$ rpki-client -vvf repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.mft File: 23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.mft (raw, json) Hash identifier: PeS3jwNxYrbgC9kba3SRZHUaQZrivYv6t5umkCu/AoU= Subject key identifier: F4:4A:FF:F7:DB:93:28:90:A7:5B:91:69:54:AF:33:A3:E2:13:D7:BE Authority key identifier: 23:C6:22:F8:76:18:AB:8B:04:22:E7:A6:A4:6D:2E:91:BF:CC:7E:36 Certificate issuer: /CN=23C622F87618AB8B0422E7A6A46D2E91BFCC7E36 Certificate serial: 13F210F770E7648C4D45CB8B7B6BAEA1501F8815 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.mft Manifest number: 95 Signing time: Sun 11 May 2025 08:00:52 +0000 Manifest this update: Sun 11 May 2025 07:55:52 +0000 Manifest next update: Wed 14 May 2025 15:22:52 +0000 Files and hashes: 1: 23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.crl (hash: 61E2QNa1Ut2KpHola4FwvPfgY3kv6D+kCx4DaBmK7ag=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.crl rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 02:50:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:f2:10:f7:70:e7:64:8c:4d:45:cb:8b:7b:6b:ae:a1:50:1f:88:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23C622F87618AB8B0422E7A6A46D2E91BFCC7E36 Validity Not Before: May 11 07:55:52 2025 GMT Not After : May 14 15:22:52 2025 GMT Subject: CN=F44AFFF7DB932890A75B916954AF33A3E213D7BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:22:c1:4f:6c:96:f5:1d:8f:54:72:0f:4b:d1: 9e:a0:62:eb:0a:b1:49:34:53:90:9a:cb:ac:23:fc: ab:76:42:fd:ec:ec:5e:75:2b:e5:bc:2c:e9:a0:74: 90:3b:7d:2f:4b:82:3f:bd:bb:5f:be:cb:7e:12:c7: f6:15:1a:09:64:2b:dc:51:19:04:d1:aa:6f:24:03: 36:f0:e9:94:b8:46:b3:39:b2:1f:80:d9:b1:1f:36: 93:fa:76:53:42:de:9f:73:c9:34:36:89:c2:5c:c9: a6:c1:e2:1d:7f:77:13:a0:37:35:96:e4:7c:16:cc: e5:e9:04:13:b0:d2:df:b8:0f:ce:34:c9:f1:f8:2d: 0e:84:8d:30:34:00:59:9a:fc:6e:df:8b:1d:38:e7: 78:9a:c0:f8:04:54:08:4a:90:fc:f4:00:91:8b:44: c7:0f:c4:81:3e:b3:91:c7:4c:18:20:1a:8f:82:95: 3a:96:fe:ef:6f:1a:7e:15:b4:1a:b4:11:90:30:10: 35:ee:65:4d:2d:1b:6c:6b:58:f3:61:a5:a6:28:a0: 3b:80:fd:0b:31:8e:0a:cf:c8:c0:e8:b7:49:dd:c4: 0a:88:9f:32:e0:c1:08:0d:13:a6:62:4e:43:de:48: e1:af:da:a6:d0:31:60:73:21:bb:52:4c:f4:f1:7a: b7:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:4A:FF:F7:DB:93:28:90:A7:5B:91:69:54:AF:33:A3:E2:13:D7:BE X509v3 Authority Key Identifier: keyid:23:C6:22:F8:76:18:AB:8B:04:22:E7:A6:A4:6D:2E:91:BF:CC:7E:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:67:da:f1:35:c6:fe:f0:c7:10:82:72:d8:d5:7e:46:40:ab: f7:ad:19:d7:79:70:74:7e:d1:c3:42:ab:5b:a9:0a:88:69:90: ec:d8:ad:20:93:15:30:3a:b3:af:99:ab:12:ec:f7:51:4b:6f: 80:a2:f5:ac:63:e2:0d:38:c6:64:14:62:a4:78:94:9a:f2:72: 1e:a4:26:1c:d9:76:b1:ac:ad:d0:1d:4d:f4:69:eb:fe:0e:0e: e5:9e:68:20:fa:ad:0b:4a:d3:36:46:e5:ed:5e:8d:3b:63:f4: 30:55:7d:3d:26:11:3b:8e:ea:ea:75:cd:e4:a4:84:0d:9c:ba: 2a:a3:b3:40:52:da:08:97:25:e5:87:9f:fc:c0:45:83:d6:39: 19:8d:7f:78:14:64:70:2f:0c:d8:2a:32:a2:f7:c5:bf:28:2d: 1a:96:ab:cc:2f:24:c2:08:6e:42:10:f8:32:ea:8e:ee:51:1e: 68:35:99:75:00:36:f5:72:ef:66:9e:bc:53:5e:10:c5:95:eb: 72:2d:95:d9:2d:69:10:2d:81:c3:6c:ca:48:0c:c2:f6:61:e6: 22:67:01:42:64:3b:2c:eb:24:c2:71:00:94:f0:b5:4e:6e:18: 92:58:18:4f:bd:03:e0:a3:fb:e7:ad:44:c8:3b:96:25:94:eb: 24:74:24:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE/IQ93DnZIxNRcuLe2uuoVAfiBUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNDNjIyRjg3NjE4QUI4QjA0MjJFN0E2QTQ2RDJFOTFC RkNDN0UzNjAeFw0yNTA1MTEwNzU1NTJaFw0yNTA1MTQxNTIyNTJaMDMxMTAvBgNV BAMTKEY0NEFGRkY3REI5MzI4OTBBNzVCOTE2OTU0QUYzM0EzRTIxM0Q3QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBIsFPbJb1HY9Ucg9L0Z6gYusK sUk0U5Cay6wj/Kt2Qv3s7F51K+W8LOmgdJA7fS9Lgj+9u1++y34Sx/YVGglkK9xR GQTRqm8kAzbw6ZS4RrM5sh+A2bEfNpP6dlNC3p9zyTQ2icJcyabB4h1/dxOgNzWW 5HwWzOXpBBOw0t+4D840yfH4LQ6EjTA0AFma/G7fix0453iawPgEVAhKkPz0AJGL RMcPxIE+s5HHTBggGo+ClTqW/u9vGn4VtBq0EZAwEDXuZU0tG2xrWPNhpaYooDuA /QsxjgrPyMDot0ndxAqInzLgwQgNE6ZiTkPeSOGv2qbQMWBzIbtSTPTxerfzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9Er/99uTKJCnW5FpVK8zo+IT174wHwYDVR0j BBgwFoAUI8Yi+HYYq4sEIuempG0ukb/MfjYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjdkMjg5NC1jMDc3LTQyMWMtYmMxZC0zN2Q2ZjlkOTg5N2QvMS8yM0M2MjJGODc2 MThBQjhCMDQyMkU3QTZBNDZEMkU5MUJGQ0M3RTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjNDNjIyRjg3NjE4QUI4QjA0MjJFN0E2QTQ2RDJFOTFCRkND N0UzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGY3ZDI4OTQtYzA3Ny00MjFjLWJj MWQtMzdkNmY5ZDk4OTdkLzEvMjNDNjIyRjg3NjE4QUI4QjA0MjJFN0E2QTQ2RDJF OTFCRkNDN0UzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAINn2vE1xv7wxxCCctjVfkZAq/etGdd5cHR+ 0cNCq1upCohpkOzYrSCTFTA6s6+ZqxLs91FLb4Ci9axj4g04xmQUYqR4lJrych6k JhzZdrGsrdAdTfRp6/4ODuWeaCD6rQtK0zZG5e1ejTtj9DBVfT0mETuO6up1zeSk hA2cuiqjs0BS2giXJeWHn/zARYPWORmNf3gUZHAvDNgqMqL3xb8oLRqWq8wvJMII bkIQ+DLqju5RHmg1mXUANvVy72aevFNeEMWV63ItldktaRAtgcNsykgMwvZh5iJn AUJkOyzrJMJxAJTwtU5uGJJYGE+9A+Cj++etRMg7liWU6yR0JHA= -----END CERTIFICATE-----Generated at Sun May 11 11:33:19 2025 by rpki-client