$ rpki-client -vvf repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft File: 5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft (raw, json) Hash identifier: Hbn5xlX20ws6gh7Uz7jlDKXgR01ypMZ9L/9o3r5zncg= Subject key identifier: 90:C3:2B:4A:A9:A1:7F:8A:E9:35:B4:E4:74:2D:51:45:86:1B:2C:45 Authority key identifier: 57:87:AD:66:59:EA:8A:5E:40:18:87:6F:5F:9D:BD:9A:AA:F9:CA:1D Certificate issuer: /CN=5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D Certificate serial: 6A6C0CCF6501B5991025201A63BFA72E8C210D64 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft Manifest number: 01AA Signing time: Wed 07 May 2025 02:01:45 +0000 Manifest this update: Wed 07 May 2025 01:56:45 +0000 Manifest next update: Sat 10 May 2025 03:13:45 +0000 Files and hashes: 1: 323030313a6466323a663130303a3a2f34382d3438203d3e20313336383632.roa (hash: ECBhF+e4+If0A3tMP/p9517WUpUqU+SxVkyIhiuFLnc=) 2: 3130332e3130322e3235302e302f32342d3234203d3e20313336383632.roa (hash: SJWCctw3wDy04eyr8uGtaxTxeDcgqn25/ejSSAcBCus=) 3: 5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.crl (hash: OYvvCn0wYqtYg2hLMQRQl/Vt/egCW967kPerbfK1/4s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.crl rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 03:13:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:6c:0c:cf:65:01:b5:99:10:25:20:1a:63:bf:a7:2e:8c:21:0d:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D Validity Not Before: May 7 01:56:45 2025 GMT Not After : May 10 03:13:45 2025 GMT Subject: CN=90C32B4AA9A17F8AE935B4E4742D5145861B2C45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:de:32:5c:9e:2b:18:cc:98:4c:f3:7a:62:b0: f6:d6:a5:24:89:84:28:68:38:6e:19:64:2e:79:40: 6b:00:88:f4:fc:67:1c:b1:7c:03:0b:ca:78:4d:83: 6c:3f:d7:95:11:b8:4b:e3:14:d3:5c:50:b7:ee:ec: 8c:1a:da:57:6a:6c:5c:20:5d:c9:b8:22:48:ea:04: 60:8f:e5:bd:d3:3e:72:14:89:02:a2:32:92:33:ca: 45:bd:76:0b:ee:32:e2:75:42:90:a2:72:f1:a9:a7: 3b:00:9d:17:d4:57:28:c9:8b:90:7a:d1:ad:c3:73: 92:98:62:ad:b5:db:2d:cc:99:b0:8b:62:05:12:28: 70:bf:37:27:54:b1:02:00:05:c0:96:dc:88:21:15: e0:6e:f4:01:36:2d:c2:ab:4d:a5:5c:0e:f8:02:b5: 72:bc:2a:d8:a6:5a:d7:a8:df:79:bc:c6:bd:a7:4b: e7:24:37:63:4e:6a:e7:f7:e3:0a:60:6f:2f:57:f7: a2:cf:0f:81:00:01:2e:10:b3:e3:fa:3a:fc:e6:2f: d2:ca:70:b9:02:de:e5:94:04:9f:c9:16:b0:49:6c: 9b:de:0a:3f:47:10:8a:fa:bb:4a:a5:1f:fd:6e:f8: 10:2b:84:33:e0:39:1b:07:a2:5f:00:c6:fa:46:cc: b0:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:C3:2B:4A:A9:A1:7F:8A:E9:35:B4:E4:74:2D:51:45:86:1B:2C:45 X509v3 Authority Key Identifier: keyid:57:87:AD:66:59:EA:8A:5E:40:18:87:6F:5F:9D:BD:9A:AA:F9:CA:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5b8e774-1683-456d-bbc0-343225f17f4c/0/5787AD6659EA8A5E4018876F5F9DBD9AAAF9CA1D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:a4:1a:30:a0:2a:c6:f2:7b:b3:cd:f6:fb:37:79:f7:7f:49: 7e:79:0c:03:4b:68:1c:98:79:0e:fe:7f:5f:70:ab:e4:ee:23: 1f:c5:42:93:8b:18:86:8d:d3:85:2e:0b:1b:1f:d5:15:07:60: dd:32:52:06:c7:f1:b5:bd:bf:5b:d3:de:02:ac:72:0b:5f:a9: 4c:0e:c2:e5:d0:ba:fd:1d:91:f6:c7:d9:36:1c:5e:fe:62:80: a7:9f:28:9a:db:35:73:55:b2:9d:7b:d5:5d:d5:7b:a2:33:0c: 52:3c:f4:53:98:e2:6a:6c:94:7e:8d:5a:19:2c:2d:f9:bb:be: 1c:0a:29:95:5a:e5:8b:82:2f:c8:9f:0b:c7:42:94:d6:76:8f: 7b:0d:17:a5:40:d5:71:57:f3:10:9a:84:37:47:fa:bb:71:6b: 73:97:28:89:7f:d9:4e:d0:0a:4d:91:a6:b4:34:f1:a3:27:2e: 98:93:24:82:bc:c4:e2:d3:ff:13:c6:60:02:76:3a:2d:c8:48: 1f:5c:70:5e:b1:f0:4e:af:88:56:4d:4e:8d:0f:a7:58:0e:ff: 3f:b0:50:35:34:02:6e:6c:5b:9c:c2:e5:70:28:d0:05:a0:26: 05:51:dd:66:f4:ce:6c:f4:35:af:10:c2:05:20:82:eb:cf:f4: 4a:c5:b0:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUamwMz2UBtZkQJSAaY7+nLowhDWQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTc4N0FENjY1OUVBOEE1RTQwMTg4NzZGNUY5REJEOUFB QUY5Q0ExRDAeFw0yNTA1MDcwMTU2NDVaFw0yNTA1MTAwMzEzNDVaMDMxMTAvBgNV BAMTKDkwQzMyQjRBQTlBMTdGOEFFOTM1QjRFNDc0MkQ1MTQ1ODYxQjJDNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE3jJcnisYzJhM83pisPbWpSSJ hChoOG4ZZC55QGsAiPT8ZxyxfAMLynhNg2w/15URuEvjFNNcULfu7Iwa2ldqbFwg Xcm4IkjqBGCP5b3TPnIUiQKiMpIzykW9dgvuMuJ1QpCicvGppzsAnRfUVyjJi5B6 0a3Dc5KYYq212y3MmbCLYgUSKHC/NydUsQIABcCW3IghFeBu9AE2LcKrTaVcDvgC tXK8KtimWteo33m8xr2nS+ckN2NOauf34wpgby9X96LPD4EAAS4Qs+P6OvzmL9LK cLkC3uWUBJ/JFrBJbJveCj9HEIr6u0qlH/1u+BArhDPgORsHol8AxvpGzLA7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkMMrSqmhf4rpNbTkdC1RRYYbLEUwHwYDVR0j BBgwFoAUV4etZlnqil5AGIdvX529mqr5yh0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NWI4ZTc3NC0xNjgzLTQ1NmQtYmJjMC0zNDMyMjVmMTdmNGMvMC81Nzg3QUQ2NjU5 RUE4QTVFNDAxODg3NkY1RjlEQkQ5QUFBRjlDQTFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTc4N0FENjY1OUVBOEE1RTQwMTg4NzZGNUY5REJEOUFBQUY5 Q0ExRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTViOGU3NzQtMTY4My00NTZkLWJi YzAtMzQzMjI1ZjE3ZjRjLzAvNTc4N0FENjY1OUVBOEE1RTQwMTg4NzZGNUY5REJE OUFBQUY5Q0ExRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHekGjCgKsbye7PN9vs3efd/SX55DANLaByY eQ7+f19wq+TuIx/FQpOLGIaN04UuCxsf1RUHYN0yUgbH8bW9v1vT3gKscgtfqUwO wuXQuv0dkfbH2TYcXv5igKefKJrbNXNVsp171V3Ve6IzDFI89FOY4mpslH6NWhks Lfm7vhwKKZVa5YuCL8ifC8dClNZ2j3sNF6VA1XFX8xCahDdH+rtxa3OXKIl/2U7Q Ck2RprQ08aMnLpiTJIK8xOLT/xPGYAJ2Oi3ISB9ccF6x8E6viFZNTo0Pp1gO/z+w UDU0Am5sW5zC5XAo0AWgJgVR3Wb0zmz0Na8QwgUgguvP9ErFsPs= -----END CERTIFICATE-----Generated at Wed May 7 23:42:38 2025 by rpki-client