$ rpki-client -vvf repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft File: D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft (raw, json) Hash identifier: VTkurySuZfBD70v0S1Chq2siyxxXA7Uq/kqMlteCkAw= Subject key identifier: 6C:95:75:50:5A:F2:03:8B:72:15:91:8F:F6:BD:32:DE:4C:A8:09:68 Authority key identifier: D7:C7:61:22:42:64:91:B8:1F:84:E5:A8:24:E4:AB:EB:85:82:BA:C4 Certificate issuer: /CN=D7C76122426491B81F84E5A824E4ABEB8582BAC4 Certificate serial: 2FB88958BC7606D276A3EE9967A032C5E861C190 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C76122426491B81F84E5A824E4ABEB8582BAC4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft Manifest number: 01DF Signing time: Thu 08 May 2025 12:30:45 +0000 Manifest this update: Thu 08 May 2025 12:25:45 +0000 Manifest next update: Sun 11 May 2025 13:12:45 +0000 Files and hashes: 1: D7C76122426491B81F84E5A824E4ABEB8582BAC4.crl (hash: vfdT6IHFFlSlShcxzsX5o+gg6wAZvKCoGD6OMcCPKXs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.crl rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C76122426491B81F84E5A824E4ABEB8582BAC4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 13:12:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:b8:89:58:bc:76:06:d2:76:a3:ee:99:67:a0:32:c5:e8:61:c1:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7C76122426491B81F84E5A824E4ABEB8582BAC4 Validity Not Before: May 8 12:25:45 2025 GMT Not After : May 11 13:12:45 2025 GMT Subject: CN=6C9575505AF2038B7215918FF6BD32DE4CA80968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:16:09:39:6d:82:9b:c4:c9:29:ee:40:91:13: e8:c4:01:f6:9c:dd:1c:8f:e0:71:c5:e1:5a:52:00: f7:14:92:06:f8:d0:b8:aa:9c:5f:46:4a:27:b6:a2: a0:28:18:00:9f:4c:1d:8a:1e:1f:a7:db:61:a8:71: 24:b6:18:ea:92:38:f3:8a:a5:52:02:b1:33:ef:c1: 92:f0:00:34:1f:be:75:05:8e:cc:04:c2:cf:76:d7: 35:9a:8f:28:6b:20:a0:c0:ff:3a:be:95:2e:aa:06: 54:e6:68:c0:4c:87:72:2f:16:ee:82:a3:1d:4b:9c: b6:3d:10:bf:27:dd:5f:76:61:6f:88:07:85:8a:f7: 38:29:aa:7d:b8:6d:6a:dc:49:ba:dc:48:53:6b:d1: 7a:98:ef:0d:8b:0e:65:73:5e:99:bc:a1:01:55:7b: b0:6a:0f:b5:d5:fa:2d:83:9a:6e:91:75:10:3f:b8: 2e:2f:d3:c1:f7:ea:06:42:8a:99:69:82:21:62:6e: 25:3e:f7:ba:46:89:10:a7:59:6c:98:6e:0d:07:17: 18:8f:eb:73:e9:ae:db:d3:12:bd:4f:9c:aa:d8:12: 5f:44:ba:db:65:f9:42:e3:cc:9d:d6:69:09:59:d7: a3:10:cb:51:9f:2a:a0:ac:b8:c5:08:a4:0d:fd:e7: b8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:95:75:50:5A:F2:03:8B:72:15:91:8F:F6:BD:32:DE:4C:A8:09:68 X509v3 Authority Key Identifier: keyid:D7:C7:61:22:42:64:91:B8:1F:84:E5:A8:24:E4:AB:EB:85:82:BA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C76122426491B81F84E5A824E4ABEB8582BAC4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:43:d8:4e:6d:14:ef:68:12:91:16:e5:e2:68:c8:8b:1e:74: 5b:a1:e9:d4:49:86:61:73:41:bd:0b:8e:89:87:8a:2c:ca:2a: 08:ad:96:25:8d:8a:9c:de:67:4c:fd:c5:e4:33:16:a1:a0:43: 03:b3:fc:54:27:36:ca:f3:f2:4b:e1:0d:97:a4:13:e9:30:f4: d8:91:02:3e:f0:76:64:7b:90:ec:65:79:e2:e8:1f:6f:cd:11: 87:99:72:98:c7:0c:15:24:97:19:83:23:3d:b4:4a:f6:ed:3d: f5:51:c0:84:28:e9:44:63:ca:53:3f:8d:02:ff:fe:46:cb:b1: 93:5a:be:fa:fa:c1:90:83:f1:f7:10:4f:59:5b:a3:71:34:11: bd:c8:57:cf:82:e9:65:22:c2:3e:d5:d2:1d:b5:a5:67:85:e6: 16:49:c3:d8:ec:9d:55:2b:67:ec:86:37:37:c9:98:44:6e:c3: ec:86:b9:73:5b:69:38:c5:d2:0c:7f:c7:6c:f7:3c:38:d2:38: 3e:05:63:c3:f7:ff:95:a5:aa:38:ab:19:56:dc:5e:3b:56:82: 5c:b0:35:59:86:0a:8f:72:7d:f6:c9:bd:97:92:04:ab:74:dc: 8a:e7:20:82:a7:ed:e1:12:0b:9c:88:e0:74:d9:29:f4:6f:f8: 9b:05:99:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL7iJWLx2BtJ2o+6ZZ6AyxehhwZAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdDNzYxMjI0MjY0OTFCODFGODRFNUE4MjRFNEFCRUI4 NTgyQkFDNDAeFw0yNTA1MDgxMjI1NDVaFw0yNTA1MTExMzEyNDVaMDMxMTAvBgNV BAMTKDZDOTU3NTUwNUFGMjAzOEI3MjE1OTE4RkY2QkQzMkRFNENBODA5NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvFgk5bYKbxMkp7kCRE+jEAfac 3RyP4HHF4VpSAPcUkgb40LiqnF9GSie2oqAoGACfTB2KHh+n22GocSS2GOqSOPOK pVICsTPvwZLwADQfvnUFjswEws921zWajyhrIKDA/zq+lS6qBlTmaMBMh3IvFu6C ox1LnLY9EL8n3V92YW+IB4WK9zgpqn24bWrcSbrcSFNr0XqY7w2LDmVzXpm8oQFV e7BqD7XV+i2Dmm6RdRA/uC4v08H36gZCiplpgiFibiU+97pGiRCnWWyYbg0HFxiP 63PprtvTEr1PnKrYEl9Euttl+ULjzJ3WaQlZ16MQy1GfKqCsuMUIpA3957jjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbJV1UFryA4tyFZGP9r0y3kyoCWgwHwYDVR0j BBgwFoAU18dhIkJkkbgfhOWoJOSr64WCusQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDUwZGNjMy04NGRkLTQ1OTUtYmEyYy1iYzY5OTg5NjkyZjEvMC9EN0M3NjEyMjQy NjQ5MUI4MUY4NEU1QTgyNEU0QUJFQjg1ODJCQUM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDdDNzYxMjI0MjY0OTFCODFGODRFNUE4MjRFNEFCRUI4NTgy QkFDNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjA1MGRjYzMtODRkZC00NTk1LWJh MmMtYmM2OTk4OTY5MmYxLzAvRDdDNzYxMjI0MjY0OTFCODFGODRFNUE4MjRFNEFC RUI4NTgyQkFDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKhD2E5tFO9oEpEW5eJoyIsedFuh6dRJhmFz Qb0LjomHiizKKgitliWNipzeZ0z9xeQzFqGgQwOz/FQnNsrz8kvhDZekE+kw9NiR Aj7wdmR7kOxleeLoH2/NEYeZcpjHDBUklxmDIz20SvbtPfVRwIQo6URjylM/jQL/ /kbLsZNavvr6wZCD8fcQT1lbo3E0Eb3IV8+C6WUiwj7V0h21pWeF5hZJw9jsnVUr Z+yGNzfJmERuw+yGuXNbaTjF0gx/x2z3PDjSOD4FY8P3/5WlqjirGVbcXjtWglyw NVmGCo9yffbJvZeSBKt03IrnIIKn7eESC5yI4HTZKfRv+JsFmdo= -----END CERTIFICATE-----Generated at Fri May 9 14:18:50 2025 by rpki-client