$ rpki-client -vvf repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.mft File: 5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.mft (raw, json) Hash identifier: IlXFech1DvfvQHVS4UiZe8QOmaii2r3Q1UQEhrxmQZI= Subject key identifier: 47:31:EA:C9:C2:83:DC:70:95:86:E0:00:19:E7:3E:DD:23:B0:ED:C6 Authority key identifier: 5E:02:7C:2A:BE:4A:1F:46:34:0E:D8:3A:3A:D8:F0:6D:BC:CD:CD:21 Certificate issuer: /CN=5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21 Certificate serial: 37D7AF37137888BDFBF19677999B595BFF90ED8F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.mft Manifest number: 0246 Signing time: Tue 06 May 2025 20:51:24 +0000 Manifest this update: Tue 06 May 2025 20:46:24 +0000 Manifest next update: Sat 10 May 2025 07:23:24 +0000 Files and hashes: 1: 5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.crl (hash: +jUE+gZ4BcddMMgvWxAVrT5TFFEq4G4Pvk7c+fw/aoY=) 2: 3130332e3137392e3133362e302f32332d3234203d3e20313339393737.roa (hash: IQxk+RVCCE4pKnBFAa/I+n4PlSjcG9LFvLyIRAqgipY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.crl rsync://repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 07:23:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:d7:af:37:13:78:88:bd:fb:f1:96:77:99:9b:59:5b:ff:90:ed:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21 Validity Not Before: May 6 20:46:24 2025 GMT Not After : May 10 07:23:24 2025 GMT Subject: CN=4731EAC9C283DC709586E00019E73EDD23B0EDC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:76:5b:09:87:d2:ad:54:64:7a:12:93:7b:81: b0:3c:2b:8b:87:86:72:e7:ba:47:d5:99:34:f9:57: b1:62:83:fc:bd:f1:12:b5:54:d0:b8:10:6b:33:fe: 67:64:eb:67:0d:eb:c5:14:04:37:99:fd:b0:4d:f3: b7:b7:76:a2:62:3b:9b:51:86:a6:92:69:e7:56:49: 22:07:e9:3c:a4:a3:68:07:06:4e:aa:bf:6b:0b:9f: 59:ae:9d:1a:8d:75:cb:85:f7:04:58:a9:50:39:e3: 2f:e4:7b:5a:9f:7d:8a:e5:46:90:64:3c:94:b1:2b: 1f:40:11:2b:e2:da:e7:d5:e4:0b:bd:39:80:8a:68: 8f:25:23:bc:40:fd:3e:2c:b6:25:5d:ed:4a:1d:ef: 12:c7:06:e9:24:d4:32:7b:e1:da:e4:ad:37:ee:78: f0:71:79:84:66:9b:72:e2:1a:cb:fa:c6:d2:ce:fc: 7d:1f:72:9b:bc:28:a5:d4:c9:c5:32:ad:ad:33:89: e5:e2:dc:55:49:f0:d6:ab:b6:f8:37:8a:62:09:69: 16:c9:08:03:5a:eb:32:f0:d1:71:97:13:ba:97:03: a1:d8:fe:32:bc:3f:45:4b:2c:27:7d:38:56:b1:06: 42:fb:18:c4:8a:17:da:a9:41:23:76:8a:c1:db:c5: 4e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:31:EA:C9:C2:83:DC:70:95:86:E0:00:19:E7:3E:DD:23:B0:ED:C6 X509v3 Authority Key Identifier: keyid:5E:02:7C:2A:BE:4A:1F:46:34:0E:D8:3A:3A:D8:F0:6D:BC:CD:CD:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d80b321-aa31-4317-9d31-c2bd190c1384/0/5E027C2ABE4A1F46340ED83A3AD8F06DBCCDCD21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:d7:7a:a0:e0:2d:9b:4a:0a:a4:a2:b4:af:f5:cc:8d:38:9b: c1:8d:1f:11:95:18:74:75:79:2e:fb:cb:b5:4a:8e:c7:65:29: 1f:dd:24:69:9e:97:66:e9:8a:27:3b:a9:99:72:c5:07:15:a3: 23:78:00:e5:58:c7:cc:95:10:df:70:15:e4:f8:51:9c:c5:b8: 44:a9:5d:ab:7e:ff:94:19:24:28:bb:1f:e8:63:5e:06:96:48: f5:a5:5c:ce:1a:1a:6d:a6:ac:33:6b:52:33:82:90:48:dd:0c: 83:5b:8c:35:b4:2b:88:ea:38:ce:d5:a0:cd:f5:f8:fe:b2:83: 3d:2e:24:0d:07:bf:f0:92:32:0b:3c:e8:a0:ef:2f:36:e0:a5: 1f:ae:1a:ed:e8:78:24:c0:ae:67:6c:e7:d7:b3:68:b2:3d:eb: ab:0f:69:87:99:7a:e0:e2:bd:93:47:07:95:05:3f:ab:f1:57: 54:1f:82:0c:c5:2b:3d:b4:48:30:b2:2d:0d:f4:e5:cf:a5:60: 89:41:0a:bf:05:46:a7:22:60:24:7c:78:7b:41:ac:fb:7a:a8: bf:0b:10:6e:00:d6:85:97:a3:77:f7:54:6e:1e:1f:15:d0:ed: 58:e9:37:d7:7a:5c:d0:54:1b:82:55:0a:ac:29:59:0e:df:ed: 08:b1:27:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN9evNxN4iL378ZZ3mZtZW/+Q7Y8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUUwMjdDMkFCRTRBMUY0NjM0MEVEODNBM0FEOEYwNkRC Q0NEQ0QyMTAeFw0yNTA1MDYyMDQ2MjRaFw0yNTA1MTAwNzIzMjRaMDMxMTAvBgNV BAMTKDQ3MzFFQUM5QzI4M0RDNzA5NTg2RTAwMDE5RTczRUREMjNCMEVEQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDdlsJh9KtVGR6EpN7gbA8K4uH hnLnukfVmTT5V7Fig/y98RK1VNC4EGsz/mdk62cN68UUBDeZ/bBN87e3dqJiO5tR hqaSaedWSSIH6Tyko2gHBk6qv2sLn1munRqNdcuF9wRYqVA54y/ke1qffYrlRpBk PJSxKx9AESvi2ufV5Au9OYCKaI8lI7xA/T4stiVd7Uod7xLHBukk1DJ74drkrTfu ePBxeYRmm3LiGsv6xtLO/H0fcpu8KKXUycUyra0zieXi3FVJ8Nartvg3imIJaRbJ CANa6zLw0XGXE7qXA6HY/jK8P0VLLCd9OFaxBkL7GMSKF9qpQSN2isHbxU75AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURzHqycKD3HCVhuAAGec+3SOw7cYwHwYDVR0j BBgwFoAUXgJ8Kr5KH0Y0Dtg6OtjwbbzNzSEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDgwYjMyMS1hYTMxLTQzMTctOWQzMS1jMmJkMTkwYzEzODQvMC81RTAyN0MyQUJF NEExRjQ2MzQwRUQ4M0EzQUQ4RjA2REJDQ0RDRDIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUUwMjdDMkFCRTRBMUY0NjM0MEVEODNBM0FEOEYwNkRCQ0NE Q0QyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmQ4MGIzMjEtYWEzMS00MzE3LTlk MzEtYzJiZDE5MGMxMzg0LzAvNUUwMjdDMkFCRTRBMUY0NjM0MEVEODNBM0FEOEYw NkRCQ0NEQ0QyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACXXeqDgLZtKCqSitK/1zI04m8GNHxGVGHR1 eS77y7VKjsdlKR/dJGmel2bpiic7qZlyxQcVoyN4AOVYx8yVEN9wFeT4UZzFuESp Xat+/5QZJCi7H+hjXgaWSPWlXM4aGm2mrDNrUjOCkEjdDINbjDW0K4jqOM7VoM31 +P6ygz0uJA0Hv/CSMgs86KDvLzbgpR+uGu3oeCTArmds59ezaLI966sPaYeZeuDi vZNHB5UFP6vxV1QfggzFKz20SDCyLQ305c+lYIlBCr8FRqciYCR8eHtBrPt6qL8L EG4A1oWXo3f3VG4eHxXQ7VjpN9d6XNBUG4JVCqwpWQ7f7QixJ+E= -----END CERTIFICATE-----Generated at Wed May 7 22:45:56 2025 by rpki-client