$ rpki-client -vvf repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft File: 1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft (raw, json) Hash identifier: IzZlzjbf2/e3lRRy6BNH+GyfHg+MWtOsGSLtff5cWJo= Subject key identifier: 03:63:C6:FC:F7:73:AF:13:77:B1:88:2A:00:3B:79:68:7C:19:50:03 Authority key identifier: 1A:7E:52:5B:56:9E:9C:AE:03:35:BF:F6:6C:FA:1B:D4:A5:C1:2C:51 Certificate issuer: /CN=1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51 Certificate serial: 53132B5E41243EB49DBAB35B6897E29125AFE84A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft Manifest number: 01E5 Signing time: Mon 12 May 2025 05:11:03 +0000 Manifest this update: Mon 12 May 2025 05:06:03 +0000 Manifest next update: Thu 15 May 2025 17:08:03 +0000 Files and hashes: 1: 1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.crl (hash: OwY7u17oBCLb9kIk4PKRqeP4RpCAGmaawLE5Zl8DJKA=) 2: 3130332e3138352e32372e302f32342d3234203d3e20313439373039.roa (hash: R+hXYDLG/c17YyPsyb/GD72/SjNkAc2qPCjHbpzY5X4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.crl rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 17:08:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:13:2b:5e:41:24:3e:b4:9d:ba:b3:5b:68:97:e2:91:25:af:e8:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51 Validity Not Before: May 12 05:06:03 2025 GMT Not After : May 15 17:08:03 2025 GMT Subject: CN=0363C6FCF773AF1377B1882A003B79687C195003 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:4e:57:6c:a8:ca:ca:d6:eb:25:11:09:43:fb: 58:fd:b9:1d:c7:f9:38:81:32:d3:63:1d:55:8e:2f: 3c:77:29:f1:e8:4e:5b:81:1f:ec:fd:5f:4f:83:75: 5f:05:00:34:4b:33:57:cd:22:5a:c5:7e:05:94:b0: 05:2d:d4:f8:f5:b0:de:bf:35:0f:52:0d:94:ea:56: 6a:a7:94:2d:fc:b8:fe:35:e9:b9:16:0e:ae:5a:95: 2a:9f:cb:f5:30:dd:88:1d:43:fa:59:d2:c3:4e:99: ea:4a:f1:a5:7e:7a:94:4f:a5:2e:9e:35:aa:79:ec: 19:87:ca:e3:5c:66:42:c1:86:44:a6:48:12:23:8c: 89:60:f8:21:bd:a6:4f:99:e3:9a:a2:84:db:e5:f7: c4:cc:19:c8:03:0f:45:11:e4:86:55:8a:6b:ee:46: 4f:70:fa:13:05:06:ca:d0:85:4a:4a:47:b7:8b:37: 6c:e6:5a:26:bb:0b:e1:0d:bf:ba:7d:eb:23:11:b4: a3:f3:88:20:14:f0:16:10:50:bf:db:c4:24:ea:ab: 34:8c:91:00:1e:bc:19:e9:f6:29:29:35:be:02:c6: 4d:86:6a:59:bd:41:ce:a8:e0:b2:78:f1:09:82:32: a1:61:4f:66:42:bc:5f:97:71:89:64:de:eb:26:37: 93:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:63:C6:FC:F7:73:AF:13:77:B1:88:2A:00:3B:79:68:7C:19:50:03 X509v3 Authority Key Identifier: keyid:1A:7E:52:5B:56:9E:9C:AE:03:35:BF:F6:6C:FA:1B:D4:A5:C1:2C:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:13:ab:f2:72:85:72:d7:53:25:eb:d5:79:bf:94:39:4c:70: 