$ rpki-client -vvf repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft File: 5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft (raw, json) Hash identifier: xCYYDo1yPyb4nha4zG32Ux7gTfeptOocoail9exfAsk= Subject key identifier: 24:4D:45:BE:D2:A6:07:98:BA:B8:BF:50:72:6C:8F:81:40:38:2A:95 Authority key identifier: 55:62:ED:3E:2B:75:AA:4C:E3:61:65:EE:02:F7:69:6C:CB:80:45:E1 Certificate issuer: /CN=5562ED3E2B75AA4CE36165EE02F7696CCB8045E1 Certificate serial: 8E866B86111D40204E0132FA395770E7BAAF6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft Manifest number: 0316 Signing time: Sun 04 May 2025 09:32:00 +0000 Manifest this update: Sun 04 May 2025 09:27:00 +0000 Manifest next update: Wed 07 May 2025 16:14:00 +0000 Files and hashes: 1: 5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.crl (hash: 2FFwD91EzzYdwdLMmQkz32IjLOFCl8/d5cIar88gAJY=) 2: 3130332e3137322e33342e302f32332d3234203d3e203538383231.roa (hash: FHzMEbRY0GUv7uZMGg/BZG/YZusPXZ52OHFP1+MW/+A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.crl rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 16:14:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8e:86:6b:86:11:1d:40:20:4e:01:32:fa:39:57:70:e7:ba:af:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5562ED3E2B75AA4CE36165EE02F7696CCB8045E1 Validity Not Before: May 4 09:27:00 2025 GMT Not After : May 7 16:14:00 2025 GMT Subject: CN=244D45BED2A60798BAB8BF50726C8F8140382A95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:92:08:63:49:b0:3f:a4:cf:ad:de:f1:d5:e4: 59:c2:eb:23:3f:0e:86:32:90:ef:71:5f:7d:1d:56: 13:aa:d2:a5:da:33:eb:b8:f2:75:c4:9c:e8:5c:8a: 9a:e5:d5:89:d8:23:0e:6e:9a:b3:2e:17:21:77:aa: 2c:04:0b:c2:d4:e2:f3:9f:3b:ed:c3:d8:08:d1:0e: 42:5d:76:2f:43:0a:49:07:39:07:32:8f:8e:d1:c5: 40:56:1c:e1:21:cb:2f:c7:f1:f6:44:c3:70:e7:2c: c4:17:21:ff:d1:4c:e9:06:4d:d3:40:9a:03:c7:3f: 13:53:8e:1a:9b:f4:7f:29:df:52:5e:e0:4c:de:2c: e9:b6:1a:83:13:15:82:1e:4b:a2:22:b5:84:8c:cf: 3a:b4:e0:52:29:36:71:c2:3f:e1:f3:46:5c:07:2a: 9e:8a:36:a9:e0:79:a5:f7:66:b1:ea:50:c4:b5:03: ba:01:ba:39:c0:16:cf:e5:85:97:7b:4e:e4:bd:19: 49:3d:0d:5d:4a:9b:2c:ef:5e:17:43:fb:08:14:e3: 5a:0b:95:dc:4a:5d:89:b0:84:22:6d:64:cd:cc:3e: 65:7a:2a:bb:0f:dc:ef:3b:2a:b7:98:46:84:da:a8: 17:61:dd:f6:f7:50:4b:de:1c:02:c9:c9:2d:67:15: 71:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:4D:45:BE:D2:A6:07:98:BA:B8:BF:50:72:6C:8F:81:40:38:2A:95 X509v3 Authority Key Identifier: keyid:55:62:ED:3E:2B:75:AA:4C:E3:61:65:EE:02:F7:69:6C:CB:80:45:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:d0:74:bc:c8:3a:3c:30:a2:f5:14:1f:61:8a:85:ca:36:43: 