$ rpki-client -vvf repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft File: 05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft (raw, json) Hash identifier: gGHDg50fUQgYeTBPftRf8YWCNXbZL0Q0qtO61DJUeNM= Subject key identifier: 71:60:35:28:5F:10:37:A9:6B:77:FA:AA:FF:A6:FA:FC:55:CC:7E:01 Authority key identifier: 05:67:1A:0A:CA:B2:6B:34:26:48:AF:FA:C0:C6:6E:CB:5A:49:3D:AB Certificate issuer: /CN=05671A0ACAB26B342648AFFAC0C66ECB5A493DAB Certificate serial: 231D4EE79BE80E5726CE951826353F7C36015EE7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft Manifest number: AB Signing time: Tue 06 May 2025 13:41:37 +0000 Manifest this update: Tue 06 May 2025 13:36:37 +0000 Manifest next update: Fri 09 May 2025 16:33:37 +0000 Files and hashes: 1: 05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.crl (hash: gMLfDnzOMLSWrgOzBhlRvbRy3ELvdYbVnoKWzbmMKdo=) 2: 323030313a6466333a393034303a3a2f34382d3438203d3e20313532343139.roa (hash: RA3iDpSCkWtT/yyfxgJEQ4woQglWjmr40o6UbmeiCAk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.crl rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 16:33:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:1d:4e:e7:9b:e8:0e:57:26:ce:95:18:26:35:3f:7c:36:01:5e:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05671A0ACAB26B342648AFFAC0C66ECB5A493DAB Validity Not Before: May 6 13:36:37 2025 GMT Not After : May 9 16:33:37 2025 GMT Subject: CN=716035285F1037A96B77FAAAFFA6FAFC55CC7E01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:31:21:7a:57:68:f6:58:42:31:29:86:a7:ba: 05:14:cb:95:97:4b:c8:34:c4:10:61:de:24:f6:64: 78:79:27:23:80:8f:39:2a:ca:15:e7:34:38:1a:f7: 1a:00:21:e5:70:6e:cc:2c:c1:d9:f7:c7:81:11:16: 0c:8b:80:01:91:ca:ea:b3:3f:44:3c:02:7a:59:55: 30:92:c3:d8:4f:16:93:8f:2b:8d:74:33:06:7d:c2: 22:24:89:e9:75:0c:b0:e5:ce:aa:4f:4d:e8:d9:dd: a3:06:57:a1:64:74:f5:c8:b4:29:11:83:37:07:9f: e2:d5:80:f3:7b:61:5b:6b:07:cb:19:3f:84:4b:c0: 51:bf:74:5c:7e:a8:bf:a9:7c:bb:6b:f5:ce:a0:de: 64:b0:83:ea:89:38:c7:6a:1f:72:d9:fd:93:a8:55: e3:81:9d:a2:04:c1:61:18:9d:b4:6e:6a:4a:ba:37: 4e:60:c9:a9:12:3d:77:b9:66:89:e2:6f:51:aa:3f: c0:38:a0:d5:a5:ab:9e:87:92:a9:58:6d:9c:54:65: e4:2f:2d:21:62:a4:93:4e:f2:ec:a3:99:f5:ed:42: 8d:e2:a0:ce:59:4f:e2:5c:49:0b:97:e7:a0:f3:72: ee:4d:0c:88:c5:b2:b0:16:1a:0f:30:09:45:09:34: 01:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:60:35:28:5F:10:37:A9:6B:77:FA:AA:FF:A6:FA:FC:55:CC:7E:01 X509v3 Authority Key Identifier: keyid:05:67:1A:0A:CA:B2:6B:34:26:48:AF:FA:C0:C6:6E:CB:5A:49:3D:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d823bb3-5a01-4658-a783-f8e89fadcf45/1/05671A0ACAB26B342648AFFAC0C66ECB5A493DAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:ef:aa:1a:0b:bd:c0:d0:eb:da:36:1c:95:39:66:67:41:2d: 