$ rpki-client -vvf repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.mft File: 5F4C49641E1677408C44A096E9E7E709A4580B39.mft (raw, json) Hash identifier: KYsW8mvLv4DAlgqO+ZjrEVxw2wdR6U0Jq3JbXKfb3HA= Subject key identifier: 04:35:AC:7F:58:27:11:58:9C:B2:F1:D8:E3:D0:AF:F5:FE:DC:DB:56 Authority key identifier: 5F:4C:49:64:1E:16:77:40:8C:44:A0:96:E9:E7:E7:09:A4:58:0B:39 Certificate issuer: /CN=5F4C49641E1677408C44A096E9E7E709A4580B39 Certificate serial: 44FAF6F9BBBE928E03B41AF60DC06C8C0D73FD1F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5F4C49641E1677408C44A096E9E7E709A4580B39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.mft Manifest number: 74 Signing time: Thu 08 May 2025 12:01:03 +0000 Manifest this update: Thu 08 May 2025 11:56:03 +0000 Manifest next update: Sun 11 May 2025 14:36:03 +0000 Files and hashes: 1: 3135372e31352e3131322e302f32342d3234203d3e20313532333639.roa (hash: Ny3wqjqU4wZmZF8Id2PrnXjiWBubZRNTcTs91ozTMeM=) 2: 3135372e31352e3131332e302f32342d3234203d3e20313532333639.roa (hash: RFhGHCb7fi7+5E4cFrD0wJlCJ5E75WvgEwQ51mKjbic=) 3: 5F4C49641E1677408C44A096E9E7E709A4580B39.crl (hash: HQ7gepHmt2VuFZ/f+DRRva2xaqD+S53S3WJZq93wGz0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.crl rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5F4C49641E1677408C44A096E9E7E709A4580B39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 14:36:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:fa:f6:f9:bb:be:92:8e:03:b4:1a:f6:0d:c0:6c:8c:0d:73:fd:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F4C49641E1677408C44A096E9E7E709A4580B39 Validity Not Before: May 8 11:56:03 2025 GMT Not After : May 11 14:36:03 2025 GMT Subject: CN=0435AC7F582711589CB2F1D8E3D0AFF5FEDCDB56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e2:84:09:24:54:39:8c:92:8a:25:9e:62:d9: 1d:f3:aa:a7:f3:72:27:23:d7:6b:cd:3c:51:a1:46: 44:e9:9f:e5:b1:6c:13:3a:3f:44:e9:1e:b7:18:00: c0:ff:f3:f6:b2:69:82:b8:46:69:6b:e7:d5:86:18: ad:4c:c0:bb:4f:f5:e1:c2:59:85:df:f1:60:88:ed: 2a:8d:09:b1:58:5d:e0:c3:1a:68:3a:71:54:81:ab: 99:98:bb:ca:9e:26:4c:73:7c:cb:3b:c4:76:8c:82: 74:f7:5d:b5:d9:2c:ce:16:d5:04:32:28:f5:1b:e9: 6c:17:87:1b:fc:04:c1:2f:b1:95:01:ef:d3:82:60: 97:91:4e:1f:15:74:1d:2e:01:cb:f4:46:d5:37:ec: a1:db:38:d7:0d:56:f9:c4:1c:33:f6:95:be:74:64: de:65:74:c2:73:6e:1c:f6:27:df:67:4c:2b:55:60: 01:19:d3:71:2a:97:d8:8f:21:38:d2:e3:5f:f7:6c: 5c:b5:0f:11:df:1d:f7:71:7e:0b:31:1a:c2:71:5c: 3a:b4:ed:f8:b4:22:e1:13:e6:7b:0a:4d:09:4d:75: bc:61:c2:1c:9a:ca:63:5d:8c:b8:c5:7b:14:10:ed: c3:37:87:42:1e:c9:2e:b4:91:44:4f:49:fa:81:0d: ec:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:35:AC:7F:58:27:11:58:9C:B2:F1:D8:E3:D0:AF:F5:FE:DC:DB:56 X509v3 Authority Key Identifier: keyid:5F:4C:49:64:1E:16:77:40:8C:44:A0:96:E9:E7:E7:09:A4:58:0B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/5F4C49641E1677408C44A096E9E7E709A4580B39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f191f55d-e382-4583-99cf-71a4717e7f09/0/5F4C49641E1677408C44A096E9E7E709A4580B39.