$ rpki-client -vvf repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft File: 5CC6B0489E576BC0D642B626195A0AA0560DC792.mft (raw, json) Hash identifier: OUWo+5ZjVLRJ6TfSslE91JWVnkVDpOKz/anfpforEeo= Subject key identifier: C1:22:31:1D:8D:B1:E8:23:F2:6A:EF:FA:24:E5:8E:A5:FA:7C:0A:C7 Authority key identifier: 5C:C6:B0:48:9E:57:6B:C0:D6:42:B6:26:19:5A:0A:A0:56:0D:C7:92 Certificate issuer: /CN=5CC6B0489E576BC0D642B626195A0AA0560DC792 Certificate serial: 1CCE1B5F3840386C9F51249CE09B2C2768398822 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CC6B0489E576BC0D642B626195A0AA0560DC792.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft Manifest number: 0173 Signing time: Tue 06 May 2025 10:30:34 +0000 Manifest this update: Tue 06 May 2025 10:25:34 +0000 Manifest next update: Fri 09 May 2025 17:59:34 +0000 Files and hashes: 1: 3130332e3132312e3133382e302f32332d3234203d3e20313335343738.roa (hash: IYSPzv0ipkmDqn5ZyXeN0f328BkzkZ8Pmn6bIzAKtQc=) 2: 3130332e3132312e3133362e302f32332d3234203d3e20313335343738.roa (hash: XTHSvGcaRTEV+p1Y+pj9uwCkeA4dOjhqgF5dBEY4xig=) 3: 5CC6B0489E576BC0D642B626195A0AA0560DC792.crl (hash: NW3u+/g7xAz5CIJWywqojm0Ksw8w9NCuM/W/aqtTf/E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.crl rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CC6B0489E576BC0D642B626195A0AA0560DC792.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 17:59:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:ce:1b:5f:38:40:38:6c:9f:51:24:9c:e0:9b:2c:27:68:39:88:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5CC6B0489E576BC0D642B626195A0AA0560DC792 Validity Not Before: May 6 10:25:34 2025 GMT Not After : May 9 17:59:34 2025 GMT Subject: CN=C122311D8DB1E823F26AEFFA24E58EA5FA7C0AC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a4:52:4a:9b:5c:24:9d:00:8c:b1:27:67:49: cb:b1:3e:7c:d7:4e:af:68:23:ad:aa:1a:e1:8c:a0: 83:48:ab:e2:1f:a6:dc:46:9e:9a:b4:04:7d:3e:7d: a9:7a:0a:a0:b4:4a:c1:c3:5f:68:8a:0a:1a:60:3b: a0:b0:0b:2a:3c:3f:89:66:f7:f0:6a:b4:b2:4e:e2: 95:c6:59:9e:c9:3c:b1:a4:26:b9:dd:7a:46:32:43: cb:64:8c:8f:c6:cf:e9:bf:86:10:d3:b4:fa:61:6d: 77:66:46:fc:96:85:ad:c9:0a:19:ad:a9:3e:14:30: ae:16:78:42:f1:b6:3a:56:4b:08:60:7b:1f:88:50: 34:e0:bc:68:b0:5e:ff:f9:bd:b5:04:53:c1:99:de: be:c2:a5:1d:1f:9c:61:a2:fc:2b:8a:95:25:da:65: 60:f9:d2:54:0b:66:e0:84:cd:f2:3b:ac:44:f8:9c: cb:ff:f7:35:a8:62:6f:c8:16:8b:ad:59:58:a9:11: 85:f7:eb:ea:5d:2f:ec:c6:f9:b2:67:d3:d0:1e:c2: f6:e5:60:fc:4d:3f:f6:f7:d8:e8:3b:ea:cd:39:73: 8c:9a:82:bb:1c:a2:77:8f:6d:35:fa:92:cf:d4:99: a1:77:48:32:25:2c:dc:a0:62:36:1a:92:6a:16:57: 30:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:22:31:1D:8D:B1:E8:23:F2:6A:EF:FA:24:E5:8E:A5:FA:7C:0A:C7 X509v3 Authority Key Identifier: keyid:5C:C6:B0:48:9E:57:6B:C0:D6:42:B6:26:19:5A:0A:A0:56:0D:C7:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CC6B0489E576BC0D642B626195A0AA0560DC792.