$ rpki-client -vvf repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft File: 286C9A362D81776DD721F49AC1EDBE51BF15D486.mft (raw, json) Hash identifier: mfQUL2PN91LONw9cdlX57YI/bYslo386dHIyKNuxa3k= Subject key identifier: 57:15:9A:8C:87:21:D6:B5:17:CE:92:CD:27:E1:2C:26:F8:0C:70:27 Authority key identifier: 28:6C:9A:36:2D:81:77:6D:D7:21:F4:9A:C1:ED:BE:51:BF:15:D4:86 Certificate issuer: /CN=286C9A362D81776DD721F49AC1EDBE51BF15D486 Certificate serial: 6052CC48913B7CE03918B6915016E2AFFDFE54B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/286C9A362D81776DD721F49AC1EDBE51BF15D486.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft Manifest number: 01B7 Signing time: Mon 05 May 2025 08:51:13 +0000 Manifest this update: Mon 05 May 2025 08:46:13 +0000 Manifest next update: Thu 08 May 2025 09:05:13 +0000 Files and hashes: 1: 286C9A362D81776DD721F49AC1EDBE51BF15D486.crl (hash: 99htulxfvPnyI1GXMYidbq8rRQ5BIl2DXqQtp1NA9rM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.crl rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/286C9A362D81776DD721F49AC1EDBE51BF15D486.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 09:05:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:52:cc:48:91:3b:7c:e0:39:18:b6:91:50:16:e2:af:fd:fe:54:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286C9A362D81776DD721F49AC1EDBE51BF15D486 Validity Not Before: May 5 08:46:13 2025 GMT Not After : May 8 09:05:13 2025 GMT Subject: CN=57159A8C8721D6B517CE92CD27E12C26F80C7027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:0f:fe:05:9c:89:67:03:62:5a:61:e8:31:a6: dc:2d:d8:03:bc:96:dc:c8:26:6e:b1:5a:6a:b0:70: a1:b7:e2:e3:1c:c8:12:10:a3:6e:50:57:56:a2:0a: c7:2b:67:43:0d:e5:31:fe:f3:b1:e6:83:08:13:c4: 5f:5e:6b:f4:9b:3b:20:51:a5:cb:a5:18:34:48:60: b0:f8:b1:84:41:77:1c:54:11:ce:1f:fd:96:3e:7f: 8e:67:d9:24:a4:e6:5b:62:48:ce:be:da:ff:85:4d: 3f:8a:60:4b:8c:70:89:11:38:84:fc:21:cb:d1:71: 1c:b9:f1:38:6b:7f:b4:40:02:f0:5e:76:25:bf:1e: 83:46:be:de:70:ed:86:71:a6:5e:ea:c8:fe:a1:91: b7:2a:0b:e7:7b:5c:ee:48:4a:c1:1e:a8:4c:9a:04: 07:16:08:47:7e:18:66:43:43:73:b0:c8:0f:f8:97: a9:ad:50:a7:a5:2e:8a:64:dc:f3:96:1c:f4:4b:af: 3f:e3:7c:36:e1:7b:99:4f:70:ef:c2:fc:c5:94:f5: 8b:13:28:7e:e9:45:99:f2:c8:96:94:0c:58:a4:bf: 30:01:c3:d8:33:e8:c9:5f:0c:55:0b:80:b6:10:6d: 13:86:9d:7e:2d:b2:e5:09:79:28:1e:19:6c:a7:68: 37:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:15:9A:8C:87:21:D6:B5:17:CE:92:CD:27:E1:2C:26:F8:0C:70:27 X509v3 Authority Key Identifier: keyid:28:6C:9A:36:2D:81:77:6D:D7:21:F4:9A:C1:ED:BE:51:BF:15:D4:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/286C9A362D81776DD721F49AC1EDBE51BF15D486.