$ rpki-client -vvf repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.mft File: 535C0FE8EE7BE7E1C8897B031858C36344038072.mft (raw, json) Hash identifier: oQ8zgUz6FLvMoqdFYV5kbYrX9G4KLK9Tsb+PBS6pdzE= Subject key identifier: 9B:70:1C:C6:9E:B3:62:6C:86:A9:E1:31:A2:37:58:DF:21:C8:9B:CD Authority key identifier: 53:5C:0F:E8:EE:7B:E7:E1:C8:89:7B:03:18:58:C3:63:44:03:80:72 Certificate issuer: /CN=535C0FE8EE7BE7E1C8897B031858C36344038072 Certificate serial: 797DF964E9D9526BD4127B64CA5DBEB8CC3F7963 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535C0FE8EE7BE7E1C8897B031858C36344038072.cer Subject info access: rsync://repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.mft Manifest number: 61 Signing time: Sat 10 May 2025 04:50:50 +0000 Manifest this update: Sat 10 May 2025 04:45:50 +0000 Manifest next update: Tue 13 May 2025 08:10:50 +0000 Files and hashes: 1: 3130332e3137392e31332e302f32342d3234203d3e20313439333339.roa (hash: RrMbT80FUemGe695AxppDWAP2LkCS0fiZaNilGLH1lg=) 2: 535C0FE8EE7BE7E1C8897B031858C36344038072.crl (hash: 2hDor/IlU4HeSGaH0IN6g99xcYnAT8FYnc20CUnwtLM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.crl rsync://repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535C0FE8EE7BE7E1C8897B031858C36344038072.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 08:10:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:7d:f9:64:e9:d9:52:6b:d4:12:7b:64:ca:5d:be:b8:cc:3f:79:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=535C0FE8EE7BE7E1C8897B031858C36344038072 Validity Not Before: May 10 04:45:50 2025 GMT Not After : May 13 08:10:50 2025 GMT Subject: CN=9B701CC69EB3626C86A9E131A23758DF21C89BCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b2:5b:60:b2:b3:9b:7a:ba:a2:25:c9:c6:48: ac:29:ab:0a:91:77:fd:30:ec:74:9d:3a:94:30:b8: b2:af:18:52:cb:e6:4e:b9:12:88:68:ee:6e:e8:71: ba:74:71:6c:ca:6b:a6:35:b3:a9:b3:48:61:56:05: 91:dc:d4:62:bf:2f:8e:c6:33:c9:30:58:7d:62:9f: 9b:5a:66:1d:b3:2a:32:bb:eb:2b:4d:90:5f:26:68: 70:f2:0c:1a:23:bc:90:3a:86:af:ea:e6:81:6a:02: 83:31:a1:08:f7:07:e1:45:f1:af:bd:55:6a:79:45: 51:46:5d:3c:af:75:5a:9b:e7:28:6c:27:f2:43:97: f0:d9:8d:3a:e5:a6:f0:e0:0a:31:20:b4:d9:c3:b2: da:51:19:d9:05:ce:b1:1d:45:a7:8b:fa:1b:fb:3a: 1b:6b:f1:fb:fe:6c:ca:7d:de:07:96:68:49:30:61: 26:b9:93:20:2c:ec:95:53:15:b6:ca:8b:c6:04:4e: 88:15:9a:73:85:b6:8f:5c:d0:46:b4:bd:81:79:75: b9:44:34:d2:a4:b6:31:64:05:77:15:9b:b6:42:12: 18:36:81:2e:f2:f4:90:ca:0d:58:1d:aa:7a:cf:d7: 9d:a3:d4:00:35:d8:b0:8a:55:3e:59:6e:6c:f6:48: 84:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:70:1C:C6:9E:B3:62:6C:86:A9:E1:31:A2:37:58:DF:21:C8:9B:CD X509v3 Authority Key Identifier: keyid:53:5C:0F:E8:EE:7B:E7:E1:C8:89:7B:03:18:58:C3:63:44:03:80:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/535C0FE8EE7BE7E1C8897B031858C36344038072.