$ rpki-client -vvf repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.mft File: A5959C75F8AC190DC22C7C3276CF95834D5CA687.mft (raw, json) Hash identifier: aH3HnZZuqii1K9puiXqRfjeLD4NZvorwo0VNw2XfaMA= Subject key identifier: D6:35:E3:C6:52:08:DB:90:3E:82:22:80:B1:78:7F:BA:AB:4F:A2:9C Authority key identifier: A5:95:9C:75:F8:AC:19:0D:C2:2C:7C:32:76:CF:95:83:4D:5C:A6:87 Certificate issuer: /CN=A5959C75F8AC190DC22C7C3276CF95834D5CA687 Certificate serial: 07962890C2014616FDC9AD50C704DEA831775E6B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5959C75F8AC190DC22C7C3276CF95834D5CA687.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.mft Manifest number: E9 Signing time: Thu 08 May 2025 12:00:45 +0000 Manifest this update: Thu 08 May 2025 11:55:45 +0000 Manifest next update: Sun 11 May 2025 18:41:45 +0000 Files and hashes: 1: 3130332e37362e33312e302f32342d3234203d3e20313530343732.roa (hash: Ziyg0D5V2s9TzgtFXhxrBwlw2/DAp6aRN3+gPcC29v4=) 2: A5959C75F8AC190DC22C7C3276CF95834D5CA687.crl (hash: vjMyFXdqAVX6XndXGz4lxLTDvP0m9A/Szm3ArCI7Qrg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.crl rsync://repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5959C75F8AC190DC22C7C3276CF95834D5CA687.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 18:41:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:96:28:90:c2:01:46:16:fd:c9:ad:50:c7:04:de:a8:31:77:5e:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5959C75F8AC190DC22C7C3276CF95834D5CA687 Validity Not Before: May 8 11:55:45 2025 GMT Not After : May 11 18:41:45 2025 GMT Subject: CN=D635E3C65208DB903E822280B1787FBAAB4FA29C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4e:e3:ae:e3:d1:08:83:3f:16:7c:dc:45:1f: 8c:c8:22:1a:69:e1:7f:6a:68:7f:ac:0c:4c:39:7c: cb:bd:24:68:5f:47:b7:44:71:cb:a0:69:b0:be:6f: 17:b3:e9:73:b6:00:81:e4:d2:eb:90:e8:d1:73:ff: 84:60:90:a4:d1:28:d7:21:ea:e3:ec:fd:3d:69:01: 6a:b5:22:6c:c7:f3:fc:95:09:67:60:68:25:4e:e6: f9:57:6e:f3:3d:87:10:f6:1a:4a:41:34:ba:5a:92: d1:b3:4a:42:ee:16:4a:d2:37:c3:96:07:94:dc:a0: 7a:54:dd:60:c6:4c:73:27:1b:45:01:10:a8:87:0a: c2:60:67:0f:93:82:4d:6c:7d:42:41:4e:d5:1b:28: 3f:b5:e0:94:23:d6:94:3b:be:64:94:7f:d3:7c:c1: 48:8b:de:d5:6a:16:74:63:f7:8e:f8:2f:48:ea:f2: 90:86:47:db:9f:f3:5f:2f:bc:c6:74:8b:3f:ca:51: 05:98:4a:bd:cc:18:ff:a2:ec:51:1a:67:96:f9:79: 07:04:44:56:0c:19:23:69:9f:df:67:36:2d:22:9b: 1c:e2:ba:d7:33:e8:06:53:a4:dc:27:b4:fd:0e:9d: 74:1c:21:5c:20:d4:65:eb:79:1b:61:8f:9e:6f:a9: 20:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:35:E3:C6:52:08:DB:90:3E:82:22:80:B1:78:7F:BA:AB:4F:A2:9C X509v3 Authority Key Identifier: keyid:A5:95:9C:75:F8:AC:19:0D:C2:2C:7C:32:76:CF:95:83:4D:5C:A6:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5959C75F8AC190DC22C7C3276CF95834D5CA687.