$ rpki-client -vvf repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft File: 4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft (raw, json) Hash identifier: A5F/qqrDgk1TjAl9Al+czM1Zw9iGJKj/xQ77IHOh1Zg= Subject key identifier: 14:E8:15:DE:0A:F1:DC:C7:40:7F:C8:E8:3A:BB:43:46:32:26:21:83 Authority key identifier: 4A:8B:6A:33:95:61:2C:D3:3D:A8:B3:C3:81:D6:ED:CF:A4:A4:5A:1F Certificate issuer: /CN=4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F Certificate serial: 20DD5199FB13783994472A37A4237FC771014986 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft Manifest number: 01D1 Signing time: Thu 08 May 2025 16:21:04 +0000 Manifest this update: Thu 08 May 2025 16:16:04 +0000 Manifest next update: Sun 11 May 2025 23:12:04 +0000 Files and hashes: 1: 4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.crl (hash: VuYV1wapD29AV09+IhZv+DUKsGTaXvpTZtkCE7xJF/M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.crl rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 23:12:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:dd:51:99:fb:13:78:39:94:47:2a:37:a4:23:7f:c7:71:01:49:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F Validity Not Before: May 8 16:16:04 2025 GMT Not After : May 11 23:12:04 2025 GMT Subject: CN=14E815DE0AF1DCC7407FC8E83ABB434632262183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:cb:08:b0:e0:b9:5d:09:d6:33:47:05:ee:f8: c3:0c:73:02:bb:7d:99:cf:2f:a9:5b:cf:fe:24:3b: b8:e7:8f:c1:48:65:8a:87:55:26:ef:24:e0:de:70: 86:e0:6c:d8:54:8c:22:26:da:bc:6c:59:3e:dc:ba: 6a:d5:14:ae:5f:55:8b:eb:4c:98:44:48:ae:90:9e: da:8f:26:d7:6c:8c:8c:a2:ce:44:74:16:4c:6e:bc: e1:9b:44:77:b4:f8:a3:7a:cd:26:a8:fe:b6:c2:17: d5:30:2e:96:b0:95:93:f7:ac:8c:2c:d1:35:d0:0d: 89:0b:ec:fc:0b:fe:23:dc:4b:3d:b5:c6:9a:15:97: 9b:d0:b2:3d:d1:f7:a8:90:38:18:27:8d:c7:7c:fc: db:6e:f2:bb:3b:17:6a:33:c9:28:be:45:73:79:48: b9:40:5d:d3:28:29:57:51:ea:e3:65:3d:3d:4b:0d: 96:d4:ac:02:a4:e0:a2:91:8f:c2:43:0d:31:4a:14: 0f:9d:3a:0e:be:bf:90:98:cf:23:0a:46:1c:e8:07: 3b:00:ff:a9:b4:3b:5d:99:ae:a1:49:b3:10:f4:17: 21:3b:77:2b:d8:af:43:94:9f:fa:36:69:4d:29:d5: d6:f4:4d:d7:25:16:38:d2:55:a2:9e:8a:02:a5:a1: a4:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:E8:15:DE:0A:F1:DC:C7:40:7F:C8:E8:3A:BB:43:46:32:26:21:83 X509v3 Authority Key Identifier: keyid:4A:8B:6A:33:95:61:2C:D3:3D:A8:B3:C3:81:D6:ED:CF:A4:A4:5A:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:38:98:59:71:f3:42:9f:25:70:8e:66:89:89:db:85:87:85: 