$ rpki-client -vvf repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft File: F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft (raw, json) Hash identifier: lD/ZO0d7wo4UHVIjBcUQ3PBMeA8mZKQt+hNMsv2yccY= Subject key identifier: 45:8B:D2:DE:EF:E0:BC:68:24:51:08:58:97:13:F9:96:07:73:1D:4E Authority key identifier: F4:20:62:F5:21:21:FB:3E:F6:D9:6A:C8:8F:6B:88:34:7E:46:07:E7 Certificate issuer: /CN=F42062F52121FB3EF6D96AC88F6B88347E4607E7 Certificate serial: 6A218D1FE819F4F6CD3B41F183D1C37545D22789 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F42062F52121FB3EF6D96AC88F6B88347E4607E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft Manifest number: 0484 Signing time: Fri 09 May 2025 04:51:01 +0000 Manifest this update: Fri 09 May 2025 04:46:01 +0000 Manifest next update: Mon 12 May 2025 11:42:01 +0000 Files and hashes: 1: F42062F52121FB3EF6D96AC88F6B88347E4607E7.crl (hash: 6+VTjHsgoZvTqZ6AsBnf7dZEmufzrA6XasSUIDEFa8g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.crl rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F42062F52121FB3EF6D96AC88F6B88347E4607E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 11:42:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:21:8d:1f:e8:19:f4:f6:cd:3b:41:f1:83:d1:c3:75:45:d2:27:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F42062F52121FB3EF6D96AC88F6B88347E4607E7 Validity Not Before: May 9 04:46:01 2025 GMT Not After : May 12 11:42:01 2025 GMT Subject: CN=458BD2DEEFE0BC68245108589713F99607731D4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:af:78:9b:83:2a:8c:84:6e:05:02:61:06:95: 48:d9:71:21:7e:f6:3e:e0:ae:c2:92:13:70:9c:e6: bd:0c:97:b2:4f:91:16:f8:f6:62:ec:d6:a7:88:d6: 53:98:97:24:26:59:2b:55:07:29:49:56:da:b1:56: b4:62:1c:3c:0e:c4:64:a4:b5:b4:93:41:8e:3a:8f: 88:ae:aa:a0:84:34:d5:06:56:3e:c8:3b:3e:1b:d4: 46:66:5c:da:f9:f6:89:3e:ba:fb:f6:f7:41:4e:a4: 92:3f:2d:c2:55:fd:ba:53:3b:5b:7a:23:e6:6f:71: 11:3d:b9:35:d3:43:ae:9f:b1:79:9f:53:b1:ad:99: 98:4e:7a:48:90:09:6e:32:47:a7:ba:3a:e7:28:00: f5:57:b1:49:c3:4c:d5:e8:2d:f9:42:9d:8e:26:25: 1f:8c:fb:63:8b:6e:f7:2e:50:04:b8:92:63:6f:d0: 25:d3:23:f0:f6:19:25:a1:b4:37:6c:55:8b:6f:4d: fc:20:da:35:4d:7c:50:99:48:df:98:e9:69:63:fa: 80:ce:14:32:54:5f:6b:1c:b1:2f:81:d6:ef:6f:56: 1f:4b:e1:21:e3:69:b2:e8:71:4f:40:f4:e7:58:c6: 2f:dd:6a:c2:06:f8:c8:db:b4:19:b9:21:f7:0f:3d: 0d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:8B:D2:DE:EF:E0:BC:68:24:51:08:58:97:13:F9:96:07:73:1D:4E X509v3 Authority Key Identifier: keyid:F4:20:62:F5:21:21:FB:3E:F6:D9:6A:C8:8F:6B:88:34:7E:46:07:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F42062F52121FB3EF6D96AC88F6B88347E4607E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/F42062F52121FB3EF6D96AC88F6B88347E4607E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:f3:5c:9e:84:cd:dc:f4:4c:b5:7a:b6:75:e5:4f:02:2d:a4: 24:46:67:7d:36:d3:14:84:80:84:23:52:1a:4d:d0:dc:7f:69: 5b:46:01:60:d8:33:8a:b3:e9:7c:a5:56:f3:dd:36:12:9f:3d: 20:e0:54:0a:a3:40:18:24:9e:c6:da:38:b5:05:0f:1f:0c:a8: 2b:3f:a9:21:b2:70:b6:f6:e4:2b:b4:65:34:1d:51:42:c5:21: 8c:70:60:f2:28:ea:16:f7:3e:d8:96:b0:10:92:4b:d2:2e:0a: 1b:1e:bc:cd:fe:c0:ee:47:26:0c:1b:4d:46:da:c2:1b:15:4f: d3:1c:10:b2:2b:44:75:22:50:88:63:d7:8a:26:41:ee:f7:b6: 46:2a:9d:36:ed:41:01:76:fc:76:2b:98:ca:e9:40:ca:cd:40: 85:e1:9a:06:c3:58:55:fb:cd:f9:fe:ca:97:d1:3f:30:27:13: 98:38:ff:14:a0:da:87:ec:0c:40:da:6f:7f:4c:74:b4:1e:9d: be:1c:27:0b:3e:67:c2:91:9f:55:92:91:ec:67:7d:a7:de:87: bb:22:bb:fd:b1:d3:8e:c0:a5:53:f4:06:79:30:04:c2:00:9e: ea:44:76:90:3c:e9:59:22:11:e5:16:f8:a5:f4:3a:d6:81:58: 2a:cc:4b:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaiGNH+gZ9PbNO0Hxg9HDdUXSJ4kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQyMDYyRjUyMTIxRkIzRUY2RDk2QUM4OEY2Qjg4MzQ3 RTQ2MDdFNzAeFw0yNTA1MDkwNDQ2MDFaFw0yNTA1MTIxMTQyMDFaMDMxMTAvBgNV BAMTKDQ1OEJEMkRFRUZFMEJDNjgyNDUxMDg1ODk3MTNGOTk2MDc3MzFENEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDar3ibgyqMhG4FAmEGlUjZcSF+ 9j7grsKSE3Cc5r0Ml7JPkRb49mLs1qeI1lOYlyQmWStVBylJVtqxVrRiHDwOxGSk tbSTQY46j4iuqqCENNUGVj7IOz4b1EZmXNr59ok+uvv290FOpJI/LcJV/bpTO1t6 I+ZvcRE9uTXTQ66fsXmfU7GtmZhOekiQCW4yR6e6OucoAPVXsUnDTNXoLflCnY4m JR+M+2OLbvcuUAS4kmNv0CXTI/D2GSWhtDdsVYtvTfwg2jVNfFCZSN+Y6Wlj+oDO FDJUX2scsS+B1u9vVh9L4SHjabLocU9A9OdYxi/dasIG+MjbtBm5IfcPPQ0JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURYvS3u/gvGgkUQhYlxP5lgdzHU4wHwYDVR0j BBgwFoAU9CBi9SEh+z722WrIj2uINH5GB+cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z N2IzMzQxMi1iZTViLTQ2M2UtODIzMy05ZWFiODQ4YTU5NzYvMC9GNDIwNjJGNTIx MjFGQjNFRjZEOTZBQzg4RjZCODgzNDdFNDYwN0U3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjQyMDYyRjUyMTIxRkIzRUY2RDk2QUM4OEY2Qjg4MzQ3RTQ2 MDdFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzdiMzM0MTItYmU1Yi00NjNlLTgy MzMtOWVhYjg0OGE1OTc2LzAvRjQyMDYyRjUyMTIxRkIzRUY2RDk2QUM4OEY2Qjg4 MzQ3RTQ2MDdFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGzzXJ6Ezdz0TLV6tnXlTwItpCRGZ3020xSE gIQjUhpN0Nx/aVtGAWDYM4qz6XylVvPdNhKfPSDgVAqjQBgknsbaOLUFDx8MqCs/ qSGycLb25Cu0ZTQdUULFIYxwYPIo6hb3PtiWsBCSS9IuChsevM3+wO5HJgwbTUba whsVT9McELIrRHUiUIhj14omQe73tkYqnTbtQQF2/HYrmMrpQMrNQIXhmgbDWFX7 zfn+ypfRPzAnE5g4/xSg2ofsDEDab39MdLQenb4cJws+Z8KRn1WSkexnfafeh7si u/2x047ApVP0BnkwBMIAnupEdpA86VkiEeUW+KX0OtaBWCrMSwY= -----END CERTIFICATE-----Generated at Sat May 10 03:47:30 2025 by rpki-client