$ rpki-client -vvf repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft File: 5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft (raw, json) Hash identifier: K9sWdYk1wvaz+nZRoFRpTE6g+cBYcFRjOOsP3eFjE+o= Subject key identifier: 6E:51:87:3D:CF:15:1C:A8:4C:2A:EC:A8:0B:1E:44:28:54:89:93:3B Authority key identifier: 5E:A6:0C:5C:2A:87:7A:DE:8B:13:E9:94:EA:C2:EC:E8:81:C2:F0:2E Certificate issuer: /CN=5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E Certificate serial: 3D49ADEC8C459882DEFF0773AC25C1883A7C22B0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft Manifest number: 0100 Signing time: Sat 03 May 2025 19:51:36 +0000 Manifest this update: Sat 03 May 2025 19:46:36 +0000 Manifest next update: Tue 06 May 2025 21:34:36 +0000 Files and hashes: 1: 3130332e32302e3138372e302f32342d3234203d3e203538353533.roa (hash: bUy4CZmFBklHDVwaxUEZUZiNt8d1i/3iKLLtmboWyaU=) 2: 3130332e32302e3138342e302f32342d3234203d3e203538353533.roa (hash: m+tur8s5hF36P9KEnTMPMVDInU7+4/3lGLQOQpvofQk=) 3: 3130332e32302e3138352e302f32342d3234203d3e203538353533.roa (hash: matLkK/0RKOzJ5T6ShVJ+TeIBVCHsHv7ufNKNv6zW+I=) 4: 5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.crl (hash: bNOw3F87z0TN/feAwSPpAiNjNsJbldR4LVr0vvCStJQ=) 5: 3130332e32302e3138362e302f32342d3234203d3e203538353533.roa (hash: gpL6qnRxLPgeiV+PlG3hB+cnGTmStZNiAx19SwL8f6w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.crl rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 May 2025 21:34:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:49:ad:ec:8c:45:98:82:de:ff:07:73:ac:25:c1:88:3a:7c:22:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E Validity Not Before: May 3 19:46:36 2025 GMT Not After : May 6 21:34:36 2025 GMT Subject: CN=6E51873DCF151CA84C2AECA80B1E44285489933B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ff:e3:df:b0:d5:b9:89:bb:34:63:a6:4e:75: ca:28:92:fd:29:43:b4:c2:12:76:19:d1:a3:d3:5d: 0e:7c:24:fd:a5:05:07:c7:f1:0b:37:ef:20:44:74: 6f:a7:59:95:44:8e:4b:e3:cd:6f:e6:d0:47:05:31: 3a:ec:9c:b9:87:29:6b:7d:34:b1:ff:11:07:20:ed: 72:56:3c:1f:2d:83:79:79:04:1b:59:10:49:d7:f2: df:06:4a:e2:8a:a6:4a:0b:0e:90:7b:f8:22:9e:d6: 43:a6:07:e6:66:9f:06:6f:aa:c9:69:a8:36:d7:61: 83:41:10:54:45:56:11:7d:01:d9:b0:e5:3c:73:7e: 2e:17:15:81:c7:5e:c2:54:97:6e:71:df:3e:af:9b: 98:73:20:57:26:b8:01:92:b7:09:94:0d:f0:6c:4d: 87:87:83:ec:9f:0b:4d:23:ad:11:4e:b1:3f:a7:77: 8e:31:22:44:12:85:9b:59:b2:3c:9c:3a:0c:56:53: b3:bc:5c:f1:73:2b:b3:5e:68:a8:5f:30:b5:37:65: e4:c3:b5:12:ca:44:15:43:43:6e:d9:1b:ad:6c:c5: ab:5d:a9:c3:73:59:4c:d1:9e:5f:ec:2d:13:ef:46: f3:54:6e:90:db:2b:74:b0:5c:42:bc:be:86:3e:d8: a6:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:51:87:3D:CF:15:1C:A8:4C:2A:EC:A8:0B:1E:44:28:54:89:93:3B X509v3 Authority Key Identifier: keyid:5E:A6:0C:5C:2A:87:7A:DE:8B:13:E9:94:EA:C2:EC:E8:81:C2:F0:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0973beb-66ba-48bc-9374-72d7fb89c5a3/0/5EA60C5C2A877ADE8B13E994EAC2ECE881C2F02E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:fe:03:8b:fb:f8:df:59:54:9a:02:0e:2a:6d:fb:3c:c8:55: da:18:fe:9c:74:1b:bc:3b:e9:4e:f3:1b:8e:1f:02:94:1a:28: de:ae:e3:0e:77:dc:0e:1c:94:ef:6b:4e:f8:5f:6a:6f:17:90: 24:90:8f:39:ca:65:1f:59:79:cd:e2:79:fd:34:3e:65:10:34: 4b:de:60:a8:fe:8c:83:6c:31:c6:1d:77:68:55:72:a5:bd:ce: 0f:8a:05:0f:2c:89:87:b3:d9:d4:ab:a0:4b:e2:4c:dc:02:26: 79:a2:db:01:97:c0:a6:5a:c2:31:67:8a:78:ce:57:32:f2:9e: 50:25:06:be:e5:8d:d8:35:53:6e:29:25:cd:4d:66:64:b8:c1: 9d:02:c5:10:82:6e:77:66:3e:8b:79:5d:f8:1f:8f:81:88:fd: 1a:8d:14:36:d3:23:c6:e6:df:1b:8a:43:b0:b6:76:bc:31:c4: 47:7c:e8:d2:23:98:ba:13:7e:d6:96:ec:60:27:c6:6f:f6:54: a0:25:e3:4e:17:98:c4:54:1d:e7:8b:45:dc:e0:b5:24:4b:c4: ce:2f:bf:3b:9f:0c:87:51:2f:59:9e:a3:6e:62:65:a2:70:c8: 05:c1:32:8e:c4:77:af:80:91:12:4f:a5:77:cf:5d:da:c8:b1: 71:f7:e8:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPUmt7IxFmILe/wdzrCXBiDp8IrAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVBNjBDNUMyQTg3N0FERThCMTNFOTk0RUFDMkVDRTg4 MUMyRjAyRTAeFw0yNTA1MDMxOTQ2MzZaFw0yNTA1MDYyMTM0MzZaMDMxMTAvBgNV BAMTKDZFNTE4NzNEQ0YxNTFDQTg0QzJBRUNBODBCMUU0NDI4NTQ4OTkzM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9/+PfsNW5ibs0Y6ZOdcookv0p Q7TCEnYZ0aPTXQ58JP2lBQfH8Qs37yBEdG+nWZVEjkvjzW/m0EcFMTrsnLmHKWt9 NLH/EQcg7XJWPB8tg3l5BBtZEEnX8t8GSuKKpkoLDpB7+CKe1kOmB+ZmnwZvqslp qDbXYYNBEFRFVhF9Admw5Txzfi4XFYHHXsJUl25x3z6vm5hzIFcmuAGStwmUDfBs TYeHg+yfC00jrRFOsT+nd44xIkQShZtZsjycOgxWU7O8XPFzK7NeaKhfMLU3ZeTD tRLKRBVDQ27ZG61sxatdqcNzWUzRnl/sLRPvRvNUbpDbK3SwXEK8voY+2KZ/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUblGHPc8VHKhMKuyoCx5EKFSJkzswHwYDVR0j BBgwFoAUXqYMXCqHet6LE+mU6sLs6IHC8C4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MDk3M2JlYi02NmJhLTQ4YmMtOTM3NC03MmQ3ZmI4OWM1YTMvMC81RUE2MEM1QzJB ODc3QURFOEIxM0U5OTRFQUMyRUNFODgxQzJGMDJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUVBNjBDNUMyQTg3N0FERThCMTNFOTk0RUFDMkVDRTg4MUMy RjAyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTA5NzNiZWItNjZiYS00OGJjLTkz NzQtNzJkN2ZiODljNWEzLzAvNUVBNjBDNUMyQTg3N0FERThCMTNFOTk0RUFDMkVD RTg4MUMyRjAyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK3+A4v7+N9ZVJoCDipt+zzIVdoY/px0G7w7 6U7zG44fApQaKN6u4w533A4clO9rTvhfam8XkCSQjznKZR9Zec3ief00PmUQNEve YKj+jINsMcYdd2hVcqW9zg+KBQ8siYez2dSroEviTNwCJnmi2wGXwKZawjFninjO VzLynlAlBr7ljdg1U24pJc1NZmS4wZ0CxRCCbndmPot5Xfgfj4GI/RqNFDbTI8bm 3xuKQ7C2drwxxEd86NIjmLoTftaW7GAnxm/2VKAl404XmMRUHeeLRdzgtSRLxM4v vzufDIdRL1meo25iZaJwyAXBMo7Ed6+AkRJPpXfPXdrIsXH36Ko= -----END CERTIFICATE-----Generated at Tue May 6 10:29:22 2025 by rpki-client