$ rpki-client -vvf repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft File: 901FA7FD9132963972C91517CDC7E5EE9077E078.mft (raw, json) Hash identifier: 4PAaZFmzyVn04HqPX/KIebA3DH6YTwW2PA3oUvC3IdA= Subject key identifier: C9:5F:AD:A3:EB:A2:69:57:8A:C3:CD:12:67:7A:0E:C2:27:70:37:9B Authority key identifier: 90:1F:A7:FD:91:32:96:39:72:C9:15:17:CD:C7:E5:EE:90:77:E0:78 Certificate issuer: /CN=901FA7FD9132963972C91517CDC7E5EE9077E078 Certificate serial: 7FBCBACC23252E643D9263DE3AD14FC7E5012192 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/901FA7FD9132963972C91517CDC7E5EE9077E078.cer Subject info access: rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft Manifest number: F2 Signing time: Mon 05 May 2025 00:50:45 +0000 Manifest this update: Mon 05 May 2025 00:45:45 +0000 Manifest next update: Thu 08 May 2025 02:51:45 +0000 Files and hashes: 1: 901FA7FD9132963972C91517CDC7E5EE9077E078.crl (hash: go2b/ZDVNqRvzeyEjlZP6Lmj5CZYFql34ywybsqc6wE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.crl rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/901FA7FD9132963972C91517CDC7E5EE9077E078.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 02:51:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:bc:ba:cc:23:25:2e:64:3d:92:63:de:3a:d1:4f:c7:e5:01:21:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=901FA7FD9132963972C91517CDC7E5EE9077E078 Validity Not Before: May 5 00:45:45 2025 GMT Not After : May 8 02:51:45 2025 GMT Subject: CN=C95FADA3EBA269578AC3CD12677A0EC22770379B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:63:f6:56:55:80:30:91:7a:18:7b:f7:48:74: f0:c1:c3:fa:6e:27:6e:42:95:1a:4a:20:c4:a2:24: af:9e:e3:75:21:6c:47:00:5c:f1:6c:7a:4e:86:22: b8:28:e6:c6:54:2e:53:35:69:45:a8:46:b5:86:63: 6e:eb:41:92:12:56:46:e6:f0:bf:b2:5f:59:cf:9a: ca:aa:16:9c:77:96:43:57:77:ef:08:3b:24:b8:39: 5e:24:95:61:6a:26:ba:b8:df:07:56:c3:ad:3a:78: b3:ea:39:6e:2a:6e:a0:64:b5:10:a9:68:0c:67:af: f1:43:61:55:e2:29:eb:67:99:1f:f5:51:54:8a:85: 12:cc:48:15:e5:08:1b:44:f3:27:d4:b3:cc:3e:1b: 5f:7d:9c:2b:a0:28:81:d9:df:66:be:09:62:65:29: 05:97:f6:de:a1:38:d7:66:43:d7:4c:8a:af:2e:a5: ba:73:40:80:1b:78:e6:46:b8:94:8a:f3:ee:14:9a: 02:76:4c:57:12:85:86:cb:75:88:3b:1b:67:6a:de: 14:1e:c1:46:c7:ad:8a:96:c9:7b:57:b2:2e:c7:81: 7e:01:70:e9:c8:b8:e5:1a:18:20:11:4d:60:cc:08: b6:58:05:96:53:dd:a0:80:4f:2b:85:54:47:53:d2: 77:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:5F:AD:A3:EB:A2:69:57:8A:C3:CD:12:67:7A:0E:C2:27:70:37:9B X509v3 Authority Key Identifier: keyid:90:1F:A7:FD:91:32:96:39:72:C9:15:17:CD:C7:E5:EE:90:77:E0:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/901FA7FD9132963972C91517CDC7E5EE9077E078.