73:aa:0b:e6:c8:8b:eb:6c:90:b9:05:4d:26:ab:4c:9a:02:0e: a0:cf:74:bc:c4:9f:79:66:36:92:c8:d4:72:09:7b:66:2a:cf: 75:7a:50:45:c2:76:f3:95:1b:e6:35:9f:05:8e:f7:fa:a1:80: c5:64:fb:87:5e:2b:27:d5:a4:c8:a3:af:fa:bf:13:2a:26:27: b6:7b:37:2e:54:05:63:03:02:7c:76:d8:19:ec:d1:79:64:94: 20:2d:e4:8c:a6:b6:1c:e0:d9:59:4f:78:38:97:f0:92:c2:53: e9:d0:e8:0a:9c:3b:43:01:24:60:90:3c:41:45:c5:79:a8:28: d2:65:d6:21:ef:ff:03:6e:62:f9:9b:be:f4:28:47:83:d0:7a: 70:48:00:46:29:96:8f:3c:5b:ad:60:03:9e:a9:1c:2f:c0:ec: bb:fc:9c:15:7d:4e:65:f5:3f:7d:28:59:fb:55:08:9b:70:ef: 75:c7:b3:63:41:98:24:af:c7:75:3c:95:62:30:56:a2:4b:5a: 35:c5:1e:61:f1:c8:a7:72:b7:ca:15:fa:78:70:e0:93:9c:1d: 78:59:24:0b:c5:c9:d2:8a:32:d6:a5:23:57:00:46:7a:cf:82: 93:33:2b:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIN1RmfsTeDmURyo3pCN/x3EBSYYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE4QjZBMzM5NTYxMkNEMzNEQThCM0MzODFENkVEQ0ZB NEE0NUExRjAeFw0yNTA1MDgxNjE2MDRaFw0yNTA1MTEyMzEyMDRaMDMxMTAvBgNV BAMTKDE0RTgxNURFMEFGMURDQzc0MDdGQzhFODNBQkI0MzQ2MzIyNjIxODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhywiw4LldCdYzRwXu+MMMcwK7 fZnPL6lbz/4kO7jnj8FIZYqHVSbvJODecIbgbNhUjCIm2rxsWT7cumrVFK5fVYvr TJhESK6QntqPJtdsjIyizkR0FkxuvOGbRHe0+KN6zSao/rbCF9UwLpawlZP3rIws 0TXQDYkL7PwL/iPcSz21xpoVl5vQsj3R96iQOBgnjcd8/Ntu8rs7F2ozySi+RXN5 SLlAXdMoKVdR6uNlPT1LDZbUrAKk4KKRj8JDDTFKFA+dOg6+v5CYzyMKRhzoBzsA /6m0O12ZrqFJsxD0FyE7dyvYr0OUn/o2aU0p1db0TdclFjjSVaKeigKloaRnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFOgV3grx3MdAf8joOrtDRjImIYMwHwYDVR0j BBgwFoAUSotqM5VhLNM9qLPDgdbtz6SkWh8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWEzN2FlYy02M2MyLTQ1ZDEtOTZhZS1kYTE2ZDEwMThiMGYvMC80QThCNkEzMzk1 NjEyQ0QzM0RBOEIzQzM4MUQ2RURDRkE0QTQ1QTFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE4QjZBMzM5NTYxMkNEMzNEQThCM0MzODFENkVEQ0ZBNEE0 NUExRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTlhMzdhZWMtNjNjMi00NWQxLTk2 YWUtZGExNmQxMDE4YjBmLzAvNEE4QjZBMzM5NTYxMkNEMzNEQThCM0MzODFENkVE Q0ZBNEE0NUExRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABg4mFlx80KfJXCOZomJ24WHhXOqC+bIi+ts kLkFTSarTJoCDqDPdLzEn3lmNpLI1HIJe2Yqz3V6UEXCdvOVG+Y1nwWO9/qhgMVk +4deKyfVpMijr/q/EyomJ7Z7Ny5UBWMDAnx22Bns0XlklCAt5Iymthzg2VlPeDiX 8JLCU+nQ6AqcO0MBJGCQPEFFxXmoKNJl1iHv/wNuYvmbvvQoR4PQenBIAEYplo88 W61gA56pHC/A7Lv8nBV9TmX1P30oWftVCJtw73XHs2NBmCSvx3U8lWIwVqJLWjXF HmHxyKdyt8oV+nhw4JOcHXhZJAvFydKKMtalI1cARnrPgpMzK84= -----END CERTIFICATE-----Generated at Sat May 10 03:53:35 2025 by rpki-client