$ rpki-client -vvf repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft File: C5CA2999FE7612F56CCCB7441743B05181458ED0.mft (raw, json) Hash identifier: zshUTyYHDF5nWUTQAqtvGSvYMS4bkiigalvs1cT4KKM= Subject key identifier: 9E:B9:12:CC:A4:B3:56:BB:B9:09:54:90:73:59:4F:B5:3E:ED:C0:F5 Authority key identifier: C5:CA:29:99:FE:76:12:F5:6C:CC:B7:44:17:43:B0:51:81:45:8E:D0 Certificate issuer: /CN=C5CA2999FE7612F56CCCB7441743B05181458ED0 Certificate serial: 2731BC516DD6B0E4279F226807D9EEAFDB911190 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5CA2999FE7612F56CCCB7441743B05181458ED0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft Manifest number: 04CE Signing time: Sat 10 May 2025 04:50:37 +0000 Manifest this update: Sat 10 May 2025 04:45:37 +0000 Manifest next update: Tue 13 May 2025 09:42:37 +0000 Files and hashes: 1: C5CA2999FE7612F56CCCB7441743B05181458ED0.crl (hash: yAXpLRxrof5kdKTC73X6K1KlmKM9efizWsHMHYnEmU8=) 2: 3130332e3134322e3230332e302f32342d3234203d3e20313339333738.roa (hash: xLmMTjSOjSqS6LykBY4skbTjNzEVrHStJ+4rPzwZUSY=) 3: 3130332e3134322e3230322e302f32332d3233203d3e20313339333738.roa (hash: hUFUn0VmhI4/WVyhCk/ed0i6oyJ6uRhfZe4Gt9CX7Ms=) 4: 323030313a6466313a353638303a3a2f34382d3438203d3e20313339333738.roa (hash: 1z9zQXbiXOJ+gRqWINPLLxlihaf6MQrGXd1QApL6EDo=) 5: 3130332e3134322e3230322e302f32342d3234203d3e20313339333738.roa (hash: Ai7D3RvDxYX2FQX7n3jl8PVIm916gH4mXne2eUMtLic=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.crl rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5CA2999FE7612F56CCCB7441743B05181458ED0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 09:42:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:31:bc:51:6d:d6:b0:e4:27:9f:22:68:07:d9:ee:af:db:91:11:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5CA2999FE7612F56CCCB7441743B05181458ED0 Validity Not Before: May 10 04:45:37 2025 GMT Not After : May 13 09:42:37 2025 GMT Subject: CN=9EB912CCA4B356BBB909549073594FB53EEDC0F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:02:7f:21:e3:1f:28:af:98:a8:36:17:8e:a4: 07:ac:6e:8e:b3:80:61:1d:03:3c:14:ca:50:a2:47: 5b:ae:ba:ac:7c:1a:dc:df:b8:96:b2:41:20:40:44: 5e:7c:01:05:ad:09:17:ec:49:12:27:bb:0d:3d:6a: d5:53:bb:bd:13:4d:e0:53:20:e9:25:41:55:8b:55: 5e:32:63:0a:ca:83:59:b8:08:2f:e6:a4:2f:7f:28: 59:b3:42:7c:97:32:c8:e8:73:3a:44:8b:cb:a3:67: ae:a5:e2:71:8c:57:c6:df:18:da:ce:91:17:cd:9d: b5:53:6b:26:ec:ff:74:1f:63:9d:0a:7e:23:dd:51: d4:c1:a7:ab:51:ba:83:6d:b6:19:75:88:56:e1:dc: ab:80:93:b6:8c:61:00:5f:20:ea:d9:7f:ac:b8:ae: d4:5a:de:68:b3:b9:b0:48:36:2a:12:cc:1e:89:7e: 77:ef:e7:df:3e:a7:11:06:a5:81:5f:d1:78:2f:5b: cc:cc:c1:2a:65:38:bf:ee:3b:e9:83:8c:92:54:c3: 93:07:7b:3f:a0:d8:10:1d:40:1a:97:45:9a:91:af: f3:85:8a:1b:83:33:ed:26:14:c6:03:4b:82:93:10: 87:ae:74:0a:b5:b1:56:b4:95:78:4e:ce:6d:20:ec: