$ rpki-client -vvf repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.mft File: 5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.mft (raw, json) Hash identifier: 4E69PQayUVMK2bU3BPwCYlQ9+UGu5/2EEHI2FerZ1Vo= Subject key identifier: 8C:F4:1E:10:94:1B:9C:AA:EE:D1:A1:87:10:ED:D4:3B:56:E3:34:1C Authority key identifier: 5F:49:C4:BD:5D:3F:04:F6:32:DC:CC:6F:C8:B6:54:53:52:0D:93:AD Certificate issuer: /CN=5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD Certificate serial: 174E8078B17C2764C5B4C3F3D57A3FFA89FDDE12 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.mft Manifest number: 01A4 Signing time: Mon 12 May 2025 11:20:42 +0000 Manifest this update: Mon 12 May 2025 11:15:42 +0000 Manifest next update: Thu 15 May 2025 15:00:42 +0000 Files and hashes: 1: 5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.crl (hash: RCW0xhhLW6QIDEdnaLocHvk6/H4BgQeB7fkzgvhTpjU=) 2: 3130332e35322e362e302f32342d3234203d3e20313530323032.roa (hash: wLIVJyp4gcpafGUjtFHoc9xaXGbdlSQ2XD+q+1zEqSQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.crl rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:4e:80:78:b1:7c:27:64:c5:b4:c3:f3:d5:7a:3f:fa:89:fd:de:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD Validity Not Before: May 12 11:15:42 2025 GMT Not After : May 15 15:00:42 2025 GMT Subject: CN=8CF41E10941B9CAAEED1A18710EDD43B56E3341C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:eb:c6:ec:56:22:e6:c0:03:40:85:2e:5e:af: 2b:7e:4e:9e:b1:9e:2a:79:a6:67:6a:14:b8:7e:d6: 21:ba:7b:39:e5:1d:04:b1:be:3f:41:f0:da:27:fc: 52:bf:f4:a5:06:85:ed:b6:b4:c9:41:3c:5f:ea:dc: 7b:f5:cf:cc:33:9e:14:a2:4b:9a:40:82:aa:3e:fe: 93:59:4e:82:26:45:29:92:d9:af:e2:8d:29:ad:bc: 26:7f:1d:98:8b:1f:fe:b8:c5:f1:72:dd:6c:2c:b0: 34:f8:4d:f5:ad:ae:cd:c0:66:80:77:15:bd:85:80: 75:1b:51:5c:4c:08:a9:ad:4e:6d:8b:4f:89:9e:ef: 93:92:98:75:99:93:c8:26:fd:94:63:2c:32:20:b7: ca:0f:a6:ee:cc:86:45:9c:a2:6b:6c:83:f9:be:73: 03:84:bd:3c:5d:a0:b2:bd:bd:4f:7e:c1:ec:8f:22: 39:59:32:ec:2b:af:52:94:48:9c:30:9e:2f:59:b7: 02:cb:8d:e1:41:44:3f:c5:8e:1e:61:8f:4b:16:82: bf:fa:4b:28:d7:03:88:8a:a1:c9:5b:25:b5:43:c7: fa:4d:a3:54:2a:12:ab:fc:4e:87:79:d3:71:a2:f3: 2d:38:1d:eb:83:25:32:f0:ba:fb:4c:e2:24:55:2e: a7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:F4:1E:10:94:1B:9C:AA:EE:D1:A1:87:10:ED:D4:3B:56:E3:34:1C X509v3 Authority Key Identifier: keyid:5F:49:C4:BD:5D:3F:04:F6:32:DC:CC:6F:C8:B6:54:53:52:0D:93:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:a5:7f:dd:7a:06:94:db:5b:49:6c:1c:3f:bf:36:2f:a7:19: 