$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft File: F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft (raw, json) Hash identifier: aDU+ET/Tz3HR+5+6KrGeUkM8hAQvgemIoayZMup5+uU= Subject key identifier: 0E:63:94:99:A8:69:65:E6:B3:FE:60:B5:74:F8:3C:DB:BF:D3:56:AA Authority key identifier: F2:A9:6B:01:3D:78:D9:DD:2A:D0:46:F9:05:29:AB:07:E8:32:FD:44 Certificate issuer: /CN=F2A96B013D78D9DD2AD046F90529AB07E832FD44 Certificate serial: 55CDABC233612B363CE5EA1C60BB148EA89D840E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2A96B013D78D9DD2AD046F90529AB07E832FD44.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft Manifest number: 0155 Signing time: Sun 04 May 2025 09:41:59 +0000 Manifest this update: Sun 04 May 2025 09:36:59 +0000 Manifest next update: Wed 07 May 2025 10:41:59 +0000 Files and hashes: 1: F2A96B013D78D9DD2AD046F90529AB07E832FD44.crl (hash: lCq2QP5W2zElbckqh74h+1KmMsXl3UFWYHUK5Bmfg0s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.crl rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2A96B013D78D9DD2AD046F90529AB07E832FD44.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 10:41:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:cd:ab:c2:33:61:2b:36:3c:e5:ea:1c:60:bb:14:8e:a8:9d:84:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2A96B013D78D9DD2AD046F90529AB07E832FD44 Validity Not Before: May 4 09:36:59 2025 GMT Not After : May 7 10:41:59 2025 GMT Subject: CN=0E639499A86965E6B3FE60B574F83CDBBFD356AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:66:d1:a7:56:64:42:2e:7b:c2:bf:4c:3e:05: 43:a1:e4:ac:02:2d:67:e5:94:e0:8c:b2:33:4f:de: 55:ec:49:5c:75:a0:28:97:9c:81:f8:97:5f:f0:bb: fe:00:32:dd:e7:0a:7d:1b:7d:a8:b2:e9:b9:62:67: b4:70:62:0f:f8:0a:99:79:58:17:03:66:06:fd:45: 57:7c:94:53:77:c0:7b:50:bf:29:65:fe:2a:d7:25: 2f:d7:3e:fb:a5:e9:5d:b5:ea:6c:d1:fb:24:b5:f2: 8e:d6:00:47:a1:8b:f4:81:d0:8a:34:22:6b:e6:4a: be:94:4a:10:40:55:79:df:dd:ed:6e:9d:bf:ce:71: 33:29:38:4f:2c:5c:5b:0d:5d:65:b7:5f:9c:ca:21: d7:d6:fc:9f:ef:35:86:9a:cb:26:1d:87:31:3e:13: 4c:75:45:cf:73:b6:4a:ac:d2:f9:83:a2:90:0d:03: 6a:00:68:d2:a1:03:d6:d9:b4:f4:5c:8c:f2:45:4d: 70:9a:55:1b:0e:00:76:46:bd:24:64:04:98:04:61: 0b:b9:c5:87:e1:50:e2:0f:1f:68:e9:36:1e:fb:5c: 17:b8:bd:4a:44:05:45:02:4f:b7:63:c2:52:8a:67: 01:66:37:12:ed:59:01:59:c1:bf:72:e8:21:73:9a: 7b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:63:94:99:A8:69:65:E6:B3:FE:60:B5:74:F8:3C:DB:BF:D3:56:AA X509v3 Authority Key Identifier: keyid:F2:A9:6B:01:3D:78:D9:DD:2A:D0:46:F9:05:29:AB:07:E8:32:FD:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2A96B013D78D9DD2AD046F90529AB07E832FD44.