$ rpki-client -vvf repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft File: 114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft (raw, json) Hash identifier: 7dMdfi6zZDUnp49ZzASnGbe1I0eodATJ3o3GJRvrSvg= Subject key identifier: A8:89:04:A8:50:A4:DD:02:0B:2A:0C:0A:19:44:CF:EB:9A:F3:15:B2 Authority key identifier: 11:4C:9E:7E:A9:1F:63:87:C2:CB:F1:D1:6E:A8:24:58:0C:D6:85:87 Certificate issuer: /CN=114C9E7EA91F6387C2CBF1D16EA824580CD68587 Certificate serial: 6ECF5734E5EB2B442AF5505A90C6646C979D9677 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/114C9E7EA91F6387C2CBF1D16EA824580CD68587.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft Manifest number: 04CE Signing time: Sun 11 May 2025 01:51:59 +0000 Manifest this update: Sun 11 May 2025 01:46:59 +0000 Manifest next update: Wed 14 May 2025 07:19:59 +0000 Files and hashes: 1: 114C9E7EA91F6387C2CBF1D16EA824580CD68587.crl (hash: oPsav+eCmdU/w0ZXqfNvy5GV8OAKmuH87+3Xp9sGopw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.crl rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/114C9E7EA91F6387C2CBF1D16EA824580CD68587.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 07:19:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:cf:57:34:e5:eb:2b:44:2a:f5:50:5a:90:c6:64:6c:97:9d:96:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=114C9E7EA91F6387C2CBF1D16EA824580CD68587 Validity Not Before: May 11 01:46:59 2025 GMT Not After : May 14 07:19:59 2025 GMT Subject: CN=A88904A850A4DD020B2A0C0A1944CFEB9AF315B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e9:b8:5f:f9:fb:cb:da:2e:89:d8:06:30:44: 15:24:47:37:52:8a:98:c0:f9:19:a0:44:d6:90:54: 68:ad:6c:32:65:ab:4a:0b:94:95:cd:45:7a:ae:29: a5:5f:c4:fd:7e:a7:e5:7c:72:fa:6f:48:d6:d1:92: 74:ca:6a:8a:f2:47:b7:64:e3:c4:ff:6d:d9:19:f9: 9e:03:0a:a4:3d:bb:f8:fe:38:22:c6:07:87:6e:ae: d8:13:e5:59:1f:90:35:82:61:26:1b:60:0a:ad:87: 5f:ab:d9:df:e8:cc:b2:71:04:92:ae:d3:e4:88:e0: 5b:aa:59:55:6f:36:ac:70:d1:91:b6:bb:49:b9:85: e4:01:a8:f0:88:bf:a5:de:b6:ef:75:fd:0d:24:b6: 4d:e9:41:53:b7:f0:5f:02:e6:67:87:70:28:e4:8b: 1e:bd:d4:fd:9a:c3:18:4a:ab:9c:82:a4:1d:4d:c0: 7a:68:0a:fa:99:61:3e:91:94:f3:f7:85:97:b8:2f: 82:01:a6:49:30:25:b8:1c:d9:bb:5b:1d:54:72:6e: b5:39:8a:79:ed:a8:59:a4:53:79:f7:cb:b8:33:54: 94:a2:c9:96:00:a5:22:d7:5b:6c:df:c0:9f:ec:a9: 62:32:6f:94:5a:13:58:8e:fe:fc:70:b3:14:55:57: 8d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:89:04:A8:50:A4:DD:02:0B:2A:0C:0A:19:44:CF:EB:9A:F3:15:B2 X509v3 Authority Key Identifier: keyid:11:4C:9E:7E:A9:1F:63:87:C2:CB:F1:D1:6E:A8:24:58:0C:D6:85:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/114C9E7EA91F6387C2CBF1D16EA824580CD68587.