01:66:97:06:7d:09:47:17:68:d3:38:0c:c9:8f:e2:cc:92:f0: 4f:a3:72:dc:43:15:92:e2:cf:21:d4:7a:f4:9d:36:8e:eb:53: 2e:6f:00:d7:ae:12:aa:dc:ba:4e:64:26:34:90:c8:cf:b5:60: 37:15:7f:f4:6b:44:7e:54:4c:90:5b:d8:71:b7:02:cf:82:f1: 9b:f8:2e:c6:ef:06:2e:f3:31:60:3e:4e:2c:60:5a:41:2b:8f: d5:fa:4f:52:c2:71:4d:a4:ac:cb:f6:22:48:8c:6f:37:0e:4a: 5a:32:34:11:a3:99:b4:b4:6b:db:7f:61:b1:f8:84:4a:91:c8: 67:77:48:cc:70:c7:dd:b7:f8:76:45:88:a7:e5:dc:41:bc:c4: f8:c0:2a:c9:64:3a:ea:0b:10:88:95:6a:fc:6c:07:7f:a2:dd: 58:50:ba:2a:a9:d5:9f:2d:6d:9e:9e:0a:68:d3:a3:7e:89:52: b4:46:3e:70:da:ae:2d:16:b6:54:48:ca:e1:c0:eb:59:95:35: c9:1e:c4:d6:32:6f:dd:67:a8:56:d2:5f:67:c8:aa:92:30:33: 7c:85:92:6d:c1:4c:ea:93:9d:aa:d9:a7:c7:86:51:e1:31:18: 10:2c:4c:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIx1O55voDlcmzpUYJjU/fDYBXucwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDU2NzFBMEFDQUIyNkIzNDI2NDhBRkZBQzBDNjZFQ0I1 QTQ5M0RBQjAeFw0yNTA1MDYxMzM2MzdaFw0yNTA1MDkxNjMzMzdaMDMxMTAvBgNV BAMTKDcxNjAzNTI4NUYxMDM3QTk2Qjc3RkFBQUZGQTZGQUZDNTVDQzdFMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIMSF6V2j2WEIxKYanugUUy5WX S8g0xBBh3iT2ZHh5JyOAjzkqyhXnNDga9xoAIeVwbswswdn3x4ERFgyLgAGRyuqz P0Q8AnpZVTCSw9hPFpOPK410MwZ9wiIkiel1DLDlzqpPTejZ3aMGV6FkdPXItCkR gzcHn+LVgPN7YVtrB8sZP4RLwFG/dFx+qL+pfLtr9c6g3mSwg+qJOMdqH3LZ/ZOo VeOBnaIEwWEYnbRuakq6N05gyakSPXe5Zonib1GqP8A4oNWlq56HkqlYbZxUZeQv LSFipJNO8uyjmfXtQo3ioM5ZT+JcSQuX56Dzcu5NDIjFsrAWGg8wCUUJNAGdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcWA1KF8QN6lrd/qq/6b6/FXMfgEwHwYDVR0j BBgwFoAUBWcaCsqyazQmSK/6wMZuy1pJPaswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDgyM2JiMy01YTAxLTQ2NTgtYTc4My1mOGU4OWZhZGNmNDUvMS8wNTY3MUEwQUNB QjI2QjM0MjY0OEFGRkFDMEM2NkVDQjVBNDkzREFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDU2NzFBMEFDQUIyNkIzNDI2NDhBRkZBQzBDNjZFQ0I1QTQ5 M0RBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ4MjNiYjMtNWEwMS00NjU4LWE3 ODMtZjhlODlmYWRjZjQ1LzEvMDU2NzFBMEFDQUIyNkIzNDI2NDhBRkZBQzBDNjZF Q0I1QTQ5M0RBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALvvqhoLvcDQ69o2HJU5ZmdBLQFmlwZ9CUcX aNM4DMmP4syS8E+jctxDFZLizyHUevSdNo7rUy5vANeuEqrcuk5kJjSQyM+1YDcV f/RrRH5UTJBb2HG3As+C8Zv4LsbvBi7zMWA+TixgWkErj9X6T1LCcU2krMv2IkiM bzcOSloyNBGjmbS0a9t/YbH4hEqRyGd3SMxwx923+HZFiKfl3EG8xPjAKslkOuoL EIiVavxsB3+i3VhQuiqp1Z8tbZ6eCmjTo36JUrRGPnDari0WtlRIyuHA61mVNcke xNYyb91nqFbSX2fIqpIwM3yFkm3BTOqTnarZp8eGUeExGBAsTJo= -----END CERTIFICATE-----Generated at Thu May 8 02:15:46 2025 by rpki-client