$ rpki-client -vvf repo-rpki.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/53135743CD59EB438954FEB651A5D92D9BCC4F6B.mft File: 53135743CD59EB438954FEB651A5D92D9BCC4F6B.mft (raw, json) Hash identifier: BIo1MDSdczpGMCoFNzN5P8dKplzacVcxddNaGn1Nzbw= Subject key identifier: 47:B0:0C:31:E9:25:01:9D:EB:73:61:71:33:B7:29:EA:5A:74:AD:C6 Authority key identifier: 53:13:57:43:CD:59:EB:43:89:54:FE:B6:51:A5:D9:2D:9B:CC:4F:6B Certificate issuer: /CN=53135743CD59EB438954FEB651A5D92D9BCC4F6B Certificate serial: 32E007AE9FFBA16386A8D3B31628076225EF0D98 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53135743CD59EB438954FEB651A5D92D9BCC4F6B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/53135743CD59EB438954FEB651A5D92D9BCC4F6B.mft Manifest number: F7 Signing time: Thu 08 May 2025 07:51:35 +0000 Manifest this update: Thu 08 May 2025 07:46:35 +0000 Manifest next update: Sun 11 May 2025 08:27:35 +0000 Files and hashes: 1: 3130332e36372e36392e302f32342d3234203d3e20313531393938.roa (hash: kaVFMH8foRRe9PZ1pgPoo5ASjB6/BVJQS9mBarSuCWM=) 2: 53135743CD59EB438954FEB651A5D92D9BCC4F6B.crl (hash: FSPUE/1QUs9gwEU+qgZcHHmnh7pKCdAj+xGSVx5UFXs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/53135743CD59EB438954FEB651A5D92D9BCC4F6B.crl rsync://repo-rpki.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/53135743CD59EB438954FEB651A5D92D9BCC4F6B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53135743CD59EB438954FEB651A5D92D9BCC4F6B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 08:27:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:e0:07:ae:9f:fb:a1:63:86:a8:d3:b3:16:28:07:62:25:ef:0d:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53135743CD59EB438954FEB651A5D92D9BCC4F6B Validity Not Before: May 8 07:46:35 2025 GMT Not After : May 11 08:27:35 2025 GMT Subject: CN=47B00C31E925019DEB73617133B729EA5A74ADC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:39:ec:8d:c6:48:d1:b2:c0:04:b1:9a:5f:2f: 71:17:41:95:41:e4:b4:0e:7f:d7:42:09:5a:d3:86: 50:0e:13:3a:b4:0e:4f:08:09:6c:9f:77:ec:13:69: f6:8d:db:24:c8:20:e7:cb:96:df:a1:62:2b:54:e0: 32:49:ee:ca:73:4f:c1:cd:a3:d8:61:15:07:a5:e7: 1e:f4:d7:8c:e2:5a:7f:d3:c3:5b:73:56:83:9f:79: f7:34:45:71:46:08:b7:80:4b:7f:cc:6e:b2:54:d9: 96:97:10:35:3b:a6:cf:84:f6:32:b1:f3:54:d1:76: d2:87:c5:72:53:2c:6f:aa:b5:56:10:19:13:9b:ed: c2:f2:1f:97:c3:56:85:93:a9:f2:97:78:c7:34:21: c3:93:a3:2e:e9:9f:2d:36:5a:c9:c4:32:85:9c:f8: 91:e8:1e:43:75:3d:9e:d2:9f:81:d8:36:c9:a9:05: 48:b6:f0:83:43:45:7b:86:fb:6a:f2:46:1b:2e:b3: 87:89:36:6d:4d:9b:9e:1f:25:fb:17:4f:dd:70:dd: f1:38:eb:ab:39:6b:5f:04:94:a5:d7:82:4a:69:22: e1:98:f9:d0:df:7d:fd:3e:15:95:bc:6d:85:0b:81: f1:99:0b:8b:9a:40:16:c7:a3:be:16:b1:8b:7b:cf: be:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:B0:0C:31:E9:25:01:9D:EB:73:61:71:33:B7:29:EA:5A:74:AD:C6 X509v3 Authority Key Identifier: keyid:53:13:57:43:CD:59:EB:43:89:54:FE:B6:51:A5:D9:2D:9B:CC:4F:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/53135743CD59EB438954FEB651A5D92D9BCC4F6B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53135743CD59EB438954FEB651A5D92D9BCC4F6B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/53135743CD59EB438954FEB651A5D92D9BCC4F6B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:99:79:3e:83:24:d8:eb:a4:bd:c7:e7:d7:ba:fd:70:f0:b7: cc:20:5e:3b:9a:b2:02:f1:3c:e0:6a:24:3c:d0:29:f0:62:fa: 20:d8:de:4b:9c:19:3f:a6:3b:de:53:e7:14:26:fb:d2:bb:7e: 2d:d3:df:16:45:c6:e1:ca:66:db:03:e9:08:2f:97:a3:60:ac: da:72:25:99:41:e7:9e:ed:c9:69:88:d0:90:3b:22:71:b9:17: ea:71:f6:05:47:c4:58:c3:ca:27:e7:6d:5f:21:57:ab:43:0c: 80:03:30:94:6c:24:81:99:04:d8:7b:1b:e8:e6:51:74:fd:29: e0:2d:24:46:e9:5c:3c:71:90:9a:92:ae:6a:dd:25:00:1d:d8: d0:99:ee:e5:19:c0:43:9d:79:ed:50:34:f0:2c:64:7a:f9:04: a6:17:ec:06:90:85:0d:57:7b:57:3e:52:be:f8:26:b2:94:98: 25:e2:57:81:d0:67:e1:6d:76:4b:bc:11:8e:13:21:b7:a4:f6: 61:b0:99:03:a1:0e:c4:92:d1:72:ce:59:1d:a7:c4:43:de:fc: de:a0:76:0f:9e:48:67:7a:ba:4b:db:ca:4e:8b:74:2e:bf:7e: 4d:48:ae:95:97:77:6f:2d:59:20:3b:53:54:96:61:69:e6:eb: 5d:3b:70:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMuAHrp/7oWOGqNOzFigHYiXvDZgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMxMzU3NDNDRDU5RUI0Mzg5NTRGRUI2NTFBNUQ5MkQ5 QkNDNEY2QjAeFw0yNTA1MDgwNzQ2MzVaFw0yNTA1MTEwODI3MzVaMDMxMTAvBgNV BAMTKDQ3QjAwQzMxRTkyNTAxOURFQjczNjE3MTMzQjcyOUVBNUE3NEFEQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5OeyNxkjRssAEsZpfL3EXQZVB 5LQOf9dCCVrThlAOEzq0Dk8ICWyfd+wTafaN2yTIIOfLlt+hYitU4DJJ7spzT8HN o9hhFQel5x7014ziWn/Tw1tzVoOfefc0RXFGCLeAS3/MbrJU2ZaXEDU7ps+E9jKx 81TRdtKHxXJTLG+qtVYQGROb7cLyH5fDVoWTqfKXeMc0IcOToy7pny02WsnEMoWc +JHoHkN1PZ7Sn4HYNsmpBUi28INDRXuG+2ryRhsus4eJNm1Nm54fJfsXT91w3fE4 66s5a18ElKXXgkppIuGY+dDfff0+FZW8bYULgfGZC4uaQBbHo74WsYt7z77DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR7AMMeklAZ3rc2FxM7cp6lp0rcYwHwYDVR0j BBgwFoAUUxNXQ81Z60OJVP62UaXZLZvMT2swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MGQ4ZGEyZC1hNTA2LTQ3NjMtYmMzYy1lMjgwYmY3NTE3YTQvMC81MzEzNTc0M0NE NTlFQjQzODk1NEZFQjY1MUE1RDkyRDlCQ0M0RjZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTMxMzU3NDNDRDU5RUI0Mzg5NTRGRUI2NTFBNUQ5MkQ5QkND NEY2Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjBkOGRhMmQtYTUwNi00NzYzLWJj M2MtZTI4MGJmNzUxN2E0LzAvNTMxMzU3NDNDRDU5RUI0Mzg5NTRGRUI2NTFBNUQ5 MkQ5QkNDNEY2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGeZeT6DJNjrpL3H59e6/XDwt8wgXjuasgLx POBqJDzQKfBi+iDY3kucGT+mO95T5xQm+9K7fi3T3xZFxuHKZtsD6Qgvl6NgrNpy JZlB557tyWmI0JA7InG5F+px9gVHxFjDyifnbV8hV6tDDIADMJRsJIGZBNh7G+jm UXT9KeAtJEbpXDxxkJqSrmrdJQAd2NCZ7uUZwEOdee1QNPAsZHr5BKYX7AaQhQ1X e1c+Ur74JrKUmCXiV4HQZ+Ftdku8EY4TIbek9mGwmQOhDsSS0XLOWR2nxEPe/N6g dg+eSGd6ukvbyk6LdC6/fk1IrpWXd28tWSA7U1SWYWnm6107cCs= -----END CERTIFICATE-----Generated at Fri May 9 14:21:55 2025 by rpki-client