$ rpki-client -vvf repo-rpki.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.mft File: 5BD341A6D46AF52CFF23A5D1E2589494EEACA270.mft (raw, json) Hash identifier: IaaVrSx1oFCc8hSleF11SoE0d75GSANEXHYZADGVSgM= Subject key identifier: E2:81:DC:28:4C:44:99:97:99:20:57:D1:59:AA:17:06:EB:3A:76:CE Authority key identifier: 5B:D3:41:A6:D4:6A:F5:2C:FF:23:A5:D1:E2:58:94:94:EE:AC:A2:70 Certificate issuer: /CN=5BD341A6D46AF52CFF23A5D1E2589494EEACA270 Certificate serial: 14CF0DB8241D23F948B0880461A2D650FBC50969 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.mft Manifest number: 0250 Signing time: Fri 25 Apr 2025 10:40:48 +0000 Manifest this update: Fri 25 Apr 2025 10:35:48 +0000 Manifest next update: Mon 28 Apr 2025 15:34:48 +0000 Files and hashes: 1: 5BD341A6D46AF52CFF23A5D1E2589494EEACA270.crl (hash: LwTn3JEXYMyx91IhdHnq0L7+XvWj+ZeBQ0ipZV7mRhI=) 2: 3130332e3137392e36362e302f32332d3234203d3e20313531303030.roa (hash: 3ytI4WNdkarTA98AKzILbdHeDtsgun+xePSvAI/3j/w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.crl rsync://repo-rpki.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 14:02:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:cf:0d:b8:24:1d:23:f9:48:b0:88:04:61:a2:d6:50:fb:c5:09:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5BD341A6D46AF52CFF23A5D1E2589494EEACA270 Validity Not Before: Apr 25 10:35:48 2025 GMT Not After : Apr 28 15:34:48 2025 GMT Subject: CN=E281DC284C449997992057D159AA1706EB3A76CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b7:7d:92:2f:db:65:70:24:6a:ea:e4:66:fb: c4:24:31:60:87:14:dc:4b:c4:b2:ce:65:ad:05:e3: 10:a3:05:26:f7:cc:f3:4e:dd:5b:55:dc:9c:71:ab: 93:d4:e3:29:d4:6a:cd:f5:dd:df:a2:6e:e0:ae:da: 12:b5:74:18:8c:82:43:f1:a1:82:ac:49:9a:9c:79: b2:ad:da:eb:a7:59:01:13:8f:01:85:a7:b3:74:b4: 57:32:51:ae:f0:58:86:59:7d:d1:12:7b:7e:25:db: df:d8:68:42:b8:4c:71:bb:4d:71:50:ce:b5:ac:41: c2:db:98:45:c9:e3:ea:fb:6e:cf:dd:d9:97:6e:4d: 1e:46:5d:9a:59:c3:0f:46:94:a1:34:25:65:20:a7: e0:31:a8:11:9a:c4:51:91:72:d2:c6:e7:f8:77:9c: f6:e0:64:81:d4:bb:fb:5f:6a:29:2e:d6:fd:51:73: 53:11:7e:a5:86:c8:5a:1e:47:d7:7c:c4:fa:93:e8: 55:41:a3:ea:27:15:f1:be:5a:a2:97:a3:e9:84:46: fc:97:a7:b2:fe:01:7b:12:9c:05:c1:b1:c1:76:d9: 06:5d:ed:fa:eb:bb:c9:5c:84:0a:c0:5f:53:5d:dd: 72:ff:ff:25:0d:88:03:eb:94:65:78:ae:99:51:21: 1f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:81:DC:28:4C:44:99:97:99:20:57:D1:59:AA:17:06:EB:3A:76:CE X509v3 Authority Key Identifier: keyid:5B:D3:41:A6:D4:6A:F5:2C:FF:23:A5:D1:E2:58:94:94:EE:AC:A2:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e12743d-d56d-4a77-90e2-c52e6dfe06c2/0/5BD341A6D46AF52CFF23A5D1E2589494EEACA270.