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:ee:5b:4e:cc:e8:bd:cd:fb:67:3c:9d:2c:c3:6a:24:79:54: f8:5b:80:cd:0a:f3:ce:65:53:54:37:67:c5:af:5a:0f:70:07: 70:d1:02:a6:e4:1c:b0:29:df:5e:87:ca:f9:ec:4a:ff:5a:9d: fc:71:c6:e1:72:c6:f4:0b:72:12:2a:e5:93:19:c4:04:c2:51: 48:7a:8c:6f:04:b5:62:3d:19:12:c1:e7:cc:46:ff:35:4e:d3: 2d:f4:1e:81:ea:13:63:62:61:c0:91:fb:06:e2:ba:10:d8:53: 22:63:f5:40:91:e6:fa:18:b2:2d:3a:ec:4c:34:8a:1b:12:e7: 30:42:7b:ea:2c:76:d7:e2:5a:31:9c:8f:20:ef:54:c3:8c:66: 6f:35:87:dd:8e:41:14:20:7f:d6:b2:86:44:d5:4d:5b:c8:8a: 09:77:74:05:b6:70:f2:3d:19:e3:bf:24:68:40:ca:54:51:5c: 1c:cc:0c:d3:a0:77:73:3a:6a:c3:e5:10:6c:85:dc:d3:22:bd: 39:67:b2:83:9d:f1:cf:87:36:ee:dc:d5:31:bc:03:64:a7:8c: 41:3d:e4:84:3f:e6:75:bc:7c:74:7e:ff:19:c4:b7:46:56:22: f3:97:b7:21:37:57:11:9a:fd:1f:e6:0f:bc:dc:72:9b:11:c7: e3:ba:79:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB5YokMIBRhb9ya1QxwTeqDF3XmswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU5NTlDNzVGOEFDMTkwREMyMkM3QzMyNzZDRjk1ODM0 RDVDQTY4NzAeFw0yNTA1MDgxMTU1NDVaFw0yNTA1MTExODQxNDVaMDMxMTAvBgNV BAMTKEQ2MzVFM0M2NTIwOERCOTAzRTgyMjI4MEIxNzg3RkJBQUI0RkEyOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLTuOu49EIgz8WfNxFH4zIIhpp 4X9qaH+sDEw5fMu9JGhfR7dEccugabC+bxez6XO2AIHk0uuQ6NFz/4RgkKTRKNch 6uPs/T1pAWq1ImzH8/yVCWdgaCVO5vlXbvM9hxD2GkpBNLpaktGzSkLuFkrSN8OW B5TcoHpU3WDGTHMnG0UBEKiHCsJgZw+Tgk1sfUJBTtUbKD+14JQj1pQ7vmSUf9N8 wUiL3tVqFnRj9474L0jq8pCGR9uf818vvMZ0iz/KUQWYSr3MGP+i7FEaZ5b5eQcE RFYMGSNpn99nNi0imxziutcz6AZTpNwntP0OnXQcIVwg1GXreRthj55vqSBrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1jXjxlII25A+giKAsXh/uqtPopwwHwYDVR0j BBgwFoAUpZWcdfisGQ3CLHwyds+Vg01cpocwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDYxYzc1MC04ODBmLTQ5OGItYTY5OC0xZjQ3ODBmYTY5ZmYvMC9BNTk1OUM3NUY4 QUMxOTBEQzIyQzdDMzI3NkNGOTU4MzRENUNBNjg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTU5NTlDNzVGOEFDMTkwREMyMkM3QzMyNzZDRjk1ODM0RDVD QTY4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQ2MWM3NTAtODgwZi00OThiLWE2 OTgtMWY0NzgwZmE2OWZmLzAvQTU5NTlDNzVGOEFDMTkwREMyMkM3QzMyNzZDRjk1 ODM0RDVDQTY4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGbuW07M6L3N+2c8nSzDaiR5VPhbgM0K885l U1Q3Z8WvWg9wB3DRAqbkHLAp316HyvnsSv9anfxxxuFyxvQLchIq5ZMZxATCUUh6 jG8EtWI9GRLB58xG/zVO0y30HoHqE2NiYcCR+wbiuhDYUyJj9UCR5voYsi067Ew0 ihsS5zBCe+osdtfiWjGcjyDvVMOMZm81h92OQRQgf9ayhkTVTVvIigl3dAW2cPI9 GeO/JGhAylRRXBzMDNOgd3M6asPlEGyF3NMivTlnsoOd8c+HNu7c1TG8A2SnjEE9 5IQ/5nW8fHR+/xnEt0ZWIvOXtyE3VxGa/R/mD7zccpsRx+O6eco= -----END CERTIFICATE-----Generated at Sat May 10 19:26:11 2025 by rpki-client