$ rpki-client -vvf repo-rpki.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/05BC764F85F9F88CE41FD879C6125E65117E8E79.mft File: 05BC764F85F9F88CE41FD879C6125E65117E8E79.mft (raw, json) Hash identifier: 7R/rzuwM2vrT76DMiHgRgM2oqe1D1yN80vcqfXUsH88= Subject key identifier: 98:FE:E7:9D:C0:4F:9C:20:B9:92:11:21:94:96:B2:4F:9D:BE:5E:F8 Authority key identifier: 05:BC:76:4F:85:F9:F8:8C:E4:1F:D8:79:C6:12:5E:65:11:7E:8E:79 Certificate issuer: /CN=05BC764F85F9F88CE41FD879C6125E65117E8E79 Certificate serial: 0FD19E611CC23A34EEE3293C4665ACB9255EC2B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05BC764F85F9F88CE41FD879C6125E65117E8E79.cer Subject info access: rsync://repo-rpki.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/05BC764F85F9F88CE41FD879C6125E65117E8E79.mft Manifest number: 04C5 Signing time: Wed 23 Apr 2025 16:31:24 +0000 Manifest this update: Wed 23 Apr 2025 16:26:24 +0000 Manifest next update: Sat 26 Apr 2025 17:05:24 +0000 Files and hashes: 1: 05BC764F85F9F88CE41FD879C6125E65117E8E79.crl (hash: d6h/HVsOtEMt1h9sBd2CYR6zMpO2xrr7lCpkGOmGgO4=) 2: 3130332e39362e3131362e302f32342d3234203d3e20313335343531.roa (hash: MopGe9c6fWHZFmr4mBLJ6IqRrWkyYuylfNEiFDLR8sE=) 3: 3130332e39362e3131382e302f32332d3234203d3e20313335343531.roa (hash: YDbaOOS1e3bHhEmSpiBQYE/07b//Wfxp3iDpuyHBong=) 4: 3130332e36352e3233382e302f32342d3234203d3e20313335343531.roa (hash: E/Et/nouqQN7V7Cdn4sY4kSLk8VSAcM0Tn19ZER1IPk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/05BC764F85F9F88CE41FD879C6125E65117E8E79.crl rsync://repo-rpki.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/05BC764F85F9F88CE41FD879C6125E65117E8E79.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05BC764F85F9F88CE41FD879C6125E65117E8E79.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 17:05:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:d1:9e:61:1c:c2:3a:34:ee:e3:29:3c:46:65:ac:b9:25:5e:c2:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05BC764F85F9F88CE41FD879C6125E65117E8E79 Validity Not Before: Apr 23 16:26:24 2025 GMT Not After : Apr 26 17:05:24 2025 GMT Subject: CN=98FEE79DC04F9C20B99211219496B24F9DBE5EF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:06:15:4e:66:2c:fc:ee:4d:af:b4:a8:15:3c: 97:2f:8c:0f:49:8d:21:13:4b:85:ab:3d:d2:cc:74: a4:47:78:68:c1:5b:01:bf:ae:37:d4:ee:5e:05:be: 0b:2d:58:b4:16:71:0e:7f:d6:f6:ac:5e:29:08:68: 4a:d6:9d:f8:65:71:b3:dd:67:ba:fd:c3:ee:60:98: cd:f5:fc:59:eb:4b:2f:c6:41:19:2b:86:92:0d:ed: 6a:45:bf:67:58:d9:8d:69:dc:7a:e7:06:02:a5:73: d7:2b:4a:70:86:c0:9f:8e:8d:35:a0:75:f4:bb:67: ab:57:53:d6:06:9c:d1:4b:ef:e6:77:a8:e6:bb:2c: df:72:a7:6f:c4:cb:15:5b:96:f2:21:2d:57:75:29: b6:52:2d:a6:8d:f0:fa:c9:17:a8:93:e3:f8:8b:22: 03:8a:c6:fc:2b:34:07:05:96:46:0c:61:af:70:f0: cc:3a:5d:74:4a:7d:d2:56:9b:d8:04:de:67:61:32: ca:55:e7:58:85:66:a7:18:7d:fd:38:dd:db:36:b3: 23:5d:8e:06:dc:c7:4e:c4:f9:29:e7:75:de:41:81: 29:a6:a8:4d:88:3f:b2:ed:b5:44:76:ce:4e:29:02: 17:ca:65:87:fe:4c:f5:fe:d1:33:72:a8:0b:cd:34: 10:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:FE:E7:9D:C0:4F:9C:20:B9:92:11:21:94:96:B2:4F:9D:BE:5E:F8 X509v3 Authority Key Identifier: keyid:05:BC:76:4F:85:F9:F8:8C:E4:1F:D8:79:C6:12:5E:65:11:7E:8E:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/05BC764F85F9F88CE41FD879C6125E65117E8E79.