$ rpki-client -vvf repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.mft File: 5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.mft (raw, json) Hash identifier: J1md3h0hNkGPIBt7fYhNy6RHqrU9NJ1ZQO8ZCxrUxDQ= Subject key identifier: 1A:87:B5:17:B4:EA:5B:F0:C0:50:48:1D:1A:93:D5:62:3A:60:E0:31 Authority key identifier: 51:97:E2:A7:8B:BA:1E:8C:9E:B8:08:E4:5A:99:DD:2B:E7:B4:12:97 Certificate issuer: /CN=5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297 Certificate serial: 5C3228DAE575D81FD49A9C94DA67D107C41B2B17 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.mft Manifest number: 016E Signing time: Fri 25 Apr 2025 19:31:23 +0000 Manifest this update: Fri 25 Apr 2025 19:26:23 +0000 Manifest next update: Mon 28 Apr 2025 22:19:23 +0000 Files and hashes: 1: 3130332e3132392e32322e302f32332d3234203d3e20313335343738.roa (hash: FwEnmWvpQPi3X//OQNwFe+4W6d+oidU+6VtbWJyAezc=) 2: 5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.crl (hash: 8+1BjqTxcXPdS9J8n+1k7JYZzqR9epGtnTf2RsNUdZM=) 3: 3130332e3132392e32302e302f32332d3234203d3e20313335343738.roa (hash: YByKLIatw2VYf9uIqdHXeYjHhsev8w+x71A+omd++qw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.crl rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Apr 2025 22:19:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:32:28:da:e5:75:d8:1f:d4:9a:9c:94:da:67:d1:07:c4:1b:2b:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297 Validity Not Before: Apr 25 19:26:23 2025 GMT Not After : Apr 28 22:19:23 2025 GMT Subject: CN=1A87B517B4EA5BF0C050481D1A93D5623A60E031 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9b:d0:5f:1e:4c:1b:eb:b3:bb:fe:ec:18:bb: c2:c5:29:56:31:43:0c:39:99:28:fd:6e:4d:c3:c9: 2d:bb:5f:c1:20:7e:bc:a9:21:4d:d7:ff:75:36:2a: 42:14:78:a3:c4:77:c2:3f:24:11:5f:ec:f9:80:ed: 9f:d3:56:55:0a:e5:0f:7a:3a:35:ae:11:6f:ef:dc: 11:26:d2:79:d8:8a:05:e5:ca:ed:87:0b:52:52:bd: f8:49:48:ea:c1:c9:08:1c:5e:a5:d0:2c:2f:4a:44: c7:6f:c4:81:34:93:0b:48:e3:81:73:ba:c9:cd:92: 49:b9:9f:5e:e4:7d:e8:7f:69:72:6a:6d:a2:e2:51: 5b:bf:2e:c8:85:2c:2d:49:82:94:81:ad:9a:3a:44: 08:c8:96:44:2f:fe:91:2f:0b:63:00:16:91:f8:41: 04:7d:18:e9:af:6e:01:b6:f7:04:30:31:85:7b:e6: dc:85:68:d0:0e:bb:9e:17:f1:a6:61:d6:60:4a:e2: 1b:8f:e8:5e:eb:fd:9a:34:41:79:4a:95:56:ed:5c: d7:57:39:55:92:37:99:8a:ee:cd:ad:79:e6:7a:e5: 32:b9:dd:dd:88:7e:8d:8e:d6:52:d5:eb:4f:fd:e3: d2:12:24:f2:bd:49:18:2c:e5:3b:39:01:47:bb:83: ec:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:87:B5:17:B4:EA:5B:F0:C0:50:48:1D:1A:93:D5:62:3A:60:E0:31 X509v3 Authority Key Identifier: keyid:51:97:E2:A7:8B:BA:1E:8C:9E:B8:08:E4:5A:99:DD:2B:E7:B4:12:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76542839-2858-49f0-acdf-fa7d3ab9c558/0/5197E2A78BBA1E8C9EB808E45A99DD2BE7B41297.