$ rpki-client -vvf repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.mft File: 381455361E726B6ECCDAF271673BD59B1555336E.mft (raw, json) Hash identifier: TXCSpXmcBzYUe4plponRykid0MppSsUckWj6zVQo+/E= Subject key identifier: C9:15:40:45:CF:77:CC:D2:15:4E:15:F6:F7:CE:F7:0E:DD:82:14:E0 Authority key identifier: 38:14:55:36:1E:72:6B:6E:CC:DA:F2:71:67:3B:D5:9B:15:55:33:6E Certificate issuer: /CN=381455361E726B6ECCDAF271673BD59B1555336E Certificate serial: 3145B74C0E6D10C7725BC444F42B0C8E62955F83 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/381455361E726B6ECCDAF271673BD59B1555336E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.mft Manifest number: 0338 Signing time: Wed 07 May 2025 06:21:37 +0000 Manifest this update: Wed 07 May 2025 06:16:37 +0000 Manifest next update: Sat 10 May 2025 10:51:37 +0000 Files and hashes: 1: 381455361E726B6ECCDAF271673BD59B1555336E.crl (hash: EorkCJ38RRPZPpbdljYrGoViHBe7ZyeoRliOhGMoK3I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.crl rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/381455361E726B6ECCDAF271673BD59B1555336E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 10:51:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:45:b7:4c:0e:6d:10:c7:72:5b:c4:44:f4:2b:0c:8e:62:95:5f:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=381455361E726B6ECCDAF271673BD59B1555336E Validity Not Before: May 7 06:16:37 2025 GMT Not After : May 10 10:51:37 2025 GMT Subject: CN=C9154045CF77CCD2154E15F6F7CEF70EDD8214E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b9:53:a7:af:59:14:7a:e4:8b:27:ba:9a:11: 17:d8:1a:08:0b:5c:f5:bc:5d:81:9e:b6:12:39:4b: 85:8a:33:6a:6e:af:e7:e9:3e:f8:77:1b:96:68:c4: 3b:e0:91:bc:cd:59:b1:c5:a8:67:52:23:6e:5e:fa: 37:b0:c3:a1:ee:fa:4a:c3:10:67:de:ef:a5:39:5a: 11:7b:7f:ec:be:26:d1:63:60:ad:34:1a:c8:ba:6a: f9:c1:9f:40:30:2d:82:0e:1c:71:1f:bc:2d:1f:0a: 0d:67:47:a1:bf:f8:c6:64:a2:14:43:97:a6:23:f7: ed:61:f1:84:c1:5e:06:df:bc:2b:97:47:31:52:80: 95:8c:ec:e9:e0:93:c7:cf:14:1f:00:2b:5e:65:19: f9:e1:a8:06:99:d2:c1:a0:9b:fd:78:5e:a2:37:6d: 8a:f3:f9:45:5a:df:95:b2:72:ce:72:9a:c9:77:67: b9:92:dd:c5:cc:cd:e0:97:88:72:84:0d:57:46:9f: d1:75:9a:84:19:83:05:94:57:28:54:50:df:ee:83: 57:93:de:eb:63:6d:3a:51:7e:d0:48:b0:c7:5c:6f: b9:7b:cc:bb:0c:db:37:17:ee:ca:c5:22:8f:1a:26: fb:78:34:1a:bb:7f:6a:ca:fe:1a:a1:a2:52:b9:f8: 8d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:15:40:45:CF:77:CC:D2:15:4E:15:F6:F7:CE:F7:0E:DD:82:14:E0 X509v3 Authority Key Identifier: keyid:38:14:55:36:1E:72:6B:6E:CC:DA:F2:71:67:3B:D5:9B:15:55:33:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/381455361E726B6ECCDAF271673BD59B1555336E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:20:b0:f8:7f:8c:f2:88:b3:2c:1d:d6:13:b9:e7:18:2c:7b: db:c7:20:03:0f:6d:52:c1:95:d9:78:04:6a:38:8c:86:f4:db: c4:e3:ad:ab:29:0f:a9:60:3e:f0:57:b5:c3:c0:46:1a:19:50: 7a:45:e5:10:11:7a:38:2c:65:50:44:6c:65:e3:d2:dd:37:91: 4a:c3:c0:8f:0f:69:a3:f5:05:d3:c3:42:aa:83:fc:45:e7:18: 65:bb:b8:d7:3f:be:24:52:8e:a7:4e:cc:46:5a:f4:f4:ad:4b: d1:5b:c9:a0:0c:22:e4:b9:54:d6:3c:14:eb:fc:6f:7b:90:33: ac:85:17:61:f7:7b:b3:9f:b3:79:73:39:b8:7f:c5:e5:ae:74: ac:27:5b:aa:02:81:2c:5b:85:0f:cf:c2:81:4c:20:93:92:3c: cd:23:a0:c7:4c:ba:51:04:9a:23:d1:d9:14:2c:d3:65:02:be: 5b:49:87:94:31:cf:8b:69:c1:91:c0:f5:67:35:93:04:80:45: 07:e8:ae:45:21:2d:e1:d9:66:dc:ac:fc:50:e2:14:6c:a9:ee: 45:60:02:1c:61:70:36:ae:8b:8d:e8:07:67:26:31:3c:5e:ec: d6:99:bc:5d:f3:35:93:d5:cc:e0:42:ff:6f:00:34:d5:9d:f5: a3:7e:d1:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMUW3TA5tEMdyW8RE9CsMjmKVX4MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzgxNDU1MzYxRTcyNkI2RUNDREFGMjcxNjczQkQ1OUIx NTU1MzM2RTAeFw0yNTA1MDcwNjE2MzdaFw0yNTA1MTAxMDUxMzdaMDMxMTAvBgNV BAMTKEM5MTU0MDQ1Q0Y3N0NDRDIxNTRFMTVGNkY3Q0VGNzBFREQ4MjE0RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYuVOnr1kUeuSLJ7qaERfYGggL XPW8XYGethI5S4WKM2pur+fpPvh3G5ZoxDvgkbzNWbHFqGdSI25e+jeww6Hu+krD EGfe76U5WhF7f+y+JtFjYK00Gsi6avnBn0AwLYIOHHEfvC0fCg1nR6G/+MZkohRD l6Yj9+1h8YTBXgbfvCuXRzFSgJWM7Ongk8fPFB8AK15lGfnhqAaZ0sGgm/14XqI3 bYrz+UVa35Wycs5ymsl3Z7mS3cXMzeCXiHKEDVdGn9F1moQZgwWUVyhUUN/ug1eT 3utjbTpRftBIsMdcb7l7zLsM2zcX7srFIo8aJvt4NBq7f2rK/hqholK5+I3FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyRVARc93zNIVThX29873Dt2CFOAwHwYDVR0j BBgwFoAUOBRVNh5ya27M2vJxZzvVmxVVM24wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzE5ODc0Yy1hNmIyLTRiMGItOWNjNi01NTlhNGU3Y2Q5NWEvMC8zODE0NTUzNjFF NzI2QjZFQ0NEQUYyNzE2NzNCRDU5QjE1NTUzMzZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzgxNDU1MzYxRTcyNkI2RUNDREFGMjcxNjczQkQ1OUIxNTU1 MzM2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMxOTg3NGMtYTZiMi00YjBiLTlj YzYtNTU5YTRlN2NkOTVhLzAvMzgxNDU1MzYxRTcyNkI2RUNDREFGMjcxNjczQkQ1 OUIxNTU1MzM2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA0gsPh/jPKIsywd1hO55xgse9vHIAMPbVLB ldl4BGo4jIb028TjraspD6lgPvBXtcPARhoZUHpF5RARejgsZVBEbGXj0t03kUrD wI8PaaP1BdPDQqqD/EXnGGW7uNc/viRSjqdOzEZa9PStS9FbyaAMIuS5VNY8FOv8 b3uQM6yFF2H3e7Ofs3lzObh/xeWudKwnW6oCgSxbhQ/PwoFMIJOSPM0joMdMulEE miPR2RQs02UCvltJh5Qxz4tpwZHA9Wc1kwSARQforkUhLeHZZtys/FDiFGyp7kVg AhxhcDaui43oB2cmMTxe7NaZvF3zNZPVzOBC/28ANNWd9aN+0ZQ= -----END CERTIFICATE-----Generated at Thu May 8 04:11:45 2025 by rpki-client