$ rpki-client -vvf repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft File: 5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft (raw, json) Hash identifier: fS9tF1v5+y/pXl+aXTxjKruMIMQgTxt9u3zCD0lZ0mo= Subject key identifier: B8:98:FE:4F:E5:30:47:16:CF:0F:32:AF:A9:DF:F9:EA:A0:F9:40:70 Authority key identifier: 5C:9F:B8:0D:F9:C5:DB:E8:91:6F:73:49:A5:DD:8E:06:99:EA:3B:7A Certificate issuer: /CN=5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A Certificate serial: 0E1A964A7B192DF645B6C806A1F3A75E859A643F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft Manifest number: 021B Signing time: Sun 11 May 2025 08:11:46 +0000 Manifest this update: Sun 11 May 2025 08:06:46 +0000 Manifest next update: Wed 14 May 2025 11:46:46 +0000 Files and hashes: 1: 5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.crl (hash: dbvxiexBD32ddGfkj9uaqVwHSs43pVKX31/Gjz5ElZ4=) 2: 3130332e3138312e3138322e302f32342d3234203d3e20313439333931.roa (hash: /YMKURBm9TwSTxyzf2Kmx28ZIOeUEZGW5o7BX+kYPo0=) 3: 3130332e3138312e3138332e302f32342d3234203d3e20313439333931.roa (hash: I97S8ZLukPT3OvIAQZGbDvFdPCncrJKV5+kzzspVF2Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.crl rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 11:46:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:1a:96:4a:7b:19:2d:f6:45:b6:c8:06:a1:f3:a7:5e:85:9a:64:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A Validity Not Before: May 11 08:06:46 2025 GMT Not After : May 14 11:46:46 2025 GMT Subject: CN=B898FE4FE5304716CF0F32AFA9DFF9EAA0F94070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:11:63:e0:a0:c0:53:70:a2:d5:4b:37:90:87: e2:3d:0b:4d:c7:10:63:d5:72:ff:5d:8a:c2:7c:7b: 0b:e4:1d:39:f8:18:86:59:83:c8:20:f0:8f:1d:2e: e3:db:89:21:b8:ee:47:c0:11:3b:f4:ef:8b:de:3d: c4:47:3c:aa:cb:0d:2f:7f:9a:29:d2:58:fc:53:13: f9:65:f5:08:94:83:ad:96:84:a6:f5:7f:b7:b1:b2: 1f:61:5d:e6:61:14:3f:3d:0b:92:92:7d:a2:63:b0: 29:de:49:e1:44:66:ac:fd:46:db:8f:2e:ed:38:dc: 1d:13:a3:78:69:c9:58:5c:34:80:34:86:a1:4d:b5: 35:2d:50:6b:f4:49:2b:c7:ab:7f:d7:99:51:3e:5c: 40:01:b9:f2:78:dd:4d:19:36:91:90:16:3b:c1:24: e4:c2:c1:05:01:b5:9a:41:45:70:de:93:5e:75:dd: 7e:6a:5d:db:fe:9c:90:be:3a:12:f8:d7:14:32:36: c1:d6:b7:59:84:f2:d9:d7:6b:d2:bb:a8:c8:b3:7c: 34:7f:10:7c:0f:b1:34:39:50:91:72:a4:c7:05:f7: 9d:35:10:fd:ee:c6:6e:b6:36:dd:60:a4:3f:d5:30: d9:49:2b:37:6c:f0:06:16:d1:97:6a:2d:de:69:2e: e5:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:98:FE:4F:E5:30:47:16:CF:0F:32:AF:A9:DF:F9:EA:A0:F9:40:70 X509v3 Authority Key Identifier: keyid:5C:9F:B8:0D:F9:C5:DB:E8:91:6F:73:49:A5:DD:8E:06:99:EA:3B:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:63:07:d9:65:91:fe:4b:c2:7d:56:ca:d7:1c:dc:a1:41:0a: 6c:d7:6a:ca:5f:66:14:1a:85:cc:fa:ec:80:96:22:63:0d:6d: 1b:72:e3:16:7d:74:4c:f4:5f:ce:1c:76:21:80:e0:ff:36:27: d6:ee:bb:0d:e5:ac:24:b7:3f:5c:17:c5:68:12:56:e5:aa:e4: 22:27:ca:d5:7a:19:81:60:d6:13:47:b8:64:72:05:6c:de:c1: b8:8c:0c:7a:c2:70:93:97:6a:41:dd:10:04:24:06:ab:54:37: b2:80:22:a8:7f:cb:a1:39:2e:39:d0:17:61:cb:14:e6:1f:9f: 8f:59:5e:62:aa:9d:d0:e3:76:22:92:86:29:4f:77:c8:e3:8d: 60:6d:6a:45:c9:db:62:04:f9:1a:96:a1:e3:a3:6a:e2:03:83: 9b:21:a0:68:b9:36:bb:53:b2:51:48:85:51:48:9b:90:0f:4d: 5d:f3:fd:c3:d1:71:61:6f:d5:5a:51:88:a7:db:f2:8b:32:6b: d2:22:f6:e8:bb:b9:1c:4d:cc:1f:8f:93:b8:e5:0c:d5:85:15: 8b:31:05:82:86:b5:2f:6d:25:ed:50:14:02:2e:c7:b2:cf:cd: a4:69:7a:f8:39:b5:3c:44:9d:20:eb:03:fe:19:5f:5f:d6:11: c7:fe:7d:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDhqWSnsZLfZFtsgGofOnXoWaZD8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUM5RkI4MERGOUM1REJFODkxNkY3MzQ5QTVERDhFMDY5 OUVBM0I3QTAeFw0yNTA1MTEwODA2NDZaFw0yNTA1MTQxMTQ2NDZaMDMxMTAvBgNV BAMTKEI4OThGRTRGRTUzMDQ3MTZDRjBGMzJBRkE5REZGOUVBQTBGOTQwNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0EWPgoMBTcKLVSzeQh+I9C03H EGPVcv9disJ8ewvkHTn4GIZZg8gg8I8dLuPbiSG47kfAETv074vePcRHPKrLDS9/ minSWPxTE/ll9QiUg62WhKb1f7exsh9hXeZhFD89C5KSfaJjsCneSeFEZqz9RtuP Lu043B0To3hpyVhcNIA0hqFNtTUtUGv0SSvHq3/XmVE+XEABufJ43U0ZNpGQFjvB JOTCwQUBtZpBRXDek1513X5qXdv+nJC+OhL41xQyNsHWt1mE8tnXa9K7qMizfDR/ EHwPsTQ5UJFypMcF9501EP3uxm62Nt1gpD/VMNlJKzds8AYW0ZdqLd5pLuV7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuJj+T+UwRxbPDzKvqd/56qD5QHAwHwYDVR0j BBgwFoAUXJ+4DfnF2+iRb3NJpd2OBpnqO3owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MmMyZjQ4ZC01MTg1LTQxZjktYjZkMi0yMjhmYmNhYzRlMjkvMC81QzlGQjgwREY5 QzVEQkU4OTE2RjczNDlBNUREOEUwNjk5RUEzQjdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUM5RkI4MERGOUM1REJFODkxNkY3MzQ5QTVERDhFMDY5OUVB M0I3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODJjMmY0OGQtNTE4NS00MWY5LWI2 ZDItMjI4ZmJjYWM0ZTI5LzAvNUM5RkI4MERGOUM1REJFODkxNkY3MzQ5QTVERDhF MDY5OUVBM0I3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKRjB9llkf5Lwn1Wytcc3KFBCmzXaspfZhQa hcz67ICWImMNbRty4xZ9dEz0X84cdiGA4P82J9buuw3lrCS3P1wXxWgSVuWq5CIn ytV6GYFg1hNHuGRyBWzewbiMDHrCcJOXakHdEAQkBqtUN7KAIqh/y6E5LjnQF2HL FOYfn49ZXmKqndDjdiKShilPd8jjjWBtakXJ22IE+RqWoeOjauIDg5shoGi5NrtT slFIhVFIm5APTV3z/cPRcWFv1VpRiKfb8osya9Ii9ui7uRxNzB+Pk7jlDNWFFYsx BYKGtS9tJe1QFAIux7LPzaRpevg5tTxEnSDrA/4ZX1/WEcf+fRE= -----END CERTIFICATE-----Generated at Mon May 12 11:05:13 2025 by rpki-client