$ rpki-client -vvf repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.mft File: 4496E0D8274284254DC2307A2633342BE95C0DD3.mft (raw, json) Hash identifier: U/GXblXsqKNZUp0j3BuK1opt9wY8OjgOo51uJMVu8Mo= Subject key identifier: A9:A3:47:5C:D5:77:DA:F9:B3:18:B1:DA:BD:8C:41:09:91:F0:AF:96 Authority key identifier: 44:96:E0:D8:27:42:84:25:4D:C2:30:7A:26:33:34:2B:E9:5C:0D:D3 Certificate issuer: /CN=4496E0D8274284254DC2307A2633342BE95C0DD3 Certificate serial: 61BE1271F4B7EAAEBC9F5646A335A475BE7F6F87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4496E0D8274284254DC2307A2633342BE95C0DD3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.mft Manifest number: F2 Signing time: Sun 11 May 2025 19:53:39 +0000 Manifest this update: Sun 11 May 2025 19:48:39 +0000 Manifest next update: Thu 15 May 2025 04:14:39 +0000 Files and hashes: 1: 4496E0D8274284254DC2307A2633342BE95C0DD3.crl (hash: ZP6ar0tvFhTFTrjiJGtJ9Xfv3Y1inmxmXTS9R7HYIbA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.crl rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4496E0D8274284254DC2307A2633342BE95C0DD3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 04:14:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:be:12:71:f4:b7:ea:ae:bc:9f:56:46:a3:35:a4:75:be:7f:6f:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4496E0D8274284254DC2307A2633342BE95C0DD3 Validity Not Before: May 11 19:48:39 2025 GMT Not After : May 15 04:14:39 2025 GMT Subject: CN=A9A3475CD577DAF9B318B1DABD8C410991F0AF96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:5e:23:60:a0:c2:d9:60:d6:9c:69:45:8a:9f: 4b:29:a8:37:67:af:df:44:63:ab:a5:1c:8c:cc:1b: 86:7d:4b:1a:d6:d0:46:71:60:9e:d0:32:44:17:77: fe:1e:60:cf:06:91:21:8b:0f:40:50:11:a0:26:3c: ca:e0:50:67:98:92:f3:06:7f:6e:3d:32:13:92:2e: ab:0a:77:e1:67:b0:cf:23:38:f0:b3:84:66:19:23: 6a:5c:26:dc:e4:21:83:d3:d1:96:10:40:9a:1e:78: 87:ce:34:24:ab:22:89:ff:65:fc:ca:70:0f:06:a9: 55:ae:91:b6:f0:54:43:8a:3f:33:5a:28:4a:53:0b: d9:b9:97:e4:bd:44:fa:9e:0d:99:70:0e:c7:77:8a: 09:c8:81:c6:5e:ec:58:cb:ab:d9:24:cc:8b:e0:9f: b9:17:22:17:47:da:a4:49:cc:cb:2f:c6:d1:19:70: ae:24:c7:6b:3a:54:d4:6d:ad:b4:76:eb:40:d3:1c: 7e:4f:3f:1f:4b:36:95:2c:b7:3c:bb:a1:14:34:a1: e1:5e:ce:0d:c7:4d:93:d9:8e:89:ea:b5:d6:38:47: 37:26:16:51:1e:dd:8f:7e:30:7d:4f:a5:22:47:39: f3:3f:de:29:4d:4c:58:84:63:a4:db:87:29:91:2f: 53:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:A3:47:5C:D5:77:DA:F9:B3:18:B1:DA:BD:8C:41:09:91:F0:AF:96 X509v3 Authority Key Identifier: keyid:44:96:E0:D8:27:42:84:25:4D:C2:30:7A:26:33:34:2B:E9:5C:0D:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4496E0D8274284254DC2307A2633342BE95C0DD3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:f8:bb:91:26:3b:e2:6d:87:bf:c9:b2:a5:ff:ee:b6:83:30: cc:4a:8e:3a:6d:27:b4:6b:be:37:71:26:80:10:c7:88:6c:1a: f3:bb:96:c0:ff:58:b1:7a:d6:db:de:ff:53:6c:54:89:6c:08: 3c:74:83:44:56:ed:c7:3d:e5:8c:3e:24:8f:d7:41:0a:da:40: 51:a2:82:ad:30:73:5f:0f:cb:3d:ac:47:ac:c2:c7:7e:ee:c2: 2c:86:6c:1b:de:0d:63:80:0b:05:59:50:9e:c7:08:ec:4e:52: 89:e4:82:dd:b2:26:cc:89:4b:bf:f2:94:c1:e8:8d:95:a5:aa: 82:31:2b:13:1a:c3:ec:8e:55:24:c3:8e:e9:fa:2e:88:cb:51: 0a:f1:f2:f0:28:ce:02:30:1e:ba:82:fa:45:e5:92:04:c2:a1: 72:9b:10:24:c1:f8:f0:e1:3a:a7:f0:74:16:97:37:87:99:31: ba:c4:c1:d2:7d:aa:90:32:13:76:8a:98:ee:4b:47:bc:bc:f7: 5c:5d:8d:ba:98:e0:a5:17:c2:cc:6f:e8:ad:c9:83:c0:fd:bf: 91:6b:25:ff:51:f8:72:c5:5b:63:97:fb:26:0d:f9:1c:48:ab: f4:a1:d0:9f:3c:fd:00:a1:86:53:bb:3c:5f:d5:f4:cf:4a:2a: 9d:4c:50:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYb4ScfS36q68n1ZGozWkdb5/b4cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQ5NkUwRDgyNzQyODQyNTREQzIzMDdBMjYzMzM0MkJF OTVDMEREMzAeFw0yNTA1MTExOTQ4MzlaFw0yNTA1MTUwNDE0MzlaMDMxMTAvBgNV BAMTKEE5QTM0NzVDRDU3N0RBRjlCMzE4QjFEQUJEOEM0MTA5OTFGMEFGOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfXiNgoMLZYNacaUWKn0spqDdn r99EY6ulHIzMG4Z9SxrW0EZxYJ7QMkQXd/4eYM8GkSGLD0BQEaAmPMrgUGeYkvMG f249MhOSLqsKd+FnsM8jOPCzhGYZI2pcJtzkIYPT0ZYQQJoeeIfONCSrIon/ZfzK cA8GqVWukbbwVEOKPzNaKEpTC9m5l+S9RPqeDZlwDsd3ignIgcZe7FjLq9kkzIvg n7kXIhdH2qRJzMsvxtEZcK4kx2s6VNRtrbR260DTHH5PPx9LNpUstzy7oRQ0oeFe zg3HTZPZjonqtdY4RzcmFlEe3Y9+MH1PpSJHOfM/3ilNTFiEY6TbhymRL1P5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqaNHXNV32vmzGLHavYxBCZHwr5YwHwYDVR0j BBgwFoAURJbg2CdChCVNwjB6JjM0K+lcDdMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDY2YjAwNS0xNzIxLTQ5NDUtODVjMC1iMDM5OWNlZGNjZmUvMC80NDk2RTBEODI3 NDI4NDI1NERDMjMwN0EyNjMzMzQyQkU5NUMwREQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQ5NkUwRDgyNzQyODQyNTREQzIzMDdBMjYzMzM0MkJFOTVD MEREMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ2NmIwMDUtMTcyMS00OTQ1LTg1 YzAtYjAzOTljZWRjY2ZlLzAvNDQ5NkUwRDgyNzQyODQyNTREQzIzMDdBMjYzMzM0 MkJFOTVDMEREMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACf4u5EmO+Jth7/JsqX/7raDMMxKjjptJ7Rr vjdxJoAQx4hsGvO7lsD/WLF61tve/1NsVIlsCDx0g0RW7cc95Yw+JI/XQQraQFGi gq0wc18Pyz2sR6zCx37uwiyGbBveDWOACwVZUJ7HCOxOUonkgt2yJsyJS7/ylMHo jZWlqoIxKxMaw+yOVSTDjun6LojLUQrx8vAozgIwHrqC+kXlkgTCoXKbECTB+PDh OqfwdBaXN4eZMbrEwdJ9qpAyE3aKmO5LR7y891xdjbqY4KUXwsxv6K3Jg8D9v5Fr Jf9R+HLFW2OX+yYN+RxIq/Sh0J88/QChhlO7PF/V9M9KKp1MUCw= -----END CERTIFICATE-----Generated at Tue May 13 10:21:03 2025 by rpki-client