$ rpki-client -vvf repo-rpki.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.mft File: 5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.mft (raw, json) Hash identifier: r7r7Rnt2bQLD1/3dcE66QKUFp5e2mKXhkE8l46jlqHo= Subject key identifier: E5:09:8B:88:E3:90:D7:DF:FD:61:25:0F:51:14:2B:3D:90:FD:6A:F8 Authority key identifier: 5A:CB:0F:96:C2:B1:25:5E:AB:AA:EB:C1:42:6E:CD:9E:6D:F6:C4:AD Certificate issuer: /CN=5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD Certificate serial: 50CE5C2E7BAB4F22AAFE48CB006294A61E2DA7FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.mft Manifest number: 0140 Signing time: Mon 05 May 2025 08:02:50 +0000 Manifest this update: Mon 05 May 2025 07:57:50 +0000 Manifest next update: Thu 08 May 2025 08:47:50 +0000 Files and hashes: 1: 5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.crl (hash: sxE/RR9m51xz7DI+uBoLW+aT5d28iiOE4apeDWnhkF8=) 2: 3130332e3235322e34382e302f32342d3234203d3e20313530393931.roa (hash: 3eXzK+GorV6w9BT+6P2VQObNrkmn7G3kB6eMdcv66zE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.crl rsync://repo-rpki.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 08:47:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:ce:5c:2e:7b:ab:4f:22:aa:fe:48:cb:00:62:94:a6:1e:2d:a7:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD Validity Not Before: May 5 07:57:50 2025 GMT Not After : May 8 08:47:50 2025 GMT Subject: CN=E5098B88E390D7DFFD61250F51142B3D90FD6AF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5f:61:2f:54:e8:5d:f0:a9:34:b0:99:cb:24: 10:b8:95:e1:9a:8b:4d:18:89:8c:3f:e5:ab:a0:46: 63:7e:b7:3b:34:b0:8e:97:e4:8a:05:1a:d0:9c:00: 43:ae:64:2c:58:9d:c6:30:4c:9e:f4:ef:9a:e7:52: 5c:8e:4c:28:ce:be:71:b0:e0:da:14:58:6f:07:92: 2c:21:bd:5c:c3:b5:5a:0f:af:e6:eb:cc:9c:4d:0e: 84:f9:3b:26:11:31:5c:fa:ba:ac:1e:9b:39:ed:f0: 12:b6:e0:50:d3:36:50:6f:62:94:77:24:6c:cf:5b: 98:cb:82:58:21:1d:17:32:a7:95:a4:b9:83:9d:7a: 5d:0e:9f:92:20:f7:01:ac:63:77:05:49:fe:5d:eb: 64:4a:b1:5d:b0:a6:96:dc:1c:00:a6:87:1d:5c:7c: f9:96:14:4f:82:61:46:e0:47:79:46:ee:84:06:cf: 84:09:93:13:cf:73:31:ab:26:85:6b:75:94:0b:32: ce:b6:d0:64:55:ea:6b:54:15:76:a5:f0:82:af:96: 0e:8a:f8:c4:f2:fc:a5:7c:1f:86:32:30:90:ea:d3: f7:d5:8f:42:fd:4c:c2:9e:69:f2:5d:6e:29:f9:90: 6f:10:2c:49:a9:b9:7d:72:5a:9f:f6:06:e4:6d:93: dd:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:09:8B:88:E3:90:D7:DF:FD:61:25:0F:51:14:2B:3D:90:FD:6A:F8 X509v3 Authority Key Identifier: keyid:5A:CB:0F:96:C2:B1:25:5E:AB:AA:EB:C1:42:6E:CD:9E:6D:F6:C4:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e13eed2b-955e-4093-88a4-f4de3cc9b9cd/0/5ACB0F96C2B1255EABAAEBC1426ECD9E6DF6C4AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:b2:40:94:d2:6a:e3:e1:12:ba:30:72:96:36:75:90:ef:89: 