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:24:08:c0:d9:be:d7:8b:f8:95:ec:c2:7f:35:20:a7:24:a1: 30:13:aa:0f:2f:88:3c:92:53:2e:27:38:49:86:1d:5a:81:27: 50:32:d6:52:c4:01:bc:35:d2:f5:c2:79:ac:e6:f9:b6:4a:9f: 90:df:1f:e8:18:7e:15:d6:50:b2:fa:fd:61:71:28:bd:d9:7f: 36:2a:6f:4e:66:1d:11:11:f7:62:ef:3f:b8:e7:b9:72:a2:e8: 31:ef:06:e8:f9:bc:a0:7b:8d:a8:a8:30:79:9a:65:87:2b:bc: fc:a2:fd:b2:b2:e8:48:f9:b2:ed:73:84:32:36:d4:00:76:7d: aa:07:f4:18:b6:fc:42:ee:fa:88:ef:80:39:be:6c:31:df:91: f4:a9:ca:c1:cc:95:be:9c:2e:12:a7:07:73:5f:51:b0:f0:60: 2e:12:2f:10:be:b7:9b:33:0e:08:0b:23:1d:2c:c4:91:be:23: ae:b2:f6:fc:44:5f:2d:b1:d3:8c:94:03:35:df:ee:6d:db:17: 8c:8f:80:fb:81:ca:91:07:7e:38:63:24:28:7f:92:c3:86:60: 94:69:2a:60:46:65:ef:81:ca:03:80:2c:79:1d:58:fd:76:46: d0:08:c1:35:fc:76:fd:4a:df:b9:d8:1b:62:da:1c:95:ad:96: 65:d4:a3:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXDIo2uV12B/UmpyU2mfRB8QbKxcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE5N0UyQTc4QkJBMUU4QzlFQjgwOEU0NUE5OUREMkJF N0I0MTI5NzAeFw0yNTA0MjUxOTI2MjNaFw0yNTA0MjgyMjE5MjNaMDMxMTAvBgNV BAMTKDFBODdCNTE3QjRFQTVCRjBDMDUwNDgxRDFBOTNENTYyM0E2MEUwMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6m9BfHkwb67O7/uwYu8LFKVYx Qww5mSj9bk3DyS27X8EgfrypIU3X/3U2KkIUeKPEd8I/JBFf7PmA7Z/TVlUK5Q96 OjWuEW/v3BEm0nnYigXlyu2HC1JSvfhJSOrByQgcXqXQLC9KRMdvxIE0kwtI44Fz usnNkkm5n17kfeh/aXJqbaLiUVu/LsiFLC1JgpSBrZo6RAjIlkQv/pEvC2MAFpH4 QQR9GOmvbgG29wQwMYV75tyFaNAOu54X8aZh1mBK4huP6F7r/Zo0QXlKlVbtXNdX OVWSN5mK7s2teeZ65TK53d2Ifo2O1lLV60/949ISJPK9SRgs5Ts5AUe7g+xpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGoe1F7TqW/DAUEgdGpPVYjpg4DEwHwYDVR0j BBgwFoAUUZfip4u6HoyeuAjkWpndK+e0EpcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjU0MjgzOS0yODU4LTQ5ZjAtYWNkZi1mYTdkM2FiOWM1NTgvMC81MTk3RTJBNzhC QkExRThDOUVCODA4RTQ1QTk5REQyQkU3QjQxMjk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTE5N0UyQTc4QkJBMUU4QzlFQjgwOEU0NUE5OUREMkJFN0I0 MTI5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzY1NDI4MzktMjg1OC00OWYwLWFj ZGYtZmE3ZDNhYjljNTU4LzAvNTE5N0UyQTc4QkJBMUU4QzlFQjgwOEU0NUE5OURE MkJFN0I0MTI5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFskCMDZvteL+JXswn81IKckoTATqg8viDyS Uy4nOEmGHVqBJ1Ay1lLEAbw10vXCeazm+bZKn5DfH+gYfhXWULL6/WFxKL3ZfzYq b05mHRER92LvP7jnuXKi6DHvBuj5vKB7jaioMHmaZYcrvPyi/bKy6Ej5su1zhDI2 1AB2faoH9Bi2/ELu+ojvgDm+bDHfkfSpysHMlb6cLhKnB3NfUbDwYC4SLxC+t5sz DggLIx0sxJG+I66y9vxEXy2x04yUAzXf7m3bF4yPgPuBypEHfjhjJCh/ksOGYJRp KmBGZe+BygOALHkdWP12RtAIwTX8dv1K37nYG2LaHJWtlmXUo04= -----END CERTIFICATE-----Generated at Fri Apr 25 22:07:25 2025 by rpki-client on console.sobornost.net