$ rpki-client -vvf repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.mft File: F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.mft (raw, json) Hash identifier: cXNwA0JMGvuaaj+o0ABoONw6wPuKYV3ob4XpWDO1XDo= Subject key identifier: 9D:A8:7D:B6:3A:9D:5E:28:6F:45:9D:D0:67:FE:32:F7:46:C3:CE:3B Authority key identifier: F5:D7:1E:C7:79:22:A9:08:0F:17:C3:A1:6F:BE:5F:69:B1:CD:88:32 Certificate issuer: /CN=F5D71EC77922A9080F17C3A16FBE5F69B1CD8832 Certificate serial: 0DA4DA0F5B0258CF22149D2C5DA3ECEFC5270E60 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.mft Manifest number: C9 Signing time: Sun 04 May 2025 20:31:32 +0000 Manifest this update: Sun 04 May 2025 20:26:32 +0000 Manifest next update: Thu 08 May 2025 01:34:32 +0000 Files and hashes: 1: 33362e35302e3232352e302f32342d3234203d3e20313532303830.roa (hash: UZEJkb14VYd5zTuhtfKTenX+tuyfDVy8P92hqVk8bgg=) 2: F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.crl (hash: qtFOQijWWaGPoDSO48oJ934+ios/3Jzyyhu1MzuecE8=) 3: 33362e35302e3232342e302f32342d3234203d3e20313532303830.roa (hash: tcD9B8za3o83puE+5evMMp5cofm2QVyf+SD2jvffeIM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.crl rsync://repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 01:34:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:a4:da:0f:5b:02:58:cf:22:14:9d:2c:5d:a3:ec:ef:c5:27:0e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F5D71EC77922A9080F17C3A16FBE5F69B1CD8832 Validity Not Before: May 4 20:26:32 2025 GMT Not After : May 8 01:34:32 2025 GMT Subject: CN=9DA87DB63A9D5E286F459DD067FE32F746C3CE3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:bf:fd:e4:12:14:6d:8d:cb:dd:58:fe:d9:f3: 11:74:5c:99:55:3b:df:0b:80:69:a3:0a:4b:de:28: bb:f5:1c:fc:e3:1e:f1:29:05:48:d9:44:a7:00:1d: 08:37:5a:42:a6:1a:4a:21:c1:ad:a6:64:88:85:95: 7d:f9:4c:b7:d9:ff:c8:b1:5f:e9:a1:2f:b0:4e:f3: 4f:14:da:50:99:4b:04:ab:3c:12:e6:36:ed:56:ab: 40:5b:5e:ff:9c:64:fd:29:ca:a0:0e:f8:6a:0c:6f: a0:c3:94:64:1a:5a:77:d6:d8:6c:66:71:f4:f2:f7: 9a:b9:9f:f8:5f:1e:05:95:59:93:9f:bb:a3:78:03: e9:64:df:fd:79:05:26:39:8d:14:43:6b:ee:7f:e9: 7b:c7:a2:ab:0e:b1:3b:20:ee:5c:c6:69:cf:56:5c: 03:0c:33:d3:48:7c:ef:b2:1f:86:47:84:25:9e:8a: 56:19:3f:80:e7:a0:1c:68:9f:d1:a5:48:20:07:28: ed:16:25:c4:87:62:dc:2e:d8:fd:e7:69:51:d1:09: 19:ef:f2:8f:80:a8:53:af:1d:62:d3:2a:57:e2:d0: 64:39:6f:01:bf:97:30:7e:e3:e4:1e:ea:b3:90:e6: 1b:ab:d5:59:73:7b:b6:88:1a:29:6b:46:d1:59:96: bb:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:A8:7D:B6:3A:9D:5E:28:6F:45:9D:D0:67:FE:32:F7:46:C3:CE:3B X509v3 Authority Key Identifier: keyid:F5:D7:1E:C7:79:22:A9:08:0F:17:C3:A1:6F:BE:5F:69:B1:CD:88:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3ae83673-096a-440c-b27a-9be64b13b4e5/0/F5D71EC77922A9080F17C3A16FBE5F69B1CD8832.