43:09:40:cb:bc:61:32:42:76:20:9f:be:82:f7:16:c3:a1:8a: b3:5e:52:a5:04:57:4e:ab:52:7b:02:ad:94:6d:24:f9:8e:21: dc:33:4b:92:f5:cd:42:ec:92:16:eb:ba:9f:47:53:63:88:87: 69:f4:1d:69:32:4d:2e:24:bb:68:35:d0:58:01:20:71:f1:bb: 80:52:fc:9f:5a:73:37:9f:16:11:cc:54:48:fb:99:bf:3e:eb: 8a:58:08:e3:4c:6b:f1:5f:cb:5d:98:c9:1a:98:f8:40:0e:96: 6c:75:ef:a4:ab:e1:70:05:63:a2:72:68:09:d4:52:96:af:ad: 60:04:2f:a0:f9:a1:07:7d:ef:f4:13:8b:00:43:e8:d7:56:94: 82:42:89:a2:a7:30:35:ac:2c:54:2c:78:da:5a:97:0e:f6:99: 97:05:37:ab:30:06:c5:7a:f6:2c:f8:30:55:c2:e9:fd:59:79: 45:a1:7d:ed:31:c6:47:a7:9c:73:fe:22:4a:29:a9:c8:aa:f7: 8e:99:ab:18:cb:d9:6c:25:b4:a1:3c:08:1c:6e:dc:04:22:71: 84:30:26:58:2e:bc:17:29:ef:bf:b1:28:03:1e:8e:3b:73:4e: 16:5d:0a:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUM5cLnurTyKq/kjLAGKUph4tp/0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFDQjBGOTZDMkIxMjU1RUFCQUFFQkMxNDI2RUNEOUU2 REY2QzRBRDAeFw0yNTA1MDUwNzU3NTBaFw0yNTA1MDgwODQ3NTBaMDMxMTAvBgNV BAMTKEU1MDk4Qjg4RTM5MEQ3REZGRDYxMjUwRjUxMTQyQjNEOTBGRDZBRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFX2EvVOhd8Kk0sJnLJBC4leGa i00YiYw/5augRmN+tzs0sI6X5IoFGtCcAEOuZCxYncYwTJ7075rnUlyOTCjOvnGw 4NoUWG8HkiwhvVzDtVoPr+brzJxNDoT5OyYRMVz6uqwemznt8BK24FDTNlBvYpR3 JGzPW5jLglghHRcyp5WkuYOdel0On5Ig9wGsY3cFSf5d62RKsV2wppbcHACmhx1c fPmWFE+CYUbgR3lG7oQGz4QJkxPPczGrJoVrdZQLMs620GRV6mtUFXal8IKvlg6K +MTy/KV8H4YyMJDq0/fVj0L9TMKeafJdbin5kG8QLEmpuX1yWp/2BuRtk92rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5QmLiOOQ19/9YSUPURQrPZD9avgwHwYDVR0j BBgwFoAUWssPlsKxJV6rquvBQm7Nnm32xK0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MTNlZWQyYi05NTVlLTQwOTMtODhhNC1mNGRlM2NjOWI5Y2QvMC81QUNCMEY5NkMy QjEyNTVFQUJBQUVCQzE0MjZFQ0Q5RTZERjZDNEFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUFDQjBGOTZDMkIxMjU1RUFCQUFFQkMxNDI2RUNEOUU2REY2 QzRBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTEzZWVkMmItOTU1ZS00MDkzLTg4 YTQtZjRkZTNjYzliOWNkLzAvNUFDQjBGOTZDMkIxMjU1RUFCQUFFQkMxNDI2RUNE OUU2REY2QzRBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGuyQJTSauPhErowcpY2dZDviUMJQMu8YTJC diCfvoL3FsOhirNeUqUEV06rUnsCrZRtJPmOIdwzS5L1zULskhbrup9HU2OIh2n0 HWkyTS4ku2g10FgBIHHxu4BS/J9aczefFhHMVEj7mb8+64pYCONMa/Ffy12YyRqY +EAOlmx176Sr4XAFY6JyaAnUUpavrWAEL6D5oQd97/QTiwBD6NdWlIJCiaKnMDWs LFQseNpalw72mZcFN6swBsV69iz4MFXC6f1ZeUWhfe0xxkennHP+Ikopqciq946Z qxjL2WwltKE8CBxu3AQicYQwJlguvBcp77+xKAMejjtzThZdCis= -----END CERTIFICATE-----Generated at Tue May 6 19:45:04 2025 by rpki-client