$ rpki-client -vvf repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft File: 8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft (raw, json) Hash identifier: 18tu6CQKVdEfGGZpkcqXVZD10ZO6smjS7VM15oNeSk0= Subject key identifier: 60:6D:29:6E:1B:88:DD:68:5D:10:57:F1:A8:0B:29:37:10:E2:20:49 Authority key identifier: 8D:5A:49:C9:E4:2E:37:1B:FD:1E:67:AC:E1:B3:D5:5E:C1:AB:F7:3F Certificate issuer: /CN=8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F Certificate serial: 26878935D85337DDA7A22BAD3EFB246FEAA77227 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft Manifest number: 63 Signing time: Sun 04 May 2025 05:00:53 +0000 Manifest this update: Sun 04 May 2025 04:55:53 +0000 Manifest next update: Wed 07 May 2025 10:39:53 +0000 Files and hashes: 1: 8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.crl (hash: a5bulwFsA+Eqn6sxPvIiidcox8NkolV5Y9P61QsReGA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.crl rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 10:39:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:87:89:35:d8:53:37:dd:a7:a2:2b:ad:3e:fb:24:6f:ea:a7:72:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F Validity Not Before: May 4 04:55:53 2025 GMT Not After : May 7 10:39:53 2025 GMT Subject: CN=606D296E1B88DD685D1057F1A80B293710E22049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8b:49:2f:b3:57:56:f5:32:dd:95:fb:27:7c: e6:82:76:14:8b:ff:75:17:0a:50:6e:e6:d4:bf:db: b4:bb:04:16:6e:24:97:ee:98:c0:04:58:5c:df:65: 4e:99:f0:ad:25:59:3d:83:2b:39:50:7a:c8:60:d2: 0e:eb:3a:c1:a5:be:c7:e6:0b:77:00:0d:45:9a:b0: 7e:f7:19:10:35:d7:26:3b:6a:c2:04:68:6b:c6:c3: b0:62:bc:f6:ea:4a:13:84:4c:20:84:ae:1a:97:6e: f2:a1:9c:48:27:11:28:11:25:0f:8f:41:c4:a4:2e: 83:10:e4:41:bc:8e:70:10:27:9f:3b:9f:c3:8a:ab: fa:23:15:87:14:26:30:48:49:84:d9:5e:86:d8:34: c4:e4:81:06:70:ba:d3:11:13:f9:19:ed:3c:50:d4: 0a:23:aa:b8:49:c4:1d:56:2c:f6:1f:39:f9:24:b2: 61:02:ae:6e:a4:b0:17:35:15:ef:cf:3f:35:b7:ea: 32:9c:15:9f:43:2b:6e:b6:57:ac:36:ae:a1:09:0a: ab:0f:c3:47:58:de:7e:d7:3c:87:6f:0f:90:20:c3: da:aa:0a:72:77:01:a1:75:0e:d6:a4:a6:66:37:2e: cc:9a:50:33:e1:9c:d1:6b:8a:fc:ad:73:1f:c8:e7: 2d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:6D:29:6E:1B:88:DD:68:5D:10:57:F1:A8:0B:29:37:10:E2:20:49 X509v3 Authority Key Identifier: keyid:8D:5A:49:C9:E4:2E:37:1B:FD:1E:67:AC:E1:B3:D5:5E:C1:AB:F7:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:24:f4:07:ae:4c:4e:0d:32:98:d5:9d:60:5e:2a:53:dd:c5: b5:56:64:d7:48:64:be:f7:ed:30:ed:b1:7e:14:ad:08:59:5a: b2:6b:85:e0:c8:86:9e:64:fb:e7:28:24:e3:36:b9:4e:5c:aa: d3:48:fa:74:49:60:e0:67:a4:2d:e9:d4:76:a9:e5:5e:81:e8: 8c:1b:b1:77:1b:77:0a:ce:96:0f:ef:32:a4:68:89:ed:1d:a8: 5b:db:b4:cf:e4:f9:1d:90:df:0e:4f:a7:a9:87:38:36:7c:8a: 47:42:98:38:8c:f2:68:f9:e7:dd:ac:49:6b:63:49:41:64:6d: 1b:b7:1b:68:3d:a7:cc:65:2e:22:25:5e:08:2a:d2:1d:e1:1f: da:89:02:7f:10:38:76:c1:f6:10:55:91:d8:f2:6e:ff:84:b8: 23:ef:52:b8:4c:70:40:ea:51:ec:dd:31:1e:3f:b4:00:3c:e8: 10:03:bb:4c:78:07:e1:3b:c6:bd:5d:89:61:32:9b:7d:55:37: 87:a0:67:8c:53:4d:21:6b:6b:92:56:18:34:6f:35:80:83:96: a4:7e:4c:9b:7f:fa:98:18:09:84:33:19:12:75:a2:1c:28:f5: c2:d5:ce:fb:01:4b:57:de:47:ba:30:a1:80:b3:b8:c2:2d:1c: 27:01:3d:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJoeJNdhTN92noiutPvskb+qncicwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ1QTQ5QzlFNDJFMzcxQkZEMUU2N0FDRTFCM0Q1NUVD MUFCRjczRjAeFw0yNTA1MDQwNDU1NTNaFw0yNTA1MDcxMDM5NTNaMDMxMTAvBgNV BAMTKDYwNkQyOTZFMUI4OERENjg1RDEwNTdGMUE4MEIyOTM3MTBFMjIwNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCi0kvs1dW9TLdlfsnfOaCdhSL /3UXClBu5tS/27S7BBZuJJfumMAEWFzfZU6Z8K0lWT2DKzlQeshg0g7rOsGlvsfm C3cADUWasH73GRA11yY7asIEaGvGw7BivPbqShOETCCErhqXbvKhnEgnESgRJQ+P QcSkLoMQ5EG8jnAQJ587n8OKq/ojFYcUJjBISYTZXobYNMTkgQZwutMRE/kZ7TxQ 1AojqrhJxB1WLPYfOfkksmECrm6ksBc1Fe/PPzW36jKcFZ9DK262V6w2rqEJCqsP w0dY3n7XPIdvD5Agw9qqCnJ3AaF1DtakpmY3LsyaUDPhnNFrivytcx/I5y0zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYG0pbhuI3WhdEFfxqAspNxDiIEkwHwYDVR0j BBgwFoAUjVpJyeQuNxv9Hmes4bPVXsGr9z8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmY1OTg2Yi1jNzY0LTRjZDctYjQxNC1hMjViZDA1YzNmOTIvMC84RDVBNDlDOUU0 MkUzNzFCRkQxRTY3QUNFMUIzRDU1RUMxQUJGNzNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQ1QTQ5QzlFNDJFMzcxQkZEMUU2N0FDRTFCM0Q1NUVDMUFC RjczRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjJmNTk4NmItYzc2NC00Y2Q3LWI0 MTQtYTI1YmQwNWMzZjkyLzAvOEQ1QTQ5QzlFNDJFMzcxQkZEMUU2N0FDRTFCM0Q1 NUVDMUFCRjczRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACAk9AeuTE4NMpjVnWBeKlPdxbVWZNdIZL73 7TDtsX4UrQhZWrJrheDIhp5k++coJOM2uU5cqtNI+nRJYOBnpC3p1Hap5V6B6Iwb sXcbdwrOlg/vMqRoie0dqFvbtM/k+R2Q3w5Pp6mHODZ8ikdCmDiM8mj5592sSWtj SUFkbRu3G2g9p8xlLiIlXggq0h3hH9qJAn8QOHbB9hBVkdjybv+EuCPvUrhMcEDq UezdMR4/tAA86BADu0x4B+E7xr1diWEym31VN4egZ4xTTSFra5JWGDRvNYCDlqR+ TJt/+pgYCYQzGRJ1ohwo9cLVzvsBS1feR7owoYCzuMItHCcBPSc= -----END CERTIFICATE-----Generated at Wed May 7 07:17:39 2025 by rpki-client