$ rpki-client -vvf repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.mft File: 5461EABC862E4C90B32790DBA21CD5FFCB966BD3.mft (raw, json) Hash identifier: 39lsq8GW0ru01pfoMxy/rfwgdpw7nbAT0ewpSRuEXnI= Subject key identifier: F4:06:FD:BA:CB:DA:BB:1A:27:FB:E9:3B:48:EB:C6:55:94:E1:DF:4E Authority key identifier: 54:61:EA:BC:86:2E:4C:90:B3:27:90:DB:A2:1C:D5:FF:CB:96:6B:D3 Certificate issuer: /CN=5461EABC862E4C90B32790DBA21CD5FFCB966BD3 Certificate serial: 781B8E9F631E530C8B61374605564F59E3FD39D3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.mft Manifest number: 01A3 Signing time: Thu 08 May 2025 16:30:59 +0000 Manifest this update: Thu 08 May 2025 16:25:59 +0000 Manifest next update: Sun 11 May 2025 19:13:59 +0000 Files and hashes: 1: 5461EABC862E4C90B32790DBA21CD5FFCB966BD3.crl (hash: J5RNL0R6PBFlEF+fy7pK7tMCMoyCfvLh5D4Y8NddaI8=) 2: 3130332e37332e37322e302f32322d3234203d3e20313335343638.roa (hash: 3abyGt/vv/4zuDknJsyzDzCl6mRH4xhBGG4CS4rRnTg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.crl rsync://repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 19:13:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:1b:8e:9f:63:1e:53:0c:8b:61:37:46:05:56:4f:59:e3:fd:39:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5461EABC862E4C90B32790DBA21CD5FFCB966BD3 Validity Not Before: May 8 16:25:59 2025 GMT Not After : May 11 19:13:59 2025 GMT Subject: CN=F406FDBACBDABB1A27FBE93B48EBC65594E1DF4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:01:9a:35:43:3b:32:cc:ae:bf:5d:7a:ae:9f: 0d:47:25:03:e1:fb:ac:e0:6e:e8:2e:ed:00:a5:30: 14:95:c5:75:d9:06:30:24:11:bb:cb:98:76:40:54: 0c:49:91:25:c8:66:31:6d:83:f9:56:b0:3b:e3:11: 33:ec:fb:19:ae:eb:41:5b:9f:77:fb:8e:6e:21:ba: 55:1f:17:85:7d:d4:ea:79:ed:2c:fc:b9:28:23:eb: 5b:33:84:f6:06:b9:21:e2:79:6b:18:58:7e:05:e0: dc:4e:25:5c:2c:57:aa:c2:ad:4b:c8:dc:b4:65:fd: 7c:34:db:b7:dd:38:2e:d2:0e:b7:f5:b7:df:8c:44: 42:ec:cc:9e:e7:f6:85:d6:91:34:50:23:2c:35:dc: df:d9:92:ca:84:e0:56:59:27:96:e5:11:db:37:a3: a8:2c:19:f4:92:0c:cd:5e:1c:d3:c5:6a:47:d7:2e: 38:b2:72:70:fc:37:20:39:37:36:93:fb:09:83:e9: b1:08:92:3f:00:62:ba:0a:19:59:10:e6:57:fa:68: a9:72:2f:a8:b6:9e:b4:f1:ed:b1:f3:9f:6b:ce:64: a3:a6:a2:f6:16:4b:95:95:e5:27:ca:7c:60:9b:dd: 81:fd:05:da:61:22:fa:d3:ed:6b:b4:b9:c9:1b:91: 3c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:06:FD:BA:CB:DA:BB:1A:27:FB:E9:3B:48:EB:C6:55:94:E1:DF:4E X509v3 Authority Key Identifier: keyid:54:61:EA:BC:86:2E:4C:90:B3:27:90:DB:A2:1C:D5:FF:CB:96:6B:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:f1:50:db:c6:4b:8a:54:d6:a1:43:81:cc:ed:be:59:71:d4: f0:f6:56:fe:2f:14:36:04:97:fe:a2:72:ff:a0:de:f6:0d:77: 1d:74:0a:80:37:ee:19:3d:42:65:29:ec:e2:50:c4:7f:94:8a: 28:6b:a2:bd:08:12:dd:7a:60:10:1f:28:0b:d8:a1:97:e8:95: 46:9e:df:4d:67:07:30:22:25:10:2c:fc:88:ab:98:4f:c4:8a: 00:8d:88:c0:ba:8f:3d:7a:00:ab:1e:e3:93:ea:9e:51:f3:4e: 0e:0e:62:d1:dd:cd:c2:35:99:a8:6c:cd:49:e4:c3:51:dd:ef: 3c:ca:07:dd:d5:67:85:1f:3c:f1:54:d5:05:28:87:2c:e4:82: d6:9f:13:2b:66:aa:2b:be:7e:17:e3:72:f9:bd:2b:66:23:7b: ea:36:c0:70:21:09:1b:fa:94:d4:1a:ae:74:72:50:4c:ee:3a: ee:01:9b:37:fd:51:b0:1c:a9:14:c4:41:b4:52:49:b3:ba:76: b8:13:05:06:48:c2:17:5d:05:6d:26:3e:aa:f0:3f:aa:d9:18: 61:d3:a9:ac:6f:6b:a3:89:06:2e:1f:a2:c9:e0:fa:73:b8:1b: 4d:f2:2c:51:48:9c:6f:1e:b9:5b:4a:0f:c1:88:48:e7:b8:ca: 02:24:50:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeBuOn2MeUwyLYTdGBVZPWeP9OdMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQ2MUVBQkM4NjJFNEM5MEIzMjc5MERCQTIxQ0Q1RkZD Qjk2NkJEMzAeFw0yNTA1MDgxNjI1NTlaFw0yNTA1MTExOTEzNTlaMDMxMTAvBgNV BAMTKEY0MDZGREJBQ0JEQUJCMUEyN0ZCRTkzQjQ4RUJDNjU1OTRFMURGNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpAZo1QzsyzK6/XXqunw1HJQPh +6zgbugu7QClMBSVxXXZBjAkEbvLmHZAVAxJkSXIZjFtg/lWsDvjETPs+xmu60Fb n3f7jm4hulUfF4V91Op57Sz8uSgj61szhPYGuSHieWsYWH4F4NxOJVwsV6rCrUvI 3LRl/Xw027fdOC7SDrf1t9+MRELszJ7n9oXWkTRQIyw13N/ZksqE4FZZJ5blEds3 o6gsGfSSDM1eHNPFakfXLjiycnD8NyA5NzaT+wmD6bEIkj8AYroKGVkQ5lf6aKly L6i2nrTx7bHzn2vOZKOmovYWS5WV5SfKfGCb3YH9BdphIvrT7Wu0uckbkTxbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9Ab9usvauxon++k7SOvGVZTh304wHwYDVR0j BBgwFoAUVGHqvIYuTJCzJ5DbohzV/8uWa9MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NmVjYzcyYS1lOTU0LTQzMDItOTJjNC1mNGYyMzA3MGI5OTcvMC81NDYxRUFCQzg2 MkU0QzkwQjMyNzkwREJBMjFDRDVGRkNCOTY2QkQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTQ2MUVBQkM4NjJFNEM5MEIzMjc5MERCQTIxQ0Q1RkZDQjk2 NkJEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDZlY2M3MmEtZTk1NC00MzAyLTky YzQtZjRmMjMwNzBiOTk3LzAvNTQ2MUVBQkM4NjJFNEM5MEIzMjc5MERCQTIxQ0Q1 RkZDQjk2NkJEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG3xUNvGS4pU1qFDgcztvllx1PD2Vv4vFDYE l/6icv+g3vYNdx10CoA37hk9QmUp7OJQxH+Uiihror0IEt16YBAfKAvYoZfolUae 301nBzAiJRAs/IirmE/EigCNiMC6jz16AKse45PqnlHzTg4OYtHdzcI1mahszUnk w1Hd7zzKB93VZ4UfPPFU1QUohyzkgtafEytmqiu+fhfjcvm9K2Yje+o2wHAhCRv6 lNQarnRyUEzuOu4Bmzf9UbAcqRTEQbRSSbO6drgTBQZIwhddBW0mPqrwP6rZGGHT qaxva6OJBi4fosng+nO4G03yLFFInG8euVtKD8GISOe4ygIkUGU= -----END CERTIFICATE-----Generated at Sat May 10 14:46:20 2025 by rpki-client