$ rpki-client -vvf repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.mft File: 430E302040DE11D8C84431B3397113EC969694A0.mft (raw, json) Hash identifier: FL4UeLYJWV1JqQcSd2/vsPeARGCkEWGq5J3EQG3b+vM= Subject key identifier: DC:D7:AA:3B:C0:B8:16:09:AE:16:C9:4E:3E:EE:6C:BC:15:BF:A0:3B Authority key identifier: 43:0E:30:20:40:DE:11:D8:C8:44:31:B3:39:71:13:EC:96:96:94:A0 Certificate issuer: /CN=430E302040DE11D8C84431B3397113EC969694A0 Certificate serial: 0ADE5C8B9A098F7293786EE3A28419731FB9254E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/430E302040DE11D8C84431B3397113EC969694A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.mft Manifest number: 046B Signing time: Mon 05 May 2025 17:11:54 +0000 Manifest this update: Mon 05 May 2025 17:06:53 +0000 Manifest next update: Fri 09 May 2025 00:42:53 +0000 Files and hashes: 1: 430E302040DE11D8C84431B3397113EC969694A0.crl (hash: TOq2n7BCJBGgli8o5P+Veb3J3A7Df328ERJSwvKYINY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.crl rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/430E302040DE11D8C84431B3397113EC969694A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 00:42:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:de:5c:8b:9a:09:8f:72:93:78:6e:e3:a2:84:19:73:1f:b9:25:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=430E302040DE11D8C84431B3397113EC969694A0 Validity Not Before: May 5 17:06:53 2025 GMT Not After : May 9 00:42:53 2025 GMT Subject: CN=DCD7AA3BC0B81609AE16C94E3EEE6CBC15BFA03B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:64:2b:6b:c9:2e:05:e7:9b:e0:f5:e0:be:ff: 3a:a2:ca:6e:76:e2:1f:29:c0:e6:b5:b6:79:77:b2: 63:67:a0:69:ad:03:b6:52:80:08:55:c4:ae:9b:58: c4:e5:a9:c4:ec:69:0c:1f:db:8d:3c:2f:4e:51:d9: 3f:b2:bf:95:f9:62:cf:28:ce:1c:02:03:d0:26:74: a5:19:ed:a0:5f:f3:92:7c:cb:11:bd:cd:e3:19:8b: fb:b0:fd:9e:8c:e4:26:b8:e0:6c:4c:6e:b7:4d:0a: 32:4c:90:24:e9:d2:59:02:6c:c5:fd:7e:59:94:ed: 16:4d:e9:03:2d:0d:3d:91:a2:29:5c:b4:e0:cc:fe: c3:06:e4:fb:17:44:b6:f3:fe:15:dd:f8:49:f8:a5: 96:33:2a:b5:f2:5d:2e:cd:23:6c:d9:b5:d8:d7:a8: a8:2e:0e:3d:a2:b4:54:95:52:c7:8f:f8:cc:f3:7e: 8e:9f:b3:e8:8f:9c:83:5d:bb:5d:bf:a4:f3:cd:e5: 8a:b6:fd:a1:50:ab:05:e2:6f:cb:c2:cb:65:32:f4: 97:6c:fa:90:30:c2:af:62:70:91:5b:4e:81:5a:64: 0c:2c:8a:03:b3:85:3a:c5:70:71:98:15:65:3d:9d: 2a:4d:46:d7:64:8a:eb:f3:8d:68:09:f6:ba:59:ab: cc:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:D7:AA:3B:C0:B8:16:09:AE:16:C9:4E:3E:EE:6C:BC:15:BF:A0:3B X509v3 Authority Key Identifier: keyid:43:0E:30:20:40:DE:11:D8:C8:44:31:B3:39:71:13:EC:96:96:94:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/430E302040DE11D8C84431B3397113EC969694A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:a5:77:39:da:67:77:cd:6a:ac:e9:ec:a3:32:ac:87:f3:2f: 0d:d8:b5:f4:30:9e:2f:3c:01:a7:9c:2f:dc:1d:f3:18:76:94: 47:29:11:a8:0a:c7:02:78:29:98:71:55:30:2d:24:3a:c4:c9: 28:0a:c9:79:a6:e8:79:13:7b:51:2b:a0:2b:28:4f:ff:6e:88: d5:dc:f5:cb:29:db:10:96:8d:32:65:b1:f3:71:4f:11:1d:f2: f7:38:79:19:66:17:66:25:96:49:16:08:1f:f6:76:e4:80:d7: 49:44:c9:86:52:1c:6e:14:eb:a3:2a:41:e7:a2:2c:80:66:88: 6e:85:87:d8:ea:e7:d8:54:11:f9:af:60:c0:21:ec:c5:b2:06: 67:19:ec:92:83:d5:02:a8:7c:2d:b6:0c:e0:8c:45:a7:91:0c: 81:3b:15:12:93:d6:54:84:31:af:6c:0e:8b:fd:d8:5e:e6:dc: fc:06:54:56:02:9f:6f:8c:16:29:d3:7f:24:ff:c2:55:26:01: cc:8e:18:39:49:bd:57:eb:ce:0a:59:75:6b:36:9d:87:e2:da: d3:74:70:f8:c7:74:18:50:78:d8:0b:d5:1a:ae:c5:4e:f4:d0: c0:a0:86:a9:5d:9b:23:91:8b:3e:9c:65:d5:15:79:66:81:7d: 09:a5:17:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCt5ci5oJj3KTeG7jooQZcx+5JU4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMwRTMwMjA0MERFMTFEOEM4NDQzMUIzMzk3MTEzRUM5 Njk2OTRBMDAeFw0yNTA1MDUxNzA2NTNaFw0yNTA1MDkwMDQyNTNaMDMxMTAvBgNV BAMTKERDRDdBQTNCQzBCODE2MDlBRTE2Qzk0RTNFRUU2Q0JDMTVCRkEwM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFZCtryS4F55vg9eC+/zqiym52 4h8pwOa1tnl3smNnoGmtA7ZSgAhVxK6bWMTlqcTsaQwf2408L05R2T+yv5X5Ys8o zhwCA9AmdKUZ7aBf85J8yxG9zeMZi/uw/Z6M5Ca44GxMbrdNCjJMkCTp0lkCbMX9 flmU7RZN6QMtDT2RoilctODM/sMG5PsXRLbz/hXd+En4pZYzKrXyXS7NI2zZtdjX qKguDj2itFSVUseP+Mzzfo6fs+iPnINdu12/pPPN5Yq2/aFQqwXib8vCy2Uy9Jds +pAwwq9icJFbToFaZAwsigOzhTrFcHGYFWU9nSpNRtdkiuvzjWgJ9rpZq8ylAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3NeqO8C4FgmuFslOPu5svBW/oDswHwYDVR0j BBgwFoAUQw4wIEDeEdjIRDGzOXET7JaWlKAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTllMDFiYS01OWM5LTQwNDctYWMwYi1lOWIyZmU2NTg1M2MvMC80MzBFMzAyMDQw REUxMUQ4Qzg0NDMxQjMzOTcxMTNFQzk2OTY5NEEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDMwRTMwMjA0MERFMTFEOEM4NDQzMUIzMzk3MTEzRUM5Njk2 OTRBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U5ZTAxYmEtNTljOS00MDQ3LWFj MGItZTliMmZlNjU4NTNjLzAvNDMwRTMwMjA0MERFMTFEOEM4NDQzMUIzMzk3MTEz RUM5Njk2OTRBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADeldznaZ3fNaqzp7KMyrIfzLw3YtfQwni88 AaecL9wd8xh2lEcpEagKxwJ4KZhxVTAtJDrEySgKyXmm6HkTe1EroCsoT/9uiNXc 9csp2xCWjTJlsfNxTxEd8vc4eRlmF2YllkkWCB/2duSA10lEyYZSHG4U66MqQeei LIBmiG6Fh9jq59hUEfmvYMAh7MWyBmcZ7JKD1QKofC22DOCMRaeRDIE7FRKT1lSE Ma9sDov92F7m3PwGVFYCn2+MFinTfyT/wlUmAcyOGDlJvVfrzgpZdWs2nYfi2tN0 cPjHdBhQeNgL1RquxU700MCghqldmyORiz6cZdUVeWaBfQmlFxw= -----END CERTIFICATE-----Generated at Wed May 7 23:33:41 2025 by rpki-client