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f4fa7b8-5302-490b-92e4-27f28c66575c/0/5CC6B0489E576BC0D642B626195A0AA0560DC792.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:4a:b8:1c:9e:6c:49:70:6f:a7:ee:5a:a4:de:d9:e1:ef:83: a8:df:fe:23:70:18:12:f3:c1:5d:4a:66:c0:9c:54:3f:97:4f: 55:dd:a3:17:c1:96:0a:a3:b9:d1:78:84:f0:43:18:25:a0:d3: 6d:9c:bf:3c:ff:fe:5c:1c:25:44:a9:b0:cc:42:62:9a:e1:f7: 5e:d5:9b:04:d9:d4:4f:8b:16:9d:ce:ca:b5:6d:00:57:c4:ef: 8a:f6:c6:0d:da:c8:7a:bf:3a:0d:7b:3e:71:f2:ce:09:15:b8: cd:4b:54:7d:62:dc:c4:e2:c2:cf:21:94:ae:97:41:70:2c:ba: 45:5e:7e:95:7b:7a:9a:0d:f0:a3:00:17:fb:24:fe:39:29:6e: 31:f2:51:6a:f9:06:d5:db:e8:46:8c:77:ec:1f:be:9c:01:5f: 34:59:ff:57:8a:3f:70:0e:40:28:5a:26:db:4d:fd:c1:61:f0: bd:e9:86:a8:b2:8b:4a:d1:37:9b:c6:52:b8:af:fd:62:24:77: 12:e6:e6:4f:d2:56:a2:25:06:0e:23:f0:80:9d:a0:90:2d:42: 0e:37:72:30:2f:6f:0f:fb:a4:a7:ce:c1:8e:3d:a5:4a:fd:b8: 1a:87:80:c7:d5:71:cf:8f:42:3d:57:b8:9c:79:5e:c1:92:50: 6a:71:f6:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHM4bXzhAOGyfUSSc4JssJ2g5iCIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUNDNkIwNDg5RTU3NkJDMEQ2NDJCNjI2MTk1QTBBQTA1 NjBEQzc5MjAeFw0yNTA1MDYxMDI1MzRaFw0yNTA1MDkxNzU5MzRaMDMxMTAvBgNV BAMTKEMxMjIzMTFEOERCMUU4MjNGMjZBRUZGQTI0RTU4RUE1RkE3QzBBQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCpFJKm1wknQCMsSdnScuxPnzX Tq9oI62qGuGMoINIq+IfptxGnpq0BH0+fal6CqC0SsHDX2iKChpgO6CwCyo8P4lm 9/BqtLJO4pXGWZ7JPLGkJrndekYyQ8tkjI/Gz+m/hhDTtPphbXdmRvyWha3JChmt qT4UMK4WeELxtjpWSwhgex+IUDTgvGiwXv/5vbUEU8GZ3r7CpR0fnGGi/CuKlSXa ZWD50lQLZuCEzfI7rET4nMv/9zWoYm/IFoutWVipEYX36+pdL+zG+bJn09Aewvbl YPxNP/b32Og76s05c4yagrsconePbTX6ks/UmaF3SDIlLNygYjYakmoWVzArAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwSIxHY2x6CPyau/6JOWOpfp8CscwHwYDVR0j BBgwFoAUXMawSJ5Xa8DWQrYmGVoKoFYNx5IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZjRmYTdiOC01MzAyLTQ5MGItOTJlNC0yN2YyOGM2NjU3NWMvMC81Q0M2QjA0ODlF NTc2QkMwRDY0MkI2MjYxOTVBMEFBMDU2MERDNzkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUNDNkIwNDg5RTU3NkJDMEQ2NDJCNjI2MTk1QTBBQTA1NjBE Qzc5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGY0ZmE3YjgtNTMwMi00OTBiLTky ZTQtMjdmMjhjNjY1NzVjLzAvNUNDNkIwNDg5RTU3NkJDMEQ2NDJCNjI2MTk1QTBB QTA1NjBEQzc5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABNKuByebElwb6fuWqTe2eHvg6jf/iNwGBLz wV1KZsCcVD+XT1XdoxfBlgqjudF4hPBDGCWg022cvzz//lwcJUSpsMxCYprh917V mwTZ1E+LFp3OyrVtAFfE74r2xg3ayHq/Og17PnHyzgkVuM1LVH1i3MTiws8hlK6X QXAsukVefpV7epoN8KMAF/sk/jkpbjHyUWr5BtXb6EaMd+wfvpwBXzRZ/1eKP3AO QChaJttN/cFh8L3phqiyi0rRN5vGUriv/WIkdxLm5k/SVqIlBg4j8ICdoJAtQg43 cjAvbw/7pKfOwY49pUr9uBqHgMfVcc+PQj1XuJx5XsGSUGpx9m0= -----END CERTIFICATE-----Generated at Thu May 8 04:21:31 2025 by rpki-client