$ rpki-client -vvf repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.mft File: 74017DA6C3B6935388C1ADE6008FB78FAC671213.mft (raw, json) Hash identifier: weRSpdyi+arv9Rg3QRonHd0IYTahNZMlBQGZPTZwQCg= Subject key identifier: 55:73:69:5B:14:DD:41:E0:59:0F:F0:35:D8:DE:80:39:E2:5A:03:AE Authority key identifier: 74:01:7D:A6:C3:B6:93:53:88:C1:AD:E6:00:8F:B7:8F:AC:67:12:13 Certificate issuer: /CN=74017DA6C3B6935388C1ADE6008FB78FAC671213 Certificate serial: 172F61B1068DFF0D373F1BB8F257EA4AC88DC1B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74017DA6C3B6935388C1ADE6008FB78FAC671213.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.mft Manifest number: 0135 Signing time: Sat 10 May 2025 00:11:50 +0000 Manifest this update: Sat 10 May 2025 00:06:50 +0000 Manifest next update: Tue 13 May 2025 01:54:50 +0000 Files and hashes: 1: 74017DA6C3B6935388C1ADE6008FB78FAC671213.crl (hash: gznHg4zGL1mE2qwoRegnCn5bQqm7tGZTjOhwGNWGOnk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.crl rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74017DA6C3B6935388C1ADE6008FB78FAC671213.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 01:54:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:2f:61:b1:06:8d:ff:0d:37:3f:1b:b8:f2:57:ea:4a:c8:8d:c1:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74017DA6C3B6935388C1ADE6008FB78FAC671213 Validity Not Before: May 10 00:06:50 2025 GMT Not After : May 13 01:54:50 2025 GMT Subject: CN=5573695B14DD41E0590FF035D8DE8039E25A03AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9a:9d:63:7d:9e:28:d7:43:db:51:e3:d9:50: 77:28:a4:0c:a7:d5:01:34:a0:20:f2:95:af:20:8d: 04:f2:e9:e9:e0:ea:6f:f4:3e:69:10:c8:de:38:fd: 96:f9:cb:8f:20:a2:27:94:82:fb:16:09:0b:81:1e: 15:04:e4:93:81:00:d4:9d:5e:4c:ea:9c:2c:70:2f: 8c:a1:a1:70:11:f0:6c:89:b7:51:4c:e2:62:a5:d2: e5:85:47:f5:75:de:6d:52:b1:34:3a:b8:dc:89:68: 74:7c:c6:2d:0e:da:aa:02:97:09:1d:9b:50:11:d1: f1:b6:fe:32:e3:26:43:12:2c:41:05:4e:3e:24:c7: fd:fd:fe:90:9a:91:0c:af:2a:64:22:5e:f1:1d:63: fc:0f:36:49:8d:9f:e2:0c:16:e9:ee:00:0a:ba:3e: 70:20:bc:c4:46:d4:a7:9d:cd:67:5c:db:d5:e8:5e: 10:63:05:b1:71:d0:f2:a9:43:76:05:e7:64:96:5f: b1:fd:12:db:65:6e:b8:ad:a4:7b:bd:2d:b7:ea:f1: e9:cc:a2:9e:94:c8:b3:b6:e8:d3:ad:88:8a:06:17: 3f:e0:38:b6:3d:fa:74:4f:d8:d2:42:0e:9d:a5:cc: 13:0c:0e:ae:8d:2c:e1:37:9c:3f:0d:fd:5b:dd:48: 71:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:73:69:5B:14:DD:41:E0:59:0F:F0:35:D8:DE:80:39:E2:5A:03:AE X509v3 Authority Key Identifier: keyid:74:01:7D:A6:C3:B6:93:53:88:C1:AD:E6:00:8F:B7:8F:AC:67:12:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74017DA6C3B6935388C1ADE6008FB78FAC671213.