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:25:6a:ee:6f:cc:d8:b4:ac:9a:12:83:b5:55:c0:e3:57:e2: ec:1f:61:32:08:74:bb:29:19:ff:27:55:a3:f9:22:bb:7c:66: f2:61:0e:eb:b5:1d:be:2c:70:fd:60:35:ec:b9:f8:77:7e:c2: 6f:8a:ce:bd:9e:f6:8f:94:fa:ed:c3:46:23:f4:23:e2:ed:8e: d2:e0:e5:81:c2:55:79:95:2e:b4:da:38:3e:b6:d2:e4:e8:72: a7:21:10:aa:27:1e:4a:8a:32:7a:d1:89:83:0b:2a:c9:cd:2f: 00:61:d3:5f:71:93:8a:8f:99:35:ca:13:f4:c9:db:2d:2b:70: b8:23:a8:6d:f1:27:c6:54:3c:be:4e:01:12:00:7d:85:80:b9: e1:e2:81:06:1b:aa:7f:69:98:59:f9:b9:9d:39:d7:b1:3e:df: df:fe:95:29:47:9b:30:ff:0d:d4:f0:fd:7e:16:b8:41:f0:34: 73:18:0c:25:40:a3:34:ab:f6:93:b3:23:e9:8c:05:37:af:7e: 7d:71:03:a0:ad:13:05:49:c5:09:ae:4d:1e:2c:77:66:56:34: 6d:6d:62:86:8d:00:6e:da:26:14:28:d5:e0:0e:4e:91:d9:d5: cc:fc:a2:8c:46:44:13:25:ff:2a:14:e2:b8:6b:51:b5:c9:e3: 17:5c:be:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf7y6zCMlLmQ9kmPeOtFPx+UBIZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTAxRkE3RkQ5MTMyOTYzOTcyQzkxNTE3Q0RDN0U1RUU5 MDc3RTA3ODAeFw0yNTA1MDUwMDQ1NDVaFw0yNTA1MDgwMjUxNDVaMDMxMTAvBgNV BAMTKEM5NUZBREEzRUJBMjY5NTc4QUMzQ0QxMjY3N0EwRUMyMjc3MDM3OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuY/ZWVYAwkXoYe/dIdPDBw/pu J25ClRpKIMSiJK+e43UhbEcAXPFsek6GIrgo5sZULlM1aUWoRrWGY27rQZISVkbm 8L+yX1nPmsqqFpx3lkNXd+8IOyS4OV4klWFqJrq43wdWw606eLPqOW4qbqBktRCp aAxnr/FDYVXiKetnmR/1UVSKhRLMSBXlCBtE8yfUs8w+G199nCugKIHZ32a+CWJl KQWX9t6hONdmQ9dMiq8upbpzQIAbeOZGuJSK8+4UmgJ2TFcShYbLdYg7G2dq3hQe wUbHrYqWyXtXsi7HgX4BcOnIuOUaGCARTWDMCLZYBZZT3aCATyuFVEdT0ndVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyV+to+uiaVeKw80SZ3oOwidwN5swHwYDVR0j BBgwFoAUkB+n/ZEyljlyyRUXzcfl7pB34HgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODBhOGRmZC1hNjc5LTQ0NGEtYjlhOC02ZTNjYjQ4MWEwNzkvMC85MDFGQTdGRDkx MzI5NjM5NzJDOTE1MTdDREM3RTVFRTkwNzdFMDc4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTAxRkE3RkQ5MTMyOTYzOTcyQzkxNTE3Q0RDN0U1RUU5MDc3 RTA3OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjgwYThkZmQtYTY3OS00NDRhLWI5 YTgtNmUzY2I0ODFhMDc5LzAvOTAxRkE3RkQ5MTMyOTYzOTcyQzkxNTE3Q0RDN0U1 RUU5MDc3RTA3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGslau5vzNi0rJoSg7VVwONX4uwfYTIIdLsp Gf8nVaP5Irt8ZvJhDuu1Hb4scP1gNey5+Hd+wm+Kzr2e9o+U+u3DRiP0I+LtjtLg 5YHCVXmVLrTaOD620uTocqchEKonHkqKMnrRiYMLKsnNLwBh019xk4qPmTXKE/TJ 2y0rcLgjqG3xJ8ZUPL5OARIAfYWAueHigQYbqn9pmFn5uZ0517E+39/+lSlHmzD/ DdTw/X4WuEHwNHMYDCVAozSr9pOzI+mMBTevfn1xA6CtEwVJxQmuTR4sd2ZWNG1t YoaNAG7aJhQo1eAOTpHZ1cz8ooxGRBMl/yoU4rhrUbXJ4xdcvgY= -----END CERTIFICATE-----Generated at Wed May 7 11:07:14 2025 by rpki-client