$ rpki-client -vvf repo-rpki.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/556F35148B9935659C1FE70B505B1D8D79838EFA.mft File: 556F35148B9935659C1FE70B505B1D8D79838EFA.mft (raw, json) Hash identifier: k2TW4A401UGMtgPvF+0/B1WZlFW1Xbk5rV0IBnZPVgU= Subject key identifier: ED:BD:6B:1A:FD:84:CC:2B:D5:7E:2F:D9:A4:3A:3D:18:ED:50:83:FC Authority key identifier: 55:6F:35:14:8B:99:35:65:9C:1F:E7:0B:50:5B:1D:8D:79:83:8E:FA Certificate issuer: /CN=556F35148B9935659C1FE70B505B1D8D79838EFA Certificate serial: 4FA6437A775874D4016DA2D6488094D6059B3A3C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/556F35148B9935659C1FE70B505B1D8D79838EFA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/556F35148B9935659C1FE70B505B1D8D79838EFA.mft Manifest number: 0185 Signing time: Wed 14 May 2025 02:11:23 +0000 Manifest this update: Wed 14 May 2025 02:06:23 +0000 Manifest next update: Sat 17 May 2025 10:33:23 +0000 Files and hashes: 1: 3130332e3130312e3139332e302f32342d3234203d3e20313530343638.roa (hash: 1bjKbvUqG5BCn/NVvztyzNwID5OVDvMyI+PwBlSda/M=) 2: 556F35148B9935659C1FE70B505B1D8D79838EFA.crl (hash: 5ogsfTGKSkwR7zzX2S2J8ZIsSzE5Xmb20Dbs27iahqc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/556F35148B9935659C1FE70B505B1D8D79838EFA.crl rsync://repo-rpki.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/556F35148B9935659C1FE70B505B1D8D79838EFA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/556F35148B9935659C1FE70B505B1D8D79838EFA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 10:33:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:a6:43:7a:77:58:74:d4:01:6d:a2:d6:48:80:94:d6:05:9b:3a:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=556F35148B9935659C1FE70B505B1D8D79838EFA Validity Not Before: May 14 02:06:23 2025 GMT Not After : May 17 10:33:23 2025 GMT Subject: CN=EDBD6B1AFD84CC2BD57E2FD9A43A3D18ED5083FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:92:ef:a3:f6:77:57:f2:ca:09:1f:42:87:63: 6c:27:cd:d2:34:19:a5:d6:7b:65:02:d2:8c:e8:11: ba:7d:bf:a1:2b:68:ca:15:dc:c7:bf:f4:4c:d2:35: 79:a7:85:07:72:5b:f7:ad:df:f3:85:76:0f:4b:d4: b2:67:a3:76:e1:75:8f:e7:2b:97:8a:a2:a0:ca:a8: f3:56:92:63:98:25:bc:ab:b0:bc:67:a4:73:a3:d9: 85:35:78:16:a1:07:57:79:39:2f:bc:ee:97:18:0c: 7d:3a:6b:0b:1e:98:6a:7f:a7:93:6b:11:8a:da:06: 31:73:2c:17:b5:55:91:f4:46:29:18:9d:c3:28:6a: 4f:ea:14:f3:41:5e:22:90:2c:24:0f:33:32:ab:29: fb:3a:50:3a:2d:70:d0:43:8a:04:bf:25:85:3f:8b: 6d:37:14:b6:8e:3d:6f:28:f9:a0:57:53:75:d7:7b: b4:f8:df:31:1b:6c:85:3c:2c:ac:1f:b6:7a:d1:63: b3:2d:e1:db:e2:0d:3a:6c:a8:e3:24:a7:46:98:3b: 35:3a:45:7b:8c:b0:e6:b6:f6:a8:ef:b3:36:2d:58: 5f:62:1a:b2:fd:13:f3:31:0e:09:c1:24:3b:77:b2: 59:ff:dc:cf:59:ee:f8:cc:7f:55:4c:a9:1e:7b:c4: ff:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:BD:6B:1A:FD:84:CC:2B:D5:7E:2F:D9:A4:3A:3D:18:ED:50:83:FC X509v3 Authority Key Identifier: keyid:55:6F:35:14:8B:99:35:65:9C:1F:E7:0B:50:5B:1D:8D:79:83:8E:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/556F35148B9935659C1FE70B505B1D8D79838EFA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/556F35148B9935659C1FE70B505B1D8D79838EFA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bc42480a-8e0f-477a-bd4a-aa8089927ba8/0/556F35148B9935659C1FE70B505B1D8D79838EFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:65:17:af:64:39:33:9f:62:df:4b:45:43:9c:76:15:11:1b: fb:cc:15:87:8e:8c:80:40:d4:b8:d0:6c:00:3a:3e:c6:36:7d: 05:37:0d:ba:5a:c8:20:b3:01:11:7e:37:47:6e:46:f0:7b:9f: 25:2d:b9:fa:88:a3:be:ba:64:1f:d0:5b:80:ed:d7:b2:54:36: 59:24:c1:85:70:37:c8:e8:49:93:26:a0:17:45:13:62:06:80: f6:1f:0a:23:80:ed:74:d6:bd:69:d1:58:7c:8b:e7:d1:e6:ea: dd:91:7c:a2:aa:a4:f1:92:b5:24:4e:63:22:96:41:b8:95:60: 8d:1b:8e:57:e2:b5:a1:fc:1a:22:28:07:68:4e:fc:29:80:c4: 62:b2:1e:c8:43:30:c3:5d:46:e1:de:d9:f6:a2:88:12:96:bf: 62:58:50:db:53:7b:3d:a9:bb:a0:bb:e3:1d:3c:98:49:40:eb: 0e:e8:0b:7c:ea:09:b4:98:2b:f3:25:2c:8c:e2:93:a7:59:52: d6:06:34:fb:c0:17:e0:5d:51:e9:48:c3:e8:02:77:42:77:f0: 82:ae:70:8f:b8:89:45:18:51:18:cd:8b:3b:b4:f8:d8:55:48: 4f:30:52:6f:05:5f:4b:4f:1c:62:5c:11:62:f5:8c:cc:0e:67: e3:77:b5:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT6ZDendYdNQBbaLWSICU1gWbOjwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTU2RjM1MTQ4Qjk5MzU2NTlDMUZFNzBCNTA1QjFEOEQ3 OTgzOEVGQTAeFw0yNTA1MTQwMjA2MjNaFw0yNTA1MTcxMDMzMjNaMDMxMTAvBgNV BAMTKEVEQkQ2QjFBRkQ4NENDMkJENTdFMkZEOUE0M0EzRDE4RUQ1MDgzRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/ku+j9ndX8soJH0KHY2wnzdI0 GaXWe2UC0ozoEbp9v6EraMoV3Me/9EzSNXmnhQdyW/et3/OFdg9L1LJno3bhdY/n K5eKoqDKqPNWkmOYJbyrsLxnpHOj2YU1eBahB1d5OS+87pcYDH06awsemGp/p5Nr EYraBjFzLBe1VZH0RikYncMoak/qFPNBXiKQLCQPMzKrKfs6UDotcNBDigS/JYU/ i203FLaOPW8o+aBXU3XXe7T43zEbbIU8LKwftnrRY7Mt4dviDTpsqOMkp0aYOzU6 RXuMsOa29qjvszYtWF9iGrL9E/MxDgnBJDt3sln/3M9Z7vjMf1VMqR57xP+tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7b1rGv2EzCvVfi/ZpDo9GO1Qg/wwHwYDVR0j BBgwFoAUVW81FIuZNWWcH+cLUFsdjXmDjvowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YzQyNDgwYS04ZTBmLTQ3N2EtYmQ0YS1hYTgwODk5MjdiYTgvMC81NTZGMzUxNDhC OTkzNTY1OUMxRkU3MEI1MDVCMUQ4RDc5ODM4RUZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTU2RjM1MTQ4Qjk5MzU2NTlDMUZFNzBCNTA1QjFEOEQ3OTgz OEVGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmM0MjQ4MGEtOGUwZi00NzdhLWJk NGEtYWE4MDg5OTI3YmE4LzAvNTU2RjM1MTQ4Qjk5MzU2NTlDMUZFNzBCNTA1QjFE OEQ3OTgzOEVGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAExlF69kOTOfYt9LRUOcdhURG/vMFYeOjIBA 1LjQbAA6PsY2fQU3DbpayCCzARF+N0duRvB7nyUtufqIo766ZB/QW4Dt17JUNlkk wYVwN8joSZMmoBdFE2IGgPYfCiOA7XTWvWnRWHyL59Hm6t2RfKKqpPGStSROYyKW QbiVYI0bjlfitaH8GiIoB2hO/CmAxGKyHshDMMNdRuHe2faiiBKWv2JYUNtTez2p u6C74x08mElA6w7oC3zqCbSYK/MlLIzik6dZUtYGNPvAF+BdUelIw+gCd0J38IKu cI+4iUUYURjNizu0+NhVSE8wUm8FX0tPHGJcEWL1jMwOZ+N3tcg= -----END CERTIFICATE-----Generated at Wed May 14 16:10:21 2025 by rpki-client