$ rpki-client -vvf repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft File: 357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft (raw, json) Hash identifier: pLReE22YsavbqZGaBnSNOHBXapqafpngXgIavfa52Sk= Subject key identifier: 79:E1:1E:05:12:8F:55:FB:44:D7:43:32:B0:6F:B3:BF:DA:76:B6:9A Authority key identifier: 35:7B:7A:D7:5E:6E:33:8A:26:C2:FC:9C:E4:B3:A7:A2:74:FB:76:05 Certificate issuer: /CN=357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605 Certificate serial: 248C14F0BE96972F388F887D2820B46B82A0EE8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft Manifest number: 0488 Signing time: Thu 08 May 2025 15:51:06 +0000 Manifest this update: Thu 08 May 2025 15:46:06 +0000 Manifest next update: Sun 11 May 2025 20:32:06 +0000 Files and hashes: 1: 357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.crl (hash: eO9F1HfO6uUyzA5bvBdNcDmq5MlPooyX5UFOf9+Zxw4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.crl rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 19:14:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:8c:14:f0:be:96:97:2f:38:8f:88:7d:28:20:b4:6b:82:a0:ee:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605 Validity Not Before: May 8 15:46:06 2025 GMT Not After : May 11 20:32:06 2025 GMT Subject: CN=79E11E05128F55FB44D74332B06FB3BFDA76B69A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:dd:e2:56:aa:8a:12:1f:f5:2a:79:dc:f7:51: 2c:f9:f0:1b:07:49:61:69:d1:e5:a5:34:cd:6f:37: dc:7e:8a:e9:5f:01:80:55:61:0d:8f:fb:4a:7b:2e: 4c:86:f7:d3:75:d5:5c:a6:a6:0e:90:af:82:c2:dc: b6:7b:00:a2:25:a9:5e:8f:45:c3:d2:21:15:8a:ea: cf:0c:89:2f:bb:6c:81:fc:e0:34:71:4b:63:cf:11: 01:b8:ab:d4:96:b5:6e:3f:57:bb:63:25:54:95:8b: fc:18:99:a4:7e:0b:9d:20:3e:cb:43:5a:33:c1:e4: 6b:7b:f6:04:76:51:0c:51:90:23:bc:4d:1b:62:a9: 04:45:2b:43:b0:52:a5:3a:75:f5:e2:58:3a:b9:fd: a9:21:a1:a3:03:a0:1b:cb:0f:a3:07:79:67:59:2a: 85:46:19:ae:e9:fc:0b:cd:45:ec:63:e7:95:74:b9: 59:a7:02:b9:f7:0d:13:fc:4d:af:30:0f:d4:16:a4: 97:22:5d:57:5c:e7:6d:02:34:e2:d7:92:a9:cf:01: 3b:0f:50:06:15:37:8f:00:5e:c2:b0:bf:bf:35:62: d7:a0:48:7b:ea:4e:e1:c7:cc:ad:8a:2f:70:98:a3: 02:c6:bb:d1:8c:37:7c:65:00:82:c1:4a:06:25:f2: 1e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:E1:1E:05:12:8F:55:FB:44:D7:43:32:B0:6F:B3:BF:DA:76:B6:9A X509v3 Authority Key Identifier: keyid:35:7B:7A:D7:5E:6E:33:8A:26:C2:FC:9C:E4:B3:A7:A2:74:FB:76:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:b8:1c:5a:8e:a8:ae:68:b3:1f:e6:58:d0:07:cc:80:c3:11: 