DqMxO6bDs7sasr/k20wHwYDVR0j BBgwFoAU1ckpmuAPADVwSxCoQxCzw9rZvhkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTQ0ZDk3YS1lM2ZiLTRmZmMtYjdmNy1mN2I4YjY2NTlhYzQvMS9ENUM5Mjk5QUUw MEYwMDM1NzA0QjEwQTg0MzEwQjNDM0RBRDlCRTE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDVDOTI5OUFFMDBGMDAzNTcwNEIxMEE4NDMxMEIzQzNEQUQ5 QkUxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzE0NGQ5N2EtZTNmYi00ZmZjLWI3 ZjctZjdiOGI2NjU5YWM0LzEvRDVDOTI5OUFFMDBGMDAzNTcwNEIxMEE4NDMxMEIz QzNEQUQ5QkUxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMAJBZ3H0uhIANKO7TAwISeV7NeAd5jjWL8d WmtkFVAPoSnZPZo5SM7fxB0JJyPxdM5cxdujbJ5I9k3va/IgwyIXAdUE46x7FzAj y2SV6mTQnsGr8yh1uhK4ytFo2j2tIo4y4PI3o0Qgdduy67zXZwHXhnvJHLM9f2BC 3YV4Vz8Y6dpsfkriHhohGICRl/1KtbqIs3mGXPPGAnrNqFCZmnv5fhylWSgly7Xo p/+pEBJYeEmA6VS/ko3vnS+q1jNFhPYNSe+Bp4Rm69NZEnbg/rd995hiya6o44Ln J8T8z+S7gAwUnvOylM8gqcC/mDSdEkYA++c7bCq9BDNNKF8Rvwg= -----END CERTIFICATE-----Generated at Thu May 8 05:40:18 2025 by rpki-client