$ rpki-client -vvf repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.mft File: 2244AB179BDE031980D325EEBEAFEC994CA8B419.mft (raw, json) Hash identifier: 188Elg5ey9MIjlHaS6rvDzFnXRIlr6uLFYDlt7LKY1g= Subject key identifier: 46:1F:E0:2C:C3:FC:3F:12:87:D5:13:0B:0B:BC:8D:B0:C0:FE:40:B0 Authority key identifier: 22:44:AB:17:9B:DE:03:19:80:D3:25:EE:BE:AF:EC:99:4C:A8:B4:19 Certificate issuer: /CN=2244AB179BDE031980D325EEBEAFEC994CA8B419 Certificate serial: 6646F9DB2F50AED68097D063AAF34AE6DB99A2C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2244AB179BDE031980D325EEBEAFEC994CA8B419.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.mft Manifest number: 72 Signing time: Fri 09 May 2025 05:30:57 +0000 Manifest this update: Fri 09 May 2025 05:25:57 +0000 Manifest next update: Mon 12 May 2025 12:38:57 +0000 Files and hashes: 1: 2244AB179BDE031980D325EEBEAFEC994CA8B419.crl (hash: t4rwTh+nQ0xPmBnirjous5SDTb0cqWnSPFxnZzxfFLI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.crl rsync://repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2244AB179BDE031980D325EEBEAFEC994CA8B419.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 12:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:46:f9:db:2f:50:ae:d6:80:97:d0:63:aa:f3:4a:e6:db:99:a2:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2244AB179BDE031980D325EEBEAFEC994CA8B419 Validity Not Before: May 9 05:25:57 2025 GMT Not After : May 12 12:38:57 2025 GMT Subject: CN=461FE02CC3FC3F1287D5130B0BBC8DB0C0FE40B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:99:01:21:6f:f8:fb:3c:a0:a7:f1:e0:90:49: f8:13:ab:f0:e6:dc:49:67:a0:3c:77:70:8c:da:37: 7e:dd:97:ed:56:bc:6a:f2:5d:1f:74:dc:5b:a6:0b: 4b:18:20:01:3f:4b:0a:a7:af:eb:1b:d8:16:02:0f: 89:d1:5b:11:0c:c3:ea:a5:84:b8:0a:dc:ca:45:10: 7f:a6:6c:b4:f6:b3:26:ef:70:71:c3:d8:5f:fd:9e: dc:be:c3:75:c0:5e:66:19:84:bb:1f:f4:e1:10:78: 52:88:b9:94:13:37:ea:42:63:24:9d:11:cd:0e:33: 4b:b5:24:65:df:7d:4e:c5:73:c2:a7:39:fd:20:37: cb:71:39:de:2e:01:21:e9:94:1b:6a:57:7e:3c:8e: fd:5d:be:65:a7:10:a9:df:60:93:9b:af:d5:97:01: 96:7a:4c:bd:6e:04:7d:d3:ca:07:1e:67:3f:e5:08: 8c:4f:a1:d1:1d:c3:ad:4c:f4:fc:8d:e2:0b:4c:55: d4:f1:16:35:f7:bd:04:4b:e2:e1:40:72:f0:d5:1a: d1:de:76:b6:ca:fe:99:0f:94:46:e5:ca:8f:cf:46: 79:cc:a5:ea:5e:d2:cf:07:6e:f3:3e:1b:c8:fa:1a: 16:e3:6e:37:f0:15:e2:50:b8:b7:f0:89:6c:c1:6e: 83:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:1F:E0:2C:C3:FC:3F:12:87:D5:13:0B:0B:BC:8D:B0:C0:FE:40:B0 X509v3 Authority Key Identifier: keyid:22:44:AB:17:9B:DE:03:19:80:D3:25:EE:BE:AF:EC:99:4C:A8:B4:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2244AB179BDE031980D325EEBEAFEC994CA8B419.