$ rpki-client -vvf repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft File: 02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft (raw, json) Hash identifier: nuEeUAOiVavZulmiOWX1lHeCzHlpcVlfTKmQyE0jo/M= Subject key identifier: 18:25:93:7E:9D:96:A5:D0:9A:F6:E3:25:B6:64:0E:91:53:2D:05:33 Authority key identifier: 02:23:69:13:B4:6A:90:03:C0:64:5E:6C:C8:58:EA:54:D6:D7:F4:AC Certificate issuer: /CN=02236913B46A9003C0645E6CC858EA54D6D7F4AC Certificate serial: 61BF427B091F52E43B2735D55E314875FD092114 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02236913B46A9003C0645E6CC858EA54D6D7F4AC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft Manifest number: C6 Signing time: Tue 13 May 2025 23:50:58 +0000 Manifest this update: Tue 13 May 2025 23:45:58 +0000 Manifest next update: Sat 17 May 2025 08:57:58 +0000 Files and hashes: 1: 02236913B46A9003C0645E6CC858EA54D6D7F4AC.crl (hash: 8Jtx7ZLmOVQWqoNx0Vkn5L3UU4WhjlixynmUtgwQReo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.crl rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02236913B46A9003C0645E6CC858EA54D6D7F4AC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 08:57:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:bf:42:7b:09:1f:52:e4:3b:27:35:d5:5e:31:48:75:fd:09:21:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02236913B46A9003C0645E6CC858EA54D6D7F4AC Validity Not Before: May 13 23:45:58 2025 GMT Not After : May 17 08:57:58 2025 GMT Subject: CN=1825937E9D96A5D09AF6E325B6640E91532D0533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a0:0e:8f:05:03:e9:c8:fa:8e:cd:be:58:66: c8:8d:73:65:eb:fa:d8:63:54:a4:6a:fc:83:1a:e1: ed:70:29:47:d7:c5:41:20:f0:fe:2f:3e:02:6a:2e: d2:b6:f8:0d:2a:f0:3f:f4:0f:75:52:13:15:d6:d3: 2a:19:57:dd:32:9f:64:10:da:8f:df:7f:f0:bc:82: 29:bf:4a:10:52:e0:f7:10:f3:e5:51:3c:cb:5d:3e: d7:f8:22:aa:ea:dc:a9:63:52:be:e6:85:0b:31:94: 53:b6:d9:cb:d6:96:f9:c9:bb:e3:d9:c2:a3:28:39: e4:02:f7:ad:06:cd:48:08:64:ec:dd:12:7f:21:29: e4:b9:bf:fe:3a:c7:55:d8:29:67:cc:bd:fb:f8:38: 3f:83:d4:bf:1d:53:e3:4f:be:36:07:c9:c2:2c:41: ee:4b:3e:f2:57:ad:da:44:7d:fe:9a:ae:d4:39:b3: 32:a0:a1:a0:8b:a4:fd:01:d8:63:2f:81:cd:27:6d: 53:cf:81:0c:0c:36:23:31:ab:b1:30:12:d1:a0:9a: 94:da:45:ed:72:9c:e6:f6:5c:eb:48:10:43:df:3d: 54:7a:b7:44:96:e5:bf:59:f9:31:4b:35:f5:7c:c6: a5:65:49:46:e3:8b:fb:67:93:84:10:fd:78:62:4c: b8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:25:93:7E:9D:96:A5:D0:9A:F6:E3:25:B6:64:0E:91:53:2D:05:33 X509v3 Authority Key Identifier: keyid:02:23:69:13:B4:6A:90:03:C0:64:5E:6C:C8:58:EA:54:D6:D7:F4:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02236913B46A9003C0645E6CC858EA54D6D7F4AC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:e2:9e:25:90:d0:eb:6f:34:51:b1:8d:42:7a:85:dd:d5:0d: 5f:ad:87:53:1c:31:37:c7:59:f1:70:15:24:9f:d6:17:37:c6: 28:e5:bb:53:9a:71:d2:51:1c:c1:e1:0a:93:e3:1e:17:fd:7d: ec:87:1b:bf:2f:ed:fa:64:14:2d:73:72:41:4d:3d:36:bb:7f: 86:dd:a3:de:e3:78:1d:4a:64:98:cb:21:f2:cd:be:99:ea:06: 89:b0:b4:0f:c4:f3:fc:85:8c:e2:70:2c:cc:c3:54:ef:a9:48: e3:26:e8:37:19:ea:b8:b4:24:b0:b6:63:ff:53:e7:ae:ed:7a: 1e:b2:cb:2d:aa:c4:a5:d7:0e:3f:98:0c:af:3a:a6:6d:2b:72: e5:5f:2d:fb:f2:07:f7:13:23:ec:3a:fb:e1:3c:2e:46:00:fc: 2a:2e:7b:b3:a0:ac:71:6d:8c:07:dc:c3:72:92:84:03:14:53: 41:c1:6e:1b:2a:6b:a4:35:a2:8e:87:c2:87:8b:24:a4:69:a8: 34:36:19:dc:f2:cd:b1:6a:76:eb:d4:dc:1d:e5:a2:96:ee:52: f5:70:c8:ad:98:2c:98:50:2c:9f:da:69:8c:66:7c:85:e9:93: c5:01:36:cf:61:d7:d7:f5:44:2a:09:9f:a3:7c:9a:3a:a7:f3: d0:5c:45:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYb9CewkfUuQ7JzXVXjFIdf0JIRQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIyMzY5MTNCNDZBOTAwM0MwNjQ1RTZDQzg1OEVBNTRE NkQ3RjRBQzAeFw0yNTA1MTMyMzQ1NThaFw0yNTA1MTcwODU3NThaMDMxMTAvBgNV BAMTKDE4MjU5MzdFOUQ5NkE1RDA5QUY2RTMyNUI2NjQwRTkxNTMyRDA1MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7oA6PBQPpyPqOzb5YZsiNc2Xr +thjVKRq/IMa4e1wKUfXxUEg8P4vPgJqLtK2+A0q8D/0D3VSExXW0yoZV90yn2QQ 2o/ff/C8gim/ShBS4PcQ8+VRPMtdPtf4Iqrq3KljUr7mhQsxlFO22cvWlvnJu+PZ wqMoOeQC960GzUgIZOzdEn8hKeS5v/46x1XYKWfMvfv4OD+D1L8dU+NPvjYHycIs Qe5LPvJXrdpEff6artQ5szKgoaCLpP0B2GMvgc0nbVPPgQwMNiMxq7EwEtGgmpTa Re1ynOb2XOtIEEPfPVR6t0SW5b9Z+TFLNfV8xqVlSUbji/tnk4QQ/XhiTLgNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGCWTfp2WpdCa9uMltmQOkVMtBTMwHwYDVR0j BBgwFoAUAiNpE7RqkAPAZF5syFjqVNbX9KwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YjcyZjcxYS1iOWMyLTQwMzMtOTY3NS1kNzcwNzYwM2E4MmMvMC8wMjIzNjkxM0I0 NkE5MDAzQzA2NDVFNkNDODU4RUE1NEQ2RDdGNEFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDIyMzY5MTNCNDZBOTAwM0MwNjQ1RTZDQzg1OEVBNTRENkQ3 RjRBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI3MmY3MWEtYjljMi00MDMzLTk2 NzUtZDc3MDc2MDNhODJjLzAvMDIyMzY5MTNCNDZBOTAwM0MwNjQ1RTZDQzg1OEVB NTRENkQ3RjRBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMviniWQ0OtvNFGxjUJ6hd3VDV+th1McMTfH WfFwFSSf1hc3xijlu1OacdJRHMHhCpPjHhf9feyHG78v7fpkFC1zckFNPTa7f4bd o97jeB1KZJjLIfLNvpnqBomwtA/E8/yFjOJwLMzDVO+pSOMm6DcZ6ri0JLC2Y/9T 567teh6yyy2qxKXXDj+YDK86pm0rcuVfLfvyB/cTI+w6++E8LkYA/Coue7OgrHFt jAfcw3KShAMUU0HBbhsqa6Q1oo6HwoeLJKRpqDQ2GdzyzbFqduvU3B3lopbuUvVw yK2YLJhQLJ/aaYxmfIXpk8UBNs9h19f1RCoJn6N8mjqn89BcRRg= -----END CERTIFICATE-----Generated at Thu May 15 02:31:46 2025 by rpki-client