2d:61:fd:b9:cd:40:50:c6:e1:87:53:31:55:a6:20:95:63:b0: bd:ff:39:7d:24:ff:50:b7:7c:9b:89:a4:9f:9a:cf:82:ac:49: 83:fa:0c:5f:72:8f:e3:17:1c:73:6a:02:a6:c1:89:e5:75:2a: 83:b6:d7:8c:95:f6:62:42:80:03:8d:3f:3b:ab:7c:c9:14:43: ae:7f:e5:d9:fa:e1:da:13:28:07:28:28:58:07:6f:c0:e8:8d: 16:ee:72:2b:45:83:46:28:c0:79:72:91:65:06:42:85:98:2d: 00:21:4c:5b:83:77:9b:92:c6:e8:11:49:d8:e2:70:69:94:71: 02:87:e0:c8:13:ed:4e:c0:9a:52:6b:b5:04:11:6a:b7:5e:f0: 27:ba:3b:e2:d2:36:3e:2d:65:ef:28:44:13:6c:1c:39:2b:39: 27:5b:4e:66:4d:a6:fb:b6:64:cc:5c:97:e1:31:c7:30:98:a8: eb:33:92:12:16:a1:ef:78:a7:00:06:d7:3c:dd:5b:b7:41:c7: b8:c0:13:55:bf:af:cd:10:b6:c1:72:7c:d4:6d:c0:b2:30:22: 0f:3f:4d:52:6b:08:52:e1:3a:f7:bc:fd:a2:01:06:00:ae:15: 29:fa:43:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAI6Ga4YRHUAgTgEy+jlXcOe6r20wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTU2MkVEM0UyQjc1QUE0Q0UzNjE2NUVFMDJGNzY5NkND QjgwNDVFMTAeFw0yNTA1MDQwOTI3MDBaFw0yNTA1MDcxNjE0MDBaMDMxMTAvBgNV BAMTKDI0NEQ0NUJFRDJBNjA3OThCQUI4QkY1MDcyNkM4RjgxNDAzODJBOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7kghjSbA/pM+t3vHV5FnC6yM/ DoYykO9xX30dVhOq0qXaM+u48nXEnOhciprl1YnYIw5umrMuFyF3qiwEC8LU4vOf O+3D2AjRDkJddi9DCkkHOQcyj47RxUBWHOEhyy/H8fZEw3DnLMQXIf/RTOkGTdNA mgPHPxNTjhqb9H8p31Je4EzeLOm2GoMTFYIeS6IitYSMzzq04FIpNnHCP+HzRlwH Kp6KNqngeaX3ZrHqUMS1A7oBujnAFs/lhZd7TuS9GUk9DV1KmyzvXhdD+wgU41oL ldxKXYmwhCJtZM3MPmV6KrsP3O87KreYRoTaqBdh3fb3UEveHALJyS1nFXHvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJE1FvtKmB5i6uL9QcmyPgUA4KpUwHwYDVR0j BBgwFoAUVWLtPit1qkzjYWXuAvdpbMuAReEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l N2EzZTkwYS0wMzNhLTRjOGQtOTA3Ny0wZGFmODA1MGZhOGIvMC81NTYyRUQzRTJC NzVBQTRDRTM2MTY1RUUwMkY3Njk2Q0NCODA0NUUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTU2MkVEM0UyQjc1QUE0Q0UzNjE2NUVFMDJGNzY5NkNDQjgw NDVFMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTdhM2U5MGEtMDMzYS00YzhkLTkw NzctMGRhZjgwNTBmYThiLzAvNTU2MkVEM0UyQjc1QUE0Q0UzNjE2NUVFMDJGNzY5 NkNDQjgwNDVFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKjQdLzIOjwwovUUH2GKhco2Qy1h/bnNQFDG 4YdTMVWmIJVjsL3/OX0k/1C3fJuJpJ+az4KsSYP6DF9yj+MXHHNqAqbBieV1KoO2 14yV9mJCgAONPzurfMkUQ65/5dn64doTKAcoKFgHb8DojRbucitFg0YowHlykWUG QoWYLQAhTFuDd5uSxugRSdjicGmUcQKH4MgT7U7AmlJrtQQRarde8Ce6O+LSNj4t Ze8oRBNsHDkrOSdbTmZNpvu2ZMxcl+ExxzCYqOszkhIWoe94pwAG1zzdW7dBx7jA E1W/r80QtsFyfNRtwLIwIg8/TVJrCFLhOve8/aIBBgCuFSn6Q8Q= -----END CERTIFICATE-----Generated at Wed May 7 02:13:56 2025 by rpki-client