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:ea:75:10:cc:7b:08:f0:e4:30:36:2c:3d:cc:b7:15:cc:7c: a4:9c:51:20:fd:52:78:c4:ff:ba:96:af:86:c3:c7:d3:2d:0c: 87:28:bf:59:f4:22:68:e9:5a:df:2b:8b:12:02:c3:fe:96:67: bd:9e:d1:b3:80:87:40:9e:55:5a:62:23:ab:4b:4c:62:b2:6e: aa:d7:6d:e1:6a:0a:50:89:c3:20:e8:11:b1:24:c5:2a:0a:19: 97:d8:eb:67:40:42:5a:48:f4:c9:07:92:96:16:52:f4:36:44: ec:fd:d0:f1:d2:85:0d:c5:7f:9d:95:c2:8d:ce:27:91:47:dc: c4:79:0e:d9:45:02:fe:76:f8:49:22:5c:8b:e8:ee:d7:08:e8: 99:8c:af:0e:82:3c:3c:83:03:bb:b0:d2:07:c3:49:98:89:dd: ef:e2:77:06:fe:8f:db:b7:1f:22:b2:e1:9c:38:71:13:a2:f0: fc:3b:24:80:89:39:9d:2c:a3:20:b5:91:c6:e7:af:55:6f:4a: 3f:7f:86:5b:eb:72:07:be:67:26:03:0b:72:e4:8d:bf:ca:47: 08:06:c7:9e:e1:53:b4:41:2a:62:0a:e2:e5:53:ef:1d:0a:62: f7:d9:b5:96:22:8d:b8:38:96:09:a4:a5:5e:0a:f4:bd:38:ec: fa:45:df:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVc2rwjNhKzY85eocYLsUjqidhA4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJBOTZCMDEzRDc4RDlERDJBRDA0NkY5MDUyOUFCMDdF ODMyRkQ0NDAeFw0yNTA1MDQwOTM2NTlaFw0yNTA1MDcxMDQxNTlaMDMxMTAvBgNV BAMTKDBFNjM5NDk5QTg2OTY1RTZCM0ZFNjBCNTc0RjgzQ0RCQkZEMzU2QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQZtGnVmRCLnvCv0w+BUOh5KwC LWfllOCMsjNP3lXsSVx1oCiXnIH4l1/wu/4AMt3nCn0bfaiy6bliZ7RwYg/4Cpl5 WBcDZgb9RVd8lFN3wHtQvyll/irXJS/XPvul6V216mzR+yS18o7WAEehi/SB0Io0 ImvmSr6UShBAVXnf3e1unb/OcTMpOE8sXFsNXWW3X5zKIdfW/J/vNYaayyYdhzE+ E0x1Rc9ztkqs0vmDopANA2oAaNKhA9bZtPRcjPJFTXCaVRsOAHZGvSRkBJgEYQu5 xYfhUOIPH2jpNh77XBe4vUpEBUUCT7djwlKKZwFmNxLtWQFZwb9y6CFzmnsVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDmOUmahpZeaz/mC1dPg827/TVqowHwYDVR0j BBgwFoAU8qlrAT142d0q0Eb5BSmrB+gy/UQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YzRlMTY2OS02OGY3LTRhMzktYWNjMC01N2M3MTg3YjZjYjcvMC9GMkE5NkIwMTNE NzhEOUREMkFEMDQ2RjkwNTI5QUIwN0U4MzJGRDQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjJBOTZCMDEzRDc4RDlERDJBRDA0NkY5MDUyOUFCMDdFODMy RkQ0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmM0ZTE2NjktNjhmNy00YTM5LWFj YzAtNTdjNzE4N2I2Y2I3LzAvRjJBOTZCMDEzRDc4RDlERDJBRDA0NkY5MDUyOUFC MDdFODMyRkQ0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABrqdRDMewjw5DA2LD3MtxXMfKScUSD9UnjE /7qWr4bDx9MtDIcov1n0ImjpWt8rixICw/6WZ72e0bOAh0CeVVpiI6tLTGKybqrX beFqClCJwyDoEbEkxSoKGZfY62dAQlpI9MkHkpYWUvQ2ROz90PHShQ3Ff52Vwo3O J5FH3MR5DtlFAv52+EkiXIvo7tcI6JmMrw6CPDyDA7uw0gfDSZiJ3e/idwb+j9u3 HyKy4Zw4cROi8Pw7JICJOZ0soyC1kcbnr1VvSj9/hlvrcge+ZyYDC3Lkjb/KRwgG x57hU7RBKmIK4uVT7x0KYvfZtZYijbg4lgmkpV4K9L047PpF33c= -----END CERTIFICATE-----Generated at Tue May 6 11:47:15 2025 by rpki-client