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:16:3e:e2:ea:71:2f:a1:39:75:a4:70:b1:c9:25:38:fb:69: 1b:b5:d6:ba:ae:de:a6:f1:b4:aa:73:17:05:84:c0:da:77:0a: 61:12:39:d1:89:85:5b:38:95:5d:d2:17:6c:8d:0e:99:1f:0c: 89:67:fe:4d:bc:81:ca:b8:17:bd:6f:65:cc:12:da:9c:7f:b5: d7:42:ae:6a:ef:e9:87:05:20:47:36:83:c9:85:01:e5:f3:04: 39:c1:96:d0:1a:de:be:d0:d5:07:20:ac:a4:df:22:78:51:51: af:8f:c1:6e:6a:2d:a8:95:c2:db:48:52:24:d8:7d:9c:fb:39: 22:ca:12:d7:57:a8:f6:6d:28:df:e2:8b:92:79:52:74:6a:4b: b8:48:70:3c:82:ca:4d:b6:37:f5:cd:98:04:cc:66:54:87:26: 4a:24:19:09:d8:82:f8:aa:b4:ec:49:9e:dd:9d:40:42:6c:e2: f4:32:1c:54:62:8d:b0:63:a8:53:08:0c:50:33:b8:77:b1:eb: 99:37:92:88:5c:b5:bb:4e:c7:1d:fb:83:9a:6b:08:27:0b:3c: 9b:7a:f0:59:fa:36:07:29:68:9e:ee:66:c7:5d:e1:ec:fb:8f: 61:ac:91:ad:e6:0b:70:e3:ff:67:b1:66:ca:39:b6:bf:7c:66: ab:2b:0c:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDaTaD1sCWM8iFJ0sXaPs78UnDmAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjVENzFFQzc3OTIyQTkwODBGMTdDM0ExNkZCRTVGNjlC MUNEODgzMjAeFw0yNTA1MDQyMDI2MzJaFw0yNTA1MDgwMTM0MzJaMDMxMTAvBgNV BAMTKDlEQTg3REI2M0E5RDVFMjg2RjQ1OUREMDY3RkUzMkY3NDZDM0NFM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUv/3kEhRtjcvdWP7Z8xF0XJlV O98LgGmjCkveKLv1HPzjHvEpBUjZRKcAHQg3WkKmGkohwa2mZIiFlX35TLfZ/8ix X+mhL7BO808U2lCZSwSrPBLmNu1Wq0BbXv+cZP0pyqAO+GoMb6DDlGQaWnfW2Gxm cfTy95q5n/hfHgWVWZOfu6N4A+lk3/15BSY5jRRDa+5/6XvHoqsOsTsg7lzGac9W XAMMM9NIfO+yH4ZHhCWeilYZP4DnoBxon9GlSCAHKO0WJcSHYtwu2P3naVHRCRnv 8o+AqFOvHWLTKlfi0GQ5bwG/lzB+4+Qe6rOQ5hur1Vlze7aIGilrRtFZlrvBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnah9tjqdXihvRZ3QZ/4y90bDzjswHwYDVR0j BBgwFoAU9dcex3kiqQgPF8Ohb75fabHNiDIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YWU4MzY3My0wOTZhLTQ0MGMtYjI3YS05YmU2NGIxM2I0ZTUvMC9GNUQ3MUVDNzc5 MjJBOTA4MEYxN0MzQTE2RkJFNUY2OUIxQ0Q4ODMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjVENzFFQzc3OTIyQTkwODBGMTdDM0ExNkZCRTVGNjlCMUNE ODgzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2FlODM2NzMtMDk2YS00NDBjLWIy N2EtOWJlNjRiMTNiNGU1LzAvRjVENzFFQzc3OTIyQTkwODBGMTdDM0ExNkZCRTVG NjlCMUNEODgzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACMWPuLqcS+hOXWkcLHJJTj7aRu11rqu3qbx tKpzFwWEwNp3CmESOdGJhVs4lV3SF2yNDpkfDIln/k28gcq4F71vZcwS2px/tddC rmrv6YcFIEc2g8mFAeXzBDnBltAa3r7Q1QcgrKTfInhRUa+PwW5qLaiVwttIUiTY fZz7OSLKEtdXqPZtKN/ii5J5UnRqS7hIcDyCyk22N/XNmATMZlSHJkokGQnYgviq tOxJnt2dQEJs4vQyHFRijbBjqFMIDFAzuHex65k3kohctbtOxx37g5prCCcLPJt6 8Fn6NgcpaJ7uZsdd4ez7j2Gska3mC3Dj/2exZso5tr98ZqsrDIo= -----END CERTIFICATE-----Generated at Wed May 7 15:37:38 2025 by rpki-client