$ rpki-client -vvf repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.mft File: CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.mft (raw, json) Hash identifier: yXixBMy/sEKummFZEo4llIJjVqxoEVuDD8/l7tpBmIM= Subject key identifier: 55:6B:D1:E7:26:83:3C:8A:46:C8:29:EC:86:CA:44:37:2D:28:DF:1C Authority key identifier: CA:13:A9:BA:C2:93:15:E5:C5:DA:CF:0B:C7:38:8C:34:2A:D6:E5:92 Certificate issuer: /CN=CA13A9BAC29315E5C5DACF0BC7388C342AD6E592 Certificate serial: 35B01CC9A24358FE1D4CAC19B6274A6BC21682ED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.mft Manifest number: 02BA Signing time: Sat 10 May 2025 22:51:11 +0000 Manifest this update: Sat 10 May 2025 22:46:11 +0000 Manifest next update: Wed 14 May 2025 05:22:11 +0000 Files and hashes: 1: CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.crl (hash: LxtdIe5E17fFN1QRD8u+4Mz/wCtc1ZA9uhnX3gO1IdY=) 2: 3130332e3137322e3139362e302f32332d3234203d3e20313432333934.roa (hash: ik3JwPueGh0lC4/wMe1++inmZhlbllGr5PVZbJzidbY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.crl rsync://repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 05:22:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:b0:1c:c9:a2:43:58:fe:1d:4c:ac:19:b6:27:4a:6b:c2:16:82:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA13A9BAC29315E5C5DACF0BC7388C342AD6E592 Validity Not Before: May 10 22:46:11 2025 GMT Not After : May 14 05:22:11 2025 GMT Subject: CN=556BD1E726833C8A46C829EC86CA44372D28DF1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:5c:38:d4:05:6b:3a:ad:cd:e2:6f:e7:4a:8e: c6:52:92:23:97:25:2a:2f:58:66:34:9d:bd:54:db: 6a:3f:7f:f9:4f:ff:df:76:b3:11:70:c2:0e:14:a8: 30:fb:93:bf:d8:fa:50:c5:d9:6f:00:cc:cc:ce:e7: 31:ae:a6:2e:60:0e:5c:0b:18:46:3c:27:e1:a1:bf: e9:96:73:5c:56:3b:67:55:9b:06:38:47:f1:3c:6d: df:a2:8b:81:dc:9c:67:f4:0b:82:70:b3:24:c7:30: 9c:9f:ad:36:f9:c2:5f:bb:8e:c6:91:f4:75:41:84: 2e:0a:a7:a2:69:e2:c8:72:84:81:79:f1:5d:9d:08: 00:fb:d3:f3:81:c1:32:f4:5b:ae:84:8e:39:a9:8d: 88:e8:51:13:a4:1a:0a:c5:fd:01:5f:9e:8d:c9:b5: 7b:c5:fb:fe:ca:e5:24:a1:d4:96:ea:9a:b2:82:7f: f9:72:d4:b6:26:9f:a4:9c:67:b8:b1:04:df:3a:ce: 77:9c:76:13:1f:4b:47:d4:95:f2:c4:85:14:b7:15: 8f:05:13:cd:90:52:d0:00:bd:97:56:de:62:8d:2f: 0a:1a:bf:8a:bc:4a:a6:42:43:3c:2f:d9:6a:80:1b: a9:9f:a6:83:af:94:6b:2a:10:71:50:93:5e:5d:89: 85:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:6B:D1:E7:26:83:3C:8A:46:C8:29:EC:86:CA:44:37:2D:28:DF:1C X509v3 Authority Key Identifier: keyid:CA:13:A9:BA:C2:93:15:E5:C5:DA:CF:0B:C7:38:8C:34:2A:D6:E5:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:f4:98:fc:8d:55:38:49:43:56:43:4d:68:c8:92:0c:03:5e: 