22:e8:46:2e:b3:95:b1:df:62:7a:02:51:12:27:f3:1f:a7:b8: 34:10:fc:c4:2f:6b:a2:24:20:91:bf:f9:1d:d6:44:51:85:f8: c3:d0:f1:b1:15:84:88:5d:2b:dd:f6:b1:71:bf:5f:dc:73:47: eb:f2:12:d6:69:66:29:11:84:57:e5:57:6e:19:bd:95:07:ca: 98:8b:54:e4:93:03:d2:1b:f5:04:a3:8d:7c:45:2d:76:cc:9c: ce:f0:72:81:b9:ba:3f:d8:a7:3d:e6:1e:d6:da:2f:32:f0:90: 1d:9f:f9:b4:6e:08:93:dc:1b:05:0a:a6:b3:a5:3e:8b:ae:5f: 5c:23:22:24:cc:9c:8f:80:c1:10:34:62:70:9d:ec:35:40:7b: d8:87:34:b7:05:ce:89:30:97:31:91:9d:8b:81:43:7c:a4:58: aa:f1:67:84:9d:e8:49:96:ca:46:9a:32:d6:4b:f2:d7:d3:8e: 27:be:10:74:85:6f:39:7a:ac:75:ab:d6:53:fc:5a:2e:3b:ee: 6a:8d:ec:52:a4:ae:cc:b7:b6:a2:4a:87:e9:67:f4:3e:05:e9: d8:10:83:1d:8a:e9:9a:b1:5b:71:db:fe:da:e6:e3:93:f5:0c: 2c:66:80:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJIwU8L6Wly84j4h9KCC0a4Kg7o4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU3QjdBRDc1RTZFMzM4QTI2QzJGQzlDRTRCM0E3QTI3 NEZCNzYwNTAeFw0yNTA1MDgxNTQ2MDZaFw0yNTA1MTEyMDMyMDZaMDMxMTAvBgNV BAMTKDc5RTExRTA1MTI4RjU1RkI0NEQ3NDMzMkIwNkZCM0JGREE3NkI2OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX3eJWqooSH/Uqedz3USz58BsH SWFp0eWlNM1vN9x+iulfAYBVYQ2P+0p7LkyG99N11Vympg6Qr4LC3LZ7AKIlqV6P RcPSIRWK6s8MiS+7bIH84DRxS2PPEQG4q9SWtW4/V7tjJVSVi/wYmaR+C50gPstD WjPB5Gt79gR2UQxRkCO8TRtiqQRFK0OwUqU6dfXiWDq5/akhoaMDoBvLD6MHeWdZ KoVGGa7p/AvNRexj55V0uVmnArn3DRP8Ta8wD9QWpJciXVdc520CNOLXkqnPATsP UAYVN48AXsKwv781YtegSHvqTuHHzK2KL3CYowLGu9GMN3xlAILBSgYl8h6DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeeEeBRKPVftE10MysG+zv9p2tpowHwYDVR0j BBgwFoAUNXt6115uM4omwvyc5LOnonT7dgUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OTU1ZjVhNi1mMzc4LTQyNTItODA0Yi1iMGI5Mzg2NTRmYmYvMC8zNTdCN0FENzVF NkUzMzhBMjZDMkZDOUNFNEIzQTdBMjc0RkI3NjA1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU3QjdBRDc1RTZFMzM4QTI2QzJGQzlDRTRCM0E3QTI3NEZC NzYwNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjk1NWY1YTYtZjM3OC00MjUyLTgw NGItYjBiOTM4NjU0ZmJmLzAvMzU3QjdBRDc1RTZFMzM4QTI2QzJGQzlDRTRCM0E3 QTI3NEZCNzYwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJG4HFqOqK5osx/mWNAHzIDDESLoRi6zlbHf YnoCURIn8x+nuDQQ/MQva6IkIJG/+R3WRFGF+MPQ8bEVhIhdK932sXG/X9xzR+vy EtZpZikRhFflV24ZvZUHypiLVOSTA9Ib9QSjjXxFLXbMnM7wcoG5uj/Ypz3mHtba LzLwkB2f+bRuCJPcGwUKprOlPouuX1wjIiTMnI+AwRA0YnCd7DVAe9iHNLcFzokw lzGRnYuBQ3ykWKrxZ4Sd6EmWykaaMtZL8tfTjie+EHSFbzl6rHWr1lP8Wi477mqN 7FKkrsy3tqJKh+ln9D4F6dgQgx2K6ZqxW3Hb/trm45P1DCxmgEk= -----END CERTIFICATE-----Generated at Thu May 8 21:49:53 2025 by rpki-client