$ rpki-client -vvf repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft File: 245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft (raw, json) Hash identifier: tWZ7gzouAdY8ouJFMzKZQxAxu5iK3iVdVBXq6ngXAdw= Subject key identifier: 6A:F9:9B:D0:21:8E:31:40:22:FB:26:98:64:00:54:4D:1B:48:6D:C4 Authority key identifier: 24:5A:17:CA:DB:2B:B2:FD:C5:78:6C:27:E5:BE:95:96:36:E7:F4:09 Certificate issuer: /CN=245A17CADB2BB2FDC5786C27E5BE959636E7F409 Certificate serial: 372593480678F02B82E787D8010F69B61BF54504 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/245A17CADB2BB2FDC5786C27E5BE959636E7F409.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft Manifest number: DA Signing time: Fri 09 May 2025 11:21:20 +0000 Manifest this update: Fri 09 May 2025 11:16:20 +0000 Manifest next update: Mon 12 May 2025 23:03:20 +0000 Files and hashes: 1: 245A17CADB2BB2FDC5786C27E5BE959636E7F409.crl (hash: aU/2JK0glAhvw62k7Smer7jtLcjzoEplqYqy5xnxsII=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.crl rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/245A17CADB2BB2FDC5786C27E5BE959636E7F409.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 23:03:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:25:93:48:06:78:f0:2b:82:e7:87:d8:01:0f:69:b6:1b:f5:45:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=245A17CADB2BB2FDC5786C27E5BE959636E7F409 Validity Not Before: May 9 11:16:20 2025 GMT Not After : May 12 23:03:20 2025 GMT Subject: CN=6AF99BD0218E314022FB26986400544D1B486DC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:14:9d:2d:ee:5c:cc:10:f1:1a:9f:c6:49:45: 8b:15:b9:04:fe:68:ca:9c:d9:09:d9:65:a9:e9:12: ef:60:c1:79:9b:97:d4:1e:33:7d:cf:d1:f2:11:ad: f9:c9:b6:70:fb:1e:69:c3:5c:73:58:50:45:40:52: a5:31:25:05:10:50:c8:ee:d5:8c:52:9a:2b:46:a7: 8a:14:ed:e0:d0:c7:f6:6c:47:33:36:08:de:94:0f: 9e:75:f9:0c:16:d7:0a:8c:40:8b:5c:d7:7f:1d:2f: 9e:01:4f:ba:86:fe:c8:9d:49:2c:23:c5:7d:49:54: 69:53:f1:58:6b:27:99:d5:d6:85:69:6c:07:d8:b6: 90:b8:65:57:da:e5:45:b8:fd:03:9a:5e:c8:f3:ee: d0:a8:a2:a9:bb:b4:bd:8a:d4:ac:05:96:57:2d:5b: ac:aa:dd:b2:8f:11:87:58:66:e3:f8:b6:b2:a1:43: ce:5c:a2:2b:b7:c2:be:83:25:f1:92:c0:78:6b:e6: 71:f3:d8:c4:0d:0c:56:c9:6c:d2:78:d0:dc:8b:ed: c2:79:80:e8:d3:c2:92:ce:66:a0:16:56:af:c4:c8: 67:ae:65:bd:4e:b6:71:f5:c1:96:e8:3c:73:39:01: bb:04:8e:1d:09:90:3a:e1:97:58:76:b0:5f:a6:1e: 8b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:F9:9B:D0:21:8E:31:40:22:FB:26:98:64:00:54:4D:1B:48:6D:C4 X509v3 Authority Key Identifier: keyid:24:5A:17:CA:DB:2B:B2:FD:C5:78:6C:27:E5:BE:95:96:36:E7:F4:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/245A17CADB2BB2FDC5786C27E5BE959636E7F409.