$ rpki-client -vvf repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft File: 416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft (raw, json) Hash identifier: IN0MBUpNEAwSZ0I4lK70pG+eJII/qiD12NBlwxELUG4= Subject key identifier: 8A:B3:9D:89:1D:D8:E8:0F:86:74:2C:61:BC:D9:4D:72:EF:2E:FA:D1 Authority key identifier: 41:66:66:F3:F3:35:ED:7A:8B:1B:CB:AD:17:E6:ED:C4:F3:B7:E7:30 Certificate issuer: /CN=416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730 Certificate serial: 124C6BB0BF10D3738FF07AE612D7B93048EF6E5D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.cer Subject info access: rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft Manifest number: 04CF Signing time: Fri 09 May 2025 05:01:45 +0000 Manifest this update: Fri 09 May 2025 04:56:45 +0000 Manifest next update: Mon 12 May 2025 05:54:45 +0000 Files and hashes: 1: 416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.crl (hash: xCRYZuIGdMAUstD2D6UWa9J4uCZIq72b7eZR6ulj368=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.crl rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 05:54:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:4c:6b:b0:bf:10:d3:73:8f:f0:7a:e6:12:d7:b9:30:48:ef:6e:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730 Validity Not Before: May 9 04:56:45 2025 GMT Not After : May 12 05:54:45 2025 GMT Subject: CN=8AB39D891DD8E80F86742C61BCD94D72EF2EFAD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c2:06:5e:77:c9:c9:c6:ea:47:83:75:ac:a6: 87:7a:2e:37:08:a1:75:5a:82:46:ca:f3:fe:dc:f8: 26:16:dd:7d:5c:4e:dd:be:50:38:28:e7:09:31:d3: 28:0d:25:35:7c:fe:8c:46:61:0a:9f:2e:9d:f8:93: cd:9f:e8:a9:97:7b:0e:9b:aa:7c:c3:53:79:7d:6f: 0b:71:f1:53:5e:c1:03:c4:83:17:dd:8b:92:f1:fe: bd:91:62:ce:0f:c6:10:69:c5:12:d4:ec:f0:ea:5f: 9d:f9:33:c2:34:46:8c:cc:d0:1a:8e:1d:80:cc:18: 8e:5e:54:26:a9:34:2f:eb:3a:86:38:e5:c1:1f:14: 57:29:25:31:6d:d6:6b:01:10:01:50:f0:72:10:30: 9f:66:fb:f2:32:38:28:0c:bc:2d:6c:87:9a:ab:36: 99:78:92:ce:7e:ce:cd:3c:f6:82:6c:17:cd:22:a9: 6f:aa:18:9e:35:de:6d:2d:93:51:b2:69:9a:c2:f3: 0a:a0:f9:cd:0a:60:10:69:ed:d4:28:7b:da:f9:21: f9:16:4c:35:3d:f2:eb:d6:4c:f5:c7:f8:bd:89:33: 8f:75:8b:be:27:2d:2c:d9:48:c0:13:f3:9b:ae:6a: 1e:c1:bb:e1:dc:7f:f3:d4:98:02:f4:71:a8:e5:f2: 2b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:B3:9D:89:1D:D8:E8:0F:86:74:2C:61:BC:D9:4D:72:EF:2E:FA:D1 X509v3 Authority Key Identifier: keyid:41:66:66:F3:F3:35:ED:7A:8B:1B:CB:AD:17:E6:ED:C4:F3:B7:E7:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:a5:a5:e1:43:13:2a:8d:8d:51:1a:cb:5c:27:58:ac:02:c6: 