23:ac:68:4e:75:7c:12:d4:ec:5e:3f:a5:72:c7:40:7a:6c:b2: d3:12:f4:2f:b1:e9:2e:97:32:db:72:d9:8f:0a:90:e5:fd:7b: d3:bf:af:a6:c9:c3:d1:47:ee:67:ee:82:e9:48:17:8d:1b:9f: 2b:30:15:a6:ff:28:43:48:55:d2:f1:e8:de:2e:6b:1f:4a:06: 61:bb:72:f6:f8:25:3a:38:55:a3:2f:a7:87:cc:2a:8f:1b:7c: 53:c8:ee:33:46:5a:53:c9:40:b2:59:69:8f:3c:dd:ab:f4:d8: 59:96:bb:86:d9:68:e2:20:ce:db:cc:b6:8a:b1:ac:a6:7f:ef: 04:dd:38:68:69:bd:e8:fe:8d:a3:67:07:d7:d9:40:5e:e3:e6: 11:17:d6:b9:71:62:87:e1:f1:5a:bd:e1:b2:6d:2a:8e:94:2c: f5:8a:0e:eb:62:bb:b9:6d:c6:71:64:46:dd:31:8f:13:08:a1: 8c:b5:83:d6:e3:50:97:67:1f:14:3c:2b:ce:b9:af:e1:11:66: 11:de:61:cc:0c:42:a2:70:47:62:c9:d2:54:45:bd:45:6f:d1: 19:13:cc:7e:25:4c:4b:46:c8:3e:72:f5:1f:76:3a:cb:cf:f9: 72:97:be:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUxMrXkEkPrSdurNbaJfikSWv6EowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE3RTUyNUI1NjlFOUNBRTAzMzVCRkY2NkNGQTFCRDRB NUMxMkM1MTAeFw0yNTA1MTIwNTA2MDNaFw0yNTA1MTUxNzA4MDNaMDMxMTAvBgNV BAMTKDAzNjNDNkZDRjc3M0FGMTM3N0IxODgyQTAwM0I3OTY4N0MxOTUwMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKTldsqMrK1uslEQlD+1j9uR3H +TiBMtNjHVWOLzx3KfHoTluBH+z9X0+DdV8FADRLM1fNIlrFfgWUsAUt1Pj1sN6/ NQ9SDZTqVmqnlC38uP416bkWDq5alSqfy/Uw3YgdQ/pZ0sNOmepK8aV+epRPpS6e Nap57BmHyuNcZkLBhkSmSBIjjIlg+CG9pk+Z45qihNvl98TMGcgDD0UR5IZVimvu Rk9w+hMFBsrQhUpKR7eLN2zmWia7C+ENv7p96yMRtKPziCAU8BYQUL/bxCTqqzSM kQAevBnp9ikpNb4Cxk2Galm9Qc6o4LJ48QmCMqFhT2ZCvF+XcYlk3usmN5NhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA2PG/PdzrxN3sYgqADt5aHwZUAMwHwYDVR0j BBgwFoAUGn5SW1aenK4DNb/2bPob1KXBLFEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDZjYWNkNC00ZTA4LTRkZDgtYTVhZS05YTVhNjNhOGQyZmEvMC8xQTdFNTI1QjU2 OUU5Q0FFMDMzNUJGRjY2Q0ZBMUJENEE1QzEyQzUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUE3RTUyNUI1NjlFOUNBRTAzMzVCRkY2NkNGQTFCRDRBNUMx MkM1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQ2Y2FjZDQtNGUwOC00ZGQ4LWE1 YWUtOWE1YTYzYThkMmZhLzAvMUE3RTUyNUI1NjlFOUNBRTAzMzVCRkY2NkNGQTFC RDRBNUMxMkM1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAwTq/JyhXLXUyXr1Xm/lDlMcCOsaE51fBLU 7F4/pXLHQHpsstMS9C+x6S6XMtty2Y8KkOX9e9O/r6bJw9FH7mfugulIF40bnysw Fab/KENIVdLx6N4uax9KBmG7cvb4JTo4VaMvp4fMKo8bfFPI7jNGWlPJQLJZaY88 3av02FmWu4bZaOIgztvMtoqxrKZ/7wTdOGhpvej+jaNnB9fZQF7j5hEX1rlxYofh 8Vq94bJtKo6ULPWKDutiu7ltxnFkRt0xjxMIoYy1g9bjUJdnHxQ8K865r+ERZhHe YcwMQqJwR2LJ0lRFvUVv0RkTzH4lTEtGyD5y9R92OsvP+XKXvh4= -----END CERTIFICATE-----Generated at Wed May 14 00:11:31 2025 by rpki-client