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:14:69:a8:87:8e:9b:9b:ff:4e:2e:dc:ac:33:a3:2b:bc:30: 6f:9d:4f:4a:6d:ca:08:bc:68:35:2a:a1:5a:70:71:06:3c:88: 78:bb:e3:c6:f5:36:63:97:b4:f6:dd:fa:0e:b2:2f:e9:5f:a0: 3e:e9:6c:0c:d2:27:92:2f:32:d0:0a:78:9a:0b:8d:aa:a2:2c: 79:1d:b0:c4:24:77:0f:11:e1:78:2d:a8:69:4c:7e:b7:c8:38: e1:9e:a4:5e:0f:bc:03:ae:41:b4:42:63:84:0a:e6:e0:ad:3d: 12:1c:45:77:43:48:6c:be:96:96:39:02:94:3d:56:ee:ee:96: 84:fb:61:cf:ca:1e:df:5e:9b:98:9f:8f:80:b5:11:60:ef:4a: 68:89:56:9b:07:f1:f4:cb:18:45:1c:d0:e3:0c:ee:48:0b:b1: 0c:33:da:f5:56:78:54:33:37:9c:20:4f:a4:a8:ae:df:fe:17: 59:d6:ce:0f:12:ee:fd:1b:f9:e5:5f:89:df:ad:88:b9:fd:da: a8:e9:bd:2a:99:a9:a3:48:ab:6a:17:cf:a0:77:75:51:24:f6: 4e:8a:ec:2a:d7:60:f2:1b:d0:a7:4e:cd:9d:c8:ba:ce:ee:49: 37:6c:1d:05:7f:ee:86:ad:19:7f:53:96:47:e0:c0:57:f5:59: c5:d0:8c:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFy9hsQaN/w03Pxu48lfqSsiNwbIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQwMTdEQTZDM0I2OTM1Mzg4QzFBREU2MDA4RkI3OEZB QzY3MTIxMzAeFw0yNTA1MTAwMDA2NTBaFw0yNTA1MTMwMTU0NTBaMDMxMTAvBgNV BAMTKDU1NzM2OTVCMTRERDQxRTA1OTBGRjAzNUQ4REU4MDM5RTI1QTAzQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSmp1jfZ4o10PbUePZUHcopAyn 1QE0oCDyla8gjQTy6eng6m/0PmkQyN44/Zb5y48goieUgvsWCQuBHhUE5JOBANSd XkzqnCxwL4yhoXAR8GyJt1FM4mKl0uWFR/V13m1SsTQ6uNyJaHR8xi0O2qoClwkd m1AR0fG2/jLjJkMSLEEFTj4kx/39/pCakQyvKmQiXvEdY/wPNkmNn+IMFunuAAq6 PnAgvMRG1KedzWdc29XoXhBjBbFx0PKpQ3YF52SWX7H9EttlbritpHu9Lbfq8enM op6UyLO26NOtiIoGFz/gOLY9+nRP2NJCDp2lzBMMDq6NLOE3nD8N/VvdSHEhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVXNpWxTdQeBZD/A12N6AOeJaA64wHwYDVR0j BBgwFoAUdAF9psO2k1OIwa3mAI+3j6xnEhMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2FkZWNkZC0yNTMzLTQ2MmQtYWNlMi1iYTRhN2EyY2E0YzMvMC83NDAxN0RBNkMz QjY5MzUzODhDMUFERTYwMDhGQjc4RkFDNjcxMjEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzQwMTdEQTZDM0I2OTM1Mzg4QzFBREU2MDA4RkI3OEZBQzY3 MTIxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzNhZGVjZGQtMjUzMy00NjJkLWFj ZTItYmE0YTdhMmNhNGMzLzAvNzQwMTdEQTZDM0I2OTM1Mzg4QzFBREU2MDA4RkI3 OEZBQzY3MTIxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIoUaaiHjpub/04u3Kwzoyu8MG+dT0ptygi8 aDUqoVpwcQY8iHi748b1NmOXtPbd+g6yL+lfoD7pbAzSJ5IvMtAKeJoLjaqiLHkd sMQkdw8R4XgtqGlMfrfIOOGepF4PvAOuQbRCY4QK5uCtPRIcRXdDSGy+lpY5ApQ9 Vu7uloT7Yc/KHt9em5ifj4C1EWDvSmiJVpsH8fTLGEUc0OMM7kgLsQwz2vVWeFQz N5wgT6Sort/+F1nWzg8S7v0b+eVfid+tiLn92qjpvSqZqaNIq2oXz6B3dVEk9k6K 7CrXYPIb0KdOzZ3Ius7uSTdsHQV/7oatGX9TlkfgwFf1WcXQjCQ= -----END CERTIFICATE-----Generated at Sun May 11 17:07:27 2025 by rpki-client