$ rpki-client -vvf repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft File: 1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft (raw, json) Hash identifier: C0K1ppXgyWQLz8hqCopyI8dPu7Z0Hozk/HQockZIydI= Subject key identifier: 95:C8:E8:13:08:E4:E8:4E:28:77:E5:0A:87:E5:6A:C1:F2:CA:79:D5 Authority key identifier: 1A:4C:E5:46:9A:9D:AB:D2:77:C7:F1:A6:C2:E0:0D:B1:13:69:7A:D8 Certificate issuer: /CN=1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8 Certificate serial: 4A9F2EB7A9F669EB014C4947F96A8C06F2956B76 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft Manifest number: 9D Signing time: Wed 07 May 2025 15:50:04 +0000 Manifest this update: Wed 07 May 2025 15:45:04 +0000 Manifest next update: Sun 11 May 2025 02:00:04 +0000 Files and hashes: 1: 1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.crl (hash: jWBsPoPR2m/tTt6/rXPgn1/ZEi4PEe8g9KVmb+astVQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.crl rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 02:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:9f:2e:b7:a9:f6:69:eb:01:4c:49:47:f9:6a:8c:06:f2:95:6b:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8 Validity Not Before: May 7 15:45:04 2025 GMT Not After : May 11 02:00:04 2025 GMT Subject: CN=95C8E81308E4E84E2877E50A87E56AC1F2CA79D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ca:92:38:4e:40:0a:8c:64:b3:80:74:56:dc: ba:40:02:81:b0:2b:2a:db:35:58:72:bd:f6:83:2b: 03:b7:f9:e6:35:1a:f5:c7:e5:cf:a6:49:8a:1e:9f: 4f:80:0d:02:4c:20:08:76:71:c7:8b:bb:4d:53:ce: 0b:43:11:d0:b1:c7:db:4f:8b:88:ee:19:14:d0:ff: 6f:d6:83:23:93:62:b1:e8:3b:e1:d7:d6:c0:9c:88: 49:2a:17:ac:51:ff:66:33:8b:51:2d:16:1d:30:0d: 7b:66:1d:6f:63:c3:ac:75:f0:1c:17:aa:86:3a:58: 9e:00:1c:f9:3b:4c:f5:b6:80:28:ae:2d:85:42:3a: 60:8d:76:42:5e:0b:43:ef:d6:b2:3e:35:79:38:bd: 4d:3d:89:cd:3c:6b:42:74:80:4c:40:df:7d:93:80: b1:b8:1a:32:d3:2a:7c:1b:57:7f:61:b0:1b:95:8f: 53:9a:c4:7b:e2:ee:22:fe:b7:eb:7d:ed:bf:2e:66: 67:85:4a:71:46:7e:56:e9:0c:65:fe:52:52:7b:9b: 7b:27:6b:7c:52:6e:e6:aa:b2:47:a6:f9:14:c3:3f: f9:70:09:93:90:dd:ff:75:0b:8a:f1:24:22:02:70: b3:99:44:19:68:21:02:10:7a:4e:bc:8c:ca:81:83: ee:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:C8:E8:13:08:E4:E8:4E:28:77:E5:0A:87:E5:6A:C1:F2:CA:79:D5 X509v3 Authority Key Identifier: keyid:1A:4C:E5:46:9A:9D:AB:D2:77:C7:F1:A6:C2:E0:0D:B1:13:69:7A:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:79:a0:95:68:0e:f6:f9:e4:19:b2:40:74:b2:0a:bf:4b:ff: 