$ rpki-client -vvf repo-rpki.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.mft File: B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.mft (raw, json) Hash identifier: uLHC0EkK2yY2PFtHgjJzxIHQ1cLIood2kJEUWB8lAAk= Subject key identifier: A8:9F:C6:8A:6C:85:18:D4:41:A9:B2:AE:DE:26:3C:C0:01:1A:34:DC Authority key identifier: B4:41:54:61:B6:EF:70:D3:D4:A8:1E:D6:88:F2:49:7D:53:A7:FB:7A Certificate issuer: /CN=B4415461B6EF70D3D4A81ED688F2497D53A7FB7A Certificate serial: 6E88FBFB45D6D8436E548932C532784FD3E29EFC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.mft Manifest number: 19 Signing time: Sat 10 May 2025 20:31:36 +0000 Manifest this update: Sat 10 May 2025 20:26:36 +0000 Manifest next update: Wed 14 May 2025 05:45:36 +0000 Files and hashes: 1: B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.crl (hash: +Ug9PhNVMuYuCOk0Zo1tEN7ar1yTeBuAmixiV3h3gig=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.crl rsync://repo-rpki.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 05:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:88:fb:fb:45:d6:d8:43:6e:54:89:32:c5:32:78:4f:d3:e2:9e:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4415461B6EF70D3D4A81ED688F2497D53A7FB7A Validity Not Before: May 10 20:26:36 2025 GMT Not After : May 14 05:45:36 2025 GMT Subject: CN=A89FC68A6C8518D441A9B2AEDE263CC0011A34DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e0:06:a5:57:39:fb:0c:04:1e:fd:6c:19:7b: 4b:b9:ee:ac:14:7c:45:89:48:cd:ba:11:df:4b:86: 40:71:0d:da:c4:38:53:51:fa:08:9d:7f:28:f7:8a: fd:f3:fe:18:c8:bc:7b:91:85:b7:56:18:b4:71:2e: aa:b4:a0:86:2d:ee:46:38:90:38:cb:c0:1a:b6:17: 9d:c6:cb:61:1c:4d:c7:48:07:1a:e8:55:04:95:6e: c4:ac:b2:c8:8b:02:2a:17:95:6b:c5:0d:80:52:f5: 4a:f5:5f:17:12:65:6b:2f:c3:05:6b:47:87:6d:bb: b0:f1:c1:8d:bd:6b:ef:f5:0d:6d:12:12:ee:8f:c3: eb:9c:0a:f2:de:2e:9f:4f:b4:f0:b3:b3:79:5d:15: fa:99:86:7c:00:13:c9:47:3d:c7:00:c3:56:11:5b: 54:e0:fa:3d:26:8a:63:20:e2:8f:19:e9:8b:55:a5: 68:93:9a:ea:59:ff:55:80:52:53:be:80:cd:63:6b: 86:ed:39:83:44:12:45:c6:32:cd:19:4c:75:e4:66: fd:52:59:14:89:3a:76:a6:ed:bb:08:09:a5:9a:ea: fb:b0:38:e0:74:04:10:a2:c1:cc:37:b3:d3:57:0b: 94:10:a0:8e:80:b1:e0:14:91:9b:ea:02:34:e5:03: af:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:9F:C6:8A:6C:85:18:D4:41:A9:B2:AE:DE:26:3C:C0:01:1A:34:DC X509v3 Authority Key Identifier: keyid:B4:41:54:61:B6:EF:70:D3:D4:A8:1E:D6:88:F2:49:7D:53:A7:FB:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:4d:b8:36:28:13:65:3d:22:45:88:7c:0f:9f:53:67:2a:60: f4:dc:bc:ac:c2:13:55:7d:a8:21:66:52:90:d7:a7:7a:92:a2: de:8f:93:a0:d0:66:f9:d5:c7:b4:6b:17:cc:83:20:27:8b:ce: 4a:84:16:32:a5:7f:fc:52:a6:42:65:f6:41:cf:8a:b5:3f:af: ef:51:e2:90:9b:4b:34:e3:87:53:69:3b:f8:cd:9b:10:23:87: b3:30:23:66:bb:a2:57:c1:52:a8:93:41:de:07:71:9f:98:1d: 42:52:f0:92:c0:e0:a0:e0:b9:77:45:f0:28:68:45:76:12:a2: ae:ce:d1:07:dc:da:65:9d:53:ca:5c:19:9a:e0:48:af:c2:e9: fc:e9:53:c8:ab:53:8b:41:58:54:5b:32:98:02:b4:af:ea:76: 5e:c9:c4:8f:0d:11:5e:8b:76:f9:dd:3a:a1:9a:e3:3c:9e:5c: 8e:ae:e9:cb:06:3d:d3:30:7e:b2:c5:39:97:00:1c:18:c4:97: ca:13:9e:12:5e:b0:57:18:d2:48:cf:75:fb:f8:a6:8c:71:d0: 5b:6f:91:d9:cc:d5:43:9f:7a:da:a0:f5:0e:d1:bc:cc:04:fe: e0:29:94:f8:ec:2c:d1:8c:0f:40:92:ce:13:df:11:68:5e:d8: 72:33:53:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUboj7+0XW2ENuVIkyxTJ4T9PinvwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ0MTU0NjFCNkVGNzBEM0Q0QTgxRUQ2ODhGMjQ5N0Q1 M0E3RkI3QTAeFw0yNTA1MTAyMDI2MzZaFw0yNTA1MTQwNTQ1MzZaMDMxMTAvBgNV BAMTKEE4OUZDNjhBNkM4NTE4RDQ0MUE5QjJBRURFMjYzQ0MwMDExQTM0REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC94AalVzn7DAQe/WwZe0u57qwU fEWJSM26Ed9LhkBxDdrEOFNR+gidfyj3iv3z/hjIvHuRhbdWGLRxLqq0oIYt7kY4 kDjLwBq2F53Gy2EcTcdIBxroVQSVbsSsssiLAioXlWvFDYBS9Ur1XxcSZWsvwwVr R4dtu7DxwY29a+/1DW0SEu6Pw+ucCvLeLp9PtPCzs3ldFfqZhnwAE8lHPccAw1YR W1Tg+j0mimMg4o8Z6YtVpWiTmupZ/1WAUlO+gM1ja4btOYNEEkXGMs0ZTHXkZv1S WRSJOnam7bsICaWa6vuwOOB0BBCiwcw3s9NXC5QQoI6AseAUkZvqAjTlA6+TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqJ/GimyFGNRBqbKu3iY8wAEaNNwwHwYDVR0j BBgwFoAUtEFUYbbvcNPUqB7WiPJJfVOn+3owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZjMzMGQwNi1mOTJkLTQ5NWItOWJhMC1hY2RkODE3YjE0ODMvMC9CNDQxNTQ2MUI2 RUY3MEQzRDRBODFFRDY4OEYyNDk3RDUzQTdGQjdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQ0MTU0NjFCNkVGNzBEM0Q0QTgxRUQ2ODhGMjQ5N0Q1M0E3 RkI3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGYzMzBkMDYtZjkyZC00OTViLTli YTAtYWNkZDgxN2IxNDgzLzAvQjQ0MTU0NjFCNkVGNzBEM0Q0QTgxRUQ2ODhGMjQ5 N0Q1M0E3RkI3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABhNuDYoE2U9IkWIfA+fU2cqYPTcvKzCE1V9 qCFmUpDXp3qSot6Pk6DQZvnVx7RrF8yDICeLzkqEFjKlf/xSpkJl9kHPirU/r+9R 4pCbSzTjh1NpO/jNmxAjh7MwI2a7olfBUqiTQd4HcZ+YHUJS8JLA4KDguXdF8Cho RXYSoq7O0Qfc2mWdU8pcGZrgSK/C6fzpU8irU4tBWFRbMpgCtK/qdl7JxI8NEV6L dvndOqGa4zyeXI6u6csGPdMwfrLFOZcAHBjEl8oTnhJesFcY0kjPdfv4poxx0Ftv kdnM1UOfetqg9Q7RvMwE/uAplPjsLNGMD0CSzhPfEWhe2HIzU0g= -----END CERTIFICATE-----Generated at Mon May 12 11:25:48 2025 by rpki-client