$ rpki-client -vvf repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.mft File: D9622F68C539A365B6FA78463F3CD3D3EC231214.mft (raw, json) Hash identifier: x2R4baz7GWXf3yefwG3G9f6nrJP7hfRGZY+KS5lKHEs= Subject key identifier: 95:75:E3:CD:EE:A9:EA:33:4B:29:6F:22:54:F9:BE:6B:2A:B3:7B:31 Authority key identifier: D9:62:2F:68:C5:39:A3:65:B6:FA:78:46:3F:3C:D3:D3:EC:23:12:14 Certificate issuer: /CN=D9622F68C539A365B6FA78463F3CD3D3EC231214 Certificate serial: 0E33F62B8805B44DF89B28C344232A96BB5FB4F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9622F68C539A365B6FA78463F3CD3D3EC231214.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.mft Manifest number: 82 Signing time: Thu 08 May 2025 01:21:56 +0000 Manifest this update: Thu 08 May 2025 01:16:56 +0000 Manifest next update: Sun 11 May 2025 12:20:56 +0000 Files and hashes: 1: D9622F68C539A365B6FA78463F3CD3D3EC231214.crl (hash: yiLTgo9VVxf9NNRzdUAAr4IqHJERR+/Fku9TDzI2dFI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.crl rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9622F68C539A365B6FA78463F3CD3D3EC231214.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 12:20:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:33:f6:2b:88:05:b4:4d:f8:9b:28:c3:44:23:2a:96:bb:5f:b4:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9622F68C539A365B6FA78463F3CD3D3EC231214 Validity Not Before: May 8 01:16:56 2025 GMT Not After : May 11 12:20:56 2025 GMT Subject: CN=9575E3CDEEA9EA334B296F2254F9BE6B2AB37B31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4e:04:fb:89:54:23:67:fc:0f:c5:c0:9d:d6: ee:c9:7c:6d:bd:ec:ca:f0:46:7f:f6:8f:1a:d2:42: 40:e4:2d:da:d6:11:26:12:48:90:bf:e4:f1:d7:b3: a3:d1:91:3c:d6:f6:7b:b5:7f:ab:db:40:3d:87:d9: 88:e9:de:3d:11:65:82:1b:17:5d:3f:b8:ae:35:d6: 32:0c:07:ed:01:d6:ed:c5:56:14:fd:63:ed:6c:e7: 10:f5:90:69:b2:2f:20:e5:bf:61:c9:19:0f:d7:3c: 19:3c:d1:8d:39:7e:68:e9:ad:e1:ba:34:cd:03:31: 34:06:b9:9f:de:f9:d0:0d:75:e0:a7:6a:90:5a:bd: 01:f9:96:0f:37:03:6d:7c:3f:8d:7d:66:12:12:78: c2:86:8a:1b:cc:9a:ad:6b:88:35:55:6d:e7:32:72: 9c:0b:66:59:cb:69:ae:5b:1d:65:2a:7a:58:df:51: 56:ff:6e:d6:fd:29:c3:12:5c:e9:ee:f2:ab:a7:75: b9:b6:6a:b6:f9:9f:50:62:1e:69:79:41:fe:40:1a: 4f:5b:8d:b7:09:a3:7c:85:b7:e5:e5:7e:a3:0a:ad: cd:93:b1:ca:0d:dc:a9:a6:c9:81:7d:25:a0:48:4b: b2:58:a4:46:af:54:f5:38:c0:88:86:6e:d3:c2:27: 5c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:75:E3:CD:EE:A9:EA:33:4B:29:6F:22:54:F9:BE:6B:2A:B3:7B:31 X509v3 Authority Key Identifier: keyid:D9:62:2F:68:C5:39:A3:65:B6:FA:78:46:3F:3C:D3:D3:EC:23:12:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9622F68C539A365B6FA78463F3CD3D3EC231214.