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:0a:bd:1e:0e:d0:af:79:59:82:a4:e0:de:8b:fb:62:17:a9: 1e:ee:b4:96:1b:2c:c0:a6:8c:c4:98:fb:65:1e:9f:62:bd:66: 22:e4:12:09:a2:63:6d:18:8c:55:e8:2d:1f:d5:b0:b1:ec:ba: 8f:75:95:ec:ce:52:22:6b:3d:ab:7a:98:83:49:ff:17:c0:cb: d5:57:30:95:3e:98:b6:3e:88:39:56:a1:a8:70:2b:7c:cc:b0: 58:48:b0:83:1c:32:96:82:6f:3e:88:4b:b6:7e:b4:12:e1:0b: 5e:b7:2a:76:ae:6e:89:0d:00:69:73:4e:b1:80:f9:c3:c1:1f: 33:16:4a:ab:4a:18:47:1d:06:ff:5a:51:98:22:92:28:85:c6: 55:30:c5:42:c8:e0:dc:ea:d5:31:c0:f6:cd:19:31:3b:7a:00: 9a:04:3c:ca:9e:24:bf:5b:f4:32:c6:f2:34:c4:66:4c:90:1c: bb:7f:ef:05:fd:a1:ee:24:0b:5c:63:7b:4c:06:4a:44:af:23: d2:c6:22:85:c9:60:fd:08:c6:b1:cc:2d:13:ca:7a:00:cd:d3: f4:9c:19:6c:ba:ef:12:1d:b8:af:da:f4:46:53:52:ff:07:63: 60:77:a4:05:24:a7:71:e7:db:6b:ca:68:23:79:49:fb:0b:b9: d7:30:08:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFM8NuCQdI/lIsIgEYaLWUPvFCWkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUJEMzQxQTZENDZBRjUyQ0ZGMjNBNUQxRTI1ODk0OTRF RUFDQTI3MDAeFw0yNTA0MjUxMDM1NDhaFw0yNTA0MjgxNTM0NDhaMDMxMTAvBgNV BAMTKEUyODFEQzI4NEM0NDk5OTc5OTIwNTdEMTU5QUExNzA2RUIzQTc2Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLt32SL9tlcCRq6uRm+8QkMWCH FNxLxLLOZa0F4xCjBSb3zPNO3VtV3Jxxq5PU4ynUas313d+ibuCu2hK1dBiMgkPx oYKsSZqcebKt2uunWQETjwGFp7N0tFcyUa7wWIZZfdESe34l29/YaEK4THG7TXFQ zrWsQcLbmEXJ4+r7bs/d2ZduTR5GXZpZww9GlKE0JWUgp+AxqBGaxFGRctLG5/h3 nPbgZIHUu/tfaiku1v1Rc1MRfqWGyFoeR9d8xPqT6FVBo+onFfG+WqKXo+mERvyX p7L+AXsSnAXBscF22QZd7frru8lchArAX1Nd3XL//yUNiAPrlGV4rplRIR/NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4oHcKExEmZeZIFfRWaoXBus6ds4wHwYDVR0j BBgwFoAUW9NBptRq9Sz/I6XR4liUlO6sonAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTEyNzQzZC1kNTZkLTRhNzctOTBlMi1jNTJlNmRmZTA2YzIvMC81QkQzNDFBNkQ0 NkFGNTJDRkYyM0E1RDFFMjU4OTQ5NEVFQUNBMjcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUJEMzQxQTZENDZBRjUyQ0ZGMjNBNUQxRTI1ODk0OTRFRUFD QTI3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2UxMjc0M2QtZDU2ZC00YTc3LTkw ZTItYzUyZTZkZmUwNmMyLzAvNUJEMzQxQTZENDZBRjUyQ0ZGMjNBNUQxRTI1ODk0 OTRFRUFDQTI3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEsKvR4O0K95WYKk4N6L+2IXqR7utJYbLMCm jMSY+2Uen2K9ZiLkEgmiY20YjFXoLR/VsLHsuo91lezOUiJrPat6mINJ/xfAy9VX MJU+mLY+iDlWoahwK3zMsFhIsIMcMpaCbz6IS7Z+tBLhC163KnaubokNAGlzTrGA +cPBHzMWSqtKGEcdBv9aUZgikiiFxlUwxULI4Nzq1THA9s0ZMTt6AJoEPMqeJL9b 9DLG8jTEZkyQHLt/7wX9oe4kC1xje0wGSkSvI9LGIoXJYP0IxrHMLRPKegDN0/Sc GWy67xIduK/a9EZTUv8HY2B3pAUkp3Hn22vKaCN5SfsLudcwCCg= -----END CERTIFICATE-----Generated at Fri Apr 25 12:54:06 2025 by rpki-client on console.sobornost.net