$ rpki-client -vvf repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.mft File: 5AE19AE3FA86591042AE694640539C9669DEC801.mft (raw, json) Hash identifier: Pz8YkBXig0D2W3sfhMAz1EuBCYrOHoWLa0cPol4D0VM= Subject key identifier: 60:A1:41:45:3F:AB:31:0D:80:03:81:66:71:EC:AE:BD:97:DF:B5:1B Authority key identifier: 5A:E1:9A:E3:FA:86:59:10:42:AE:69:46:40:53:9C:96:69:DE:C8:01 Certificate issuer: /CN=5AE19AE3FA86591042AE694640539C9669DEC801 Certificate serial: 44E3EF6C7E0E88FB47E299BDCA3D289EF4827555 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE19AE3FA86591042AE694640539C9669DEC801.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.mft Manifest number: 01AC Signing time: Mon 12 May 2025 06:11:39 +0000 Manifest this update: Mon 12 May 2025 06:06:39 +0000 Manifest next update: Thu 15 May 2025 10:39:39 +0000 Files and hashes: 1: 5AE19AE3FA86591042AE694640539C9669DEC801.crl (hash: wtZu2+XIWxkOvvakEe88bSeKHmDdJ6lDBhHrbneG4yE=) 2: 3130332e3232302e34342e302f32342d3234203d3e20313530313939.roa (hash: pd2NDQQQPyHZaBaBe61CyREtdlKxDZecHqykFbQ5pJ8=) 3: 3130332e3232302e34352e302f32342d3234203d3e20313530313939.roa (hash: VspFw++2jUPUNxpc1/y0Mp4Lv1a+LwrFNdh9KUkbu+E=) 4: 3130332e3232302e34352e302f32342d3234203d3e203438343635.roa (hash: fOeClpPAM1TK8IOTss4/WbnoMHtsAOsqOEHzrDJIniQ=) 5: 3130332e3232302e34342e302f32342d3234203d3e203438343635.roa (hash: 2eBKUXWmF5ts/Iekm7oAEARBCDw1Enrm52lUVeCh2ig=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.crl rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE19AE3FA86591042AE694640539C9669DEC801.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 10:15:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:e3:ef:6c:7e:0e:88:fb:47:e2:99:bd:ca:3d:28:9e:f4:82:75:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5AE19AE3FA86591042AE694640539C9669DEC801 Validity Not Before: May 12 06:06:39 2025 GMT Not After : May 15 10:39:39 2025 GMT Subject: CN=60A141453FAB310D8003816671ECAEBD97DFB51B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:bc:5c:d3:df:36:05:d0:42:17:0b:e7:a6:5e: 5f:10:78:53:9a:4f:97:99:f7:7d:cf:22:3a:dc:9b: 45:ec:fc:d7:05:82:bd:01:4b:14:c9:91:9e:f2:20: 3f:a5:3f:71:3c:21:49:dd:05:b7:c0:c8:25:7e:e0: 38:fa:0b:38:e0:a8:df:bf:62:7a:db:cd:6a:1b:ad: 12:e0:af:52:d7:dd:ff:32:cc:2d:3f:53:5f:86:4c: 34:d6:62:0f:5c:bd:04:22:c3:d2:e5:19:e0:f9:d9: 00:a4:90:34:a2:4c:99:c5:a9:1c:1a:a3:33:6c:93: d0:84:4a:0d:cc:ee:b6:38:61:be:6c:ef:73:3e:3b: 1e:e6:f7:0b:aa:da:83:0d:f9:25:46:12:a1:f5:5e: f1:c8:83:f0:99:26:8d:93:4e:e1:a0:c6:e9:fb:28: b0:92:ca:45:31:04:7e:c8:ab:7c:d2:ac:01:8b:95: 84:63:e6:a7:40:5d:fa:71:ca:a4:04:d3:00:d4:92: d2:9c:24:4e:81:9b:62:8e:8a:37:d8:2f:52:45:df: 62:8e:98:53:4b:72:5a:48:d6:33:83:1a:cf:d9:19: 7e:38:71:30:d1:ac:a6:b2:c2:8a:39:44:a4:43:d9: 44:7c:da:7b:1b:c3:68:a0:f6:2f:b0:2a:2c:c5:52: 48:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:A1:41:45:3F:AB:31:0D:80:03:81:66:71:EC:AE:BD:97:DF:B5:1B X509v3 Authority Key Identifier: keyid:5A:E1:9A:E3:FA:86:59:10:42:AE:69:46:40:53:9C:96:69:DE:C8:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE19AE3FA86591042AE694640539C9669DEC801.