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:2d:ef:77:77:fc:b1:c4:e7:00:6a:46:5f:60:a6:b5:39:53: 5f:17:1c:28:e2:ef:74:17:aa:75:40:fc:a2:82:8a:d2:55:9f: b0:74:3e:da:a1:27:a0:fe:82:b8:f1:18:7b:49:66:67:30:b4: 56:25:b4:4f:90:0b:84:b7:da:e0:c3:36:42:66:d5:d9:ac:d9: 19:11:ed:39:7c:9d:7f:04:2a:c3:ba:dd:71:ed:f9:fc:df:35: ad:a8:c6:4b:87:f9:d1:e4:05:3c:e3:66:74:1e:01:c9:35:65: 7b:09:f3:de:9d:95:c9:f6:f1:54:07:9d:7e:cf:28:38:da:cf: 4d:ad:a8:6e:fe:ee:d8:50:22:4d:05:ec:cd:83:e1:a7:90:de: 56:a0:e0:69:99:f9:5c:f4:86:34:ec:ae:12:40:e1:d7:77:d7: 97:c4:c4:e2:ca:5b:6b:e4:8e:55:6c:ca:ba:52:59:b4:24:20: c3:56:94:bd:95:62:59:8b:83:90:c7:46:43:e1:31:ef:20:5c: af:41:a1:1e:46:e7:ec:f8:17:d0:f6:3f:e1:3a:f7:5c:32:7e: 85:ea:4a:18:3f:05:0b:c0:92:58:fa:0e:b8:94:56:be:df:da: f0:d9:64:26:56:d2:70:61:cc:8c:ed:a7:a5:b8:ff:34:82:dd: b1:4a:5d:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbs9XNOXrK0Qq9VBakMZkbJedlncwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE0QzlFN0VBOTFGNjM4N0MyQ0JGMUQxNkVBODI0NTgw Q0Q2ODU4NzAeFw0yNTA1MTEwMTQ2NTlaFw0yNTA1MTQwNzE5NTlaMDMxMTAvBgNV BAMTKEE4ODkwNEE4NTBBNEREMDIwQjJBMEMwQTE5NDRDRkVCOUFGMzE1QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM6bhf+fvL2i6J2AYwRBUkRzdS ipjA+RmgRNaQVGitbDJlq0oLlJXNRXquKaVfxP1+p+V8cvpvSNbRknTKaoryR7dk 48T/bdkZ+Z4DCqQ9u/j+OCLGB4durtgT5VkfkDWCYSYbYAqth1+r2d/ozLJxBJKu 0+SI4FuqWVVvNqxw0ZG2u0m5heQBqPCIv6Xetu91/Q0ktk3pQVO38F8C5meHcCjk ix691P2awxhKq5yCpB1NwHpoCvqZYT6RlPP3hZe4L4IBpkkwJbgc2btbHVRybrU5 inntqFmkU3n3y7gzVJSiyZYApSLXW2zfwJ/sqWIyb5RaE1iO/vxwsxRVV42XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqIkEqFCk3QILKgwKGUTP65rzFbIwHwYDVR0j BBgwFoAUEUyefqkfY4fCy/HRbqgkWAzWhYcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDNlYzg0ZS02MGVmLTQ0ZDQtOWY0My04NWI2Zjk2YjI2Y2YvMC8xMTRDOUU3RUE5 MUY2Mzg3QzJDQkYxRDE2RUE4MjQ1ODBDRDY4NTg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE0QzlFN0VBOTFGNjM4N0MyQ0JGMUQxNkVBODI0NTgwQ0Q2 ODU4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQzZWM4NGUtNjBlZi00NGQ0LTlm NDMtODViNmY5NmIyNmNmLzAvMTE0QzlFN0VBOTFGNjM4N0MyQ0JGMUQxNkVBODI0 NTgwQ0Q2ODU4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD4t73d3/LHE5wBqRl9gprU5U18XHCji73QX qnVA/KKCitJVn7B0PtqhJ6D+grjxGHtJZmcwtFYltE+QC4S32uDDNkJm1dms2RkR 7Tl8nX8EKsO63XHt+fzfNa2oxkuH+dHkBTzjZnQeAck1ZXsJ896dlcn28VQHnX7P KDjaz02tqG7+7thQIk0F7M2D4aeQ3lag4GmZ+Vz0hjTsrhJA4dd315fExOLKW2vk jlVsyrpSWbQkIMNWlL2VYlmLg5DHRkPhMe8gXK9BoR5G5+z4F9D2P+E691wyfoXq Shg/BQvAklj6DriUVr7f2vDZZCZW0nBhzIztp6W4/zSC3bFKXd8= -----END CERTIFICATE-----Generated at Mon May 12 20:14:13 2025 by rpki-client