$ rpki-client -vvf repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.mft File: 5C7206DCB1B8034A485C92161B2E2C7662780B7F.mft (raw, json) Hash identifier: RowqbPyD2Ad25/FFSD9RBnQf8cp4LWfuWZI4aPcUqMM= Subject key identifier: B4:3C:E3:E3:F8:BC:88:1A:D1:EA:2B:0F:66:9F:B3:68:E3:90:8D:4E Authority key identifier: 5C:72:06:DC:B1:B8:03:4A:48:5C:92:16:1B:2E:2C:76:62:78:0B:7F Certificate issuer: /CN=5C7206DCB1B8034A485C92161B2E2C7662780B7F Certificate serial: 27E98239456AE89EE32726F346E560F71CB6212A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5C7206DCB1B8034A485C92161B2E2C7662780B7F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.mft Manifest number: 85 Signing time: Wed 07 May 2025 13:51:29 +0000 Manifest this update: Wed 07 May 2025 13:46:29 +0000 Manifest next update: Sat 10 May 2025 17:15:29 +0000 Files and hashes: 1: 3135372e36362e36332e302f32342d3234203d3e20313431363039.roa (hash: 1RoyWHYOBjbbWvGHmlc3E+a/Zfon8BvajXPKQy24blM=) 2: 3135372e36362e36322e302f32342d3234203d3e20313431363039.roa (hash: TD2YgjhrCuftQQ3KoQWxFnAYIili8zc0jZagf1k6YCE=) 3: 3135372e36362e36322e302f32332d3233203d3e20313431363039.roa (hash: ynzvFGFeVrYtYbfD+ePKrxwpaypexlX1cEKRBF9+ZqM=) 4: 5C7206DCB1B8034A485C92161B2E2C7662780B7F.crl (hash: Mxi29BDHEr1NWrH1T1k+q+x+y3bmlmDDt4Q1JlEPv/4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.crl rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5C7206DCB1B8034A485C92161B2E2C7662780B7F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 17:15:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:e9:82:39:45:6a:e8:9e:e3:27:26:f3:46:e5:60:f7:1c:b6:21:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C7206DCB1B8034A485C92161B2E2C7662780B7F Validity Not Before: May 7 13:46:29 2025 GMT Not After : May 10 17:15:29 2025 GMT Subject: CN=B43CE3E3F8BC881AD1EA2B0F669FB368E3908D4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e4:02:7b:95:c5:9b:c3:a2:ef:ce:d5:a2:ea: 9b:7f:5c:fc:30:5d:f7:7f:8e:7e:95:44:8e:2d:1d: c5:dd:da:4e:bb:dd:db:0f:19:50:ad:f0:c2:14:39: 47:af:b6:68:c5:00:f5:1b:21:c6:d0:f8:e6:05:96: 50:a3:17:23:e4:07:7e:36:05:98:59:85:75:4e:e0: fc:82:76:c3:61:e5:20:3a:88:f4:34:9a:af:96:96: f8:9c:c4:2a:83:e1:4b:d2:7d:b9:8e:1e:37:59:e6: 1f:4e:a6:87:14:13:56:69:44:81:91:cf:42:10:84: 3d:82:4f:19:3c:96:04:25:08:bb:77:de:de:6d:d2: 24:a1:b0:ed:0d:93:ec:3c:ca:f0:46:16:fa:fe:00: ba:b2:a8:00:80:0a:33:cc:4f:a9:86:85:c7:00:a8: a0:5c:e8:4a:b7:f5:9c:b6:54:28:50:95:b9:e0:98: fe:c1:a0:14:f8:7a:e3:87:8c:0a:e3:63:d1:70:fd: ff:5f:e0:46:96:9d:b8:38:ff:92:85:20:0d:38:74: e8:35:a9:00:26:7f:ed:5b:09:32:3b:af:86:0d:a2: e3:a3:af:79:8d:97:a2:64:21:7f:6a:67:a3:8c:d5: 04:7b:0a:02:6b:6d:97:c2:7b:9d:8b:f1:8a:5e:96: 0d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:3C:E3:E3:F8:BC:88:1A:D1:EA:2B:0F:66:9F:B3:68:E3:90:8D:4E X509v3 Authority Key Identifier: keyid:5C:72:06:DC:B1:B8:03:4A:48:5C:92:16:1B:2E:2C:76:62:78:0B:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5C7206DCB1B8034A485C92161B2E2C7662780B7F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ddbb79c-9ea2-47f0-b45f-1816650ba23f/0/5C7206DCB1B8034A485C92161B2E2C7662780B7F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:22:85:84:a5:e7:b6:f0:4b:a4:6b:db:4b:b8:ac:32:07:ba: c3:9b:84:84:17:b7:7d:a6:d2:90:a7:e3:08:d2:fa:f1:c7:18: 7a:9f:d6:de:9d:2b:c4:45:d8:5c:93:00:19:4a:0c:00:57:15: 98:6f:6e:8e:3d:91:a4:c9:e7:2f:e0:21:06:af:eb:83:ce:9f: 95:4e:ec:f4:19:0b:be:c5:a3:f6:5d:7e:2f:75:37:61:be:c1: c1:30:6c:60:e0:a2:6a:04:9f:87:bd:a2:27:56:3c:6b:66:c6: 25:c1:15:51:5b:0f:cf:14:af:f9:0e:e4:c0:96:ba:d9:a6:be: 5b:71:45:86:40:41:9f:46:83:78:9c:8a:3b:d9:4e:54:13:c2: d5:08:d1:a3:37:71:7e:e6:d4:ce:4a:ed:d4:50:9e:18:67:55: b1:14:bd:d9:0b:58:cd:21:1f:e2:56:60:98:d2:70:fc:60:b3: ec:73:f3:c3:69:48:3d:27:43:34:9d:22:b7:b1:97:61:20:11: 35:3e:c0:9e:c5:5a:59:10:92:b4:5e:7b:ac:0b:2c:de:8d:21: 99:e3:e1:27:40:08:26:34:81:3a:ab:77:2c:d3:f4:8d:fb:7c: 18:f7:61:93:44:91:96:0e:ba:09:58:bd:ce:fa:81:cc:c3:2d: 40:01:d9:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ+mCOUVq6J7jJybzRuVg9xy2ISowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM3MjA2RENCMUI4MDM0QTQ4NUM5MjE2MUIyRTJDNzY2 Mjc4MEI3RjAeFw0yNTA1MDcxMzQ2MjlaFw0yNTA1MTAxNzE1MjlaMDMxMTAvBgNV BAMTKEI0M0NFM0UzRjhCQzg4MUFEMUVBMkIwRjY2OUZCMzY4RTM5MDhENEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC5AJ7lcWbw6LvztWi6pt/XPww Xfd/jn6VRI4tHcXd2k673dsPGVCt8MIUOUevtmjFAPUbIcbQ+OYFllCjFyPkB342 BZhZhXVO4PyCdsNh5SA6iPQ0mq+WlvicxCqD4UvSfbmOHjdZ5h9OpocUE1ZpRIGR z0IQhD2CTxk8lgQlCLt33t5t0iShsO0Nk+w8yvBGFvr+ALqyqACACjPMT6mGhccA qKBc6Eq39Zy2VChQlbngmP7BoBT4euOHjArjY9Fw/f9f4EaWnbg4/5KFIA04dOg1 qQAmf+1bCTI7r4YNouOjr3mNl6JkIX9qZ6OM1QR7CgJrbZfCe52L8Ypelg19AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtDzj4/i8iBrR6isPZp+zaOOQjU4wHwYDVR0j BBgwFoAUXHIG3LG4A0pIXJIWGy4sdmJ4C38wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZGRiYjc5Yy05ZWEyLTQ3ZjAtYjQ1Zi0xODE2NjUwYmEyM2YvMC81QzcyMDZEQ0Ix QjgwMzRBNDg1QzkyMTYxQjJFMkM3NjYyNzgwQjdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUM3MjA2RENCMUI4MDM0QTQ4NUM5MjE2MUIyRTJDNzY2Mjc4 MEI3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2RkYmI3OWMtOWVhMi00N2YwLWI0 NWYtMTgxNjY1MGJhMjNmLzAvNUM3MjA2RENCMUI4MDM0QTQ4NUM5MjE2MUIyRTJD NzY2Mjc4MEI3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGYihYSl57bwS6Rr20u4rDIHusObhIQXt32m 0pCn4wjS+vHHGHqf1t6dK8RF2FyTABlKDABXFZhvbo49kaTJ5y/gIQav64POn5VO 7PQZC77Fo/Zdfi91N2G+wcEwbGDgomoEn4e9oidWPGtmxiXBFVFbD88Ur/kO5MCW utmmvltxRYZAQZ9Gg3icijvZTlQTwtUI0aM3cX7m1M5K7dRQnhhnVbEUvdkLWM0h H+JWYJjScPxgs+xz88NpSD0nQzSdIrexl2EgETU+wJ7FWlkQkrRee6wLLN6NIZnj 4SdACCY0gTqrdyzT9I37fBj3YZNEkZYOuglYvc76gczDLUAB2VQ= -----END CERTIFICATE-----Generated at Thu May 8 15:17:41 2025 by rpki-client