$ rpki-client -vvf repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft File: 5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft (raw, json) Hash identifier: CGJeicqL4ySvS363tGg4RO0N+Su82ajMT+44j/kHg08= Subject key identifier: 2E:3B:58:04:38:70:2D:95:99:9D:D9:7E:B8:6B:BE:4D:E9:B0:45:F7 Authority key identifier: 5F:E2:D2:A6:AB:51:68:6B:C9:12:62:CC:80:15:2C:19:50:63:7A:EA Certificate issuer: /CN=5FE2D2A6AB51686BC91262CC80152C1950637AEA Certificate serial: 74C76078C428B3758B10161A74D7C542009DFC39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5FE2D2A6AB51686BC91262CC80152C1950637AEA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft Manifest number: 80 Signing time: Tue 06 May 2025 07:01:54 +0000 Manifest this update: Tue 06 May 2025 06:56:54 +0000 Manifest next update: Fri 09 May 2025 17:29:54 +0000 Files and hashes: 1: 5FE2D2A6AB51686BC91262CC80152C1950637AEA.crl (hash: UYmjP0H0p9OuRFBzmeJqJsmZyoimzNaR7497ZPyZf04=) 2: 3136302e32302e3133382e302f32332d3234203d3e20313532373832.roa (hash: IYlIkK9ZMSP7xUAGZ1Am2ZgHJrv4HQzXJImTEhZj1s8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.crl rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5FE2D2A6AB51686BC91262CC80152C1950637AEA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 17:29:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:c7:60:78:c4:28:b3:75:8b:10:16:1a:74:d7:c5:42:00:9d:fc:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FE2D2A6AB51686BC91262CC80152C1950637AEA Validity Not Before: May 6 06:56:54 2025 GMT Not After : May 9 17:29:54 2025 GMT Subject: CN=2E3B580438702D95999DD97EB86BBE4DE9B045F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:82:55:75:a4:ea:73:f5:c0:3d:6e:4f:30:49: 73:87:44:50:b2:fb:c0:81:f8:f1:73:00:c6:da:7d: b8:02:bc:9f:9c:3a:2e:65:2c:d9:30:98:b1:5f:39: 77:20:e2:86:e3:b6:95:df:b4:91:e3:45:c6:7a:ec: 1d:1d:ea:41:98:cc:68:77:f9:74:99:57:62:6a:21: 4b:f0:ad:56:05:64:7d:31:6c:74:59:41:f7:14:fb: 11:c6:7a:6a:51:27:0f:17:a7:05:76:19:85:7a:f5: 4a:af:73:c5:54:dd:02:61:dc:04:94:20:a6:d9:0d: 9c:31:64:45:9b:d6:18:fd:7c:a1:63:61:1e:c1:81: ca:23:fc:41:d7:2e:0a:8d:fa:9a:d9:72:2d:2b:0c: 8f:22:d2:cf:50:08:74:37:79:d0:cf:dc:8b:af:e2: 5d:fc:72:da:42:08:09:99:d8:fb:f7:eb:ca:7e:2f: 35:83:73:e2:f9:4c:9c:3e:77:84:18:09:73:eb:9f: 21:22:66:86:05:20:4c:d7:38:51:46:95:20:68:46: 75:29:10:62:36:c0:38:92:5c:e5:e6:a6:d5:a3:93: 45:80:9d:45:7b:a9:cf:58:25:70:0f:f9:a9:07:e8: b3:8d:d0:58:86:d5:8a:4b:f1:07:bb:b3:bc:ed:2b: 85:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:3B:58:04:38:70:2D:95:99:9D:D9:7E:B8:6B:BE:4D:E9:B0:45:F7 X509v3 Authority Key Identifier: keyid:5F:E2:D2:A6:AB:51:68:6B:C9:12:62:CC:80:15:2C:19:50:63:7A:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5FE2D2A6AB51686BC91262CC80152C1950637AEA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4210ec0f-0420-402f-95fe-7b33e5112bc3/0/5FE2D2A6AB51686BC91262CC80152C1950637AEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:13:26:51:51:dd:d5:35:8e:cb:1f:74:1c:c1:c2:ed:c2:06: 85:f4:6a:3e:8c:7e:e4:23:5c:04:a6:c0:81:cf:4a:93:76:cb: 8a:2e:3c:a9:4b:52:d5:c5:3e:9b:89:cf:91:8b:13:f9:1d:b5: 13:9d:bb:47:0a:a9:0c:5e:cd:3c:00:16:64:8a:66:ab:cb:c6: e9:b8:57:f0:0f:4f:cd:90:9a:52:57:4b:f2:0a:e2:f2:27:95: 40:bf:fe:53:f9:c4:2e:1a:4b:a6:c3:b5:01:57:6e:4d:6a:da: 50:7a:45:52:c0:33:77:1d:cc:3f:03:a5:b9:a2:c7:48:bd:24: 3b:92:8c:7c:85:69:07:25:1b:8b:73:84:e0:1b:76:51:b9:66: ca:50:49:16:43:a3:55:94:33:22:bd:ad:35:1b:60:a5:de:37: fb:ec:e6:cc:47:37:cf:6d:db:06:9d:66:e1:5d:73:1b:73:28: ba:97:72:ae:fa:3c:01:9f:18:a4:70:32:8f:d2:03:31:b3:d3: b5:45:fc:64:65:e3:d2:f3:e2:8e:be:19:f6:bf:3d:e0:e8:80: ec:8f:bc:74:dc:d6:f1:fe:ee:37:4e:46:6b:11:fa:68:dd:1f: 5d:f5:32:76:f8:63:44:77:1d:45:d6:a0:88:3f:d1:37:0e:16: c9:91:13:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdMdgeMQos3WLEBYadNfFQgCd/DkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZFMkQyQTZBQjUxNjg2QkM5MTI2MkNDODAxNTJDMTk1 MDYzN0FFQTAeFw0yNTA1MDYwNjU2NTRaFw0yNTA1MDkxNzI5NTRaMDMxMTAvBgNV BAMTKDJFM0I1ODA0Mzg3MDJEOTU5OTlERDk3RUI4NkJCRTRERTlCMDQ1RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqglV1pOpz9cA9bk8wSXOHRFCy +8CB+PFzAMbafbgCvJ+cOi5lLNkwmLFfOXcg4objtpXftJHjRcZ67B0d6kGYzGh3 +XSZV2JqIUvwrVYFZH0xbHRZQfcU+xHGempRJw8XpwV2GYV69Uqvc8VU3QJh3ASU IKbZDZwxZEWb1hj9fKFjYR7Bgcoj/EHXLgqN+prZci0rDI8i0s9QCHQ3edDP3Iuv 4l38ctpCCAmZ2Pv368p+LzWDc+L5TJw+d4QYCXPrnyEiZoYFIEzXOFFGlSBoRnUp EGI2wDiSXOXmptWjk0WAnUV7qc9YJXAP+akH6LON0FiG1YpL8Qe7s7ztK4WfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULjtYBDhwLZWZndl+uGu+TemwRfcwHwYDVR0j BBgwFoAUX+LSpqtRaGvJEmLMgBUsGVBjeuowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjEwZWMwZi0wNDIwLTQwMmYtOTVmZS03YjMzZTUxMTJiYzMvMC81RkUyRDJBNkFC NTE2ODZCQzkxMjYyQ0M4MDE1MkMxOTUwNjM3QUVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUZFMkQyQTZBQjUxNjg2QkM5MTI2MkNDODAxNTJDMTk1MDYz N0FFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDIxMGVjMGYtMDQyMC00MDJmLTk1 ZmUtN2IzM2U1MTEyYmMzLzAvNUZFMkQyQTZBQjUxNjg2QkM5MTI2MkNDODAxNTJD MTk1MDYzN0FFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHcTJlFR3dU1jssfdBzBwu3CBoX0aj6MfuQj XASmwIHPSpN2y4ouPKlLUtXFPpuJz5GLE/kdtROdu0cKqQxezTwAFmSKZqvLxum4 V/APT82QmlJXS/IK4vInlUC//lP5xC4aS6bDtQFXbk1q2lB6RVLAM3cdzD8Dpbmi x0i9JDuSjHyFaQclG4tzhOAbdlG5ZspQSRZDo1WUMyK9rTUbYKXeN/vs5sxHN89t 2wadZuFdcxtzKLqXcq76PAGfGKRwMo/SAzGz07VF/GRl49Lz4o6+Gfa/PeDogOyP vHTc1vH+7jdORmsR+mjdH131Mnb4Y0R3HUXWoIg/0TcOFsmRE0k= -----END CERTIFICATE-----Generated at Thu May 8 02:20:44 2025 by rpki-client