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:c0:35:b7:5f:68:15:d8:ee:4d:b2:05:e3:85:0d:1e:62:68: cb:15:59:0a:a1:6e:68:77:21:95:55:53:f3:50:0d:e8:cd:68: 19:01:8c:06:5a:0e:59:f6:34:be:9a:bb:a0:8e:48:a6:fc:d4: 83:3d:e8:79:57:de:6f:8c:8d:5d:0a:0d:9e:88:7d:71:20:58: 2e:a9:0a:07:a2:27:14:59:7c:5d:3d:66:c9:ee:02:0c:40:87: 80:7c:c4:07:6f:14:9d:57:9c:69:5a:9c:b2:6a:3f:dc:2a:93: 28:84:87:5e:75:d1:64:ae:8b:9d:89:76:1d:50:9d:9a:90:1e: e8:4f:a5:37:f2:93:d0:55:5d:dc:fa:33:98:3c:7d:05:e4:f4: 0b:bd:c1:b2:5c:b0:47:15:96:da:d0:3a:6e:38:7f:d7:71:52: ae:b7:25:7b:c9:4d:32:7a:f1:a6:46:af:5a:22:7d:e1:b4:ef: 4d:ca:ea:ad:08:15:30:67:99:e4:bb:7f:01:7e:a5:e1:3c:c7: 9b:dd:78:f4:a9:92:59:f8:f5:5e:4f:97:8b:31:c1:8f:5c:35: c4:6b:c2:01:62:13:29:6a:ae:f6:f6:cd:fc:f4:fb:3b:8f:65: 18:a5:68:fa:05:96:91:22:48:b6:5b:ca:d4:2f:59:da:92:62: c5:1a:e0:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYFLMSJE7fOA5GLaRUBbir/3+VLIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg2QzlBMzYyRDgxNzc2REQ3MjFGNDlBQzFFREJFNTFC RjE1RDQ4NjAeFw0yNTA1MDUwODQ2MTNaFw0yNTA1MDgwOTA1MTNaMDMxMTAvBgNV BAMTKDU3MTU5QThDODcyMUQ2QjUxN0NFOTJDRDI3RTEyQzI2RjgwQzcwMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkD/4FnIlnA2JaYegxptwt2AO8 ltzIJm6xWmqwcKG34uMcyBIQo25QV1aiCscrZ0MN5TH+87HmgwgTxF9ea/SbOyBR pculGDRIYLD4sYRBdxxUEc4f/ZY+f45n2SSk5ltiSM6+2v+FTT+KYEuMcIkROIT8 IcvRcRy58Thrf7RAAvBediW/HoNGvt5w7YZxpl7qyP6hkbcqC+d7XO5ISsEeqEya BAcWCEd+GGZDQ3OwyA/4l6mtUKelLopk3POWHPRLrz/jfDbhe5lPcO/C/MWU9YsT KH7pRZnyyJaUDFikvzABw9gz6MlfDFULgLYQbROGnX4tsuUJeSgeGWynaDcFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVxWajIch1rUXzpLNJ+EsJvgMcCcwHwYDVR0j BBgwFoAUKGyaNi2Bd23XIfSawe2+Ub8V1IYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZjEyNzRjNi03ODNjLTRmM2QtYTliNi03NWIzYjQ2Zjg1NGMvMC8yODZDOUEzNjJE ODE3NzZERDcyMUY0OUFDMUVEQkU1MUJGMTVENDg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg2QzlBMzYyRDgxNzc2REQ3MjFGNDlBQzFFREJFNTFCRjE1 RDQ4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmYxMjc0YzYtNzgzYy00ZjNkLWE5 YjYtNzViM2I0NmY4NTRjLzAvMjg2QzlBMzYyRDgxNzc2REQ3MjFGNDlBQzFFREJF NTFCRjE1RDQ4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFvANbdfaBXY7k2yBeOFDR5iaMsVWQqhbmh3 IZVVU/NQDejNaBkBjAZaDln2NL6au6COSKb81IM96HlX3m+MjV0KDZ6IfXEgWC6p CgeiJxRZfF09ZsnuAgxAh4B8xAdvFJ1XnGlanLJqP9wqkyiEh1510WSui52Jdh1Q nZqQHuhPpTfyk9BVXdz6M5g8fQXk9Au9wbJcsEcVltrQOm44f9dxUq63JXvJTTJ6 8aZGr1oifeG0703K6q0IFTBnmeS7fwF+peE8x5vdePSpkln49V5Pl4sxwY9cNcRr wgFiEylqrvb2zfz0+zuPZRilaPoFlpEiSLZbytQvWdqSYsUa4Jo= -----END CERTIFICATE-----Generated at Tue May 6 14:18:50 2025 by rpki-client