$ rpki-client -vvf repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.mft File: 4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.mft (raw, json) Hash identifier: Fszh5KuWlnQU8u6ABmi8oYNcyEgrCEC1bvk9JuplZBg= Subject key identifier: 9D:02:C3:36:7B:03:EC:8B:72:54:AC:E2:B3:3D:06:FC:6C:FF:2C:28 Authority key identifier: 4C:0A:2E:84:DC:0F:6F:30:63:6B:6D:D2:52:7A:B6:CD:6A:B8:AF:CD Certificate issuer: /CN=4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD Certificate serial: 4C8097E4711DFF08A0848C378187C8ED5BC6BDB3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.mft Manifest number: 0253 Signing time: Sat 10 May 2025 15:01:03 +0000 Manifest this update: Sat 10 May 2025 14:56:03 +0000 Manifest next update: Tue 13 May 2025 22:18:03 +0000 Files and hashes: 1: 4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.crl (hash: JRhmzbJSIqUFB/whEmV93pXrQfmuIuVlgjcJQit+r4k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.crl rsync://repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 22:18:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:80:97:e4:71:1d:ff:08:a0:84:8c:37:81:87:c8:ed:5b:c6:bd:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD Validity Not Before: May 10 14:56:03 2025 GMT Not After : May 13 22:18:03 2025 GMT Subject: CN=9D02C3367B03EC8B7254ACE2B33D06FC6CFF2C28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:84:3e:08:60:70:38:35:bc:23:25:64:cd:ce: cc:cf:68:81:da:4d:8d:c5:59:e0:41:f7:5f:3b:22: fb:85:db:21:a2:5b:30:c4:89:c5:2a:9c:a2:37:44: 24:9a:4c:73:9e:df:a1:b3:05:bb:a3:cc:c9:c1:b3: e7:60:00:fb:b7:49:4c:d2:a2:8b:4d:d0:5e:84:e0: 39:24:52:0a:e7:72:31:f0:f4:c4:92:34:b6:8c:aa: fe:86:6d:51:69:af:37:b9:99:99:fa:51:5c:56:23: 66:2a:a7:f5:9f:61:79:1a:de:64:49:6a:fa:56:c7: 68:2c:69:bb:56:f2:67:6d:aa:07:70:6f:44:90:9b: ea:45:97:d8:66:2d:94:f7:43:bb:e6:fe:0c:87:4d: 89:b9:4a:aa:de:96:b1:90:55:32:dd:f5:93:ee:5f: 83:51:21:5d:f5:36:03:fb:8b:39:bb:ac:70:c0:74: 50:08:d1:f4:5d:6d:30:27:96:82:24:33:c3:35:e7: 4f:9e:81:7c:d1:1a:c6:df:ef:e9:09:85:4b:76:4b: 6b:ff:8a:0d:de:01:c0:4f:ca:f0:11:f0:6f:34:7d: 42:ab:87:9b:ea:d0:75:e0:cb:ad:f5:11:b3:06:f7: 49:1d:0f:3b:82:24:d3:56:7c:cf:08:47:50:dc:ee: 14:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:02:C3:36:7B:03:EC:8B:72:54:AC:E2:B3:3D:06:FC:6C:FF:2C:28 X509v3 Authority Key Identifier: keyid:4C:0A:2E:84:DC:0F:6F:30:63:6B:6D:D2:52:7A:B6:CD:6A:B8:AF:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:f4:fb:44:d0:02:47:ee:15:84:18:ce:24:0d:21:6c:87:17: 