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:c4:bc:00:a3:a2:81:2d:70:a3:21:11:72:c8:94:f6:5d:cc: 40:80:ea:ad:90:32:9c:9b:70:5e:41:1b:80:01:7e:46:56:78: 7f:0d:41:00:82:ef:6e:f8:b0:cd:cd:54:5e:c7:5d:74:32:3e: 29:7a:b9:80:71:13:ce:82:60:75:7f:0c:f4:39:20:74:7a:9d: 3b:d9:af:37:ec:f4:a0:57:ee:d6:ca:23:49:9c:43:60:c1:53: 1b:51:db:b4:ea:fa:e7:87:2c:0e:5e:18:37:0b:a6:dd:2d:7b: 69:d3:65:ba:e6:85:f6:13:64:8c:e1:6d:72:aa:a2:16:66:be: 6f:fb:9e:0f:de:19:cd:3c:c8:a8:a8:23:56:2c:98:8b:56:87: dc:9c:51:e2:84:4b:d5:68:6d:37:88:a3:55:38:f1:64:3b:75: eb:3e:7b:14:81:23:4d:26:52:d9:ad:63:7c:07:5f:48:0a:4a: d9:35:e9:e1:48:2e:56:8b:6a:7e:bd:78:b7:cd:8e:80:f3:16: 08:9d:f6:af:22:48:5a:49:a2:2d:5b:c3:dd:e0:ea:70:45:d2: 62:8d:22:e9:83:3b:fd:3c:82:b9:75:c0:c4:62:1b:81:1b:63: cd:95:fa:65:5e:aa:92:df:7c:2e:25:f4:13:d6:6e:70:4a:c1: 71:41:3d:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZkb52y9QrtaAl9BjqvNK5tuZosYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI0NEFCMTc5QkRFMDMxOTgwRDMyNUVFQkVBRkVDOTk0 Q0E4QjQxOTAeFw0yNTA1MDkwNTI1NTdaFw0yNTA1MTIxMjM4NTdaMDMxMTAvBgNV BAMTKDQ2MUZFMDJDQzNGQzNGMTI4N0Q1MTMwQjBCQkM4REIwQzBGRTQwQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUmQEhb/j7PKCn8eCQSfgTq/Dm 3ElnoDx3cIzaN37dl+1WvGryXR903FumC0sYIAE/Swqnr+sb2BYCD4nRWxEMw+ql hLgK3MpFEH+mbLT2sybvcHHD2F/9nty+w3XAXmYZhLsf9OEQeFKIuZQTN+pCYySd Ec0OM0u1JGXffU7Fc8KnOf0gN8txOd4uASHplBtqV348jv1dvmWnEKnfYJObr9WX AZZ6TL1uBH3TygceZz/lCIxPodEdw61M9PyN4gtMVdTxFjX3vQRL4uFAcvDVGtHe drbK/pkPlEblyo/PRnnMpepe0s8HbvM+G8j6GhbjbjfwFeJQuLfwiWzBboOLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURh/gLMP8PxKH1RMLC7yNsMD+QLAwHwYDVR0j BBgwFoAUIkSrF5veAxmA0yXuvq/smUyotBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZGEwY2RkOS03ZjMxLTRmMWYtYWIwOS1hNjBjYzA4NTljZGEvMC8yMjQ0QUIxNzlC REUwMzE5ODBEMzI1RUVCRUFGRUM5OTRDQThCNDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI0NEFCMTc5QkRFMDMxOTgwRDMyNUVFQkVBRkVDOTk0Q0E4 QjQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmRhMGNkZDktN2YzMS00ZjFmLWFi MDktYTYwY2MwODU5Y2RhLzAvMjI0NEFCMTc5QkRFMDMxOTgwRDMyNUVFQkVBRkVD OTk0Q0E4QjQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAnEvACjooEtcKMhEXLIlPZdzECA6q2QMpyb cF5BG4ABfkZWeH8NQQCC7274sM3NVF7HXXQyPil6uYBxE86CYHV/DPQ5IHR6nTvZ rzfs9KBX7tbKI0mcQ2DBUxtR27Tq+ueHLA5eGDcLpt0te2nTZbrmhfYTZIzhbXKq ohZmvm/7ng/eGc08yKioI1YsmItWh9ycUeKES9VobTeIo1U48WQ7des+exSBI00m UtmtY3wHX0gKStk16eFILlaLan69eLfNjoDzFgid9q8iSFpJoi1bw93g6nBF0mKN IumDO/08grl1wMRiG4EbY82V+mVeqpLffC4l9BPWbnBKwXFBPT0= -----END CERTIFICATE-----Generated at Sat May 10 16:37:19 2025 by rpki-client