$ rpki-client -vvf repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.mft File: 0F24A59122D6FE7BEEED775DBE16A84E77624943.mft (raw, json) Hash identifier: mu65i8GRcrZEH/5jKkDc6EUgqQoP+3iyV4RnVZYpU6I= Subject key identifier: BA:FF:4E:74:6D:2C:27:42:51:1F:75:EA:A6:D9:64:8E:34:13:41:B1 Authority key identifier: 0F:24:A5:91:22:D6:FE:7B:EE:ED:77:5D:BE:16:A8:4E:77:62:49:43 Certificate issuer: /CN=0F24A59122D6FE7BEEED775DBE16A84E77624943 Certificate serial: 2F2AF16FBDE061F6BB0C900B25C729A8C16C13A5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F24A59122D6FE7BEEED775DBE16A84E77624943.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.mft Manifest number: 020B Signing time: Sat 10 May 2025 15:10:04 +0000 Manifest this update: Sat 10 May 2025 15:05:04 +0000 Manifest next update: Tue 13 May 2025 17:08:04 +0000 Files and hashes: 1: 0F24A59122D6FE7BEEED775DBE16A84E77624943.crl (hash: UdGKjVX5hH5yzbEbnQieSTHpihX+mjn4EA4B3cQY8Uo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.crl rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F24A59122D6FE7BEEED775DBE16A84E77624943.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 17:08:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:2a:f1:6f:bd:e0:61:f6:bb:0c:90:0b:25:c7:29:a8:c1:6c:13:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F24A59122D6FE7BEEED775DBE16A84E77624943 Validity Not Before: May 10 15:05:04 2025 GMT Not After : May 13 17:08:04 2025 GMT Subject: CN=BAFF4E746D2C2742511F75EAA6D9648E341341B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:5c:c4:9b:f6:98:49:f4:3f:81:31:72:4b:34: 13:be:26:91:1f:50:d5:d9:a7:d9:f1:fc:09:1d:e8: f6:dd:2b:2e:54:a8:0a:5b:c2:9d:11:20:87:93:86: 13:cc:14:0a:52:7f:77:64:46:2d:83:6b:3a:3c:e9: bb:1b:55:23:94:29:21:ec:8c:b6:43:6c:f6:5c:df: e3:21:a2:63:55:32:1e:c8:84:4f:e8:7f:cc:7c:c3: ff:fe:80:f3:e0:1b:31:3a:45:0d:34:27:d2:26:1b: 21:93:b5:8a:ed:27:00:df:a8:6c:3e:eb:e7:40:ce: 1a:fb:8e:20:06:85:77:a2:9d:7d:df:6a:f3:a4:31: f1:27:36:f5:e5:57:a7:eb:ea:58:3c:3e:0f:90:b8: 04:01:5b:5d:3c:93:85:18:b6:48:a5:a1:15:50:b1: df:b3:cb:4f:45:46:21:5e:f5:3b:a7:6d:fa:ba:96: f8:f2:5f:94:4c:76:92:fa:97:e4:3c:1c:32:45:e1: a0:72:dc:14:19:98:6d:c8:1c:6e:40:ae:87:02:07: 17:20:bf:38:d1:f8:f4:8e:66:a5:57:25:b7:8d:22: 76:23:e8:50:87:08:47:9c:ea:74:dc:bc:3b:4d:d7: 18:fa:ac:b1:80:33:0e:29:62:28:4d:fa:e6:44:7a: c1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:FF:4E:74:6D:2C:27:42:51:1F:75:EA:A6:D9:64:8E:34:13:41:B1 X509v3 Authority Key Identifier: keyid:0F:24:A5:91:22:D6:FE:7B:EE:ED:77:5D:BE:16:A8:4E:77:62:49:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F24A59122D6FE7BEEED775DBE16A84E77624943.