$ rpki-client -vvf repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.mft File: 67C19D4C4526841EC686B5194BEE908F203AF744.mft (raw, json) Hash identifier: CI8GT8NI/4galgGYsCpD8gU9j9TfvgxreYkk+HEln8k= Subject key identifier: 51:36:CA:F5:85:53:25:B8:00:7C:65:48:EA:50:D1:55:1A:CF:CE:A7 Authority key identifier: 67:C1:9D:4C:45:26:84:1E:C6:86:B5:19:4B:EE:90:8F:20:3A:F7:44 Certificate issuer: /CN=67C19D4C4526841EC686B5194BEE908F203AF744 Certificate serial: 609F5DE17BD51172CFBE2AE3F2D012AF33C5C0E9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/67C19D4C4526841EC686B5194BEE908F203AF744.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.mft Manifest number: 4F Signing time: Mon 05 May 2025 09:11:02 +0000 Manifest this update: Mon 05 May 2025 09:06:02 +0000 Manifest next update: Thu 08 May 2025 19:04:02 +0000 Files and hashes: 1: 67C19D4C4526841EC686B5194BEE908F203AF744.crl (hash: D7vuBRk8fDha2BP6+71lyC+zUYqgSTIxxNfOLTUcl4I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.crl rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/67C19D4C4526841EC686B5194BEE908F203AF744.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 10:55:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:9f:5d:e1:7b:d5:11:72:cf:be:2a:e3:f2:d0:12:af:33:c5:c0:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67C19D4C4526841EC686B5194BEE908F203AF744 Validity Not Before: May 5 09:06:02 2025 GMT Not After : May 8 19:04:02 2025 GMT Subject: CN=5136CAF5855325B8007C6548EA50D1551ACFCEA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e4:2e:6a:69:08:87:3f:b4:c8:3f:ba:e1:90: 02:32:ae:fa:0b:40:6f:6a:b1:80:21:5b:90:50:55: e1:c7:cd:00:68:aa:2c:57:6b:05:e3:d6:56:d4:b9: 01:46:2b:f5:4e:c7:d2:d4:3a:72:95:a9:50:b1:3f: 13:ce:05:c3:4f:92:41:57:b7:eb:15:8a:07:b7:49: ad:06:94:0f:d0:53:4b:2d:33:a4:cd:96:a4:2b:d3: 17:d6:75:13:94:87:99:a0:8b:e6:7b:a6:88:73:65: cb:1f:d2:e1:83:25:d1:ca:a0:e2:d3:c1:90:42:92: 5b:6b:6b:11:8c:87:4b:02:ef:c6:b8:c2:2e:e2:01: 16:19:1d:d1:a0:34:ce:bf:66:a4:92:c7:f2:f3:9d: 7f:6a:d9:03:b2:77:91:bc:7e:1b:83:40:26:67:cc: da:eb:01:d3:d4:23:f6:c8:f0:90:39:cb:f5:28:72: 10:d4:10:0f:68:89:20:7a:72:f9:e6:88:2b:6b:59: 22:21:69:14:ba:c6:c4:28:2c:68:fa:ce:36:b0:cc: 8d:f4:f8:3f:96:24:aa:5d:ce:80:7c:8c:c7:72:85: e5:c8:f8:fe:d2:8b:11:5e:0e:9e:77:96:37:08:31: a8:53:92:db:3f:dc:44:69:ee:ee:0d:0d:f6:c5:e9: 37:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:36:CA:F5:85:53:25:B8:00:7C:65:48:EA:50:D1:55:1A:CF:CE:A7 X509v3 Authority Key Identifier: keyid:67:C1:9D:4C:45:26:84:1E:C6:86:B5:19:4B:EE:90:8F:20:3A:F7:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/67C19D4C4526841EC686B5194BEE908F203AF744.