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05BC764F85F9F88CE41FD879C6125E65117E8E79.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/05BC764F85F9F88CE41FD879C6125E65117E8E79.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:74:3a:74:6d:8b:ea:40:43:2f:c8:8a:a6:79:4b:ab:b3:9f: ed:c6:66:37:97:b7:5b:b9:10:7f:e1:84:8b:ee:1a:f1:3c:f6: a9:fa:46:2e:8c:2c:2b:3d:45:6a:b3:e5:c2:ac:70:4c:a2:d5: fc:ab:fd:06:f6:ba:fa:e1:34:c3:60:88:81:f3:3e:bb:1e:9e: 8f:ca:91:2d:65:35:27:7c:20:59:42:83:2e:9b:97:b0:2f:c8: 6c:eb:71:b5:65:e1:ed:c7:6d:07:05:92:a4:9c:dc:b1:ee:46: b8:d9:4f:12:52:74:0b:a5:34:16:9d:aa:a1:23:58:39:27:3b: 56:1e:8f:d4:89:89:61:4f:25:7c:d8:10:2d:8b:03:1a:ad:b2: 9b:1e:42:89:7e:1b:8c:9d:89:4e:e3:61:0e:1a:9b:f0:44:e5: d9:49:8b:fc:34:30:5c:dc:48:a6:86:86:10:8d:c4:71:8c:cd: 06:c6:06:bf:dd:98:1e:d4:35:4b:e0:a9:5a:08:8f:ab:96:ec: 7e:89:d7:1f:13:68:69:6b:a8:a3:ba:22:83:70:e0:9d:f4:05: 79:15:06:6b:e7:40:f6:55:7a:55:dd:a1:bc:1d:06:7f:f8:65: db:1d:96:6d:64:97:8c:d9:84:09:40:ca:73:8a:da:8b:0f:b9: 27:d5:31:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD9GeYRzCOjTu4yk8RmWsuSVewrMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDVCQzc2NEY4NUY5Rjg4Q0U0MUZEODc5QzYxMjVFNjUx MTdFOEU3OTAeFw0yNTA0MjMxNjI2MjRaFw0yNTA0MjYxNzA1MjRaMDMxMTAvBgNV BAMTKDk4RkVFNzlEQzA0RjlDMjBCOTkyMTEyMTk0OTZCMjRGOURCRTVFRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDABhVOZiz87k2vtKgVPJcvjA9J jSETS4WrPdLMdKRHeGjBWwG/rjfU7l4FvgstWLQWcQ5/1vasXikIaErWnfhlcbPd Z7r9w+5gmM31/FnrSy/GQRkrhpIN7WpFv2dY2Y1p3HrnBgKlc9crSnCGwJ+OjTWg dfS7Z6tXU9YGnNFL7+Z3qOa7LN9yp2/EyxVblvIhLVd1KbZSLaaN8PrJF6iT4/iL IgOKxvwrNAcFlkYMYa9w8Mw6XXRKfdJWm9gE3mdhMspV51iFZqcYff043ds2syNd jgbcx07E+Snndd5BgSmmqE2IP7LttUR2zk4pAhfKZYf+TPX+0TNyqAvNNBCvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmP7nncBPnCC5khEhlJayT52+XvgwHwYDVR0j BBgwFoAUBbx2T4X5+IzkH9h5xhJeZRF+jnkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MWMxZDU2ZS0xNWM2LTRiNjUtYTlhOC1mOTBhZDZmYmEwOTAvMC8wNUJDNzY0Rjg1 RjlGODhDRTQxRkQ4NzlDNjEyNUU2NTExN0U4RTc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDVCQzc2NEY4NUY5Rjg4Q0U0MUZEODc5QzYxMjVFNjUxMTdF OEU3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTFjMWQ1NmUtMTVjNi00YjY1LWE5 YTgtZjkwYWQ2ZmJhMDkwLzAvMDVCQzc2NEY4NUY5Rjg4Q0U0MUZEODc5QzYxMjVF NjUxMTdFOEU3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMF0OnRti+pAQy/IiqZ5S6uzn+3GZjeXt1u5 EH/hhIvuGvE89qn6Ri6MLCs9RWqz5cKscEyi1fyr/Qb2uvrhNMNgiIHzPrseno/K kS1lNSd8IFlCgy6bl7AvyGzrcbVl4e3HbQcFkqSc3LHuRrjZTxJSdAulNBadqqEj WDknO1Yej9SJiWFPJXzYEC2LAxqtspseQol+G4ydiU7jYQ4am/BE5dlJi/w0MFzc SKaGhhCNxHGMzQbGBr/dmB7UNUvgqVoIj6uW7H6J1x8TaGlrqKO6IoNw4J30BXkV BmvnQPZVelXdobwdBn/4Zdsdlm1kl4zZhAlAynOK2osPuSfVMYc= -----END CERTIFICATE-----Generated at Wed Apr 23 19:50:40 2025 by rpki-client on console.sobornost.net