$ rpki-client -vvf repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft File: B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft (raw, json) Hash identifier: TyndF1wQyCY0zPqnRN7RbP/Gh0Ms9lK2FoKVA4sRfyg= Subject key identifier: 61:4B:FD:DD:26:BE:A2:A0:5B:6D:A9:1D:BC:AE:BE:86:B3:C3:71:E9 Authority key identifier: B5:AB:E8:6E:BB:2A:02:C5:83:92:74:9A:92:FE:A6:8F:BA:FC:5C:46 Certificate issuer: /CN=B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46 Certificate serial: 6E2BC8C2DC3FD46D4734BB9BBC0A1221CF3BA6AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft Manifest number: BF Signing time: Fri 09 May 2025 03:30:01 +0000 Manifest this update: Fri 09 May 2025 03:25:01 +0000 Manifest next update: Mon 12 May 2025 07:16:01 +0000 Files and hashes: 1: 3135372e32302e33362e302f32332d3233203d3e20313430343730.roa (hash: RHyzhtAgplvJvuCV7fIv62s8sggnnXtZnxO1BaRf1q4=) 2: 3135372e32302e33362e302f32342d3234203d3e20313430343730.roa (hash: GpC0yHwXQ5lbHiYUnaLrCvfX3lNPHMkYotv+J++l4RE=) 3: B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.crl (hash: 3wJrTxcH4pAg1slHRCLUkrdkvF8QzsxHtM9ZwHDbvcg=) 4: 3135372e32302e33372e302f32342d3234203d3e20313430343730.roa (hash: xOyiM0EcaCp+QM0RHt1mndAJkrKKxlB6dJJDF4X/v7Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.crl rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 07:16:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:2b:c8:c2:dc:3f:d4:6d:47:34:bb:9b:bc:0a:12:21:cf:3b:a6:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46 Validity Not Before: May 9 03:25:01 2025 GMT Not After : May 12 07:16:01 2025 GMT Subject: CN=614BFDDD26BEA2A05B6DA91DBCAEBE86B3C371E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2e:0a:d0:7b:d1:15:43:7c:e9:3d:8a:0e:d6: bf:b6:4e:77:aa:6e:20:c1:05:57:a8:2c:8d:b3:a0: d1:bf:ae:f3:00:2c:84:7c:a0:52:c3:4c:fa:d7:c6: a5:91:d9:f7:0d:76:8c:d7:ce:d5:30:a0:58:d3:db: 77:2a:ec:3d:c5:cf:0b:7e:86:11:f4:fd:27:d0:33: 0b:1c:2a:27:17:d9:69:2e:8c:78:11:89:44:2f:85: 52:8a:a5:e0:ec:58:be:b8:da:92:12:95:35:34:4a: 0a:30:a1:62:d0:a6:f6:79:f9:4d:da:13:1d:9a:6d: e8:20:1f:d9:9d:78:8d:44:c3:23:a8:aa:51:4e:fd: 1c:e2:4b:4a:e1:39:fa:d3:a6:13:4e:79:46:84:fa: 31:95:96:4a:d0:4f:bb:df:2c:29:3d:ed:ac:88:5b: fc:b4:76:fd:ef:c9:92:85:b0:e9:a0:7e:17:52:c8: f3:27:8d:59:ce:ed:79:fc:77:fc:5f:73:b8:62:9e: 42:d2:b9:2b:1e:d4:60:59:8f:12:e7:c2:61:82:60: 4f:d7:12:16:39:8b:6f:ec:02:5b:49:7b:9a:78:0e: 77:64:46:49:cb:63:8a:f0:20:24:a6:34:d8:c9:03: f2:e6:0a:bf:fd:91:26:22:78:52:de:cf:84:a1:e3: ed:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:4B:FD:DD:26:BE:A2:A0:5B:6D:A9:1D:BC:AE:BE:86:B3:C3:71:E9 X509v3 Authority Key Identifier: keyid:B5:AB:E8:6E:BB:2A:02:C5:83:92:74:9A:92:FE:A6:8F:BA:FC:5C:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b0bd7d6c-ea5a-4c45-9558-717994ab680e/0/B5ABE86EBB2A02C58392749A92FEA68FBAFC5C46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:4a:3c:86:ee:45:a1:53:74:3f:c4:ba:ba:b1:c7:e0:7e:af: 1f:cd:7d:b6:b7:81:88:d7:16:67:5a:9b:29:d3:36:c6:2b:18: 66:90:73:ba:0c:1b:97:86:f6:ac:86:11:20:af:64:7c:2f:11: 47:6a:0a:28:4c:d6:6e:e0:50:94:e1:73:5e:45:e6:a5:0f:32: a3:5d:e3:56:78:04:5f:b7:9c:e0:36:ad:d9:36:54:10:0a:82: 07:6b:50:db:25:b1:f7:6a:f5:b9:3b:83:9c:f4:ae:56:3e:f9: a3:aa:37:61:e9:b3:ff:c8:1f:55:50:a6:44:28:a9:96:1c:49: fa:cd:99:e7:87:df:94:27:a7:26:41:a2:1b:11:b3:34:42:2a: 59:b7:af:e5:46:50:a6:1e:da:d4:9a:2d:b0:f5:4c:c9:6a:45: 3d:15:9b:d7:1b:42:c8:f5:b3:31:32:19:8f:3b:e7:27:0a:47: 7e:99:02:64:1d:8c:77:b1:66:4a:8f:26:e9:e7:e3:ac:92:15: 6c:e3:75:1d:cb:b8:2c:23:25:47:75:be:eb:d1:9c:d0:1b:45: 14:53:a6:e9:8e:f4:7f:f8:0c:4c:25:98:07:0b:71:16:c3:0b: 1b:e5:1d:1b:92:4a:b5:86:c5:8e:34:bd:4f:ef:85:63:87:89: f8:b0:79:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbivIwtw/1G1HNLubvAoSIc87pqswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjVBQkU4NkVCQjJBMDJDNTgzOTI3NDlBOTJGRUE2OEZC QUZDNUM0NjAeFw0yNTA1MDkwMzI1MDFaFw0yNTA1MTIwNzE2MDFaMDMxMTAvBgNV BAMTKDYxNEJGREREMjZCRUEyQTA1QjZEQTkxREJDQUVCRTg2QjNDMzcxRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6LgrQe9EVQ3zpPYoO1r+2Tneq biDBBVeoLI2zoNG/rvMALIR8oFLDTPrXxqWR2fcNdozXztUwoFjT23cq7D3Fzwt+ hhH0/SfQMwscKicX2WkujHgRiUQvhVKKpeDsWL642pISlTU0SgowoWLQpvZ5+U3a Ex2abeggH9mdeI1EwyOoqlFO/RziS0rhOfrTphNOeUaE+jGVlkrQT7vfLCk97ayI W/y0dv3vyZKFsOmgfhdSyPMnjVnO7Xn8d/xfc7hinkLSuSse1GBZjxLnwmGCYE/X EhY5i2/sAltJe5p4DndkRknLY4rwICSmNNjJA/LmCr/9kSYieFLez4Sh4+1hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYUv93Sa+oqBbbakdvK6+hrPDcekwHwYDVR0j BBgwFoAUtavobrsqAsWDknSakv6mj7r8XEYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MGJkN2Q2Yy1lYTVhLTRjNDUtOTU1OC03MTc5OTRhYjY4MGUvMC9CNUFCRTg2RUJC MkEwMkM1ODM5Mjc0OUE5MkZFQTY4RkJBRkM1QzQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjVBQkU4NkVCQjJBMDJDNTgzOTI3NDlBOTJGRUE2OEZCQUZD NUM0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjBiZDdkNmMtZWE1YS00YzQ1LTk1 NTgtNzE3OTk0YWI2ODBlLzAvQjVBQkU4NkVCQjJBMDJDNTgzOTI3NDlBOTJGRUE2 OEZCQUZDNUM0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFxKPIbuRaFTdD/Eurqxx+B+rx/Nfba3gYjX FmdamynTNsYrGGaQc7oMG5eG9qyGESCvZHwvEUdqCihM1m7gUJThc15F5qUPMqNd 41Z4BF+3nOA2rdk2VBAKggdrUNslsfdq9bk7g5z0rlY++aOqN2Hps//IH1VQpkQo qZYcSfrNmeeH35QnpyZBohsRszRCKlm3r+VGUKYe2tSaLbD1TMlqRT0Vm9cbQsj1 szEyGY875ycKR36ZAmQdjHexZkqPJunn46ySFWzjdR3LuCwjJUd1vuvRnNAbRRRT pumO9H/4DEwlmAcLcRbDCxvlHRuSSrWGxY40vU/vhWOHifiwecE= -----END CERTIFICATE-----Generated at Fri May 9 05:23:12 2025 by rpki-client