$ rpki-client -vvf repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/A5BB79678DB1239CD393222080CAAF085BEE737F.mft File: A5BB79678DB1239CD393222080CAAF085BEE737F.mft (raw, json) Hash identifier: upWyyIs4qYLEFktdbejak9i8bjHBOv4TLBd/Gi8ok/g= Subject key identifier: EC:4F:7B:FC:71:C8:37:E3:EF:36:74:65:22:B3:6E:41:17:3E:2E:32 Authority key identifier: A5:BB:79:67:8D:B1:23:9C:D3:93:22:20:80:CA:AF:08:5B:EE:73:7F Certificate issuer: /CN=A5BB79678DB1239CD393222080CAAF085BEE737F Certificate serial: 33A85DE4B565543C1A7F5E6FDB13E08E20E17777 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BB79678DB1239CD393222080CAAF085BEE737F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/A5BB79678DB1239CD393222080CAAF085BEE737F.mft Manifest number: 012C Signing time: Sun 11 May 2025 16:12:13 +0000 Manifest this update: Sun 11 May 2025 16:07:13 +0000 Manifest next update: Thu 15 May 2025 01:44:13 +0000 Files and hashes: 1: 3130332e39372e3232342e302f32342d3234203d3e20313530393233.roa (hash: 2bEsYY+M/a6h66329zvhWc5tPmskLFx7J4PCIWERGEs=) 2: 3130332e39372e3232352e302f32342d3234203d3e20313530393233.roa (hash: 4mB2XM5DudhhoPkrzgkjpAUPPeNBfh6OVwqbnoubk7c=) 3: A5BB79678DB1239CD393222080CAAF085BEE737F.crl (hash: EjBzA0RS2VncHIHDDFAABKkq7hRNvM8R9L6aZRlEFq4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/A5BB79678DB1239CD393222080CAAF085BEE737F.crl rsync://repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/A5BB79678DB1239CD393222080CAAF085BEE737F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BB79678DB1239CD393222080CAAF085BEE737F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 01:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:a8:5d:e4:b5:65:54:3c:1a:7f:5e:6f:db:13:e0:8e:20:e1:77:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5BB79678DB1239CD393222080CAAF085BEE737F Validity Not Before: May 11 16:07:13 2025 GMT Not After : May 15 01:44:13 2025 GMT Subject: CN=EC4F7BFC71C837E3EF36746522B36E41173E2E32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ec:ca:48:34:f4:34:6b:b4:de:f5:50:19:19: 9c:16:3a:51:a0:03:8b:05:a8:aa:d4:75:f3:1f:e6: 14:6a:19:e9:ce:52:27:f2:8a:7e:96:33:2d:e3:ac: 6f:1e:6c:34:c4:53:ec:67:21:a2:ee:cb:36:ff:a7: 38:40:0c:35:7e:61:d4:d3:37:ca:df:e7:63:33:f9: 15:be:4b:a7:8e:b4:4b:1c:77:c6:0e:d9:d0:85:25: 92:f3:84:c1:a4:07:39:6f:f8:fd:70:34:c9:ec:c4: be:f3:5d:52:4e:71:02:48:ce:54:f4:a9:be:cd:78: a4:85:70:93:52:12:0a:35:ef:05:c5:14:ce:df:a7: ce:53:6c:8e:8c:ee:6e:20:36:33:44:bc:da:55:53: 98:2e:7d:88:5e:cd:75:78:b3:6b:9c:68:f5:12:ba: c0:a6:58:72:f5:cf:bf:c7:eb:e3:7a:6e:f0:ca:57: 38:fe:e8:17:27:80:f4:74:7e:e9:3b:b9:6c:9a:d0: ec:fc:e0:1a:3b:c6:8e:0b:c7:75:e1:ec:7a:75:d6: 7d:07:54:5f:7f:bb:ff:e8:37:35:ac:92:4d:5a:50: eb:10:75:05:cc:69:96:cc:3a:d6:ad:68:ad:65:c7: d1:35:40:49:e8:61:94:6b:36:30:62:c3:31:ee:2a: 38:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:4F:7B:FC:71:C8:37:E3:EF:36:74:65:22:B3:6E:41:17:3E:2E:32 X509v3 Authority Key