$ rpki-client -vvf repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft File: 5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft (raw, json) Hash identifier: p9oQmuM4rHumKMbxjOWvX4Nbdh3Tpznikoq1GNjcshc= Subject key identifier: 91:2F:83:E1:F5:DE:98:5C:65:09:07:90:76:67:06:52:20:B6:39:BC Authority key identifier: 5B:B7:E8:A3:AB:F6:DF:6D:46:C3:D5:F9:1E:C3:B7:78:70:CE:6C:61 Certificate issuer: /CN=5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61 Certificate serial: 1B45DDB2F6BDB0AF9F7A2239A73AE227C2EF7AB3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.cer Subject info access: rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft Manifest number: 91 Signing time: Fri 09 May 2025 12:10:37 +0000 Manifest this update: Fri 09 May 2025 12:05:37 +0000 Manifest next update: Mon 12 May 2025 15:09:37 +0000 Files and hashes: 1: 5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.crl (hash: zEJafGudZBsMDqNKz4HKVeryJJMJFk0PR4PhATSRw24=) 2: 3136302e32322e37302e302f32332d3234203d3e203538333831.roa (hash: SZF4Z9v3eKneOkuBlAob2+u92vsQYFHYdvhfR0N4D0s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.crl rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 15:09:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:45:dd:b2:f6:bd:b0:af:9f:7a:22:39:a7:3a:e2:27:c2:ef:7a:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61 Validity Not Before: May 9 12:05:37 2025 GMT Not After : May 12 15:09:37 2025 GMT Subject: CN=912F83E1F5DE985C650907907667065220B639BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:22:e0:87:09:f6:82:df:c2:5c:b3:71:ec:1c: 10:9f:f6:42:22:2f:5a:ce:03:cb:44:07:6b:fc:7e: 5f:65:36:46:05:2b:67:4c:21:4e:b1:fd:58:e8:79: 7b:b6:43:05:12:7c:f9:c0:87:29:b4:8e:0e:ce:81: e5:78:0a:45:39:cd:90:b5:ee:1c:85:6d:2f:c8:9b: dd:12:96:51:52:80:a7:b9:50:73:de:5f:33:9e:57: 4f:cf:1a:68:1a:00:e4:1b:c5:58:de:4b:dd:f9:a1: 1c:ef:41:2f:8c:85:14:aa:cf:b6:4d:ce:02:96:8a: 02:89:5c:02:13:5c:d0:ff:cc:60:27:a0:b0:54:d0: a5:4c:34:04:c3:09:b0:9d:21:d1:de:f4:05:fc:f7: 47:81:a7:df:33:0a:5c:a1:d7:01:43:7f:ed:c9:3a: 40:a2:9d:ad:77:4f:16:f7:8d:25:07:3c:72:6b:0c: d5:a9:4f:be:c6:fd:04:1f:53:1e:3e:ac:88:ef:e4: 6a:43:bb:a2:14:62:7f:9e:be:3d:97:4b:a6:df:a0: 2c:fc:64:ec:c7:24:54:51:4c:04:6a:a2:e8:1b:24: 9a:cf:0e:87:8d:5c:4e:65:9c:8e:57:73:5b:28:93: 09:cf:9e:fe:70:b1:cd:f7:35:2a:e3:c2:7d:50:24: 08:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:2F:83:E1:F5:DE:98:5C:65:09:07:90:76:67:06:52:20:B6:39:BC X509v3 Authority Key Identifier: keyid:5B:B7:E8:A3:AB:F6:DF:6D:46:C3:D5:F9:1E:C3:B7:78:70:CE:6C:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/35a20077-fc53-43a3-bda7-f39956d9926d/0/5BB7E8A3ABF6DF6D46C3D5F91EC3B77870CE6C61.