$ rpki-client -vvf repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft File: 1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft (raw, json) Hash identifier: kN700tC7HNQ1C0ZXABfE3VhIAVtr8MumsLzQ0Q9MbvI= Subject key identifier: B7:5A:69:CF:5E:B2:87:7E:39:9B:2E:5E:8A:96:CC:3F:3A:25:72:39 Authority key identifier: 1D:02:4B:7D:F6:A4:F5:42:13:C5:0C:40:5A:E1:E3:7B:85:21:B4:9A Certificate issuer: /CN=1D024B7DF6A4F54213C50C405AE1E37B8521B49A Certificate serial: 100EAD3E81DF915A4808EE74675A1C2ED33E5B63 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft Manifest number: 49 Signing time: Sun 11 May 2025 05:31:12 +0000 Manifest this update: Sun 11 May 2025 05:26:12 +0000 Manifest next update: Wed 14 May 2025 17:08:12 +0000 Files and hashes: 1: 1D024B7DF6A4F54213C50C405AE1E37B8521B49A.crl (hash: SomDPlHtIFG8v0gsMyRyth0/7tHWWSgDlEKOeJ/E/3A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.crl rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 17:08:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:0e:ad:3e:81:df:91:5a:48:08:ee:74:67:5a:1c:2e:d3:3e:5b:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D024B7DF6A4F54213C50C405AE1E37B8521B49A Validity Not Before: May 11 05:26:12 2025 GMT Not After : May 14 17:08:12 2025 GMT Subject: CN=B75A69CF5EB2877E399B2E5E8A96CC3F3A257239 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b4:12:d4:77:95:3a:85:87:ce:3e:85:27:d9: 59:b4:55:e4:04:83:7e:c9:a8:e7:be:f9:31:9a:66: 13:3f:5f:92:b1:8d:e4:89:19:ce:d0:4a:26:1e:0e: b2:13:26:b6:58:6e:80:4d:1a:77:54:c2:c1:fd:23: dc:16:10:eb:8d:6d:a2:b9:1b:31:7f:43:38:68:09: 1f:1b:5d:88:6d:3c:92:7a:f8:40:da:58:9a:21:50: f9:7b:6e:04:1d:a8:df:9f:ce:6b:36:75:32:af:85: e5:2e:a3:ae:c2:4e:ef:69:8a:b1:b3:f3:80:de:9b: f7:2e:95:ef:b6:df:ad:71:c2:01:a5:9a:07:3c:d3: b7:46:e5:02:99:7b:bd:81:7e:64:86:70:47:fb:7e: 1b:6a:d3:fc:ec:51:1f:4d:eb:8e:83:ad:98:8a:70: 8a:52:85:76:d4:65:b2:51:95:6c:bd:83:c5:85:ad: e1:e1:e0:9e:a8:47:2d:bd:76:7e:c4:2b:2c:80:a9: 90:ca:21:0c:26:d5:c0:46:82:3b:59:cf:5a:c6:3b: 42:5f:79:e1:2c:af:35:c1:e6:dc:4d:ae:e4:a2:4d: e2:55:64:fb:a6:5b:cf:e1:22:7e:7b:05:ce:2f:18: 8d:d0:fd:24:aa:ff:88:b3:1d:02:cd:54:c4:7b:1c: f4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:5A:69:CF:5E:B2:87:7E:39:9B:2E:5E:8A:96:CC:3F:3A:25:72:39 X509v3 Authority Key Identifier: keyid:1D:02:4B:7D:F6:A4:F5:42:13:C5:0C:40:5A:E1:E3:7B:85:21:B4:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:3f:ef:74:1e:36:47:e6:50:72:f8:c9:1c:37:83:fd:b9:83: 