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cc22c2e-aca7-42f2-9b8a-8da7d4e2ba00/0/0F24A59122D6FE7BEEED775DBE16A84E77624943.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:d8:97:40:d9:58:c4:a7:ea:f2:0b:9d:ff:66:c8:99:c6:05: 5d:14:97:55:6f:b9:db:cd:69:74:bb:4a:db:23:c5:7d:2e:5d: 83:b4:7c:78:bc:a3:15:fb:19:3f:3a:67:4a:b5:fc:e3:5e:b6: da:9d:f1:f0:d8:50:00:19:4d:34:13:b9:ba:0b:7e:ef:3a:7f: 34:a2:ce:83:ab:b8:6d:79:59:43:81:8d:90:d4:fc:6d:a4:3a: 86:0e:31:cd:30:6a:95:06:e2:e6:39:bf:2a:f9:fa:1b:f5:3f: 3d:fe:d4:a9:1d:c6:b5:7a:f1:7a:12:ba:4e:a0:d0:e7:e4:89: f7:6a:12:a3:0a:1d:c3:b3:01:9a:90:72:61:b4:ca:ef:1f:c7: 87:f4:23:68:ee:56:39:8b:ff:0d:e8:a8:c5:07:75:95:6c:87: 89:48:16:c3:97:36:36:ce:a6:bd:25:6e:88:e4:cc:50:1e:c1: 97:d3:21:09:6b:6c:af:ff:8c:37:e5:cb:1f:45:78:ef:6b:e6: 15:3d:33:85:33:6f:1a:68:8f:4a:5c:d6:f8:4f:ae:52:ce:b3: e7:19:23:c0:66:f6:e8:90:1a:f1:99:d2:e3:25:3b:01:ed:03: 93:4f:93:48:b4:bb:31:f9:49:5d:23:f7:5c:05:bb:69:63:9f: c7:f7:1f:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULyrxb73gYfa7DJALJccpqMFsE6UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEYyNEE1OTEyMkQ2RkU3QkVFRUQ3NzVEQkUxNkE4NEU3 NzYyNDk0MzAeFw0yNTA1MTAxNTA1MDRaFw0yNTA1MTMxNzA4MDRaMDMxMTAvBgNV BAMTKEJBRkY0RTc0NkQyQzI3NDI1MTFGNzVFQUE2RDk2NDhFMzQxMzQxQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiXMSb9phJ9D+BMXJLNBO+JpEf UNXZp9nx/Akd6PbdKy5UqApbwp0RIIeThhPMFApSf3dkRi2Dazo86bsbVSOUKSHs jLZDbPZc3+MhomNVMh7IhE/of8x8w//+gPPgGzE6RQ00J9ImGyGTtYrtJwDfqGw+ 6+dAzhr7jiAGhXeinX3favOkMfEnNvXlV6fr6lg8Pg+QuAQBW108k4UYtkiloRVQ sd+zy09FRiFe9Tunbfq6lvjyX5RMdpL6l+Q8HDJF4aBy3BQZmG3IHG5ArocCBxcg vzjR+PSOZqVXJbeNInYj6FCHCEec6nTcvDtN1xj6rLGAMw4pYihN+uZEesEFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuv9OdG0sJ0JRH3XqptlkjjQTQbEwHwYDVR0j BBgwFoAUDySlkSLW/nvu7XddvhaoTndiSUMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Y2MyMmMyZS1hY2E3LTQyZjItOWI4YS04ZGE3ZDRlMmJhMDAvMC8wRjI0QTU5MTIy RDZGRTdCRUVFRDc3NURCRTE2QTg0RTc3NjI0OTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEYyNEE1OTEyMkQ2RkU3QkVFRUQ3NzVEQkUxNkE4NEU3NzYy NDk0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2NjMjJjMmUtYWNhNy00MmYyLTli OGEtOGRhN2Q0ZTJiYTAwLzAvMEYyNEE1OTEyMkQ2RkU3QkVFRUQ3NzVEQkUxNkE4 NEU3NzYyNDk0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK7Yl0DZWMSn6vILnf9myJnGBV0Ul1VvudvN aXS7StsjxX0uXYO0fHi8oxX7GT86Z0q1/ONettqd8fDYUAAZTTQTuboLfu86fzSi zoOruG15WUOBjZDU/G2kOoYOMc0wapUG4uY5vyr5+hv1Pz3+1KkdxrV68XoSuk6g 0OfkifdqEqMKHcOzAZqQcmG0yu8fx4f0I2juVjmL/w3oqMUHdZVsh4lIFsOXNjbO pr0lbojkzFAewZfTIQlrbK//jDflyx9FeO9r5hU9M4Uzbxpoj0pc1vhPrlLOs+cZ I8Bm9uiQGvGZ0uMlOwHtA5NPk0i0uzH5SV0j91wFu2ljn8f3H1I= -----END CERTIFICATE-----Generated at Sun May 11 05:25:52 2025 by rpki-client