52:95:1d:23:ed:59:2f:31:fa:2c:13:09:26:7b:47:41:37:f4: c9:e4:c2:a9:22:ed:6f:ab:17:50:52:67:6a:31:f2:ea:14:97: ab:2d:69:64:31:92:10:15:c2:cb:23:dd:68:bc:7c:81:27:2c: d1:91:20:c9:70:e3:f5:5f:39:65:8a:63:f7:ed:b6:89:12:66: 02:14:88:52:d5:3d:ae:d8:d6:54:d0:7e:ca:da:2b:8e:6d:8f: 9c:b1:95:0a:c6:a5:b1:37:ba:c9:67:55:55:72:19:04:c6:ff: f8:dc:4e:ff:08:48:d8:70:fc:ce:01:33:63:c4:dd:fd:e0:68: cf:5f:86:a4:65:3b:46:6c:dd:5b:98:bd:c3:27:84:13:1b:69: 22:92:ff:be:41:93:b0:f7:ce:58:da:37:9c:b6:df:09:1c:9f: ec:d2:eb:0f:24:5f:18:73:06:c4:5c:03:52:68:e4:78:7b:4a: a7:37:cb:af:a4:a1:63:0d:ea:40:d1:3e:30:7b:32:8b:f2:61: 38:c5:70:0d:ae:2f:50:39:5e:eb:24:89:c5:d3:c1:4c:5f:f6: e9:19:dd:11:3b:10:2d:81:8b:91:d4:d3:0e:37:17:a5:55:da: 7c:25:cd:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTICX5HEd/wighIw3gYfI7VvGvbMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEMwQTJFODREQzBGNkYzMDYzNkI2REQyNTI3QUI2Q0Q2 QUI4QUZDRDAeFw0yNTA1MTAxNDU2MDNaFw0yNTA1MTMyMjE4MDNaMDMxMTAvBgNV BAMTKDlEMDJDMzM2N0IwM0VDOEI3MjU0QUNFMkIzM0QwNkZDNkNGRjJDMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChhD4IYHA4NbwjJWTNzszPaIHa TY3FWeBB9187IvuF2yGiWzDEicUqnKI3RCSaTHOe36GzBbujzMnBs+dgAPu3SUzS ootN0F6E4DkkUgrncjHw9MSSNLaMqv6GbVFprze5mZn6UVxWI2Yqp/WfYXka3mRJ avpWx2gsabtW8mdtqgdwb0SQm+pFl9hmLZT3Q7vm/gyHTYm5SqrelrGQVTLd9ZPu X4NRIV31NgP7izm7rHDAdFAI0fRdbTAnloIkM8M150+egXzRGsbf7+kJhUt2S2v/ ig3eAcBPyvAR8G80fUKrh5vq0HXgy631EbMG90kdDzuCJNNWfM8IR1Dc7hRnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnQLDNnsD7ItyVKzisz0G/Gz/LCgwHwYDVR0j BBgwFoAUTAouhNwPbzBja23SUnq2zWq4r80wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDYyNTYyMS1mMDBmLTQ4MzMtYmJhYi01NmIyNjk3MjE1NDkvMC80QzBBMkU4NERD MEY2RjMwNjM2QjZERDI1MjdBQjZDRDZBQjhBRkNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEMwQTJFODREQzBGNkYzMDYzNkI2REQyNTI3QUI2Q0Q2QUI4 QUZDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQ2MjU2MjEtZjAwZi00ODMzLWJi YWItNTZiMjY5NzIxNTQ5LzAvNEMwQTJFODREQzBGNkYzMDYzNkI2REQyNTI3QUI2 Q0Q2QUI4QUZDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC70+0TQAkfuFYQYziQNIWyHF1KVHSPtWS8x +iwTCSZ7R0E39Mnkwqki7W+rF1BSZ2ox8uoUl6staWQxkhAVwssj3Wi8fIEnLNGR IMlw4/VfOWWKY/fttokSZgIUiFLVPa7Y1lTQfsraK45tj5yxlQrGpbE3uslnVVVy GQTG//jcTv8ISNhw/M4BM2PE3f3gaM9fhqRlO0Zs3VuYvcMnhBMbaSKS/75Bk7D3 zljaN5y23wkcn+zS6w8kXxhzBsRcA1Jo5Hh7Sqc3y6+koWMN6kDRPjB7MovyYTjF cA2uL1A5XuskicXTwUxf9ukZ3RE7EC2Bi5HU0w43F6VV2nwlzXM= -----END CERTIFICATE-----Generated at Sun May 11 09:20:44 2025 by rpki-client