$ rpki-client -vvf repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft File: 5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft (raw, json) Hash identifier: kx6w1rVp7cF27DbrAVfWl7dnEx8RKaBA8pnSY4lZYgY= Subject key identifier: BF:13:80:D3:CE:2C:DE:68:00:E0:41:A5:19:94:40:7D:EF:73:C4:EE Authority key identifier: 5F:CD:FA:AA:B8:49:05:86:8D:4F:BD:BE:71:8B:94:95:01:D9:7D:C4 Certificate issuer: /CN=5FCDFAAAB84905868D4FBDBE718B949501D97DC4 Certificate serial: 570CB69DE62E4D6CDFB5046EB9D7D88A112C3C3E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft Manifest number: 04D1 Signing time: Tue 06 May 2025 20:32:27 +0000 Manifest this update: Tue 06 May 2025 20:27:27 +0000 Manifest next update: Sat 10 May 2025 05:21:27 +0000 Files and hashes: 1: 3130332e3134382e3131302e302f32332d3234203d3e2039333236.roa (hash: Ckdihridi5YgkHAHnE1gWSgdRJtPymHKAE3vS9CEVM0=) 2: 5FCDFAAAB84905868D4FBDBE718B949501D97DC4.crl (hash: DNe9yoNLDnX7Qls4Y6olEEzYxWzE91s50e6jgMgPAZ8=) 3: 3130332e3134382e3131302e302f32342d3234203d3e203436303332.roa (hash: gvdTawMjuZSpigUwAj2qBDjrcCcWCvIuD4DqGYmqvk4=) 4: 3130332e3134382e3131312e302f32342d3234203d3e203436303332.roa (hash: rocwRr0NP6Uj0/rSOv/9FOGchYWFwBQRYbTt7bw6igg=) 5: 3130332e3134382e3131302e302f32332d3233203d3e203436303332.roa (hash: NJ0tpUPsc3Bnm5NkUej4AyI75QawVIIptpD8njjI8Rw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.crl rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 05:21:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:0c:b6:9d:e6:2e:4d:6c:df:b5:04:6e:b9:d7:d8:8a:11:2c:3c:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5FCDFAAAB84905868D4FBDBE718B949501D97DC4 Validity Not Before: May 6 20:27:27 2025 GMT Not After : May 10 05:21:27 2025 GMT Subject: CN=BF1380D3CE2CDE6800E041A51994407DEF73C4EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:90:17:70:13:68:6f:8a:2b:bf:3e:3e:c1:fc: 14:08:1c:df:a6:93:ce:51:bb:d1:d1:5f:83:88:61: d8:6b:22:62:77:36:0e:38:b4:04:80:ea:3a:b1:f9: 85:94:3e:be:40:64:85:ab:5c:97:48:33:be:56:4a: e5:81:04:7e:1d:fe:6e:94:d6:60:ea:7d:72:e5:d7: 92:79:9b:02:75:fb:3e:2a:70:fd:3b:3a:7b:e5:3e: 7c:50:d8:5d:ea:35:c8:ef:9c:13:36:c3:e8:03:3d: 98:4b:4a:c7:1d:a2:39:aa:78:03:62:e6:05:4c:da: b6:50:9d:78:e5:56:76:9e:61:6c:db:0b:c6:33:d8: 0a:0d:ec:65:4d:ed:3a:06:01:91:cb:0d:c4:65:51: b4:0e:09:72:c3:72:f1:e3:2b:f0:9b:c4:ab:5f:34: 3a:42:a8:ac:ed:e1:48:71:4d:20:7f:ec:d2:b9:bf: 56:26:1b:a5:58:3c:9e:42:5f:9d:31:40:5e:9a:41: 74:b9:29:24:bb:1a:dc:86:8b:eb:2c:2b:3f:09:e6: aa:d8:1e:79:4c:23:72:3f:81:08:8d:c3:8d:58:73: 52:8f:ea:94:8b:d3:af:0f:46:8f:de:47:77:c0:5f: f2:22:53:f4:6d:37:82:ba:43:4d:f5:59:ae:25:94: ab:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:13:80:D3:CE:2C:DE:68:00:E0:41:A5:19:94:40:7D:EF:73:C4:EE