$ rpki-client -vvf repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft File: 104297C14501204E355A97BD8ED42B1FB7C82B01.mft (raw, json) Hash identifier: QPR4bPqiI0rCViu+oEdaZsBqyQzj+p806kp3ZBgHHnU= Subject key identifier: A6:47:0D:2A:6B:9E:4F:72:40:6E:05:74:8C:03:47:F9:E8:8B:2F:19 Authority key identifier: 10:42:97:C1:45:01:20:4E:35:5A:97:BD:8E:D4:2B:1F:B7:C8:2B:01 Certificate issuer: /CN=104297C14501204E355A97BD8ED42B1FB7C82B01 Certificate serial: 5C867D76BC59417906886572BA73F30FDD7F9CF4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104297C14501204E355A97BD8ED42B1FB7C82B01.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft Manifest number: 01FC Signing time: Mon 12 May 2025 04:51:39 +0000 Manifest this update: Mon 12 May 2025 04:46:39 +0000 Manifest next update: Thu 15 May 2025 05:30:39 +0000 Files and hashes: 1: 104297C14501204E355A97BD8ED42B1FB7C82B01.crl (hash: D9QkEmwRLdljR/XaCCMNPbP5U6cZ0pmbxJ3QjLMYBfw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.crl rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104297C14501204E355A97BD8ED42B1FB7C82B01.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 05:30:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:86:7d:76:bc:59:41:79:06:88:65:72:ba:73:f3:0f:dd:7f:9c:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=104297C14501204E355A97BD8ED42B1FB7C82B01 Validity Not Before: May 12 04:46:39 2025 GMT Not After : May 15 05:30:39 2025 GMT Subject: CN=A6470D2A6B9E4F72406E05748C0347F9E88B2F19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:cf:1b:a1:70:b7:88:e2:ed:01:7c:cd:b5:bc: 22:03:4f:2e:18:4a:b2:9c:ff:5e:a0:92:15:a2:f3: 15:e1:96:74:79:90:30:90:da:88:b8:65:2e:78:eb: 8d:ec:fa:2d:28:a4:80:46:12:26:08:04:61:01:84: ee:26:25:dd:a8:fd:4c:08:a8:9e:15:77:cd:0d:9e: bc:45:1a:e2:bf:58:f8:1c:ca:7d:8e:f5:48:68:9e: bd:42:30:9d:59:95:f0:b4:b5:db:1a:d7:ad:5d:75: ba:72:0c:0f:1a:9e:5c:76:f9:db:ed:a1:4d:e8:6c: fd:57:31:6b:8b:bf:c1:5e:2d:92:f0:b5:41:e1:6b: 07:79:dc:b7:a1:a1:92:64:3f:41:79:46:6a:8a:51: 83:83:20:20:32:6e:46:47:77:4e:e7:b3:3a:79:c5: 00:d5:93:4f:07:c1:8f:c8:a1:1e:4a:2e:cc:e3:1e: a7:b2:43:43:b8:e2:64:cd:16:9b:fc:30:bd:15:0c: e5:c8:97:84:15:78:16:2d:24:01:7f:1f:30:27:44: 94:43:ce:e1:d9:1a:14:74:80:cd:9e:87:21:17:7b: 14:69:a7:e2:05:c5:8e:4e:c7:5e:96:df:b8:d9:94: 4c:59:a9:5d:96:7e:d0:e0:0d:3a:28:66:f5:d4:8c: 1e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:47:0D:2A:6B:9E:4F:72:40:6E:05:74:8C:03:47:F9:E8:8B:2F:19 X509v3 Authority Key Identifier: keyid:10:42:97:C1:45:01:20:4E:35:5A:97:BD:8E:D4:2B:1F:B7:C8:2B:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104297C14501204E355A97BD8ED42B1FB7C82B01.