$ rpki-client -vvf repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft File: 5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft (raw, json) Hash identifier: mYcmbk2oEzwnSBAMSu/d8Pz/TzNmexs7fYntaWVCCjs= Subject key identifier: 74:9D:71:0D:BB:5B:FC:86:45:DB:DA:F0:9D:2E:BE:11:23:0F:BD:85 Authority key identifier: 5E:C2:C0:23:40:FB:FA:79:A3:35:2F:A1:89:34:C1:E7:B1:D9:21:6F Certificate issuer: /CN=5EC2C02340FBFA79A3352FA18934C1E7B1D9216F Certificate serial: 26A05EC5458CD5A1A68E3500E250C760820C596A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft Manifest number: 01CF Signing time: Sat 10 May 2025 03:41:52 +0000 Manifest this update: Sat 10 May 2025 03:36:52 +0000 Manifest next update: Tue 13 May 2025 15:24:52 +0000 Files and hashes: 1: 3130332e3138392e3230302e302f32342d3234203d3e2039333431.roa (hash: IarCEKLylnrJ7AZkdxFWJNi+xmNEExkQb+M5jNKDEHk=) 2: 3130332e3138392e3230302e302f32332d3233203d3e2039333431.roa (hash: gvBia+LW2/7IKDQVvnVoZBUClWDY/4rfXyS+EBiBMPI=) 3: 5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.crl (hash: whlFo01YaE6Ps/Pq7AgxINziF1LGXVQJr2V4vlosd7I=) 4: 3130332e3138392e3230312e302f32342d3234203d3e2039333431.roa (hash: Dh9fcAyZ65O9TDEVPO/dqbyH2BI/vOdtlvtC7u5HK34=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.crl rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 15:24:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:a0:5e:c5:45:8c:d5:a1:a6:8e:35:00:e2:50:c7:60:82:0c:59:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EC2C02340FBFA79A3352FA18934C1E7B1D9216F Validity Not Before: May 10 03:36:52 2025 GMT Not After : May 13 15:24:52 2025 GMT Subject: CN=749D710DBB5BFC8645DBDAF09D2EBE11230FBD85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d9:80:96:bc:21:87:67:23:60:bc:a9:7d:bb: d3:9b:10:9c:f5:b0:c1:a2:35:79:aa:34:ec:b9:c1: 65:f9:54:95:03:dd:7d:7c:a9:cf:ca:21:bb:07:15: 60:54:4a:86:ea:f4:7a:e6:a0:39:c7:b6:90:28:a5: ab:d0:11:3e:74:8a:21:56:43:40:ea:86:c1:9d:d6: f4:8b:61:0a:8a:43:ee:28:ec:50:26:45:36:ae:bd: d8:c1:dc:43:1e:d9:45:c6:a2:8e:38:31:57:ea:11: c6:85:56:a8:99:13:6a:0d:e4:55:9b:4a:67:f3:c8: 1d:75:31:2a:d5:bf:f8:7b:42:f4:63:6b:7b:f3:86: 3d:77:2a:4c:b0:fe:f6:5e:45:fa:79:1c:64:ea:da: 1e:5f:75:13:82:1e:13:0d:8b:98:66:ec:1a:ab:ef: 4c:c6:9c:7f:e2:6f:7b:a0:88:69:52:9b:ae:9e:20: a0:fa:8c:74:7a:48:a9:f5:96:67:65:e9:fd:cf:0c: 47:25:63:56:e8:1c:5f:f8:13:2c:6d:d7:fe:f0:6c: c4:77:b3:56:d0:8d:83:88:47:47:b7:df:8e:1b:98: 3c:d8:8e:4f:a1:ec:9d:b4:17:f6:bd:7e:e7:2d:4b: cb:31:ea:4a:fd:f1:5c:b0:7a:c2:14:bc:08:8a:87: 0a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:9D:71:0D:BB:5B:FC:86:45:DB:DA:F0:9D:2E:BE:11:23:0F:BD:85 X509v3 Authority Key Identifier: keyid:5E:C2:C0:23:40:FB:FA:79:A3:35:2F:A1:89:34:C1:E7:B1:D9:21:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a2e5f03-bf96-4b40-bd4a-6e3888c40205/0/5EC2C02340FBFA79A3352FA18934C1E7B1D9216F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:5e:d1:96:fb:a0:33:d5:db:5f:7c:ee:ba:ab:59:25:1a:42: 75:ed:5a:1a:62:2a:3e:38:22:ad:64:d3:0c:7b:cb:10:94:d3: 25:7b:be:93:9d:18:3e:1f:15:5c:4c:f9:a4:a6:d6:06:29:a4: dd:2d:07:0b:1f:8b:91:c9:6e:1f:3c:e6:23:22:c1:1e:83:27: 8c:18:bb:38:35:dd:03:65:c1:2e:03:c4:eb:cd:66:b8:cb:de: 54:21:24:62:73:15:63:6e:a0:2b:33:56:d3:0d:d7:e0:b2:28: 5c:fa:30:6d:13:c6:12:f1:60:aa:57:aa:9f:99:ba:67:21:52: f2:91:81:fd:c4:92:c0:8d:61:f4:44:d9:16:a0:0b:97:89:b0: 64:59:98:d7:28:18:3c:23:84:98:fa:3d:6e:5b:16:36:75:69: 13:a0:5e:10:e0:e7:75:ff:bb:b5:29:dc:6b:03:1f:91:b8:ca: 18:af:1b:e4:31:0e:69:02:8f:09:40:91:5b:b2:c7:21:ff:a6: 80:e3:bc:af:e4:16:56:9d:52:4f:df:c4:19:26:29:a5:f9:d5: 0f:ae:46:03:2e:02:00:22:99:6b:46:2b:58:b6:d9:04:eb:d1: 8a:4e:1f:1f:31:03:4c:27:23:b8:03:5b:21:d1:e7:97:6a:76: 8f:91:71:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJqBexUWM1aGmjjUA4lDHYIIMWWowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVDMkMwMjM0MEZCRkE3OUEzMzUyRkExODkzNEMxRTdC MUQ5MjE2RjAeFw0yNTA1MTAwMzM2NTJaFw0yNTA1MTMxNTI0NTJaMDMxMTAvBgNV BAMTKDc0OUQ3MTBEQkI1QkZDODY0NURCREFGMDlEMkVCRTExMjMwRkJEODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg2YCWvCGHZyNgvKl9u9ObEJz1 sMGiNXmqNOy5wWX5VJUD3X18qc/KIbsHFWBUSobq9HrmoDnHtpAopavQET50iiFW Q0DqhsGd1vSLYQqKQ+4o7FAmRTauvdjB3EMe2UXGoo44MVfqEcaFVqiZE2oN5FWb SmfzyB11MSrVv/h7QvRja3vzhj13Kkyw/vZeRfp5HGTq2h5fdROCHhMNi5hm7Bqr 70zGnH/ib3ugiGlSm66eIKD6jHR6SKn1lmdl6f3PDEclY1boHF/4Eyxt1/7wbMR3 s1bQjYOIR0e3344bmDzYjk+h7J20F/a9fuctS8sx6kr98VywesIUvAiKhwqXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdJ1xDbtb/IZF29rwnS6+ESMPvYUwHwYDVR0j BBgwFoAUXsLAI0D7+nmjNS+hiTTB57HZIW8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTJlNWYwMy1iZjk2LTRiNDAtYmQ0YS02ZTM4ODhjNDAyMDUvMC81RUMyQzAyMzQw RkJGQTc5QTMzNTJGQTE4OTM0QzFFN0IxRDkyMTZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUVDMkMwMjM0MEZCRkE3OUEzMzUyRkExODkzNEMxRTdCMUQ5 MjE2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2EyZTVmMDMtYmY5Ni00YjQwLWJk NGEtNmUzODg4YzQwMjA1LzAvNUVDMkMwMjM0MEZCRkE3OUEzMzUyRkExODkzNEMx RTdCMUQ5MjE2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJFe0Zb7oDPV21987rqrWSUaQnXtWhpiKj44 Iq1k0wx7yxCU0yV7vpOdGD4fFVxM+aSm1gYppN0tBwsfi5HJbh885iMiwR6DJ4wY uzg13QNlwS4DxOvNZrjL3lQhJGJzFWNuoCszVtMN1+CyKFz6MG0TxhLxYKpXqp+Z umchUvKRgf3EksCNYfRE2RagC5eJsGRZmNcoGDwjhJj6PW5bFjZ1aROgXhDg53X/ u7Up3GsDH5G4yhivG+QxDmkCjwlAkVuyxyH/poDjvK/kFladUk/fxBkmKaX51Q+u RgMuAgAimWtGK1i22QTr0YpOHx8xA0wnI7gDWyHR55dqdo+RcWQ= -----END CERTIFICATE-----Generated at Mon May 12 02:00:15 2025 by rpki-client