15:d3:5c:d5:e1:14:3c:50:ce:d3:42:0c:ad:f2:93:df:c7:f6: 24:b8:21:63:47:79:60:db:5e:2b:d7:92:6e:24:9c:47:ce:c6: 78:b9:f4:24:75:e3:e1:31:03:59:19:90:e1:54:f7:e9:5c:03: bb:90:fa:c4:9f:73:de:9a:f5:65:29:8d:05:de:cb:b6:33:a8: 0e:39:d8:ea:41:58:e8:0f:ce:30:a7:92:7d:1a:a7:e6:1f:e6: 65:58:a7:2c:2e:cb:8a:07:79:11:08:37:96:4d:48:57:0e:d1: d5:d2:0d:df:16:20:7c:6b:53:1d:47:cb:51:53:78:e5:2f:45: cb:ce:0c:86:d3:66:f2:34:0f:be:20:62:b8:cb:06:cd:d9:39: d1:51:bb:4c:cd:2b:19:12:fa:b0:dd:4c:5a:28:88:50:a1:c3: 40:1f:a5:92:f7:29:27:f8:66:29:42:96:71:b3:73:7d:38:30: 91:5d:24:86:5d:55:b8:c4:40:a1:08:36:73:03:48:e5:83:43: f2:bc:8f:ac:54:1c:59:ef:99:dd:88:87:46:83:73:0a:c5:c6: cc:1d:db:64:65:2c:53:58:cf:3e:48:8d:a7:ec:94:89:84:91: 3f:48:f1:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEA6tPoHfkVpICO50Z1ocLtM+W2MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQwMjRCN0RGNkE0RjU0MjEzQzUwQzQwNUFFMUUzN0I4 NTIxQjQ5QTAeFw0yNTA1MTEwNTI2MTJaFw0yNTA1MTQxNzA4MTJaMDMxMTAvBgNV BAMTKEI3NUE2OUNGNUVCMjg3N0UzOTlCMkU1RThBOTZDQzNGM0EyNTcyMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDtBLUd5U6hYfOPoUn2Vm0VeQE g37JqOe++TGaZhM/X5KxjeSJGc7QSiYeDrITJrZYboBNGndUwsH9I9wWEOuNbaK5 GzF/QzhoCR8bXYhtPJJ6+EDaWJohUPl7bgQdqN+fzms2dTKvheUuo67CTu9pirGz 84Dem/cule+2361xwgGlmgc807dG5QKZe72BfmSGcEf7fhtq0/zsUR9N646DrZiK cIpShXbUZbJRlWy9g8WFreHh4J6oRy29dn7EKyyAqZDKIQwm1cBGgjtZz1rGO0Jf eeEsrzXB5txNruSiTeJVZPumW8/hIn57Bc4vGI3Q/SSq/4izHQLNVMR7HPT1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt1ppz16yh345my5eipbMPzolcjkwHwYDVR0j BBgwFoAUHQJLffak9UITxQxAWuHje4UhtJowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTNkZTNlYy00ZDNjLTQ0MDItYTdiOC04YTFiOTYyMjZlNzUvMS8xRDAyNEI3REY2 QTRGNTQyMTNDNTBDNDA1QUUxRTM3Qjg1MjFCNDlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQwMjRCN0RGNkE0RjU0MjEzQzUwQzQwNUFFMUUzN0I4NTIx QjQ5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTEzZGUzZWMtNGQzYy00NDAyLWE3 YjgtOGExYjk2MjI2ZTc1LzEvMUQwMjRCN0RGNkE0RjU0MjEzQzUwQzQwNUFFMUUz N0I4NTIxQjQ5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANc/73QeNkfmUHL4yRw3g/25gxXTXNXhFDxQ ztNCDK3yk9/H9iS4IWNHeWDbXivXkm4knEfOxni59CR14+ExA1kZkOFU9+lcA7uQ +sSfc96a9WUpjQXey7YzqA452OpBWOgPzjCnkn0ap+Yf5mVYpywuy4oHeREIN5ZN SFcO0dXSDd8WIHxrUx1Hy1FTeOUvRcvODIbTZvI0D74gYrjLBs3ZOdFRu0zNKxkS +rDdTFooiFChw0AfpZL3KSf4ZilClnGzc304MJFdJIZdVbjEQKEINnMDSOWDQ/K8 j6xUHFnvmd2Ih0aDcwrFxswd22RlLFNYzz5IjafslImEkT9I8dI= -----END CERTIFICATE-----Generated at Sun May 11 23:28:33 2025 by rpki-client