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:b9:e4:7e:61:b2:c3:3a:89:80:17:5f:31:47:bc:dc:e8:69: f4:a3:36:61:87:ed:20:bc:b0:cf:64:95:7c:46:4d:b1:36:ec: 76:33:ff:bf:15:f1:d9:f5:48:ab:9f:ef:7b:50:48:6e:9d:12: 76:2f:86:1e:47:44:42:d9:02:e5:ce:fe:da:be:db:8e:fc:0d: 1a:db:de:1a:e1:4c:d3:31:0a:f7:92:5d:44:53:8c:10:c6:50: c1:59:4d:c0:18:7f:5f:d2:73:10:f2:fc:2f:d8:82:ba:f7:c6: 32:38:61:3b:fe:97:1e:58:d2:20:9b:e8:2e:b4:b0:8b:5d:e9: d3:a2:3c:16:7e:3a:4f:44:83:03:5c:7a:4a:0b:ca:a7:78:1d: ae:ae:20:ba:a1:35:8e:b2:13:af:dc:df:cb:3d:d6:fc:1b:09: bf:5c:d5:ba:67:c8:64:fd:dd:7a:dc:bc:1c:1f:e1:0c:47:0e: f2:b1:b0:0b:51:46:88:ba:a3:a4:bb:07:8e:55:1a:05:79:f1: 9f:88:15:88:bb:56:bf:23:dc:35:46:cd:90:76:d7:e9:68:dc: 6a:2d:f9:42:4b:b6:c4:01:29:94:48:53:f9:c1:e1:a6:28:a0: 3d:c0:19:d7:61:bc:0f:4a:74:c5:4d:f0:92:88:30:6f:01:20: 4c:44:df:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUROPvbH4OiPtH4pm9yj0onvSCdVUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFFMTlBRTNGQTg2NTkxMDQyQUU2OTQ2NDA1MzlDOTY2 OURFQzgwMTAeFw0yNTA1MTIwNjA2MzlaFw0yNTA1MTUxMDM5MzlaMDMxMTAvBgNV BAMTKDYwQTE0MTQ1M0ZBQjMxMEQ4MDAzODE2NjcxRUNBRUJEOTdERkI1MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEvFzT3zYF0EIXC+emXl8QeFOa T5eZ933PIjrcm0Xs/NcFgr0BSxTJkZ7yID+lP3E8IUndBbfAyCV+4Dj6CzjgqN+/ YnrbzWobrRLgr1LX3f8yzC0/U1+GTDTWYg9cvQQiw9LlGeD52QCkkDSiTJnFqRwa ozNsk9CESg3M7rY4Yb5s73M+Ox7m9wuq2oMN+SVGEqH1XvHIg/CZJo2TTuGgxun7 KLCSykUxBH7Iq3zSrAGLlYRj5qdAXfpxyqQE0wDUktKcJE6Bm2KOijfYL1JF32KO mFNLclpI1jODGs/ZGX44cTDRrKaywoo5RKRD2UR82nsbw2ig9i+wKizFUkhRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYKFBRT+rMQ2AA4FmceyuvZfftRswHwYDVR0j BBgwFoAUWuGa4/qGWRBCrmlGQFOclmneyAEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NTcyOTI5MS1hMWE3LTRiMTktOTNmNi0xZDg0NTc0YTY3YWUvMC81QUUxOUFFM0ZB ODY1OTEwNDJBRTY5NDY0MDUzOUM5NjY5REVDODAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUFFMTlBRTNGQTg2NTkxMDQyQUU2OTQ2NDA1MzlDOTY2OURF QzgwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjU3MjkyOTEtYTFhNy00YjE5LTkz ZjYtMWQ4NDU3NGE2N2FlLzAvNUFFMTlBRTNGQTg2NTkxMDQyQUU2OTQ2NDA1MzlD OTY2OURFQzgwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI655H5hssM6iYAXXzFHvNzoafSjNmGH7SC8 sM9klXxGTbE27HYz/78V8dn1SKuf73tQSG6dEnYvhh5HRELZAuXO/tq+2478DRrb 3hrhTNMxCveSXURTjBDGUMFZTcAYf1/ScxDy/C/Ygrr3xjI4YTv+lx5Y0iCb6C60 sItd6dOiPBZ+Ok9EgwNcekoLyqd4Ha6uILqhNY6yE6/c38s91vwbCb9c1bpnyGT9 3XrcvBwf4QxHDvKxsAtRRoi6o6S7B45VGgV58Z+IFYi7Vr8j3DVGzZB21+lo3Got +UJLtsQBKZRIU/nB4aYooD3AGddhvA9KdMVN8JKIMG8BIExE39Y= -----END CERTIFICATE-----Generated at Mon May 12 11:18:22 2025 by rpki-client