X509v3 Authority Key Identifier: keyid:5F:CD:FA:AA:B8:49:05:86:8D:4F:BD:BE:71:8B:94:95:01:D9:7D:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:c7:e2:93:81:ad:f1:e6:d8:af:4f:5c:45:5b:80:fc:e7:15: 4c:75:28:41:0a:b6:e9:11:1f:e1:fe:23:a6:b1:ab:a5:43:e2: 57:46:e8:1c:02:e0:99:db:1e:a4:7b:46:2e:5b:a4:7d:7e:5b: a3:c0:26:37:17:34:75:1b:42:fd:aa:33:4e:48:75:72:11:5d: f2:0e:77:6c:ac:3b:f1:22:f0:c4:ab:87:35:66:46:61:e8:31: 4e:40:09:62:27:20:71:8e:ea:cb:ce:7a:07:2f:54:4b:09:d4: a3:1e:e7:9d:4c:5a:7a:95:5c:59:5b:24:08:55:b4:31:55:63: 7c:ea:57:dd:3c:4e:15:07:73:07:48:a4:ad:bf:be:1f:85:01: f9:02:c6:c7:d5:54:89:ab:18:ad:7a:3a:43:11:63:ab:6e:0c: 78:af:66:1e:1c:bd:f7:b3:aa:e3:77:f4:82:db:6e:a5:53:75: a7:4c:bc:b3:18:cf:0b:7a:0c:8e:c6:f8:2d:80:14:3d:0e:5f: d7:d2:72:d0:d0:e1:f1:c1:f5:3a:66:ed:55:4c:cc:e4:13:a6: 30:35:14:0d:43:c1:37:4b:08:a2:41:e9:ee:73:d8:28:14:3a: ec:76:71:c7:d2:b2:2a:c6:cb:91:ec:bd:90:9d:cc:d3:e6:89: 41:90:42:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVwy2neYuTWzftQRuudfYihEsPD4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUZDREZBQUFCODQ5MDU4NjhENEZCREJFNzE4Qjk0OTUw MUQ5N0RDNDAeFw0yNTA1MDYyMDI3MjdaFw0yNTA1MTAwNTIxMjdaMDMxMTAvBgNV BAMTKEJGMTM4MEQzQ0UyQ0RFNjgwMEUwNDFBNTE5OTQ0MDdERUY3M0M0RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2kBdwE2hviiu/Pj7B/BQIHN+m k85Ru9HRX4OIYdhrImJ3Ng44tASA6jqx+YWUPr5AZIWrXJdIM75WSuWBBH4d/m6U 1mDqfXLl15J5mwJ1+z4qcP07OnvlPnxQ2F3qNcjvnBM2w+gDPZhLSscdojmqeANi 5gVM2rZQnXjlVnaeYWzbC8Yz2AoN7GVN7ToGAZHLDcRlUbQOCXLDcvHjK/CbxKtf NDpCqKzt4UhxTSB/7NK5v1YmG6VYPJ5CX50xQF6aQXS5KSS7GtyGi+ssKz8J5qrY HnlMI3I/gQiNw41Yc1KP6pSL068PRo/eR3fAX/IiU/RtN4K6Q031Wa4llKvnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvxOA084s3mgA4EGlGZRAfe9zxO4wHwYDVR0j BBgwFoAUX836qrhJBYaNT72+cYuUlQHZfcQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OGY5MjQ0Ny1hY2QzLTQyN2MtYjVlNy1kYjM5MTdmMTg1YzgvMC81RkNERkFBQUI4 NDkwNTg2OEQ0RkJEQkU3MThCOTQ5NTAxRDk3REM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUZDREZBQUFCODQ5MDU4NjhENEZCREJFNzE4Qjk0OTUwMUQ5 N0RDNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOThmOTI0NDctYWNkMy00MjdjLWI1 ZTctZGIzOTE3ZjE4NWM4LzAvNUZDREZBQUFCODQ5MDU4NjhENEZCREJFNzE4Qjk0 OTUwMUQ5N0RDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHnH4pOBrfHm2K9PXEVbgPznFUx1KEEKtukR H+H+I6axq6VD4ldG6BwC4JnbHqR7Ri5bpH1+W6PAJjcXNHUbQv2qM05IdXIRXfIO d2ysO/Ei8MSrhzVmRmHoMU5ACWInIHGO6svOegcvVEsJ1KMe551MWnqVXFlbJAhV tDFVY3zqV908ThUHcwdIpK2/vh+FAfkCxsfVVImrGK16OkMRY6tuDHivZh4cvfez quN39ILbbqVTdadMvLMYzwt6DI7G+C2AFD0OX9fSctDQ4fHB9Tpm7VVMzOQTpjA1 FA1DwTdLCKJB6e5z2CgUOux2ccfSsirGy5HsvZCdzNPmiUGQQmc= -----END CERTIFICATE-----Generated at Thu May 8 20:03:55 2025 by rpki-client