00:54:3c:15:b3:98:71:3e:ef:30:cc:57:f2:b5:6f:ea:7d:d7: 61:3d:51:28:08:7a:61:e0:6f:46:c6:67:9d:cd:fb:43:8c:ba: 2f:a1:39:43:f0:d2:a5:fa:fb:49:02:d1:34:f1:7e:d2:63:a8: 18:22:1a:a9:0d:eb:73:d4:f3:c4:f0:3f:d4:55:06:35:2e:b7: 19:33:e1:3d:8b:30:eb:00:1f:a3:06:4c:77:46:e4:8a:de:46: 5e:dd:92:66:13:ef:fa:8d:9b:22:9f:03:82:c8:c5:1c:71:a0: 31:2a:dd:e7:62:e2:d6:b9:d5:be:1f:6c:5f:9f:b6:fa:17:fa: 31:0f:2d:ff:1d:d7:fa:2a:2e:17:27:fa:7a:88:42:e0:5a:36: 77:18:ef:0c:df:2c:72:8c:c0:12:0d:d5:3f:d9:45:53:a8:d0: 1e:d6:6d:b9:8f:77:14:10:1c:d3:5b:b3:9f:fd:33:e1:27:e4: e4:be:63:89:1f:e8:5a:ac:6d:3b:9c:53:8a:21:a4:8c:e3:5d: 0f:7d:d2:98:2a:bf:53:53:85:e1:df:74:f6:d9:14:52:95:c3: 80:75:5d:3b:ab:bd:39:bf:bc:d8:cf:3b:a7:79:81:a0:82:79: 90:e7:52:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSp8ut6n2aesBTElH+WqMBvKVa3YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE0Q0U1NDY5QTlEQUJEMjc3QzdGMUE2QzJFMDBEQjEx MzY5N0FEODAeFw0yNTA1MDcxNTQ1MDRaFw0yNTA1MTEwMjAwMDRaMDMxMTAvBgNV BAMTKDk1QzhFODEzMDhFNEU4NEUyODc3RTUwQTg3RTU2QUMxRjJDQTc5RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrypI4TkAKjGSzgHRW3LpAAoGw KyrbNVhyvfaDKwO3+eY1GvXH5c+mSYoen0+ADQJMIAh2cceLu01TzgtDEdCxx9tP i4juGRTQ/2/WgyOTYrHoO+HX1sCciEkqF6xR/2Yzi1EtFh0wDXtmHW9jw6x18BwX qoY6WJ4AHPk7TPW2gCiuLYVCOmCNdkJeC0Pv1rI+NXk4vU09ic08a0J0gExA332T gLG4GjLTKnwbV39hsBuVj1OaxHvi7iL+t+t97b8uZmeFSnFGflbpDGX+UlJ7m3sn a3xSbuaqskem+RTDP/lwCZOQ3f91C4rxJCICcLOZRBloIQIQek68jMqBg+5nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlcjoEwjk6E4od+UKh+VqwfLKedUwHwYDVR0j BBgwFoAUGkzlRpqdq9J3x/GmwuANsRNpetgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MDM3YjYzYy1lNDk4LTRlNDctYjk3ZS02N2FiYTQ1ODc4MWMvMC8xQTRDRTU0NjlB OURBQkQyNzdDN0YxQTZDMkUwMERCMTEzNjk3QUQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUE0Q0U1NDY5QTlEQUJEMjc3QzdGMUE2QzJFMDBEQjExMzY5 N0FEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzAzN2I2M2MtZTQ5OC00ZTQ3LWI5 N2UtNjdhYmE0NTg3ODFjLzAvMUE0Q0U1NDY5QTlEQUJEMjc3QzdGMUE2QzJFMDBE QjExMzY5N0FEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACp5oJVoDvb55BmyQHSyCr9L/wBUPBWzmHE+ 7zDMV/K1b+p912E9USgIemHgb0bGZ53N+0OMui+hOUPw0qX6+0kC0TTxftJjqBgi GqkN63PU88TwP9RVBjUutxkz4T2LMOsAH6MGTHdG5IreRl7dkmYT7/qNmyKfA4LI xRxxoDEq3edi4ta51b4fbF+ftvoX+jEPLf8d1/oqLhcn+nqIQuBaNncY7wzfLHKM wBIN1T/ZRVOo0B7WbbmPdxQQHNNbs5/9M+En5OS+Y4kf6FqsbTucU4ohpIzjXQ99 0pgqv1NTheHfdPbZFFKVw4B1XTurvTm/vNjPO6d5gaCCeZDnUrQ= -----END CERTIFICATE-----Generated at Fri May 9 02:06:32 2025 by rpki-client