$ rpki-client -vvf repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.mft File: 5CDA120200D28E4FC66FECD60F5AFCC57E79E642.mft (raw, json) Hash identifier: Z4vZrWS2+4gHzVDbuKMFTzbw1lvg0kzUSpZ53wqOGFQ= Subject key identifier: BD:8F:D2:12:32:B6:C0:BD:2B:F4:32:E0:EE:D9:B3:78:F2:33:B7:74 Authority key identifier: 5C:DA:12:02:00:D2:8E:4F:C6:6F:EC:D6:0F:5A:FC:C5:7E:79:E6:42 Certificate issuer: /CN=5CDA120200D28E4FC66FECD60F5AFCC57E79E642 Certificate serial: 65EB0D37F1182AA8D29F7E0204BE009E07CD973D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.mft Manifest number: 0284 Signing time: Thu 24 Apr 2025 05:41:23 +0000 Manifest this update: Thu 24 Apr 2025 05:36:23 +0000 Manifest next update: Sun 27 Apr 2025 16:39:23 +0000 Files and hashes: 1: 3130332e38372e36362e302f32332d3234203d3e20313333383030.roa (hash: hZosjgusREm1QITquyfPnR/M8IfPTl6ZAS8oENoHwKA=) 2: 3130332e39342e3233382e302f32332d3234203d3e20313333383030.roa (hash: Gqjs8W/hxpL2gCxE1+hRH/WoM9HAVJhf5XiKi+bhD8c=) 3: 3130332e38372e36372e302f32342d3234203d3e20313333383030.roa (hash: SHAFGJOdQSS5ZqozGPq16khbD5estk3T1ejmGm1B3pU=) 4: 3130332e38372e36362e302f32342d3234203d3e20313333383030.roa (hash: 28vgeLNt3g9napF7ybKdFbQimDX85rDBRhlE0yU7IqI=) 5: 5CDA120200D28E4FC66FECD60F5AFCC57E79E642.crl (hash: CRjQ1Xe40Y9ouyVBn9AnY205QTheBTNfkhyycCs0h8w=) 6: 3130332e38372e36362e302f32332d3233203d3e20313333383030.roa (hash: YUNDCL4eKY/WSBYrQHBCQwjmiznybb06CPTcpquocBA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.crl rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 08:44:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:eb:0d:37:f1:18:2a:a8:d2:9f:7e:02:04:be:00:9e:07:cd:97:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5CDA120200D28E4FC66FECD60F5AFCC57E79E642 Validity Not Before: Apr 24 05:36:23 2025 GMT Not After : Apr 27 16:39:23 2025 GMT Subject: CN=BD8FD21232B6C0BD2BF432E0EED9B378F233B774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ae:d7:ed:fe:7f:48:88:95:f5:e5:bd:5f:9a: af:02:6f:5e:72:79:bb:d6:3e:12:3e:fd:dc:18:1b: a1:e7:24:44:95:f9:a9:68:bf:36:c5:d8:59:bf:b3: 0c:98:d3:c0:8f:be:09:9c:58:2d:1a:2c:c6:e5:7a: 6c:ec:83:a6:ce:cd:a2:83:b5:4b:f2:76:d3:7a:16: eb:94:f7:1f:cf:b8:63:15:08:f7:68:5b:a0:52:1b: 22:d4:c1:ad:71:29:53:c1:21:bf:47:7d:0a:97:de: 70:64:93:67:bb:fe:33:f3:69:b9:18:e0:8d:0b:8e: 9a:16:8a:2e:d7:9a:5e:a0:c0:7b:b4:cf:fa:fa:a9: 86:06:d8:7f:ea:cd:cb:0b:d7:b0:8d:cb:77:05:ef: a5:1c:f8:a5:ab:dd:93:b4:59:d3:32:98:3d:ba:c2: c6:00:56:7a:a5:59:54:5a:eb:41:8c:e1:55:ad:54: d5:06:1f:43:47:c4:eb:bf:93:c4:37:11:d2:5c:c1: 58:d6:db:aa:75:3f:66:ca:eb:95:0c:65:15:28:96: 78:a1:90:22:51:60:cf:61:a7:17:f1:32:c3:2a:b0: 8c:7e:c6:26:ac:ac:7a:5a:64:ef:61:62:cd:df:84: 6b:a3:1a:0d:41:bd:07:1b:e7:3f:1c:49:7a:f4:d8: 68:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:8F:D2:12:32:B6:C0:BD:2B:F4:32:E0:EE:D9:B3:78:F2:33:B7:74 X509v3 Authority Key Identifier: keyid:5C:DA:12:02:00:D2:8E:4F:C6:6F:EC:D6:0F:5A:FC:C5:7E:79:E6:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:28:bb:95:d2:04:69:60:3c:44:96:3d:5c:a2:c3:13:16:0c: 0a:33:3d:0f:94:1d:61:45:59:db:94:41:ac:9b:7b:ea:2d:c6: 69:b2:1a:2a:ac:68:43:46:c0:4c:17:97:12:54:38:89:fd:38: 63:f7:52:94:a1:55:31:bc:7f:6e:cd:2c:60:1c:8e:49:41:41: 3e:f6:9f:90:cb:6a:7e:8d:67:7b:d2:90:48:14:5f:bd:30:ff: 10:d8:7f:2d:1f:66:9a:f8:e1:a4:11:21:69:4c:cb:e9:be:3a: 20:72:a6:86:ee:d7:55:6e:c9:0a:c2:29:be:42:21:4c:04:ec: e9:ae:ab:6d:dc:fb:df:e6:b1:b2:3b:e2:42:0f:84:c4:d8:1d: 38:c7:0f:dc:8d:de:8e:98:dc:49:99:14:2a:67:5d:8b:c3:ab: 7d:1a:c2:b9:09:e5:6c:8f:0a:e6:9a:ed:22:88:57:72:73:59: f2:84:ef:ac:ee:57:27:cc:48:b5:e0:77:1d:0f:0f:22:84:11: d5:37:a6:20:14:b5:01:9e:2c:e3:41:c9:15:91:2c:66:c7:1f: 36:7f:08:21:e0:ff:4d:99:20:da:75:3c:b2:32:a8:48:3a:c3: 63:c9:c0:68:3e:4a:28:c3:2c:c7:48:05:e0:f9:05:fa:6b:07: 46:af:65:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZesNN/EYKqjSn34CBL4AngfNlz0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUNEQTEyMDIwMEQyOEU0RkM2NkZFQ0Q2MEY1QUZDQzU3 RTc5RTY0MjAeFw0yNTA0MjQwNTM2MjNaFw0yNTA0MjcxNjM5MjNaMDMxMTAvBgNV BAMTKEJEOEZEMjEyMzJCNkMwQkQyQkY0MzJFMEVFRDlCMzc4RjIzM0I3NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzrtft/n9IiJX15b1fmq8Cb15y ebvWPhI+/dwYG6HnJESV+alovzbF2Fm/swyY08CPvgmcWC0aLMblemzsg6bOzaKD tUvydtN6FuuU9x/PuGMVCPdoW6BSGyLUwa1xKVPBIb9HfQqX3nBkk2e7/jPzabkY 4I0LjpoWii7Xml6gwHu0z/r6qYYG2H/qzcsL17CNy3cF76Uc+KWr3ZO0WdMymD26 wsYAVnqlWVRa60GM4VWtVNUGH0NHxOu/k8Q3EdJcwVjW26p1P2bK65UMZRUolnih kCJRYM9hpxfxMsMqsIx+xiasrHpaZO9hYs3fhGujGg1BvQcb5z8cSXr02GiXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvY/SEjK2wL0r9DLg7tmzePIzt3QwHwYDVR0j BBgwFoAUXNoSAgDSjk/Gb+zWD1r8xX555kIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmFmODM1Mi1jZDY1LTRkYjctYjBjYi0wNDhiNDVlN2E0YmYvMC81Q0RBMTIwMjAw RDI4RTRGQzY2RkVDRDYwRjVBRkNDNTdFNzlFNjQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUNEQTEyMDIwMEQyOEU0RkM2NkZFQ0Q2MEY1QUZDQzU3RTc5 RTY0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjJhZjgzNTItY2Q2NS00ZGI3LWIw Y2ItMDQ4YjQ1ZTdhNGJmLzAvNUNEQTEyMDIwMEQyOEU0RkM2NkZFQ0Q2MEY1QUZD QzU3RTc5RTY0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHwou5XSBGlgPESWPVyiwxMWDAozPQ+UHWFF WduUQaybe+otxmmyGiqsaENGwEwXlxJUOIn9OGP3UpShVTG8f27NLGAcjklBQT72 n5DLan6NZ3vSkEgUX70w/xDYfy0fZpr44aQRIWlMy+m+OiBypobu11VuyQrCKb5C IUwE7Omuq23c+9/msbI74kIPhMTYHTjHD9yN3o6Y3EmZFCpnXYvDq30awrkJ5WyP Cuaa7SKIV3JzWfKE76zuVyfMSLXgdx0PDyKEEdU3piAUtQGeLONByRWRLGbHHzZ/ CCHg/02ZINp1PLIyqEg6w2PJwGg+SijDLMdIBeD5BfprB0avZWY= -----END CERTIFICATE-----Generated at Thu Apr 24 09:03:03 2025 by rpki-client on console.sobornost.net