$ rpki-client -vvf repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.mft File: 0C2060E41DC6ACFF5492868D9B176A2927E815E8.mft (raw, json) Hash identifier: chSYEO7K33c+mmJHaeSHBpwn21rOeUuoQcf0vE+JgI8= Subject key identifier: 90:B5:4E:00:DE:CA:D8:9A:EC:53:17:12:D0:73:B9:DB:3C:9C:A1:E2 Authority key identifier: 0C:20:60:E4:1D:C6:AC:FF:54:92:86:8D:9B:17:6A:29:27:E8:15:E8 Certificate issuer: /CN=0C2060E41DC6ACFF5492868D9B176A2927E815E8 Certificate serial: 5BAEB5F8A48760A42DEB80FF93E07CADC99ED176 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C2060E41DC6ACFF5492868D9B176A2927E815E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.mft Manifest number: 01F3 Signing time: Sat 10 May 2025 03:21:15 +0000 Manifest this update: Sat 10 May 2025 03:16:15 +0000 Manifest next update: Tue 13 May 2025 04:01:15 +0000 Files and hashes: 1: 3130332e38392e3132342e302f32322d3234203d3e20313336303934.roa (hash: kHBDyPefqsguh5TCEwR1/CilgDV5vN4olgvGsk/91XM=) 2: 0C2060E41DC6ACFF5492868D9B176A2927E815E8.crl (hash: R/dZc7OZxsupkZ5oaT78ARpLrYixcbvweQhVB80PAa4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.crl rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C2060E41DC6ACFF5492868D9B176A2927E815E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 04:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:ae:b5:f8:a4:87:60:a4:2d:eb:80:ff:93:e0:7c:ad:c9:9e:d1:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C2060E41DC6ACFF5492868D9B176A2927E815E8 Validity Not Before: May 10 03:16:15 2025 GMT Not After : May 13 04:01:15 2025 GMT Subject: CN=90B54E00DECAD89AEC531712D073B9DB3C9CA1E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d6:d9:ca:66:07:1b:d8:87:c9:70:30:07:ac: 01:64:6b:f6:36:26:86:9c:84:a7:88:5b:2d:fc:32: c4:36:6a:78:ea:2e:58:3e:82:3e:8e:28:0a:81:81: 20:de:36:56:96:af:66:94:22:3f:b5:92:16:e8:44: 13:b2:7e:78:4f:db:99:d7:62:34:cd:44:9f:6f:c5: 93:52:88:68:4c:57:14:71:e8:cc:db:92:d3:84:8a: e2:50:8c:32:28:ab:9f:64:54:e8:1e:04:4b:6a:bb: aa:34:5b:3b:a6:11:16:cb:07:a1:b3:13:45:29:b2: cc:62:a9:8a:f5:c7:1e:7d:89:2f:2a:db:90:8a:d0: a6:27:1f:d6:79:57:8b:20:8b:a0:41:99:a9:a5:22: b0:e1:4c:a4:09:e3:eb:c7:1b:38:ad:4f:91:09:dd: a2:6f:a0:59:8e:16:90:45:73:95:0d:6d:13:2e:8e: c2:f9:c2:aa:45:ff:7d:c5:d1:a1:63:ba:15:c9:44: b6:d1:d4:ea:f9:03:86:33:b6:c0:ac:69:07:35:2c: 81:06:b6:fc:45:ea:5b:96:d9:88:3d:24:71:5f:fd: 0c:65:e6:2e:c6:67:38:9b:eb:01:64:8e:b5:17:b9: 3f:b8:60:31:6c:2e:ab:3b:3e:af:41:9d:8e:f8:cf: bb:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:B5:4E:00:DE:CA:D8:9A:EC:53:17:12:D0:73:B9:DB:3C:9C:A1:E2 X509v3 Authority Key Identifier: keyid:0C:20:60:E4:1D:C6:AC:FF:54:92:86:8D:9B:17:6A:29:27:E8:15:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C2060E41DC6ACFF5492868D9B176A2927E815E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5da14e3a-5be0-46d1-903c-059b0b688821/0/0C2060E41DC6ACFF5492868D9B176A2927E815E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:75:24:3f:53:1b:49:57:01:ea:4c:78:cf:64:a4:09:87:b9: 1d:c4:9d:46:23:f8:86:4d:ca:6e:42:15:fe:77:58:96:1b:f0: 80:d4:b4:66:79:84:b3:92:b8:4c:00:0e:3f:f3:38:83:32:24: df:08:4e:ef:c5:aa:8f:cb:d8:18:1c:b5:99:2f:43:07:9f:cf: 7a:b7:bb:c2:ae:9c:0f:da:89:a5:45:ac:e3:ca:e7:6c:34:40: e8:a2:4a:79:bd:e2:7b:4e:fe:2e:5c:77:fa:0e:48:6e:55:bb: c1:c4:a1:d2:fd:3c:39:48:3e:3a:a0:40:ee:bc:04:d7:ab:d7: 33:be:a9:0e:b6:0b:a3:7b:59:38:b4:41:3e:b6:b0:56:1a:bc: aa:9b:6e:2c:7f:de:10:ea:06:08:e6:f5:5c:a0:5b:5e:ca:94: 91:66:89:fb:15:1a:fa:c4:20:49:1e:41:93:79:40:5c:4d:49: 6d:ab:44:56:14:c4:c3:7c:cf:1e:79:4b:12:9c:3e:81:da:1d: 1b:a1:5f:1b:b0:c3:bf:2c:04:00:03:cc:1e:e9:8a:e0:a3:e8: 3f:92:7d:86:a1:c4:a9:1c:fc:43:df:a6:54:8a:67:5e:3b:57: cc:ea:db:9c:b4:ba:69:1b:ce:b0:09:40:05:bf:84:86:2b:7d: d5:31:89:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW661+KSHYKQt64D/k+B8rcme0XYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMyMDYwRTQxREM2QUNGRjU0OTI4NjhEOUIxNzZBMjky N0U4MTVFODAeFw0yNTA1MTAwMzE2MTVaFw0yNTA1MTMwNDAxMTVaMDMxMTAvBgNV BAMTKDkwQjU0RTAwREVDQUQ4OUFFQzUzMTcxMkQwNzNCOURCM0M5Q0ExRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN1tnKZgcb2IfJcDAHrAFka/Y2 JoachKeIWy38MsQ2anjqLlg+gj6OKAqBgSDeNlaWr2aUIj+1khboRBOyfnhP25nX YjTNRJ9vxZNSiGhMVxRx6MzbktOEiuJQjDIoq59kVOgeBEtqu6o0WzumERbLB6Gz E0UpssxiqYr1xx59iS8q25CK0KYnH9Z5V4sgi6BBmamlIrDhTKQJ4+vHGzitT5EJ 3aJvoFmOFpBFc5UNbRMujsL5wqpF/33F0aFjuhXJRLbR1Or5A4YztsCsaQc1LIEG tvxF6luW2Yg9JHFf/Qxl5i7GZzib6wFkjrUXuT+4YDFsLqs7Pq9BnY74z7ulAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkLVOAN7K2JrsUxcS0HO52zycoeIwHwYDVR0j BBgwFoAUDCBg5B3GrP9UkoaNmxdqKSfoFegwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZGExNGUzYS01YmUwLTQ2ZDEtOTAzYy0wNTliMGI2ODg4MjEvMC8wQzIwNjBFNDFE QzZBQ0ZGNTQ5Mjg2OEQ5QjE3NkEyOTI3RTgxNUU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEMyMDYwRTQxREM2QUNGRjU0OTI4NjhEOUIxNzZBMjkyN0U4 MTVFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWRhMTRlM2EtNWJlMC00NmQxLTkw M2MtMDU5YjBiNjg4ODIxLzAvMEMyMDYwRTQxREM2QUNGRjU0OTI4NjhEOUIxNzZB MjkyN0U4MTVFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAN1JD9TG0lXAepMeM9kpAmHuR3EnUYj+IZN ym5CFf53WJYb8IDUtGZ5hLOSuEwADj/zOIMyJN8ITu/Fqo/L2BgctZkvQwefz3q3 u8KunA/aiaVFrOPK52w0QOiiSnm94ntO/i5cd/oOSG5Vu8HEodL9PDlIPjqgQO68 BNer1zO+qQ62C6N7WTi0QT62sFYavKqbbix/3hDqBgjm9VygW17KlJFmifsVGvrE IEkeQZN5QFxNSW2rRFYUxMN8zx55SxKcPoHaHRuhXxuww78sBAADzB7piuCj6D+S fYahxKkc/EPfplSKZ147V8zq25y0umkbzrAJQAW/hIYrfdUxiUw= -----END CERTIFICATE-----Generated at Sun May 11 15:33:43 2025 by rpki-client