$ rpki-client -vvf repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft File: C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft (raw, json) Hash identifier: slTaQcEd4Gs4nEPpxRD9LbCUCTMPvpj32z6ARZxxAZI= Subject key identifier: FC:85:0A:10:D1:87:FB:BE:6B:55:7A:F5:36:2A:58:E1:D4:45:F6:99 Authority key identifier: C3:0D:E7:1F:7C:AE:16:CA:2D:8D:AB:6D:01:CA:43:D7:2F:B4:FE:6E Certificate issuer: /CN=C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E Certificate serial: 31EE109168CE20D160ECF26B453F4570C7465C9A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft Manifest number: 03BB Signing time: Sun 04 May 2025 19:50:53 +0000 Manifest this update: Sun 04 May 2025 19:45:53 +0000 Manifest next update: Wed 07 May 2025 23:18:53 +0000 Files and hashes: 1: C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.crl (hash: 9G83KkecRuYnY6P32bZYvPY7hwvmm+uLZ24tqe7u8kk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.crl rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 23:18:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:ee:10:91:68:ce:20:d1:60:ec:f2:6b:45:3f:45:70:c7:46:5c:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E Validity Not Before: May 4 19:45:53 2025 GMT Not After : May 7 23:18:53 2025 GMT Subject: CN=FC850A10D187FBBE6B557AF5362A58E1D445F699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:00:d0:d6:68:09:5b:ce:ec:5a:35:c4:eb:9f: 17:5d:95:71:a6:09:c4:c2:b1:e9:a2:2c:29:0d:23: ce:52:f5:0b:33:f7:2e:ac:1e:72:45:f9:6a:3e:ee: b8:cc:35:2e:e1:00:4b:1f:f1:3d:87:4d:cf:0e:7e: 3e:2f:ba:53:0c:a1:a0:50:67:65:14:fe:c7:7e:d3: 73:be:ad:d8:25:e0:02:0f:78:92:cb:81:7e:f2:c8: 91:bf:ba:42:7b:dd:72:52:64:da:48:05:83:07:ce: 41:16:bf:ce:91:25:8f:b9:48:de:7b:7e:a5:66:70: b1:2b:52:5e:cf:40:37:2b:40:95:98:0b:32:08:3a: b1:89:ef:07:2e:0a:19:c2:82:f5:45:0c:0e:a6:d8: be:89:96:c3:4d:b4:4a:1c:7c:09:b2:61:a1:b4:1b: 5e:9a:7b:69:65:d8:cf:4d:b7:5e:b5:70:64:53:66: 66:03:2b:9f:18:c4:0b:fe:52:dd:55:67:72:34:c4: 9d:54:9a:ea:62:fe:c2:07:e0:04:bb:f0:e6:75:3d: 45:a2:a6:28:2a:d8:b7:32:e4:7b:f4:a8:9c:75:5c: ae:0e:a4:81:fc:47:1b:44:eb:44:bc:40:d6:e2:4d: e8:44:15:72:fd:0a:f5:57:0e:42:49:7a:95:5b:3d: 36:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:85:0A:10:D1:87:FB:BE:6B:55:7A:F5:36:2A:58:E1:D4:45:F6:99 X509v3 Authority Key Identifier: keyid:C3:0D:E7:1F:7C:AE:16:CA:2D:8D:AB:6D:01:CA:43:D7:2F:B4:FE:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:61:b8:d4:59:86:13:73:4a:f6:e4:d8:c2:e8:04:c3:f8:dc: af:01:0a:2c:85:38:6a:31:eb:86:c5:77:41:30:9b:07:43:18: 44:d2:9e:f1:93:53:6c:6f:c4:ab:b4:4f:9c:47:f5:a8:d4:28: 45:73:21:45:15:13:0d:1f:fc:01:0f:dd:34:01:d8:85:2c:fb: 80:e6:78:7b:3f:3c:43:1b:c6:99:39:30:27:7a:ed:e7:6b:c9: 2b:ed:3c:30:26:67:1e:9b:35:2e:57:ff:8e:fc:a9:c4:72:bf: f8:d1:1d:3e:7d:63:ca:f3:f1:4c:42:89:4b:a9:bd:9e:5c:60: ce:fd:04:dd:96:bf:2f:53:df:de:88:31:4b:f1:24:f4:08:a1: 34:fe:08:85:a2:1c:99:4e:7a:3f:60:f6:59:da:fb:ea:73:11: 16:6c:90:10:a8:bd:20:b6:14:c5:63:ee:db:15:ab:8e:22:e3: ef:4c:1b:02:55:e2:57:ad:92:a7:2b:e6:fe:91:e1:cf:fd:87: f6:c2:5d:90:5e:54:b0:85:72:60:8e:54:9a:c5:00:34:60:9c: dd:a7:6e:c7:b3:ed:68:f7:c0:a1:2f:50:16:df:b8:3c:c9:e2: e0:4f:e3:84:f5:93:a1:f4:bb:07:ad:61:ea:4b:b0:a4:81:13: 56:09:91:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMe4QkWjOINFg7PJrRT9FcMdGXJowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMwREU3MUY3Q0FFMTZDQTJEOERBQjZEMDFDQTQzRDcy RkI0RkU2RTAeFw0yNTA1MDQxOTQ1NTNaFw0yNTA1MDcyMzE4NTNaMDMxMTAvBgNV BAMTKEZDODUwQTEwRDE4N0ZCQkU2QjU1N0FGNTM2MkE1OEUxRDQ0NUY2OTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoANDWaAlbzuxaNcTrnxddlXGm CcTCsemiLCkNI85S9Qsz9y6sHnJF+Wo+7rjMNS7hAEsf8T2HTc8Ofj4vulMMoaBQ Z2UU/sd+03O+rdgl4AIPeJLLgX7yyJG/ukJ73XJSZNpIBYMHzkEWv86RJY+5SN57 fqVmcLErUl7PQDcrQJWYCzIIOrGJ7wcuChnCgvVFDA6m2L6JlsNNtEocfAmyYaG0 G16ae2ll2M9Nt161cGRTZmYDK58YxAv+Ut1VZ3I0xJ1Umupi/sIH4AS78OZ1PUWi pigq2Lcy5Hv0qJx1XK4OpIH8RxtE60S8QNbiTehEFXL9CvVXDkJJepVbPTbtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/IUKENGH+75rVXr1NipY4dRF9pkwHwYDVR0j BBgwFoAUww3nH3yuFsotjattAcpD1y+0/m4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w M2I1OWNlNC02NmEyLTRmNGQtYjNkNi05Mjk5NDg0YmE1NmIvMC9DMzBERTcxRjdD QUUxNkNBMkQ4REFCNkQwMUNBNDNENzJGQjRGRTZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMwREU3MUY3Q0FFMTZDQTJEOERBQjZEMDFDQTQzRDcyRkI0 RkU2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDNiNTljZTQtNjZhMi00ZjRkLWIz ZDYtOTI5OTQ4NGJhNTZiLzAvQzMwREU3MUY3Q0FFMTZDQTJEOERBQjZEMDFDQTQz RDcyRkI0RkU2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAZhuNRZhhNzSvbk2MLoBMP43K8BCiyFOGox 64bFd0EwmwdDGETSnvGTU2xvxKu0T5xH9ajUKEVzIUUVEw0f/AEP3TQB2IUs+4Dm eHs/PEMbxpk5MCd67edrySvtPDAmZx6bNS5X/478qcRyv/jRHT59Y8rz8UxCiUup vZ5cYM79BN2Wvy9T396IMUvxJPQIoTT+CIWiHJlOej9g9lna++pzERZskBCovSC2 FMVj7tsVq44i4+9MGwJV4letkqcr5v6R4c/9h/bCXZBeVLCFcmCOVJrFADRgnN2n bsez7Wj3wKEvUBbfuDzJ4uBP44T1k6H0uwetYepLsKSBE1YJkfA= -----END CERTIFICATE-----Generated at Wed May 7 05:06:29 2025 by rpki-client