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption df:ac:ce:ef:16:21:0a:8a:07:45:22:58:d4:6b:b3:10:99:be: bb:49:9d:4e:a4:6e:9d:00:df:83:74:6a:38:df:cd:3c:d5:cf: 29:01:b0:e5:89:7f:90:d7:86:49:29:2e:fb:dc:20:33:4f:60: e8:68:21:b1:ab:8e:4d:60:ac:a9:5b:48:41:a6:4e:c1:de:ec: 34:6f:d1:40:2d:98:f3:68:f7:39:00:88:12:dd:8b:ab:80:54: 98:3d:73:2c:a7:7b:4a:94:c2:70:af:59:c2:4d:ed:32:9d:ab: d9:6d:c5:4b:e0:dd:fb:59:cf:da:19:cc:e0:61:5b:c2:1b:cb: d3:9e:ba:fd:9e:87:3e:88:0a:8f:a7:2b:7d:42:91:53:6e:98: 5b:ac:c2:39:86:04:3e:c1:1e:d2:c6:30:ab:37:ab:22:fc:89: a2:99:26:45:ec:07:48:9e:d8:13:07:3a:fe:46:dd:38:58:9f: 20:da:c0:60:17:50:1f:a6:c0:87:e1:b8:7e:f0:82:12:83:89: f5:b0:da:a0:51:76:b0:0f:c6:86:99:41:91:da:f5:93:00:1e: fc:78:77:6d:44:49:e1:27:e2:db:1d:52:dd:7c:35:4e:fd:6f: b3:c3:0b:3c:63:bc:41:fb:6d:6c:0b:c5:8f:bf:88:0b:fe:9e: b9:d8:83:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDjP2K4gFtE34myjDRCMqlrtftPQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDk2MjJGNjhDNTM5QTM2NUI2RkE3ODQ2M0YzQ0QzRDNF QzIzMTIxNDAeFw0yNTA1MDgwMTE2NTZaFw0yNTA1MTExMjIwNTZaMDMxMTAvBgNV BAMTKDk1NzVFM0NERUVBOUVBMzM0QjI5NkYyMjU0RjlCRTZCMkFCMzdCMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiTgT7iVQjZ/wPxcCd1u7JfG29 7MrwRn/2jxrSQkDkLdrWESYSSJC/5PHXs6PRkTzW9nu1f6vbQD2H2Yjp3j0RZYIb F10/uK411jIMB+0B1u3FVhT9Y+1s5xD1kGmyLyDlv2HJGQ/XPBk80Y05fmjpreG6 NM0DMTQGuZ/e+dANdeCnapBavQH5lg83A218P419ZhISeMKGihvMmq1riDVVbecy cpwLZlnLaa5bHWUqeljfUVb/btb9KcMSXOnu8qundbm2arb5n1BiHml5Qf5AGk9b jbcJo3yFt+XlfqMKrc2TscoN3KmmyYF9JaBIS7JYpEavVPU4wIiGbtPCJ1ybAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlXXjze6p6jNLKW8iVPm+ayqzezEwHwYDVR0j BBgwFoAU2WIvaMU5o2W2+nhGPzzT0+wjEhQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YmE2ZDA3Mi04MzYxLTRkZGYtODAwYS0xY2UxNWM0NzU5MmMvMC9EOTYyMkY2OEM1 MzlBMzY1QjZGQTc4NDYzRjNDRDNEM0VDMjMxMjE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDk2MjJGNjhDNTM5QTM2NUI2RkE3ODQ2M0YzQ0QzRDNFQzIz MTIxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGJhNmQwNzItODM2MS00ZGRmLTgw MGEtMWNlMTVjNDc1OTJjLzAvRDk2MjJGNjhDNTM5QTM2NUI2RkE3ODQ2M0YzQ0Qz RDNFQzIzMTIxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAN+szu8WIQqKB0UiWNRrsxCZvrtJnU6kbp0A 34N0ajjfzTzVzykBsOWJf5DXhkkpLvvcIDNPYOhoIbGrjk1grKlbSEGmTsHe7DRv 0UAtmPNo9zkAiBLdi6uAVJg9cyyne0qUwnCvWcJN7TKdq9ltxUvg3ftZz9oZzOBh W8Iby9Oeuv2ehz6ICo+nK31CkVNumFuswjmGBD7BHtLGMKs3qyL8iaKZJkXsB0ie 2BMHOv5G3ThYnyDawGAXUB+mwIfhuH7wghKDifWw2qBRdrAPxoaZQZHa9ZMAHvx4 d21ESeEn4tsdUt18NU79b7PDCzxjvEH7bWwLxY+/iAv+nrnYgz0= -----END CERTIFICATE-----Generated at Fri May 9 04:06:46 2025 by rpki-client