99:26:61:96:c6:e9:0a:f9:1b:51:19:ba:6a:65:5b:66:3c:2f: 94:54:d6:f2:bb:2f:93:9f:bb:3e:44:69:96:ae:53:dc:77:c6: 9d:0e:2c:2c:9d:d4:dd:f8:49:95:b7:1e:fd:4a:62:c1:fd:4a: ac:e5:e5:9a:01:5d:81:a0:1d:85:6d:3d:58:33:f9:f7:19:67: 44:c5:50:ce:6c:e4:65:06:04:a9:cb:31:2f:cf:f8:ca:b4:22: 96:14:85:e1:87:b4:71:b8:92:1d:74:fb:0d:a3:e0:7a:1c:e2: 71:93:08:84:6f:76:59:b1:fd:19:4b:59:71:d1:a0:02:18:90: 37:57:6d:97:aa:31:ff:1e:89:39:94:7a:75:18:26:58:ad:8f: 6a:33:af:84:1d:7d:64:0e:60:32:74:20:e4:1c:1c:9e:77:b3: 9a:26:f1:fc:7d:19:d6:1f:86:75:43:61:42:d1:98:c2:94:81: 0b:ad:26:36:33:d3:8e:36:38:19:ad:32:3c:bc:75:95:a2:a7: aa:f3:fa:95:23:4d:2a:52:f0:18:f1:45:a4:a9:7e:7f:3c:33: 21:0c:bd:5a:17:8c:76:76:ae:a6:c7:29:06:ce:f8:19:53:bd: 0f:98:ec:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNbAcyaJDWP4dTKwZtidKa8IWgu0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ExM0E5QkFDMjkzMTVFNUM1REFDRjBCQzczODhDMzQy QUQ2RTU5MjAeFw0yNTA1MTAyMjQ2MTFaFw0yNTA1MTQwNTIyMTFaMDMxMTAvBgNV BAMTKDU1NkJEMUU3MjY4MzNDOEE0NkM4MjlFQzg2Q0E0NDM3MkQyOERGMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSXDjUBWs6rc3ib+dKjsZSkiOX JSovWGY0nb1U22o/f/lP/992sxFwwg4UqDD7k7/Y+lDF2W8AzMzO5zGupi5gDlwL GEY8J+Ghv+mWc1xWO2dVmwY4R/E8bd+ii4HcnGf0C4JwsyTHMJyfrTb5wl+7jsaR 9HVBhC4Kp6Jp4shyhIF58V2dCAD70/OBwTL0W66EjjmpjYjoUROkGgrF/QFfno3J tXvF+/7K5SSh1JbqmrKCf/ly1LYmn6ScZ7ixBN86znecdhMfS0fUlfLEhRS3FY8F E82QUtAAvZdW3mKNLwoav4q8SqZCQzwv2WqAG6mfpoOvlGsqEHFQk15diYXFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVWvR5yaDPIpGyCnshspENy0o3xwwHwYDVR0j BBgwFoAUyhOpusKTFeXF2s8LxziMNCrW5ZIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Mzk3Y2ZjNS1lMGIwLTQ4MjAtYjg1OS03OTYyNTIwMWVjYWYvMC9DQTEzQTlCQUMy OTMxNUU1QzVEQUNGMEJDNzM4OEMzNDJBRDZFNTkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0ExM0E5QkFDMjkzMTVFNUM1REFDRjBCQzczODhDMzQyQUQ2 RTU5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzM5N2NmYzUtZTBiMC00ODIwLWI4 NTktNzk2MjUyMDFlY2FmLzAvQ0ExM0E5QkFDMjkzMTVFNUM1REFDRjBCQzczODhD MzQyQUQ2RTU5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGH0mPyNVThJQ1ZDTWjIkgwDXpkmYZbG6Qr5 G1EZumplW2Y8L5RU1vK7L5Ofuz5EaZauU9x3xp0OLCyd1N34SZW3Hv1KYsH9Sqzl 5ZoBXYGgHYVtPVgz+fcZZ0TFUM5s5GUGBKnLMS/P+Mq0IpYUheGHtHG4kh10+w2j 4Hoc4nGTCIRvdlmx/RlLWXHRoAIYkDdXbZeqMf8eiTmUenUYJlitj2ozr4QdfWQO YDJ0IOQcHJ53s5om8fx9GdYfhnVDYULRmMKUgQutJjYz0442OBmtMjy8dZWip6rz +pUjTSpS8BjxRaSpfn88MyEMvVoXjHZ2rqbHKQbO+BlTvQ+Y7LY= -----END CERTIFICATE-----Generated at Sun May 11 15:37:38 2025 by rpki-client