$ rpki-client -vvf repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.mft File: 5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.mft (raw, json) Hash identifier: 31+PKKl2MOjKIrIKi0HdV+fLqMmtBEbdKyXZjE7ggqM= Subject key identifier: 99:97:08:BE:F6:F3:D3:85:AC:81:06:7B:D6:D2:BE:0B:FD:05:B0:52 Authority key identifier: 51:97:E2:A7:8B:BA:1E:8C:9E:B8:08:E4:5A:99:DD:2B:E7:B4:12:97 Certificate issuer: /CN=5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297 Certificate serial: 3ADD3C5E4DBF5F89B3E470A46881F7EA61ECA67D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.mft Manifest number: 0174 Signing time: Fri 09 May 2025 00:31:22 +0000 Manifest this update: Fri 09 May 2025 00:26:22 +0000 Manifest next update: Mon 12 May 2025 08:32:22 +0000 Files and hashes: 1: 3130332e3132392e32302e302f32332d3234203d3e20313335343738.roa (hash: YByKLIatw2VYf9uIqdHXeYjHhsev8w+x71A+omd++qw=) 2: 3130332e3132392e32322e302f32332d3234203d3e20313335343738.roa (hash: FwEnmWvpQPi3X//OQNwFe+4W6d+oidU+6VtbWJyAezc=) 3: 5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.crl (hash: qiz9rzj/l32vuG8uZmm+WQgcqRPJRZZyvqNfhkvvaHA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.crl rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 08:32:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:dd:3c:5e:4d:bf:5f:89:b3:e4:70:a4:68:81:f7:ea:61:ec:a6:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297 Validity Not Before: May 9 00:26:22 2025 GMT Not After : May 12 08:32:22 2025 GMT Subject: CN=999708BEF6F3D385AC81067BD6D2BE0BFD05B052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:81:a0:a7:04:ca:70:dd:34:b3:5c:cb:5d:a2: 02:e0:0b:65:79:0c:c1:d8:02:4c:38:2f:39:e5:88: f1:6d:01:13:be:ab:cb:40:bd:56:5b:c9:9d:15:7e: 42:e3:63:69:4b:bc:e3:91:40:d5:bc:39:a2:cf:52: 40:1f:6e:f6:85:69:42:36:bd:5e:e7:0d:57:24:cb: ee:56:76:76:85:6f:14:ee:24:5a:ea:c4:b7:ef:b9: e0:7d:77:66:7a:15:3e:ef:b1:46:93:33:d0:91:70: ba:e9:e5:b9:d2:f6:ca:a9:02:d2:44:9f:02:24:fe: 92:3c:f5:86:6a:74:8f:fb:af:f7:6b:01:6a:9d:b6: 93:7b:dc:1f:1a:11:53:83:6c:4e:da:fc:dd:2c:d0: cc:50:21:7a:f6:a4:6b:7f:94:8a:73:e5:6a:97:2e: 85:8f:a8:fe:17:34:ed:a2:4f:63:10:0c:3c:ed:0b: 31:0b:74:24:ee:d6:58:4e:d0:f2:85:6a:86:51:b4: 56:73:ed:c0:1c:f5:ca:cb:c8:7a:36:8e:b0:69:2f: cc:d6:ba:39:57:a7:42:7f:c5:19:a5:70:ed:e0:8c: 70:5d:c8:99:e9:71:6f:77:fc:a8:b0:d8:d4:3f:a4: c4:7f:1d:73:36:b4:94:59:43:8d:e0:2f:4a:ce:23: 0d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:97:08:BE:F6:F3:D3:85:AC:81:06:7B:D6:D2:BE:0B:FD:05:B0:52 X509v3 Authority Key Identifier: keyid:51:97:E2:A7:8B:BA:1E:8C:9E:B8:08:E4:5A:99:DD:2B:E7:B4:12:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:fd:4b:23:7c:72:4e:b8:1f:90:9b:d8:b3:5c:58:25:a2:36: b2:d2:91:43:33:6e:98:95:1a:6d:d8:3b:61:a1:7d:bf:83:d5: 5b:2f:5e:c5:1d:08:d7:68:6c:b9:e3:69:58:41:68:b9:15:4c: 24:1b:5a:bc:5d:8b:db:de:d8:d8:1c:dc:34:a3:f0:55:83:9c: be:77:3a:c5:a2:d4:63:ac:ae:46:67:85:04:2a:bd:58:5c:1b: 90:06:5c:c2:67:06:35:b0:88:69:20:5d:e5:7d:d2:98:1f:d7: 61:79:df:a2:09:cb:c6:fa:46:7f:5c:d3:4c:12:4d:c8:50:86: b0:b4:13:da:fd:62:b2:48:e4:1c:f9:d9:8c:e0:0b:82:86:57: 58:7b:a3:15:d8:5c:ab:46:64:a1:b7:b3:a1:2b:3b:f7:96:b2: 30:e8:22:20:52:6a:78:b2:af:67:e1:a7:32:83:3f:b6:0a:72: ad:b0:6e:10:1e:8f:9e:27:76:b5:9f:2d:e5:3e:80:da:d9:7b: fe:94:e3:fe:28:1b:5c:8b:91:10:48:c2:5e:2b:ae:b3:dc:ea: 68:0c:cc:05:80:d5:a5:f6:e6:70:43:ab:9a:fa:26:67:8b:f1: 98:89:78:6e:75:62:ca:86:63:75:bc:a4:aa:24:ae:aa:9b:88: c8:88:dd:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOt08Xk2/X4mz5HCkaIH36mHspn0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE5N0UyQTc4QkJBMUU4QzlFQjgwOEU0NUE5OUREMkJF N0I0MTI5NzAeFw0yNTA1MDkwMDI2MjJaFw0yNTA1MTIwODMyMjJaMDMxMTAvBgNV BAMTKDk5OTcwOEJFRjZGM0QzODVBQzgxMDY3QkQ2RDJCRTBCRkQwNUIwNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVgaCnBMpw3TSzXMtdogLgC2V5 DMHYAkw4LznliPFtARO+q8tAvVZbyZ0VfkLjY2lLvOORQNW8OaLPUkAfbvaFaUI2 vV7nDVcky+5WdnaFbxTuJFrqxLfvueB9d2Z6FT7vsUaTM9CRcLrp5bnS9sqpAtJE nwIk/pI89YZqdI/7r/drAWqdtpN73B8aEVODbE7a/N0s0MxQIXr2pGt/lIpz5WqX LoWPqP4XNO2iT2MQDDztCzELdCTu1lhO0PKFaoZRtFZz7cAc9crLyHo2jrBpL8zW ujlXp0J/xRmlcO3gjHBdyJnpcW93/Kiw2NQ/pMR/HXM2tJRZQ43gL0rOIw19AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmZcIvvbz04WsgQZ71tK+C/0FsFIwHwYDVR0j BBgwFoAUUZfip4u6HoyeuAjkWpndK+e0EpcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjU0MjgzOS0yODU4LTQ5ZjAtYWNkZi1mYTdkM2FiOWM1NTgvMC81MTk3RTJBNzhC QkExRThDOUVCODA4RTQ1QTk5REQyQkU3QjQxMjk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTE5N0UyQTc4QkJBMUU4QzlFQjgwOEU0NUE5OUREMkJFN0I0 MTI5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzY1NDI4MzktMjg1OC00OWYwLWFj ZGYtZmE3ZDNhYjljNTU4LzAvNTE5N0UyQTc4QkJBMUU4QzlFQjgwOEU0NUE5OURE MkJFN0I0MTI5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIP9SyN8ck64H5Cb2LNcWCWiNrLSkUMzbpiV Gm3YO2Ghfb+D1VsvXsUdCNdobLnjaVhBaLkVTCQbWrxdi9ve2Ngc3DSj8FWDnL53 OsWi1GOsrkZnhQQqvVhcG5AGXMJnBjWwiGkgXeV90pgf12F536IJy8b6Rn9c00wS TchQhrC0E9r9YrJI5Bz52YzgC4KGV1h7oxXYXKtGZKG3s6ErO/eWsjDoIiBSaniy r2fhpzKDP7YKcq2wbhAej54ndrWfLeU+gNrZe/6U4/4oG1yLkRBIwl4rrrPc6mgM zAWA1aX25nBDq5r6JmeL8ZiJeG51YsqGY3W8pKokrqqbiMiI3Qk= -----END CERTIFICATE-----Generated at Sat May 10 20:51:48 2025 by rpki-client