9f:49:e6:39:b3:26:e2:4a:a7:e1:f6:e9:d2:3f:d0:71:f3:d9: 83:d3:61:f9:57:ad:69:af:00:28:fa:ef:65:4e:cb:b3:62:32: 42:9a:26:b9:ae:90:29:05:23:4e:46:8f:76:b0:07:46:6e:7f: f7:c1:fb:71:45:b5:c4:2c:9d:27:a8:21:c5:fc:96:8d:98:47: 39:bb:5a:0c:0d:92:9d:a2:49:f8:52:8b:e1:63:24:50:d4:05: f9:07:e0:f7:9c:7d:b1:68:e8:f9:74:a8:d2:c6:12:9d:72:16: 4a:30:00:df:2b:88:11:5d:c4:b9:5b:45:c2:e4:09:8a:08:e0: 44:52:bf:d0:17:b9:9a:64:2d:76:ea:98:17:2b:5c:3e:19:b3: 3f:47:08:1a:3c:09:d1:6e:86:cd:39:52:81:8b:b0:fb:e0:6c: 93:39:d6:84:c0:c3:57:0e:73:2c:1a:d8:2e:1b:26:c0:d8:18: 8a:b8:ce:e7:a8:6e:6b:2b:ac:a9:0d:26:fb:45:eb:58:54:63: 62:4e:d5:49:c0:86:ed:e3:12:5c:e2:ad:b8:a4:1b:93:4a:9c: cf:dc:15:bf:e6:75:43:89:65:1f:e5:24:76:b9:44:f1:28:33: 07:59:99:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEkxrsL8Q03OP8HrmEte5MEjvbl0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDE2NjY2RjNGMzM1RUQ3QThCMUJDQkFEMTdFNkVEQzRG M0I3RTczMDAeFw0yNTA1MDkwNDU2NDVaFw0yNTA1MTIwNTU0NDVaMDMxMTAvBgNV BAMTKDhBQjM5RDg5MUREOEU4MEY4Njc0MkM2MUJDRDk0RDcyRUYyRUZBRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5wgZed8nJxupHg3Wspod6LjcI oXVagkbK8/7c+CYW3X1cTt2+UDgo5wkx0ygNJTV8/oxGYQqfLp34k82f6KmXew6b qnzDU3l9bwtx8VNewQPEgxfdi5Lx/r2RYs4PxhBpxRLU7PDqX535M8I0RozM0BqO HYDMGI5eVCapNC/rOoY45cEfFFcpJTFt1msBEAFQ8HIQMJ9m+/IyOCgMvC1sh5qr Npl4ks5+zs089oJsF80iqW+qGJ413m0tk1GyaZrC8wqg+c0KYBBp7dQoe9r5IfkW TDU98uvWTPXH+L2JM491i74nLSzZSMAT85uuah7Bu+Hcf/PUmAL0cajl8iu3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUirOdiR3Y6A+GdCxhvNlNcu8u+tEwHwYDVR0j BBgwFoAUQWZm8/M17XqLG8utF+btxPO35zAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDM5MTY5OC0wOGVjLTQ3OTAtYTE4NC05MjI4NTJmYTRkMGEvMC80MTY2NjZGM0Yz MzVFRDdBOEIxQkNCQUQxN0U2RURDNEYzQjdFNzMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDE2NjY2RjNGMzM1RUQ3QThCMUJDQkFEMTdFNkVEQzRGM0I3 RTczMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQzOTE2OTgtMDhlYy00NzkwLWEx ODQtOTIyODUyZmE0ZDBhLzAvNDE2NjY2RjNGMzM1RUQ3QThCMUJDQkFEMTdFNkVE QzRGM0I3RTczMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAASlpeFDEyqNjVEay1wnWKwCxp9J5jmzJuJK p+H26dI/0HHz2YPTYflXrWmvACj672VOy7NiMkKaJrmukCkFI05Gj3awB0Zuf/fB +3FFtcQsnSeoIcX8lo2YRzm7WgwNkp2iSfhSi+FjJFDUBfkH4PecfbFo6Pl0qNLG Ep1yFkowAN8riBFdxLlbRcLkCYoI4ERSv9AXuZpkLXbqmBcrXD4Zsz9HCBo8CdFu hs05UoGLsPvgbJM51oTAw1cOcywa2C4bJsDYGIq4zueobmsrrKkNJvtF61hUY2JO 1UnAhu3jElzirbikG5NKnM/cFb/mdUOJZR/lJHa5RPEoMwdZmXY= -----END CERTIFICATE-----Generated at Sat May 10 18:48:49 2025 by rpki-client