Identifier: keyid:A5:BB:79:67:8D:B1:23:9C:D3:93:22:20:80:CA:AF:08:5B:EE:73:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/A5BB79678DB1239CD393222080CAAF085BEE737F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BB79678DB1239CD393222080CAAF085BEE737F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/A5BB79678DB1239CD393222080CAAF085BEE737F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:27:91:0b:d3:f7:01:18:54:12:82:58:96:80:ce:6c:21:77: dc:2d:3f:13:ec:80:06:1e:bf:38:c6:25:ce:0f:a1:87:07:2a: 25:c7:79:83:d7:86:b3:2c:ff:23:d8:18:34:d5:1c:ed:70:47: 98:22:a9:85:34:d8:9c:ce:58:c3:20:30:36:1d:6e:80:8b:eb: 87:ba:62:1f:40:7a:d5:21:1c:69:37:a4:0a:d9:9e:96:a5:70: 12:b7:eb:15:80:73:5e:2b:80:4b:33:24:59:4e:f6:45:cc:07: 00:10:1e:57:99:98:e7:1c:72:d2:89:12:07:0f:a4:0e:d3:fa: 7d:6d:40:a4:cd:6a:5c:f0:ae:7a:99:64:cc:ba:d7:7a:4e:eb: 8b:d9:37:cb:05:5a:53:f6:d6:35:3a:ad:15:e6:2d:aa:76:e4: 6d:33:b9:ff:a1:e1:81:18:19:9b:97:ce:26:26:3e:7a:3b:2e: 60:dc:22:13:eb:c3:19:b4:8e:b0:fc:20:bd:00:58:01:36:90: 04:80:20:03:1d:5e:48:9e:d5:27:4a:86:0b:60:10:64:a4:cf: d1:a3:99:12:03:50:b0:7a:21:0b:f4:66:7d:54:ae:d0:61:fb: 32:f5:9f:da:5a:c9:70:b8:a7:f4:a1:2c:39:86:3f:2a:98:28: 3b:25:cd:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM6hd5LVlVDwaf15v2xPgjiDhd3cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTVCQjc5Njc4REIxMjM5Q0QzOTMyMjIwODBDQUFGMDg1 QkVFNzM3RjAeFw0yNTA1MTExNjA3MTNaFw0yNTA1MTUwMTQ0MTNaMDMxMTAvBgNV BAMTKEVDNEY3QkZDNzFDODM3RTNFRjM2NzQ2NTIyQjM2RTQxMTczRTJFMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC97MpINPQ0a7Te9VAZGZwWOlGg A4sFqKrUdfMf5hRqGenOUifyin6WMy3jrG8ebDTEU+xnIaLuyzb/pzhADDV+YdTT N8rf52Mz+RW+S6eOtEscd8YO2dCFJZLzhMGkBzlv+P1wNMnsxL7zXVJOcQJIzlT0 qb7NeKSFcJNSEgo17wXFFM7fp85TbI6M7m4gNjNEvNpVU5gufYhezXV4s2ucaPUS usCmWHL1z7/H6+N6bvDKVzj+6BcngPR0fuk7uWya0Oz84Bo7xo4Lx3Xh7Hp11n0H VF9/u//oNzWskk1aUOsQdQXMaZbMOtataK1lx9E1QEnoYZRrNjBiwzHuKjhhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7E97/HHIN+PvNnRlIrNuQRc+LjIwHwYDVR0j BBgwFoAUpbt5Z42xI5zTkyIggMqvCFvuc38wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NGFhYTJmMS02M2E5LTQyODEtODk0Mi1mYjVkODI0MTE5YTQvMC9BNUJCNzk2NzhE QjEyMzlDRDM5MzIyMjA4MENBQUYwODVCRUU3MzdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTVCQjc5Njc4REIxMjM5Q0QzOTMyMjIwODBDQUFGMDg1QkVF NzM3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzRhYWEyZjEtNjNhOS00MjgxLTg5 NDItZmI1ZDgyNDExOWE0LzAvQTVCQjc5Njc4REIxMjM5Q0QzOTMyMjIwODBDQUFG MDg1QkVFNzM3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAUnkQvT9wEYVBKCWJaAzmwhd9wtPxPsgAYe vzjGJc4PoYcHKiXHeYPXhrMs/yPYGDTVHO1wR5giqYU02JzOWMMgMDYdboCL64e6 Yh9AetUhHGk3pArZnpalcBK36xWAc14rgEszJFlO9kXMBwAQHleZmOccctKJEgcP pA7T+n1tQKTNalzwrnqZZMy613pO64vZN8sFWlP21jU6rRXmLap25G0zuf+h4YEY GZuXziYmPno7LmDcIhPrwxm0jrD8IL0AWAE2kASAIAMdXkie1SdKhgtgEGSkz9Gj mRIDULB6IQv0Zn1UrtBh+zL1n9payXC4p/ShLDmGPyqYKDslzRE= -----END CERTIFICATE-----Generated at Tue May 13 02:42:19 2025 by rpki-client