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:7d:f9:2f:36:dd:3c:67:8a:72:4a:93:d7:df:ac:7d:4e:34: e1:73:54:fb:ad:53:4b:0d:64:81:b0:5d:bd:67:d8:4f:a9:3e: f9:6a:f9:9a:01:32:ce:99:bc:45:9a:fc:cf:d8:1b:c6:bc:71: c6:5f:28:6f:60:c5:9e:c6:3f:ea:7e:af:15:8e:58:ad:0a:26: 28:c3:73:4b:83:c9:0d:23:62:11:05:69:12:df:80:7b:c7:28: 8b:e3:3b:5a:d1:96:0d:ec:e0:35:95:13:70:8c:0e:7a:ed:d6: fb:72:31:16:ab:1c:e5:f2:66:15:f9:2f:4a:cc:1d:aa:b9:d0: a2:3e:e1:2f:62:1f:73:00:61:46:95:84:b0:da:95:66:11:19: ef:b2:90:2c:c8:28:c7:ba:96:46:5a:98:44:5e:d2:be:bf:ba: 27:dd:87:10:c6:f0:f1:36:6b:4c:64:de:1b:39:f7:47:19:5e: ba:a7:6d:6f:b6:bd:5c:9d:b3:93:a0:29:d0:29:4a:5f:0e:ec: 58:09:f9:f3:77:6e:aa:da:13:f0:2d:6d:b0:d6:3b:a0:bc:1f: 4a:be:5c:cf:dc:e3:46:d3:f7:76:8d:2c:01:9d:a5:b4:d5:ad: 25:39:e8:56:1d:86:d2:71:36:1a:82:ae:1c:67:48:6e:e2:2b: 28:39:ee:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG0Xdsva9sK+feiI5pzriJ8LverMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJCN0U4QTNBQkY2REY2RDQ2QzNENUY5MUVDM0I3Nzg3 MENFNkM2MTAeFw0yNTA1MDkxMjA1MzdaFw0yNTA1MTIxNTA5MzdaMDMxMTAvBgNV BAMTKDkxMkY4M0UxRjVERTk4NUM2NTA5MDc5MDc2NjcwNjUyMjBCNjM5QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKIuCHCfaC38Jcs3HsHBCf9kIi L1rOA8tEB2v8fl9lNkYFK2dMIU6x/VjoeXu2QwUSfPnAhym0jg7OgeV4CkU5zZC1 7hyFbS/Im90SllFSgKe5UHPeXzOeV0/PGmgaAOQbxVjeS935oRzvQS+MhRSqz7ZN zgKWigKJXAITXND/zGAnoLBU0KVMNATDCbCdIdHe9AX890eBp98zClyh1wFDf+3J OkCina13Txb3jSUHPHJrDNWpT77G/QQfUx4+rIjv5GpDu6IUYn+evj2XS6bfoCz8 ZOzHJFRRTARqougbJJrPDoeNXE5lnI5Xc1sokwnPnv5wsc33NSrjwn1QJAgzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkS+D4fXemFxlCQeQdmcGUiC2ObwwHwYDVR0j BBgwFoAUW7foo6v2321Gw9X5HsO3eHDObGEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NWEyMDA3Ny1mYzUzLTQzYTMtYmRhNy1mMzk5NTZkOTkyNmQvMC81QkI3RThBM0FC RjZERjZENDZDM0Q1RjkxRUMzQjc3ODcwQ0U2QzYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUJCN0U4QTNBQkY2REY2RDQ2QzNENUY5MUVDM0I3Nzg3MENF NkM2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzVhMjAwNzctZmM1My00M2EzLWJk YTctZjM5OTU2ZDk5MjZkLzAvNUJCN0U4QTNBQkY2REY2RDQ2QzNENUY5MUVDM0I3 Nzg3MENFNkM2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE59+S823TxninJKk9ffrH1ONOFzVPutU0sN ZIGwXb1n2E+pPvlq+ZoBMs6ZvEWa/M/YG8a8ccZfKG9gxZ7GP+p+rxWOWK0KJijD c0uDyQ0jYhEFaRLfgHvHKIvjO1rRlg3s4DWVE3CMDnrt1vtyMRarHOXyZhX5L0rM Haq50KI+4S9iH3MAYUaVhLDalWYRGe+ykCzIKMe6lkZamERe0r6/uifdhxDG8PE2 a0xk3hs590cZXrqnbW+2vVyds5OgKdApSl8O7FgJ+fN3bqraE/AtbbDWO6C8H0q+ XM/c40bT93aNLAGdpbTVrSU56FYdhtJxNhqCrhxnSG7iKyg57vQ= -----END CERTIFICATE-----Generated at Sun May 11 13:22:30 2025 by rpki-client