$ rpki-client -vvf repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft File: 988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft (raw, json) Hash identifier: nxmDg/8WUSbdFktsUP3K68vEXgiSuNdK9yl9dypaFxU= Subject key identifier: F3:50:D4:C6:C4:6B:D7:1B:07:6E:8D:BF:70:AC:35:56:8F:8A:AB:41 Authority key identifier: 98:8E:03:77:88:2A:47:82:CA:DF:C6:65:BE:A7:5B:F6:4B:FB:AF:8E Certificate issuer: /CN=988E0377882A4782CADFC665BEA75BF64BFBAF8E Certificate serial: 35FE9BDC368CD40DBA73DE78071A7ECB5C3EA855 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/988E0377882A4782CADFC665BEA75BF64BFBAF8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft Manifest number: 028C Signing time: Mon 12 May 2025 10:10:37 +0000 Manifest this update: Mon 12 May 2025 10:05:37 +0000 Manifest next update: Thu 15 May 2025 18:06:37 +0000 Files and hashes: 1: 988E0377882A4782CADFC665BEA75BF64BFBAF8E.crl (hash: keYI/Amdl5niTmG7JzUTPJUraRh616BAkT7bHbGv4Y0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.crl rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/988E0377882A4782CADFC665BEA75BF64BFBAF8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 10:15:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:fe:9b:dc:36:8c:d4:0d:ba:73:de:78:07:1a:7e:cb:5c:3e:a8:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=988E0377882A4782CADFC665BEA75BF64BFBAF8E Validity Not Before: May 12 10:05:37 2025 GMT Not After : May 15 18:06:37 2025 GMT Subject: CN=F350D4C6C46BD71B076E8DBF70AC35568F8AAB41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:19:04:ac:82:ab:a3:a0:71:3f:9c:2d:a6:fc: 71:af:81:c9:5c:34:57:fc:eb:40:8f:6a:29:8b:96: 12:ed:e5:03:fe:29:dc:7b:3c:c7:90:6e:b9:25:53: fb:ac:6e:21:d1:12:f4:98:ab:83:a6:42:b0:35:69: 52:ab:4e:fb:eb:60:3d:b4:76:90:50:a6:2b:b6:54: 0e:34:9a:20:b8:c4:3d:ce:6d:6b:b3:29:76:bf:59: 31:2a:57:8f:58:39:a4:29:a3:c8:4b:ef:fb:fd:ad: 0b:1a:54:fe:e5:f4:48:23:de:4e:8a:05:70:ea:f6: 3c:d1:d5:50:8a:0f:40:59:e7:60:40:e2:e1:4b:9c: 74:4a:54:ee:75:ee:72:94:db:ed:fd:fe:be:ea:10: e8:31:5a:a3:f5:e0:da:4d:9a:f8:f6:44:a8:96:46: e5:c4:b1:77:ac:e0:cf:20:df:d3:27:92:a9:08:4f: f2:b2:9b:44:ae:ae:31:3b:83:69:49:35:d6:fb:c2: 19:4e:56:e9:18:fe:7c:5c:ec:bd:80:32:58:04:3d: 4c:f5:e4:61:52:c6:cf:4d:fb:54:d2:e4:e3:49:31: f8:21:d9:02:dc:50:5b:0c:2b:51:a9:4c:87:8b:50: 92:21:62:a7:c7:a0:05:7f:98:f9:9f:fd:d2:24:d7: 50:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:50:D4:C6:C4:6B:D7:1B:07:6E:8D:BF:70:AC:35:56:8F:8A:AB:41 X509v3 Authority Key Identifier: keyid:98:8E:03:77:88:2A:47:82:CA:DF:C6:65:BE:A7:5B:F6:4B:FB:AF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/988E0377882A4782CADFC665BEA75BF64BFBAF8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:24:1a:62:60:e6:3e:4a:9b:92:ef:cd:2a:c7:3a:9c:f0:de: 4f:26:80:6c:a3:66:6a:bb:79:c6:7a:85:73:ec:c9:d3:89:7c: 6c:3f:44:51:24:78:18:04:ef:8b:22:4b:5d:00:5a:cd:5b:4e: 2e:7c:9f:69:ab:0f:67:60:76:07:8d:0a:4d:68:c5:9f:06:4a: a4:57:3a:90:ce:66:8f:2a:59:1e:91:49:50:2b:19:4e:f9:bf: 10:53:5d:5f:91:16:47:5d:2b:80:1c:47:8e:2e:dc:e0:42:37: d6:84:9b:e4:1c:ac:09:c5:0d:7d:93:eb:55:f6:df:79:42:3f: f7:5d:6a:75:8d:99:bc:2a:b5:f3:8d:e8:94:23:d9:69:0f:a0: 62:6d:c9:2c:f7:6a:b6:f9:8f:fd:50:11:e7:f6:4f:61:69:4a: f0:41:87:11:f8:90:2b:05:3c:79:66:9f:2b:a7:a8:f2:1a:22: bc:0b:36:87:d7:b6:b6:cd:b7:78:70:29:d9:fe:0a:a4:6d:e4: 6b:2a:ee:fb:11:73:2c:6a:8b:ef:1c:21:6c:b9:0c:1f:d7:d5: de:e4:70:34:89:b9:7c:bf:7b:c8:70:b3:72:1c:55:30:0e:c7: 81:72:8e:dd:79:ef:11:da:72:31:7a:46:2e:6f:52:25:7b:82: 85:9f:f1:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNf6b3DaM1A26c954Bxp+y1w+qFUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg4RTAzNzc4ODJBNDc4MkNBREZDNjY1QkVBNzVCRjY0 QkZCQUY4RTAeFw0yNTA1MTIxMDA1MzdaFw0yNTA1MTUxODA2MzdaMDMxMTAvBgNV BAMTKEYzNTBENEM2QzQ2QkQ3MUIwNzZFOERCRjcwQUMzNTU2OEY4QUFCNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzGQSsgqujoHE/nC2m/HGvgclc NFf860CPaimLlhLt5QP+Kdx7PMeQbrklU/usbiHREvSYq4OmQrA1aVKrTvvrYD20 dpBQpiu2VA40miC4xD3ObWuzKXa/WTEqV49YOaQpo8hL7/v9rQsaVP7l9Egj3k6K BXDq9jzR1VCKD0BZ52BA4uFLnHRKVO517nKU2+39/r7qEOgxWqP14NpNmvj2RKiW RuXEsXes4M8g39MnkqkIT/Kym0SurjE7g2lJNdb7whlOVukY/nxc7L2AMlgEPUz1 5GFSxs9N+1TS5ONJMfgh2QLcUFsMK1GpTIeLUJIhYqfHoAV/mPmf/dIk11BXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU81DUxsRr1xsHbo2/cKw1Vo+Kq0EwHwYDVR0j BBgwFoAUmI4Dd4gqR4LK38Zlvqdb9kv7r44wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MmYzOWMxNy02NzI1LTQyYmUtYmVkNC1mMGViYmJhMmQ0ZmQvMC85ODhFMDM3Nzg4 MkE0NzgyQ0FERkM2NjVCRUE3NUJGNjRCRkJBRjhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg4RTAzNzc4ODJBNDc4MkNBREZDNjY1QkVBNzVCRjY0QkZC QUY4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDJmMzljMTctNjcyNS00MmJlLWJl ZDQtZjBlYmJiYTJkNGZkLzAvOTg4RTAzNzc4ODJBNDc4MkNBREZDNjY1QkVBNzVC RjY0QkZCQUY4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKEkGmJg5j5Km5LvzSrHOpzw3k8mgGyjZmq7 ecZ6hXPsydOJfGw/RFEkeBgE74siS10AWs1bTi58n2mrD2dgdgeNCk1oxZ8GSqRX OpDOZo8qWR6RSVArGU75vxBTXV+RFkddK4AcR44u3OBCN9aEm+QcrAnFDX2T61X2 33lCP/ddanWNmbwqtfON6JQj2WkPoGJtySz3arb5j/1QEef2T2FpSvBBhxH4kCsF PHlmnyunqPIaIrwLNofXtrbNt3hwKdn+CqRt5Gsq7vsRcyxqi+8cIWy5DB/X1d7k cDSJuXy/e8hws3IcVTAOx4Fyjt157xHacjF6Ri5vUiV7goWf8fY= -----END CERTIFICATE-----Generated at Mon May 12 19:03:29 2025 by rpki-client