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/0/67C19D4C4526841EC686B5194BEE908F203AF744.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:65:7a:32:2a:70:38:4e:48:99:7a:d0:b1:f6:0c:c2:bc:62: 14:fc:69:41:ae:26:3b:63:84:2e:94:80:07:71:6f:29:0c:e2: 54:64:a9:e1:ff:16:70:16:06:fb:93:73:f2:cc:15:e1:6c:29: 61:5a:1e:43:ee:07:38:4a:1e:7f:40:d7:89:01:7f:6b:ac:28: fa:c9:4a:54:5b:15:9c:b2:ea:b5:1e:1c:12:d6:70:78:98:b8: eb:d8:d6:b3:dc:10:1e:4b:ce:ab:a7:5e:ca:32:af:b1:8d:82: af:cb:c7:16:25:49:93:2a:64:2b:12:32:ac:e4:89:be:c3:ac: 45:46:96:78:89:a0:c1:d9:6f:80:8c:4d:fb:7d:ba:d0:99:df: 70:fb:e0:d3:d3:6a:f7:36:42:81:c6:dc:34:ed:0a:4e:b9:c3: 8e:76:0d:03:f2:09:8f:6b:6d:9a:28:7d:73:8f:b4:16:ed:d1: 7c:44:14:0f:26:46:08:00:37:ad:8b:32:7f:e9:11:31:e1:bf: 17:fb:d3:e1:f1:31:5c:47:27:fc:cd:00:ed:7c:0d:73:15:d9: c7:4f:e8:c5:25:25:fa:ee:05:06:a9:35:6e:e1:c0:89:e0:69: f0:1f:08:91:f1:d9:fe:1c:e8:01:b1:08:10:2e:d2:b3:26:67: 9c:63:6d:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYJ9d4XvVEXLPvirj8tASrzPFwOkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdDMTlENEM0NTI2ODQxRUM2ODZCNTE5NEJFRTkwOEYy MDNBRjc0NDAeFw0yNTA1MDUwOTA2MDJaFw0yNTA1MDgxOTA0MDJaMDMxMTAvBgNV BAMTKDUxMzZDQUY1ODU1MzI1QjgwMDdDNjU0OEVBNTBEMTU1MUFDRkNFQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR5C5qaQiHP7TIP7rhkAIyrvoL QG9qsYAhW5BQVeHHzQBoqixXawXj1lbUuQFGK/VOx9LUOnKVqVCxPxPOBcNPkkFX t+sVige3Sa0GlA/QU0stM6TNlqQr0xfWdROUh5mgi+Z7pohzZcsf0uGDJdHKoOLT wZBCkltraxGMh0sC78a4wi7iARYZHdGgNM6/ZqSSx/LznX9q2QOyd5G8fhuDQCZn zNrrAdPUI/bI8JA5y/UochDUEA9oiSB6cvnmiCtrWSIhaRS6xsQoLGj6zjawzI30 +D+WJKpdzoB8jMdyheXI+P7SixFeDp53ljcIMahTkts/3ERp7u4NDfbF6Te9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUTbK9YVTJbgAfGVI6lDRVRrPzqcwHwYDVR0j BBgwFoAUZ8GdTEUmhB7GhrUZS+6QjyA690QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MjExZjM0Ny1hMWU3LTQ3MWQtYWQyMC1kYTc2YWFiZjM4NGMvMC82N0MxOUQ0QzQ1 MjY4NDFFQzY4NkI1MTk0QkVFOTA4RjIwM0FGNzQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjdDMTlENEM0NTI2ODQxRUM2ODZCNTE5NEJFRTkwOEYyMDNB Rjc0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTIxMWYzNDctYTFlNy00NzFkLWFk MjAtZGE3NmFhYmYzODRjLzAvNjdDMTlENEM0NTI2ODQxRUM2ODZCNTE5NEJFRTkw OEYyMDNBRjc0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALtlejIqcDhOSJl60LH2DMK8YhT8aUGuJjtj hC6UgAdxbykM4lRkqeH/FnAWBvuTc/LMFeFsKWFaHkPuBzhKHn9A14kBf2usKPrJ SlRbFZyy6rUeHBLWcHiYuOvY1rPcEB5LzqunXsoyr7GNgq/LxxYlSZMqZCsSMqzk ib7DrEVGlniJoMHZb4CMTft9utCZ33D74NPTavc2QoHG3DTtCk65w452DQPyCY9r bZoofXOPtBbt0XxEFA8mRggAN62LMn/pETHhvxf70+HxMVxHJ/zNAO18DXMV2cdP 6MUlJfruBQapNW7hwIngafAfCJHx2f4c6AGxCBAu0rMmZ5xjbWs= -----END CERTIFICATE-----Generated at Wed May 7 02:25:32 2025 by rpki-client