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:02:fc:9e:2e:70:76:05:fa:26:30:85:24:1b:d9:cb:5b:b4: 41:e0:26:4c:7b:94:c4:66:8d:b1:aa:e4:f0:08:5d:fa:28:9c: 8e:54:dc:42:3b:15:bd:9a:81:a6:ef:2e:84:4f:9f:fd:14:e8: 2d:f0:a6:6f:17:b3:3d:1d:e9:93:70:14:f9:77:8a:3f:70:0e: 49:2c:46:ca:a1:3f:77:0b:35:70:ff:61:53:57:7d:91:56:03: ac:26:cd:e9:d5:93:b5:6d:3e:41:2e:94:0b:6e:7e:25:df:2f: 85:c2:49:3d:68:e0:0f:20:65:fb:d8:c3:3e:d1:4c:2f:f3:3c: 4b:30:21:76:65:69:51:22:8d:51:1b:63:5e:bd:49:93:61:43: c1:58:7f:62:c5:2c:1f:62:78:22:52:75:73:e0:a1:e3:72:94: a7:cc:64:28:c5:16:89:7f:fd:25:d6:68:aa:5d:08:ef:f7:51: 7c:7d:c9:64:e7:cf:11:42:a3:92:7a:2e:88:2b:54:84:df:25: 54:a2:46:6e:1c:4e:96:d3:4c:da:db:06:86:2b:13:6d:97:87: 48:1c:65:a3:8b:4f:2b:c2:0c:d9:e4:3c:c4:04:5b:00:bd:30: aa:2b:1c:50:30:68:2e:8d:d3:5a:84:8e:dc:27:e6:5e:20:b0: 27:16:25:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNyWTSAZ48CuC54fYAQ9pthv1RQQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQ1QTE3Q0FEQjJCQjJGREM1Nzg2QzI3RTVCRTk1OTYz NkU3RjQwOTAeFw0yNTA1MDkxMTE2MjBaFw0yNTA1MTIyMzAzMjBaMDMxMTAvBgNV BAMTKDZBRjk5QkQwMjE4RTMxNDAyMkZCMjY5ODY0MDA1NDREMUI0ODZEQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNFJ0t7lzMEPEan8ZJRYsVuQT+ aMqc2QnZZanpEu9gwXmbl9QeM33P0fIRrfnJtnD7HmnDXHNYUEVAUqUxJQUQUMju 1YxSmitGp4oU7eDQx/ZsRzM2CN6UD551+QwW1wqMQItc138dL54BT7qG/sidSSwj xX1JVGlT8VhrJ5nV1oVpbAfYtpC4ZVfa5UW4/QOaXsjz7tCooqm7tL2K1KwFllct W6yq3bKPEYdYZuP4trKhQ85coiu3wr6DJfGSwHhr5nHz2MQNDFbJbNJ40NyL7cJ5 gOjTwpLOZqAWVq/EyGeuZb1OtnH1wZboPHM5AbsEjh0JkDrhl1h2sF+mHostAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUavmb0CGOMUAi+yaYZABUTRtIbcQwHwYDVR0j BBgwFoAUJFoXytsrsv3FeGwn5b6Vljbn9AkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZjEzYTZlZi0zNDM0LTQ0MDEtYjNlMS02NTE1MzA2NmZiM2UvMC8yNDVBMTdDQURC MkJCMkZEQzU3ODZDMjdFNUJFOTU5NjM2RTdGNDA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjQ1QTE3Q0FEQjJCQjJGREM1Nzg2QzI3RTVCRTk1OTYzNkU3 RjQwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmYxM2E2ZWYtMzQzNC00NDAxLWIz ZTEtNjUxNTMwNjZmYjNlLzAvMjQ1QTE3Q0FEQjJCQjJGREM1Nzg2QzI3RTVCRTk1 OTYzNkU3RjQwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJoC/J4ucHYF+iYwhSQb2ctbtEHgJkx7lMRm jbGq5PAIXfoonI5U3EI7Fb2agabvLoRPn/0U6C3wpm8Xsz0d6ZNwFPl3ij9wDkks RsqhP3cLNXD/YVNXfZFWA6wmzenVk7VtPkEulAtufiXfL4XCST1o4A8gZfvYwz7R TC/zPEswIXZlaVEijVEbY169SZNhQ8FYf2LFLB9ieCJSdXPgoeNylKfMZCjFFol/ /SXWaKpdCO/3UXx9yWTnzxFCo5J6LogrVITfJVSiRm4cTpbTTNrbBoYrE22Xh0gc ZaOLTyvCDNnkPMQEWwC9MKorHFAwaC6N01qEjtwn5l4gsCcWJW0= -----END CERTIFICATE-----Generated at Sun May 11 12:31:18 2025 by rpki-client