c8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:B9:12:CC:A4:B3:56:BB:B9:09:54:90:73:59:4F:B5:3E:ED:C0:F5 X509v3 Authority Key Identifier: keyid:C5:CA:29:99:FE:76:12:F5:6C:CC:B7:44:17:43:B0:51:81:45:8E:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5CA2999FE7612F56CCCB7441743B05181458ED0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:40:de:3c:03:2a:05:44:b6:31:8e:5f:16:86:2a:08:52:de: 62:fa:f9:96:7c:0a:bf:8b:01:69:6f:45:d1:7a:26:85:a8:a9: e9:fd:de:71:9c:f4:18:f8:72:60:34:d2:d4:e7:7f:ec:74:cb: cc:ca:82:57:b4:63:de:95:41:d3:40:84:76:c9:f8:2f:aa:6a: 3c:53:13:e9:52:9d:6f:f0:b9:b9:f9:2f:28:51:d6:cd:78:cc: 3f:bc:ce:7c:7f:d3:84:28:d9:69:1e:33:b6:7e:28:d3:f9:42: a1:2e:46:f0:40:e9:9c:32:13:bb:fc:f0:cf:ab:63:cb:aa:78: f7:7a:07:44:0c:50:91:0c:e9:cd:e5:04:26:5e:14:80:22:e0: 1c:2c:f7:35:78:99:71:df:4c:b8:2f:94:74:fc:06:a2:df:bb: 63:ab:03:38:ad:8c:0c:c2:27:ef:9e:fa:31:95:fe:c0:c7:09: 9a:50:53:9b:08:39:a5:70:ae:29:2f:88:18:29:45:d9:58:bb: 01:48:15:23:9d:56:bb:de:ef:45:4f:fb:03:e7:7c:c6:41:c4: 64:0a:3b:7b:3b:27:78:75:cb:06:d7:5b:d3:7f:d8:a2:6c:2d: 03:63:db:a4:3c:86:1e:3f:6b:0e:f3:79:f4:63:54:ca:d3:fd: b5:9c:be:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJzG8UW3WsOQnnyJoB9nur9uREZAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzVDQTI5OTlGRTc2MTJGNTZDQ0NCNzQ0MTc0M0IwNTE4 MTQ1OEVEMDAeFw0yNTA1MTAwNDQ1MzdaFw0yNTA1MTMwOTQyMzdaMDMxMTAvBgNV BAMTKDlFQjkxMkNDQTRCMzU2QkJCOTA5NTQ5MDczNTk0RkI1M0VFREMwRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSAn8h4x8or5ioNheOpAesbo6z gGEdAzwUylCiR1uuuqx8GtzfuJayQSBARF58AQWtCRfsSRInuw09atVTu70TTeBT IOklQVWLVV4yYwrKg1m4CC/mpC9/KFmzQnyXMsjoczpEi8ujZ66l4nGMV8bfGNrO kRfNnbVTaybs/3QfY50KfiPdUdTBp6tRuoNtthl1iFbh3KuAk7aMYQBfIOrZf6y4 rtRa3mizubBINioSzB6Jfnfv598+pxEGpYFf0XgvW8zMwSplOL/uO+mDjJJUw5MH ez+g2BAdQBqXRZqRr/OFihuDM+0mFMYDS4KTEIeudAq1sVa0lXhOzm0g7MifAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnrkSzKSzVru5CVSQc1lPtT7twPUwHwYDVR0j BBgwFoAUxcopmf52EvVszLdEF0OwUYFFjtAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NjdmYjgzNy0xYjJmLTRjNGUtYjk5OS02ZTk5MGRkYzE0OTkvMC9DNUNBMjk5OUZF NzYxMkY1NkNDQ0I3NDQxNzQzQjA1MTgxNDU4RUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzVDQTI5OTlGRTc2MTJGNTZDQ0NCNzQ0MTc0M0IwNTE4MTQ1 OEVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDY3ZmI4MzctMWIyZi00YzRlLWI5 OTktNmU5OTBkZGMxNDk5LzAvQzVDQTI5OTlGRTc2MTJGNTZDQ0NCNzQ0MTc0M0Iw NTE4MTQ1OEVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFtA3jwDKgVEtjGOXxaGKghS3mL6+ZZ8Cr+L AWlvRdF6JoWoqen93nGc9Bj4cmA00tTnf+x0y8zKgle0Y96VQdNAhHbJ+C+qajxT E+lSnW/wubn5LyhR1s14zD+8znx/04Qo2WkeM7Z+KNP5QqEuRvBA6ZwyE7v88M+r Y8uqePd6B0QMUJEM6c3lBCZeFIAi4Bws9zV4mXHfTLgvlHT8BqLfu2OrAzitjAzC J++e+jGV/sDHCZpQU5sIOaVwrikviBgpRdlYuwFIFSOdVrve70VP+wPnfMZBxGQK O3s7J3h1ywbXW9N/2KJsLQNj26Q8hh4/aw7zefRjVMrT/bWcvkU= -----END CERTIFICATE-----Generated at Mon May 12 10:42:06 2025 by rpki-client