$ rpki-client -vvf repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft File: 23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft (raw, json) Hash identifier: aiZJA7VMZ6k42zgu2zNsDfO6PAUesQWfDxmIMWoSArY= Subject key identifier: 52:17:77:D2:70:A5:77:DD:26:78:19:FD:4F:76:68:CA:6C:4B:C8:83 Authority key identifier: 23:47:5A:86:BB:5C:51:5D:DD:77:53:B6:55:5E:26:7A:3F:5C:28:F4 Certificate issuer: /CN=23475A86BB5C515DDD7753B6555E267A3F5C28F4 Certificate serial: 06005396418325EE28F238A7EB48CB9CC354EC46 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft Manifest number: 5F Signing time: Fri 09 May 2025 05:30:35 +0000 Manifest this update: Fri 09 May 2025 05:25:35 +0000 Manifest next update: Mon 12 May 2025 11:26:35 +0000 Files and hashes: 1: 3136302e32322e33302e302f32342d3234203d3e20313532373938.roa (hash: 1gjKyDW4KHd430zjH8eS6Hf0gzUPhwcmOJ+5ePkv/wI=) 2: 3136302e32322e33312e302f32342d3234203d3e20313532373938.roa (hash: VEUp2w3yPHnRqBLCf0zsUoh5RoZ8ZNdZE7XgU6xqQTk=) 3: 23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl (hash: waM9k6YWBsSpU1Co9Ax+7i3CUrn8QFpFEKpah2W5ZE4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 11:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:00:53:96:41:83:25:ee:28:f2:38:a7:eb:48:cb:9c:c3:54:ec:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23475A86BB5C515DDD7753B6555E267A3F5C28F4 Validity Not Before: May 9 05:25:35 2025 GMT Not After : May 12 11:26:35 2025 GMT Subject: CN=521777D270A577DD267819FD4F7668CA6C4BC883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:8d:e6:ab:e8:81:e6:b4:4c:e2:84:bd:52:ad: 7e:de:42:86:6f:85:8d:92:68:c0:a3:4b:2f:f6:de: 1e:89:8e:e0:79:75:8e:6f:3a:d6:9c:72:41:33:80: 17:20:fb:0a:7b:4f:91:b0:f2:27:9a:ae:7c:55:b1: c4:5e:2e:dd:c7:b5:65:3a:89:6b:9d:37:dd:99:00: 94:0b:0c:a3:b4:6e:ee:42:e4:2c:2b:cd:9a:a2:0f: 50:b5:4d:eb:89:31:e8:29:7f:50:45:dc:0b:a8:e8: 10:85:9f:d2:1a:7d:a9:9a:c1:7f:69:bb:6b:99:7a: 33:72:7f:6c:47:fa:3b:b5:76:89:32:a6:56:17:a3: 10:08:af:4a:da:6a:4c:b5:06:11:00:17:9c:c4:e0: 67:ec:dd:e6:f5:f0:ca:d8:d8:b0:84:10:2a:87:0b: 58:fc:b5:9c:b7:a7:40:7d:e5:be:8a:de:3a:37:14: ec:45:72:f7:cf:d7:c8:b7:6b:cd:c4:d6:fc:a3:23: d8:4d:8f:96:3f:78:51:aa:ae:8c:50:ac:35:b7:cd: 8d:3b:e3:dc:3e:75:d5:be:bc:fe:72:c4:39:b1:cb: 75:3d:0f:6d:82:b4:ac:08:85:52:9e:a4:65:a5:e8: 48:dd:dd:cf:b3:de:8e:c6:dc:3c:39:01:64:d0:14: d2:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:17:77:D2:70:A5:77:DD:26:78:19:FD:4F:76:68:CA:6C:4B:C8:83 X509v3 Authority Key Identifier: keyid:23:47:5A:86:BB:5C:51:5D:DD:77:53:B6:55:5E:26:7A:3F:5C:28:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/23475A86BB5C515DDD7753B6555E267A3F5C28F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f5efc413-2709-483e-a314-c5d0663df932/0/23475A86BB5C515DDD7753B6555E267A3F5C28F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:16:bb:ee:a7:ad:ba:85:e4:c6:bb:1e:8e:b2:82:50:99:04: 9b:a8:c3:55:a6:27:81:4e:2f:d8:67:92:14:63:ac:73:8c:3f: eb:46:ed:81:fa:50:b9:17:bb:3b:71:28:69:89:ad:6a:d5:4f: 7b:ce:99:db:95:4c:b3:17:c9:28:20:92:fd:6f:9f:3d:82:1a: db:57:10:f1:9d:ff:4f:21:84:e4:b1:6f:2c:bd:a9:df:a8:79: b8:3b:6c:a5:12:15:48:a5:85:67:99:df:26:94:52:fc:c3:91: 5b:02:bd:73:2a:9b:db:88:24:4f:eb:ee:6c:5d:06:78:13:9c: 67:08:50:e8:8c:28:47:0c:ee:12:69:5f:13:1c:85:3c:a4:a2: cc:cf:4a:ee:85:6a:62:2f:d9:68:ee:21:cd:ff:af:3a:cc:f7: b8:f7:bf:f0:89:01:fc:24:15:cf:a0:22:32:02:66:dc:94:58: 55:db:1f:a8:7b:8d:09:96:cb:7b:5e:ea:bb:c9:30:5b:55:12: 38:82:8b:5f:0b:1a:15:03:3c:22:b6:23:c9:7c:1e:d1:76:b0: e9:8c:b5:ad:1f:63:c0:d1:f8:42:3a:7b:72:0b:d5:ce:15:16: 01:ca:09:92:47:91:7b:cd:50:16:a7:64:88:e1:a3:a8:a3:50: 74:b1:bb:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBgBTlkGDJe4o8jin60jLnMNU7EYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjM0NzVBODZCQjVDNTE1RERENzc1M0I2NTU1RTI2N0Ez RjVDMjhGNDAeFw0yNTA1MDkwNTI1MzVaFw0yNTA1MTIxMTI2MzVaMDMxMTAvBgNV BAMTKDUyMTc3N0QyNzBBNTc3REQyNjc4MTlGRDRGNzY2OENBNkM0QkM4ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDajear6IHmtEzihL1SrX7eQoZv hY2SaMCjSy/23h6JjuB5dY5vOtacckEzgBcg+wp7T5Gw8iearnxVscReLt3HtWU6 iWudN92ZAJQLDKO0bu5C5CwrzZqiD1C1TeuJMegpf1BF3Auo6BCFn9IafamawX9p u2uZejNyf2xH+ju1dokyplYXoxAIr0raaky1BhEAF5zE4Gfs3eb18MrY2LCEECqH C1j8tZy3p0B95b6K3jo3FOxFcvfP18i3a83E1vyjI9hNj5Y/eFGqroxQrDW3zY07 49w+ddW+vP5yxDmxy3U9D22CtKwIhVKepGWl6Ejd3c+z3o7G3Dw5AWTQFNLdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUhd30nCld90meBn9T3ZoymxLyIMwHwYDVR0j BBgwFoAUI0dahrtcUV3dd1O2VV4mej9cKPQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NWVmYzQxMy0yNzA5LTQ4M2UtYTMxNC1jNWQwNjYzZGY5MzIvMC8yMzQ3NUE4NkJC NUM1MTVEREQ3NzUzQjY1NTVFMjY3QTNGNUMyOEY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjM0NzVBODZCQjVDNTE1RERENzc1M0I2NTU1RTI2N0EzRjVD MjhGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjVlZmM0MTMtMjcwOS00ODNlLWEz MTQtYzVkMDY2M2RmOTMyLzAvMjM0NzVBODZCQjVDNTE1RERENzc1M0I2NTU1RTI2 N0EzRjVDMjhGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD8Wu+6nrbqF5Ma7Ho6yglCZBJuow1WmJ4FO L9hnkhRjrHOMP+tG7YH6ULkXuztxKGmJrWrVT3vOmduVTLMXySggkv1vnz2CGttX EPGd/08hhOSxbyy9qd+oebg7bKUSFUilhWeZ3yaUUvzDkVsCvXMqm9uIJE/r7mxd BngTnGcIUOiMKEcM7hJpXxMchTykoszPSu6FamIv2WjuIc3/rzrM97j3v/CJAfwk Fc+gIjICZtyUWFXbH6h7jQmWy3te6rvJMFtVEjiCi18LGhUDPCK2I8l8HtF2sOmM ta0fY8DR+EI6e3IL1c4VFgHKCZJHkXvNUBanZIjho6ijUHSxu60= -----END CERTIFICATE-----Generated at Sun May 11 09:40:01 2025 by rpki-client