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:10:7c:03:36:b0:81:af:4a:af:17:ea:a7:7a:95:c4:5d:7e: bd:50:76:41:44:0a:01:f1:4f:68:57:0e:99:9b:a7:77:65:3c: 5f:08:0a:65:fa:99:de:71:8b:42:6e:1b:80:93:b5:e7:00:01: 1d:2d:87:97:2c:16:0b:a3:5f:fc:a3:5e:f7:9e:3a:78:94:a6: 33:dd:11:5a:11:29:d2:88:a2:fe:9d:4e:37:54:b1:4b:01:8b: c2:67:2f:e7:ec:b6:c5:7c:54:ac:94:89:ef:3a:a5:4f:ce:0b: 51:7f:10:e3:6a:23:d5:87:1a:10:13:52:44:e8:53:6d:9d:01: a6:b0:e8:93:80:9a:54:d0:a9:31:43:d7:6e:d1:65:7a:28:60: 62:98:bf:be:a2:51:93:2a:26:b2:ad:39:50:5d:8d:2a:06:8f: 10:f7:7c:9c:95:c9:8a:ff:53:2e:6c:af:c2:99:5c:94:37:c3: bf:8a:df:59:f1:69:5d:b6:ae:ff:80:45:b2:73:04:25:29:24: da:0b:ad:b3:95:a4:57:53:fe:27:a8:77:b7:34:b3:ba:ed:14: 3a:32:62:ee:d0:95:91:6b:da:30:d4:59:4e:78:ec:88:74:96: bf:4c:82:60:fc:fd:0d:0e:4b:de:3c:79:1c:c3:e0:de:11:cd: 62:84:0d:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURPr2+bu+ko4DtBr2DcBsjA1z/R8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUY0QzQ5NjQxRTE2Nzc0MDhDNDRBMDk2RTlFN0U3MDlB NDU4MEIzOTAeFw0yNTA1MDgxMTU2MDNaFw0yNTA1MTExNDM2MDNaMDMxMTAvBgNV BAMTKDA0MzVBQzdGNTgyNzExNTg5Q0IyRjFEOEUzRDBBRkY1RkVEQ0RCNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj4oQJJFQ5jJKKJZ5i2R3zqqfz cicj12vNPFGhRkTpn+WxbBM6P0TpHrcYAMD/8/ayaYK4Rmlr59WGGK1MwLtP9eHC WYXf8WCI7SqNCbFYXeDDGmg6cVSBq5mYu8qeJkxzfMs7xHaMgnT3XbXZLM4W1QQy KPUb6WwXhxv8BMEvsZUB79OCYJeRTh8VdB0uAcv0RtU37KHbONcNVvnEHDP2lb50 ZN5ldMJzbhz2J99nTCtVYAEZ03Eql9iPITjS41/3bFy1DxHfHfdxfgsxGsJxXDq0 7fi0IuET5nsKTQlNdbxhwhyaymNdjLjFexQQ7cM3h0IeyS60kURPSfqBDexXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBDWsf1gnEVicsvHY49Cv9f7c21YwHwYDVR0j BBgwFoAUX0xJZB4Wd0CMRKCW6efnCaRYCzkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MTkxZjU1ZC1lMzgyLTQ1ODMtOTljZi03MWE0NzE3ZTdmMDkvMC81RjRDNDk2NDFF MTY3NzQwOEM0NEEwOTZFOUU3RTcwOUE0NTgwQjM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNUY0QzQ5NjQxRTE2Nzc0MDhDNDRBMDk2RTlFN0U3MDlBNDU4 MEIzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjE5MWY1NWQtZTM4Mi00NTgzLTk5 Y2YtNzFhNDcxN2U3ZjA5LzAvNUY0QzQ5NjQxRTE2Nzc0MDhDNDRBMDk2RTlFN0U3 MDlBNDU4MEIzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABMQfAM2sIGvSq8X6qd6lcRdfr1QdkFECgHx T2hXDpmbp3dlPF8ICmX6md5xi0JuG4CTtecAAR0th5csFgujX/yjXveeOniUpjPd EVoRKdKIov6dTjdUsUsBi8JnL+fstsV8VKyUie86pU/OC1F/EONqI9WHGhATUkTo U22dAaaw6JOAmlTQqTFD127RZXooYGKYv76iUZMqJrKtOVBdjSoGjxD3fJyVyYr/ Uy5sr8KZXJQ3w7+K31nxaV22rv+ARbJzBCUpJNoLrbOVpFdT/ieod7c0s7rtFDoy Yu7QlZFr2jDUWU547Ih0lr9MgmD8/Q0OS948eRzD4N4RzWKEDWc= -----END CERTIFICATE-----Generated at Sat May 10 09:53:07 2025 by rpki-client