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/93454d0b-1ad7-41ed-8e40-ccb66643acf0/0/535C0FE8EE7BE7E1C8897B031858C36344038072.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:0d:0f:0b:04:9b:ba:1a:b6:4c:df:32:ff:26:22:62:10:ae: 1f:db:12:73:bc:e1:7c:57:3e:40:29:79:5f:c2:b0:c4:8c:a1: 2a:f9:28:70:17:b9:71:8d:50:d2:04:f9:a4:a2:dc:d4:62:c4: f0:b7:60:0d:54:0b:74:27:62:f9:2e:a4:7c:47:7f:21:47:ca: 9c:7e:57:6f:9e:57:c0:a7:d8:b4:3d:e1:e4:60:98:d6:9d:3f: fc:e6:02:a7:ae:ae:a5:51:2e:95:be:2a:86:1a:35:6b:8b:63: bc:76:8c:30:65:59:92:1e:c7:b3:5f:01:41:3c:31:af:1a:5f: 53:82:d9:de:2a:14:f4:29:eb:18:27:91:50:43:38:c0:a7:3a: cd:34:fd:99:99:d1:81:77:94:5f:26:c4:31:75:72:0a:f3:b7: 27:55:4c:c4:37:f6:8f:01:ac:d3:53:c4:5a:15:58:8e:2b:8a: 4c:2f:e2:de:89:0f:c9:c4:d6:5a:d9:ec:07:b4:1b:43:03:40: a6:39:d6:fe:07:b6:1d:6e:ef:29:df:6c:11:00:ff:78:50:0f: 40:85:fb:37:88:e6:b0:e8:43:cd:3a:71:26:1d:bd:04:5f:c8: e2:2f:86:ad:27:ce:77:03:8c:2e:87:0f:d1:aa:a2:5c:01:23: 38:b4:9b:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeX35ZOnZUmvUEntkyl2+uMw/eWMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTM1QzBGRThFRTdCRTdFMUM4ODk3QjAzMTg1OEMzNjM0 NDAzODA3MjAeFw0yNTA1MTAwNDQ1NTBaFw0yNTA1MTMwODEwNTBaMDMxMTAvBgNV BAMTKDlCNzAxQ0M2OUVCMzYyNkM4NkE5RTEzMUEyMzc1OERGMjFDODlCQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzsltgsrOberqiJcnGSKwpqwqR d/0w7HSdOpQwuLKvGFLL5k65Eoho7m7ocbp0cWzKa6Y1s6mzSGFWBZHc1GK/L47G M8kwWH1in5taZh2zKjK76ytNkF8maHDyDBojvJA6hq/q5oFqAoMxoQj3B+FF8a+9 VWp5RVFGXTyvdVqb5yhsJ/JDl/DZjTrlpvDgCjEgtNnDstpRGdkFzrEdRaeL+hv7 Ohtr8fv+bMp93geWaEkwYSa5kyAs7JVTFbbKi8YETogVmnOFto9c0Ea0vYF5dblE NNKktjFkBXcVm7ZCEhg2gS7y9JDKDVgdqnrP152j1AA12LCKVT5Zbmz2SITHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm3Acxp6zYmyGqeExojdY3yHIm80wHwYDVR0j BBgwFoAUU1wP6O575+HIiXsDGFjDY0QDgHIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzQ1NGQwYi0xYWQ3LTQxZWQtOGU0MC1jY2I2NjY0M2FjZjAvMC81MzVDMEZFOEVF N0JFN0UxQzg4OTdCMDMxODU4QzM2MzQ0MDM4MDcyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTM1QzBGRThFRTdCRTdFMUM4ODk3QjAzMTg1OEMzNjM0NDAz ODA3Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTM0NTRkMGItMWFkNy00MWVkLThl NDAtY2NiNjY2NDNhY2YwLzAvNTM1QzBGRThFRTdCRTdFMUM4ODk3QjAzMTg1OEMz NjM0NDAzODA3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAkNDwsEm7oatkzfMv8mImIQrh/bEnO84XxX PkApeV/CsMSMoSr5KHAXuXGNUNIE+aSi3NRixPC3YA1UC3QnYvkupHxHfyFHypx+ V2+eV8Cn2LQ94eRgmNadP/zmAqeurqVRLpW+KoYaNWuLY7x2jDBlWZIex7NfAUE8 Ma8aX1OC2d4qFPQp6xgnkVBDOMCnOs00/ZmZ0YF3lF8mxDF1cgrztydVTMQ39o8B rNNTxFoVWI4rikwv4t6JD8nE1lrZ7Ae0G0MDQKY51v4Hth1u7ynfbBEA/3hQD0CF +zeI5rDoQ806cSYdvQRfyOIvhq0nzncDjC6HD9GqolwBIzi0myw= -----END CERTIFICATE-----Generated at Sun May 11 08:13:17 2025 by rpki-client