$ rpki-client -vvf repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.mft File: 5A33E6B82000487B204D2E284BCA10AF293CB41E.mft (raw, json) Hash identifier: nn4zCFz0H1rRksL+iNJII8QD3yO033JxyO32wJLc+kA= Subject key identifier: EF:59:C1:7E:43:D4:00:EB:18:79:97:31:E5:BC:9D:D8:1E:F7:93:F6 Authority key identifier: 5A:33:E6:B8:20:00:48:7B:20:4D:2E:28:4B:CA:10:AF:29:3C:B4:1E Certificate issuer: /CN=5A33E6B82000487B204D2E284BCA10AF293CB41E Certificate serial: 1FA14C356A56F8A155EB5041F2937FC813D4EEC5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A33E6B82000487B204D2E284BCA10AF293CB41E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.mft Manifest number: 01CE Signing time: Sat 10 May 2025 00:11:12 +0000 Manifest this update: Sat 10 May 2025 00:06:12 +0000 Manifest next update: Tue 13 May 2025 06:31:12 +0000 Files and hashes: 1: 5A33E6B82000487B204D2E284BCA10AF293CB41E.crl (hash: BKdWETFaDdhr7SpTGgJzC200ZVqqVk5fpQF6G/WR3SA=) 2: 3130332e3134322e3234302e302f32342d3234203d3e20313339333832.roa (hash: 1DOr2e/kf4/EN1V5niFiCSQ4eIv5NPl/rOgqgpH4ZuI=) 3: 3130332e3134322e3234312e302f32342d3234203d3e20313339333832.roa (hash: w3BBO2ojOIjj9AtoUjhdja4WPaFGOgpmIufFTP6+DqI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.crl rsync://repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A33E6B82000487B204D2E284BCA10AF293CB41E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 06:31:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:a1:4c:35:6a:56:f8:a1:55:eb:50:41:f2:93:7f:c8:13:d4:ee:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A33E6B82000487B204D2E284BCA10AF293CB41E Validity Not Before: May 10 00:06:12 2025 GMT Not After : May 13 06:31:12 2025 GMT Subject: CN=EF59C17E43D400EB18799731E5BC9DD81EF793F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:12:d6:b2:24:5f:eb:66:cd:5d:18:e1:ed:53: 0e:ed:f3:33:17:a0:b8:ad:46:f0:87:a8:80:46:e2: 40:0a:c3:2c:48:cc:73:c7:eb:b1:6f:90:87:83:97: 5c:21:28:6b:62:f9:6f:79:f6:b8:ff:5a:a6:1c:8f: e7:8b:42:ce:7f:34:08:36:1b:57:20:dd:d8:90:cf: 27:30:d3:e2:04:d3:9a:dc:76:f0:62:c2:5e:ba:6b: f7:fd:8e:7c:55:fe:09:81:15:a2:55:0c:91:84:3c: cf:43:c0:94:f7:7b:23:22:44:70:1e:53:07:16:f3: 86:34:14:d7:b6:6b:aa:ba:31:41:6f:f6:f3:21:9c: ec:6f:28:62:9b:2e:b3:0e:3f:1e:3c:46:3f:34:1b: b7:74:42:6f:de:02:ec:0f:e3:40:40:ad:68:14:09: 86:7d:87:ca:85:2f:4f:18:23:75:89:a3:84:b0:c8: e4:ae:0b:65:e1:18:b8:58:2c:e0:11:92:42:f9:94: d0:fb:b6:ab:9b:a2:03:7b:82:9e:8a:68:bd:bd:a6: 9f:cd:75:63:6a:cc:f3:45:d1:b0:e5:0c:49:59:90: 9f:21:52:25:d5:d3:29:e6:66:45:91:a5:7c:9a:4d: 5a:0a:83:64:ff:1e:fb:ee:38:a6:6f:5d:f3:41:8f: 2c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:59:C1:7E:43:D4:00:EB:18:79:97:31:E5:BC:9D:D8:1E:F7:93:F6 X509v3 Authority Key Identifier: keyid:5A:33:E6:B8:20:00:48:7B:20:4D:2E:28:4B:CA:10:AF:29:3C:B4:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A33E6B82000487B204D2E284BCA10AF293CB41E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:70:08:69:7b:ae:d8:aa:ef:4e:72:62:ad:35:59:2e:e5:68: 02:19:d8:93:61:c3:08:7e:18:d9:18:41:13:ca:32:a4:a0:d0: 02:ae:fa:ed:59:8e:cc:11:8b:0a:6b:a9:18:d7:b4:01:25:1f: f0:26:11:f9:e1:88:98:8e:85:7d:d5:10:5d:40:89:cb:bb:3f: 04:a3:de:91:9f:0b:8e:d7:62:a4:f4:92:f2:73:13:29:c7:35: a7:6d:9a:37:7e:a9:b9:73:b1:51:8e:da:d5:31:a2:22:0f:8c: cf:b3:2d:3f:48:6d:2d:1a:b3:71:ea:3a:94:9a:8f:81:4e:93: 01:aa:57:67:22:2a:ab:a5:0c:93:51:b8:25:70:14:85:52:e2: 74:5a:d8:97:33:84:38:73:96:84:97:d0:cc:67:d0:de:36:8c: c6:35:1f:74:b8:f2:a1:5c:c5:d0:cd:81:22:9e:0c:f5:07:a8: e7:0a:0b:3d:75:f2:a7:bb:f4:b9:54:5a:1f:82:70:1f:b2:cc: 49:63:bb:f5:c4:0c:10:d2:5b:ae:de:ab:ba:f0:15:28:8b:ef: 65:03:76:a9:97:e8:44:71:33:58:94:ea:00:b0:62:c0:5d:0e: 89:fa:3e:a4:b4:16:85:56:0e:a0:05:48:7c:92:fd:58:41:ac: 67:6c:9b:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH6FMNWpW+KFV61BB8pN/yBPU7sUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUEzM0U2QjgyMDAwNDg3QjIwNEQyRTI4NEJDQTEwQUYy OTNDQjQxRTAeFw0yNTA1MTAwMDA2MTJaFw0yNTA1MTMwNjMxMTJaMDMxMTAvBgNV BAMTKEVGNTlDMTdFNDNENDAwRUIxODc5OTczMUU1QkM5REQ4MUVGNzkzRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDEtayJF/rZs1dGOHtUw7t8zMX oLitRvCHqIBG4kAKwyxIzHPH67FvkIeDl1whKGti+W959rj/WqYcj+eLQs5/NAg2 G1cg3diQzycw0+IE05rcdvBiwl66a/f9jnxV/gmBFaJVDJGEPM9DwJT3eyMiRHAe UwcW84Y0FNe2a6q6MUFv9vMhnOxvKGKbLrMOPx48Rj80G7d0Qm/eAuwP40BArWgU CYZ9h8qFL08YI3WJo4SwyOSuC2XhGLhYLOARkkL5lND7tqubogN7gp6KaL29pp/N dWNqzPNF0bDlDElZkJ8hUiXV0ynmZkWRpXyaTVoKg2T/HvvuOKZvXfNBjyzLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU71nBfkPUAOsYeZcx5byd2B73k/YwHwYDVR0j BBgwFoAUWjPmuCAASHsgTS4oS8oQryk8tB4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTQxYmE3ZS02YzQyLTRjMjItYjEzYy01NDhmYzcyNzJhM2QvMC81QTMzRTZCODIw MDA0ODdCMjA0RDJFMjg0QkNBMTBBRjI5M0NCNDFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUEzM0U2QjgyMDAwNDg3QjIwNEQyRTI4NEJDQTEwQUYyOTND QjQxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWU0MWJhN2UtNmM0Mi00YzIyLWIx M2MtNTQ4ZmM3MjcyYTNkLzAvNUEzM0U2QjgyMDAwNDg3QjIwNEQyRTI4NEJDQTEw QUYyOTNDQjQxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJlwCGl7rtiq705yYq01WS7laAIZ2JNhwwh+ GNkYQRPKMqSg0AKu+u1ZjswRiwprqRjXtAElH/AmEfnhiJiOhX3VEF1Aicu7PwSj 3pGfC47XYqT0kvJzEynHNadtmjd+qblzsVGO2tUxoiIPjM+zLT9IbS0as3HqOpSa j4FOkwGqV2ciKqulDJNRuCVwFIVS4nRa2JczhDhzloSX0Mxn0N42jMY1H3S48qFc xdDNgSKeDPUHqOcKCz118qe79LlUWh+CcB+yzElju/XEDBDSW67eq7rwFSiL72UD dqmX6ERxM1iU6gCwYsBdDon6PqS0FoVWDqAFSHyS/VhBrGdsm9Q= -----END CERTIFICATE-----Generated at Sat May 10 17:08:43 2025 by rpki-client