$ rpki-client -vvf repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.mft File: 396B7BA56F2872793C0806B4A8EE93316605958B.mft (raw, json) Hash identifier: iMxgabOh1hvdbN/t+fynQ35k4jiibHDPY15DfP9zhl8= Subject key identifier: EB:95:EB:77:E3:49:9C:1D:DD:D5:23:4B:71:25:2C:64:8A:11:78:1B Authority key identifier: 39:6B:7B:A5:6F:28:72:79:3C:08:06:B4:A8:EE:93:31:66:05:95:8B Certificate issuer: /CN=396B7BA56F2872793C0806B4A8EE93316605958B Certificate serial: 31F3EC5C6E9E965FDC335A08142AE3CA494A29C5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/396B7BA56F2872793C0806B4A8EE93316605958B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.mft Manifest number: 017F Signing time: Sun 04 May 2025 01:10:59 +0000 Manifest this update: Sun 04 May 2025 01:05:59 +0000 Manifest next update: Wed 07 May 2025 04:21:59 +0000 Files and hashes: 1: 396B7BA56F2872793C0806B4A8EE93316605958B.crl (hash: aFsi6ncaHx6IHzWxab+TFLFdRwk0i85Lx9peBZfLHxg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.crl rsync://repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/396B7BA56F2872793C0806B4A8EE93316605958B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 04:21:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:f3:ec:5c:6e:9e:96:5f:dc:33:5a:08:14:2a:e3:ca:49:4a:29:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=396B7BA56F2872793C0806B4A8EE93316605958B Validity Not Before: May 4 01:05:59 2025 GMT Not After : May 7 04:21:59 2025 GMT Subject: CN=EB95EB77E3499C1DDDD5234B71252C648A11781B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:99:6e:d2:cc:ca:4c:6c:17:f7:a0:9a:09:a5: b3:27:a5:89:a4:b6:1d:f8:9d:06:ff:65:eb:05:34: 08:55:6e:8d:2d:d7:c6:de:1f:ff:6f:9f:53:84:52: dc:b9:11:7b:5c:00:31:9a:d6:7c:a3:d6:36:8f:c2: d2:b4:94:9c:fc:a1:ad:a2:11:4b:1a:cf:32:bc:a9: 11:6a:68:19:6e:b1:ae:b1:b2:a6:d3:42:fc:3a:3d: 8e:56:69:a7:68:5e:fe:a1:35:f6:40:ca:b7:79:5f: fb:f6:99:8b:63:3b:16:5c:1f:19:da:da:ca:3e:f7: a5:a2:12:48:f5:21:24:c5:bd:28:fb:56:45:b9:5e: 16:cb:2a:58:9a:06:70:69:aa:0e:78:cb:52:cb:73: 73:0b:f1:06:b9:7a:07:5e:31:50:f9:7a:ca:2f:72: a8:c1:95:c8:55:ac:e6:5d:f0:ba:e1:c8:7c:05:c4: db:cc:b0:f6:6c:9a:31:57:0b:6c:1d:48:56:84:97: 2c:fb:96:29:89:6f:af:78:bc:74:57:73:27:45:95: 06:a4:ca:bc:59:9f:38:73:be:f0:28:f2:c3:98:8e: 0d:51:32:2e:af:18:38:e5:f4:9e:90:0c:2a:b7:e0: a3:74:3b:75:ae:d9:66:d0:cb:a7:24:7a:41:fc:e6: 8a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:95:EB:77:E3:49:9C:1D:DD:D5:23:4B:71:25:2C:64:8A:11:78:1B X509v3 Authority Key Identifier: keyid:39:6B:7B:A5:6F:28:72:79:3C:08:06:B4:A8:EE:93:31:66:05:95:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/396B7BA56F2872793C0806B4A8EE93316605958B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:d9:90:fb:5f:d7:75:90:70:d9:75:b7:3d:cc:f3:ad:cb:1e: 82:b2:4f:e7:16:8e:fc:2f:ac:17:9a:e7:e6:f8:61:38:7e:1b: 14:37:ba:35:21:f1:a3:66:d1:f1:b8:89:1e:ba:86:a4:23:3c: 73:c2:eb:65:8a:fc:8f:5d:b5:fc:2d:59:03:30:17:f6:21:03: 8e:fd:7c:e2:4d:9e:85:23:19:b0:4b:c7:68:0e:08:0f:4a:f9: 2c:2e:ef:77:93:8d:94:e1:7b:27:c5:67:c5:6c:b9:bd:15:9e: 92:49:57:18:30:9b:e8:a5:37:d2:3e:a6:43:5a:a9:43:ed:31: b6:70:75:f2:b7:16:2f:0d:d0:99:9e:7e:08:f4:86:a4:29:70: 65:07:d1:40:89:7d:d3:1b:5e:7c:2e:59:dd:b2:2c:51:be:5c: fb:a4:59:66:4e:4c:5f:a1:cb:64:08:65:12:bb:74:80:96:b0: 3f:0b:e2:f3:fd:55:66:a5:09:f4:e3:41:e7:ae:d1:6a:93:96: a4:d0:1c:e6:78:3d:ec:76:27:59:a4:f9:6b:c0:5a:66:4f:9c: e2:86:76:35:e0:c2:27:b1:cb:15:d8:4c:02:43:bd:2f:4b:b7: ea:43:a8:76:ed:4b:d7:d8:bd:3d:21:e1:e4:c7:69:40:c6:83: af:42:6e:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMfPsXG6ell/cM1oIFCrjyklKKcUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk2QjdCQTU2RjI4NzI3OTNDMDgwNkI0QThFRTkzMzE2 NjA1OTU4QjAeFw0yNTA1MDQwMTA1NTlaFw0yNTA1MDcwNDIxNTlaMDMxMTAvBgNV BAMTKEVCOTVFQjc3RTM0OTlDMUREREQ1MjM0QjcxMjUyQzY0OEExMTc4MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHmW7SzMpMbBf3oJoJpbMnpYmk th34nQb/ZesFNAhVbo0t18beH/9vn1OEUty5EXtcADGa1nyj1jaPwtK0lJz8oa2i EUsazzK8qRFqaBlusa6xsqbTQvw6PY5WaadoXv6hNfZAyrd5X/v2mYtjOxZcHxna 2so+96WiEkj1ISTFvSj7VkW5XhbLKliaBnBpqg54y1LLc3ML8Qa5egdeMVD5esov cqjBlchVrOZd8LrhyHwFxNvMsPZsmjFXC2wdSFaElyz7limJb694vHRXcydFlQak yrxZnzhzvvAo8sOYjg1RMi6vGDjl9J6QDCq34KN0O3Wu2WbQy6ckekH85oqBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU65Xrd+NJnB3d1SNLcSUsZIoReBswHwYDVR0j BBgwFoAUOWt7pW8ocnk8CAa0qO6TMWYFlYswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTkzZjg3Ni1kNTFlLTQ4NTctYTZjZS1jOGQ4N2NiNDBlMTcvMC8zOTZCN0JBNTZG Mjg3Mjc5M0MwODA2QjRBOEVFOTMzMTY2MDU5NThCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzk2QjdCQTU2RjI4NzI3OTNDMDgwNkI0QThFRTkzMzE2NjA1 OTU4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWU5M2Y4NzYtZDUxZS00ODU3LWE2 Y2UtYzhkODdjYjQwZTE3LzAvMzk2QjdCQTU2RjI4NzI3OTNDMDgwNkI0QThFRTkz MzE2NjA1OTU4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABPZkPtf13WQcNl1tz3M863LHoKyT+cWjvwv rBea5+b4YTh+GxQ3ujUh8aNm0fG4iR66hqQjPHPC62WK/I9dtfwtWQMwF/YhA479 fOJNnoUjGbBLx2gOCA9K+Swu73eTjZTheyfFZ8Vsub0VnpJJVxgwm+ilN9I+pkNa qUPtMbZwdfK3Fi8N0Jmefgj0hqQpcGUH0UCJfdMbXnwuWd2yLFG+XPukWWZOTF+h y2QIZRK7dICWsD8L4vP9VWalCfTjQeeu0WqTlqTQHOZ4Pex2J1mk+WvAWmZPnOKG djXgwiexyxXYTAJDvS9Lt+pDqHbtS9fYvT0h4eTHaUDGg69CbpI= -----END CERTIFICATE-----Generated at Tue May 6 06:48:56 2025 by rpki-client