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:24:60:9d:33:3f:f8:a8:c0:c1:56:f4:40:4a:e4:4b:b0:aa: ec:0b:5e:e0:bc:36:49:de:d4:94:e5:b0:cf:53:43:70:e0:e2: 89:fe:1e:5e:93:98:db:37:75:c3:10:29:d9:17:56:0c:60:14: 3a:3f:3e:e9:e1:ad:3d:5b:e0:9c:a2:ce:46:45:ef:cb:31:f2: ab:fe:c7:70:96:84:d0:a9:ee:64:1c:8b:c7:df:b3:02:aa:22: 81:6c:38:5e:a2:f3:02:53:e8:17:92:26:77:4c:f4:cc:e3:fd: 9f:77:b2:38:ce:3c:0c:a0:81:55:a3:ed:d8:2c:96:27:23:36: a4:e0:03:c2:ef:2f:f8:14:cc:b2:21:d1:1b:49:0d:50:2a:9c: 33:26:97:41:37:be:77:1d:e5:5a:5a:71:c1:e4:e2:13:09:48: 43:1c:bd:1c:44:fe:96:5d:9a:12:c4:e7:c7:f8:7d:42:5c:c1: 27:c3:e7:ee:ee:2e:44:f8:e3:60:53:a4:b0:d5:d7:7e:13:cf: fe:07:4f:a2:05:40:0e:a0:52:62:83:fb:e0:04:de:c9:0f:a5: fd:30:b9:f0:bf:e1:8f:f5:f5:23:4c:e4:dd:bd:e9:31:ec:ef: 6f:1a:d9:c7:73:bb:3b:18:06:95:14:b4:f7:34:49:82:66:d9: e2:a2:04:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXIZ9drxZQXkGiGVyunPzD91/nPQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA0Mjk3QzE0NTAxMjA0RTM1NUE5N0JEOEVENDJCMUZC N0M4MkIwMTAeFw0yNTA1MTIwNDQ2MzlaFw0yNTA1MTUwNTMwMzlaMDMxMTAvBgNV BAMTKEE2NDcwRDJBNkI5RTRGNzI0MDZFMDU3NDhDMDM0N0Y5RTg4QjJGMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzzxuhcLeI4u0BfM21vCIDTy4Y SrKc/16gkhWi8xXhlnR5kDCQ2oi4ZS54643s+i0opIBGEiYIBGEBhO4mJd2o/UwI qJ4Vd80NnrxFGuK/WPgcyn2O9Uhonr1CMJ1ZlfC0tdsa161ddbpyDA8anlx2+dvt oU3obP1XMWuLv8FeLZLwtUHhawd53LehoZJkP0F5RmqKUYODICAybkZHd07nszp5 xQDVk08HwY/IoR5KLszjHqeyQ0O44mTNFpv8ML0VDOXIl4QVeBYtJAF/HzAnRJRD zuHZGhR0gM2ehyEXexRpp+IFxY5Ox16W37jZlExZqV2WftDgDTooZvXUjB5XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpkcNKmueT3JAbgV0jANH+eiLLxkwHwYDVR0j BBgwFoAUEEKXwUUBIE41Wpe9jtQrH7fIKwEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h M2ZjMWRhMy04YmYzLTRmZjItOTc3Yy0yM2NiMjczYWQyNDgvMC8xMDQyOTdDMTQ1 MDEyMDRFMzU1QTk3QkQ4RUQ0MkIxRkI3QzgyQjAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA0Mjk3QzE0NTAxMjA0RTM1NUE5N0JEOEVENDJCMUZCN0M4 MkIwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTNmYzFkYTMtOGJmMy00ZmYyLTk3 N2MtMjNjYjI3M2FkMjQ4LzAvMTA0Mjk3QzE0NTAxMjA0RTM1NUE5N0JEOEVENDJC MUZCN0M4MkIwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGkkYJ0zP/iowMFW9EBK5EuwquwLXuC8Nkne 1JTlsM9TQ3Dg4on+Hl6TmNs3dcMQKdkXVgxgFDo/PunhrT1b4JyizkZF78sx8qv+ x3CWhNCp7mQci8ffswKqIoFsOF6i8wJT6BeSJndM9Mzj/Z93sjjOPAyggVWj7dgs licjNqTgA8LvL/gUzLIh0RtJDVAqnDMml0E3vncd5VpaccHk4hMJSEMcvRxE/pZd mhLE58f4fUJcwSfD5+7uLkT442BTpLDV134Tz/4HT6IFQA6gUmKD++AE3skPpf0w ufC/4Y/19SNM5N296THs728a2cdzuzsYBpUUtPc0SYJm2eKiBNY= -----END CERTIFICATE-----Generated at Tue May 13 09:58:16 2025 by rpki-client