98:ec:a5:06:4e:c0:8b:d5:7c:ab:ca:5f:0b:83:63:72:9b:6b: fe:8e:3f:95:3a:32:1a:ac:a2:30:41:91:8e:d6:7e:26:bc:38: 15:ff:4d:7a:63:f6:fb:6b:9c:fa:39:24:cd:f3:39:e8:82:d4: c7:3c:36:f1:a7:75:7b:f0:e9:1b:17:43:ba:88:07:84:a6:0c: 36:97:94:39:0d:29:28:7b:fa:8f:cf:e3:08:15:a7:21:ac:83: ef:55:26:f4:47:39:75:ab:0a:30:c0:4e:31:a3:2a:a4:b9:65: e0:98:d9:71:1a:94:66:b9:8d:b1:9f:0b:f3:a9:e8:60:a1:41: 60:96:cc:0e:b8:c5:2f:a4:2b:fd:4b:49:d7:01:a5:ba:2a:62: 0a:49:3b:13:93:b9:41:b7:06:86:5b:9e:df:5e:7f:56:e0:e1: 82:1e:54:87:9c:1d:37:5e:1d:65:43:f0:c9:f7:ff:67:9a:7d: 66:9c:17:bf:f8:1c:fe:88:9a:fa:f8:ae:b1:db:37:55:3f:cd: 66:2f:32:1e:00:73:51:a3:f5:63:c6:dd:1b:8b:2a:53:ed:a8: c8:5a:7d:10:23:5a:cf:18:37:7b:b5:df:80:20:9d:13:7c:16: b7:c8:f0:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF06AeLF8J2TFtMPz1Xo/+on93hIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUY0OUM0QkQ1RDNGMDRGNjMyRENDQzZGQzhCNjU0NTM1 MjBEOTNBRDAeFw0yNTA1MTIxMTE1NDJaFw0yNTA1MTUxNTAwNDJaMDMxMTAvBgNV BAMTKDhDRjQxRTEwOTQxQjlDQUFFRUQxQTE4NzEwRURENDNCNTZFMzM0MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy68bsViLmwANAhS5eryt+Tp6x nip5pmdqFLh+1iG6eznlHQSxvj9B8Non/FK/9KUGhe22tMlBPF/q3Hv1z8wznhSi S5pAgqo+/pNZToImRSmS2a/ijSmtvCZ/HZiLH/64xfFy3WwssDT4TfWtrs3AZoB3 Fb2FgHUbUVxMCKmtTm2LT4me75OSmHWZk8gm/ZRjLDIgt8oPpu7MhkWcomtsg/m+ cwOEvTxdoLK9vU9+weyPIjlZMuwrr1KUSJwwni9ZtwLLjeFBRD/Fjh5hj0sWgr/6 SyjXA4iKoclbJbVDx/pNo1QqEqv8Tod503Gi8y04HeuDJTLwuvtM4iRVLqe3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjPQeEJQbnKru0aGHEO3UO1bjNBwwHwYDVR0j BBgwFoAUX0nEvV0/BPYy3MxvyLZUU1INk60wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OTU1OTFiNC0yMTk4LTRiNDAtYWRmMi0xMmNlZjNiZjQzYTIvMC81RjQ5QzRCRDVE M0YwNEY2MzJEQ0NDNkZDOEI2NTQ1MzUyMEQ5M0FELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUY0OUM0QkQ1RDNGMDRGNjMyRENDQzZGQzhCNjU0NTM1MjBE OTNBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDk1NTkxYjQtMjE5OC00YjQwLWFk ZjItMTJjZWYzYmY0M2EyLzAvNUY0OUM0QkQ1RDNGMDRGNjMyRENDQzZGQzhCNjU0 NTM1MjBEOTNBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALGlf916BpTbW0lsHD+/Ni+nGZjspQZOwIvV fKvKXwuDY3Kba/6OP5U6MhqsojBBkY7Wfia8OBX/TXpj9vtrnPo5JM3zOeiC1Mc8 NvGndXvw6RsXQ7qIB4SmDDaXlDkNKSh7+o/P4wgVpyGsg+9VJvRHOXWrCjDATjGj KqS5ZeCY2XEalGa5jbGfC/Op6GChQWCWzA64xS+kK/1LSdcBpboqYgpJOxOTuUG3 BoZbnt9ef1bg4YIeVIecHTdeHWVD8Mn3/2eafWacF7/4HP6Imvr4rrHbN1U/zWYv Mh4Ac1Gj9WPG3RuLKlPtqMhafRAjWs8YN3u134AgnRN8FrfI8B4= -----END CERTIFICATE-----Generated at Tue May 13 00:01:50 2025 by rpki-client