$ rpki-client -vvf repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.mft File: 748B52A8C3E54FEB10B3067D1E130242894DB86F.mft (raw, json) Hash identifier: H2dJ478AWdnyBSXM/ZYlTG50SFjL8gr1MEptXvSCdrI= Subject key identifier: 80:55:18:FA:3D:4E:D8:E9:10:11:0E:F1:5A:83:F2:19:37:73:4D:32 Authority key identifier: 74:8B:52:A8:C3:E5:4F:EB:10:B3:06:7D:1E:13:02:42:89:4D:B8:6F Certificate issuer: /CN=748B52A8C3E54FEB10B3067D1E130242894DB86F Certificate serial: 15F4B0AF2B6132292F02292CD18EE342D1769D79 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/748B52A8C3E54FEB10B3067D1E130242894DB86F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.mft Manifest number: 0155 Signing time: Sat 10 May 2025 11:11:13 +0000 Manifest this update: Sat 10 May 2025 11:06:13 +0000 Manifest next update: Tue 13 May 2025 18:47:13 +0000 Files and hashes: 1: 748B52A8C3E54FEB10B3067D1E130242894DB86F.crl (hash: wTI9wB+QtzijY0AVbMWSeSu1Rb2CNAMJo7fQZR1HrL4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.crl rsync://repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/748B52A8C3E54FEB10B3067D1E130242894DB86F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 18:47:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:f4:b0:af:2b:61:32:29:2f:02:29:2c:d1:8e:e3:42:d1:76:9d:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=748B52A8C3E54FEB10B3067D1E130242894DB86F Validity Not Before: May 10 11:06:13 2025 GMT Not After : May 13 18:47:13 2025 GMT Subject: CN=805518FA3D4ED8E910110EF15A83F21937734D32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:2c:68:7d:61:49:44:d9:bd:9b:b5:73:0a:ff: 2f:1f:ca:4e:ac:e8:ed:5c:26:fa:6d:55:ef:42:a1: de:4d:01:eb:45:c1:b5:4a:d1:bb:ba:71:71:ec:c5: 25:dd:a2:5f:f9:34:08:6a:0d:88:cf:8f:b9:41:d2: 67:a6:84:fb:25:ba:97:11:fb:00:46:b1:a9:1e:24: 02:db:0a:89:7b:1a:85:0a:55:73:15:35:65:40:9c: 16:d1:df:0e:f5:18:54:d1:93:c0:7d:94:9d:c7:8b: f2:4a:89:5a:56:ac:a7:40:a4:a8:f7:ff:85:db:0f: 6a:63:83:0e:13:9b:68:59:4f:31:75:ad:d3:57:0b: b1:42:71:c5:fb:5d:ad:e5:4c:2a:d9:d3:e7:c0:d9: b3:4d:63:80:9b:7d:d2:cf:66:dd:ef:8d:85:5b:cf: f4:6a:f9:40:78:0f:18:80:83:6c:9e:62:bf:0d:79: 51:89:46:31:3e:e3:1c:f3:49:14:cb:de:33:1d:ef: 48:53:66:22:6d:1d:c5:ea:d5:0c:02:3e:2b:03:be: ba:9f:15:62:6e:b3:a1:c2:f2:e9:3d:25:96:c5:b8: ec:9c:1e:e2:e8:58:23:ea:56:2c:f7:52:80:c6:e1: 79:99:06:b2:95:d3:96:ff:87:a5:37:c8:69:00:d6: 0b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:55:18:FA:3D:4E:D8:E9:10:11:0E:F1:5A:83:F2:19:37:73:4D:32 X509v3 Authority Key Identifier: keyid:74:8B:52:A8:C3:E5:4F:EB:10:B3:06:7D:1E:13:02:42:89:4D:B8:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/748B52A8C3E54FEB10B3067D1E130242894DB86F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a43e9cd6-b90d-4c8e-b0d6-21a5529f7291/0/748B52A8C3E54FEB10B3067D1E130242894DB86F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:d1:23:50:f7:63:60:2c:bb:50:25:d9:23:c4:1f:2e:2c:24: 03:e9:45:53:8c:71:07:6c:7c:dc:0a:ec:bd:bd:8b:47:b4:9a: fb:fc:08:f9:bc:38:e5:8c:ae:e4:9d:6b:2e:76:1e:f8:d2:16: 89:a5:a0:09:09:ef:b8:e4:dd:1c:09:45:f9:29:3a:d5:de:e2: 72:c4:53:34:3e:d1:5f:25:db:2d:9d:75:c0:dc:fd:7e:b2:1b: 1b:70:4c:e7:d7:65:73:87:ad:a7:d1:38:ba:a0:a5:29:8d:5d: c4:b2:cd:95:0a:c8:4d:15:1b:62:cf:e7:c1:84:fd:99:fb:27: be:1b:1a:12:21:87:63:5f:7e:81:5f:5f:ab:01:bf:e3:88:65: f7:94:09:b3:75:f9:a9:04:5d:2f:fd:58:85:bc:68:96:4e:d9: 2e:0a:25:ec:6d:e9:ae:03:3a:b0:4e:16:15:98:3d:7e:f0:fa: e8:61:a8:fb:ff:5f:10:55:6f:06:30:de:6c:04:8e:70:a2:dc: 43:8e:d6:49:4c:a9:f2:b6:26:98:9b:d0:f5:c8:e3:57:14:fc: 88:c3:b0:36:8b:86:44:37:0b:b9:ad:bf:54:11:a5:ad:eb:90: 0c:0d:a5:5b:34:5a:f5:f7:14:93:64:0c:89:ed:9d:40:05:3b: 83:91:45:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFfSwrythMikvAiks0Y7jQtF2nXkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQ4QjUyQThDM0U1NEZFQjEwQjMwNjdEMUUxMzAyNDI4 OTREQjg2RjAeFw0yNTA1MTAxMTA2MTNaFw0yNTA1MTMxODQ3MTNaMDMxMTAvBgNV BAMTKDgwNTUxOEZBM0Q0RUQ4RTkxMDExMEVGMTVBODNGMjE5Mzc3MzREMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwLGh9YUlE2b2btXMK/y8fyk6s 6O1cJvptVe9Cod5NAetFwbVK0bu6cXHsxSXdol/5NAhqDYjPj7lB0memhPslupcR +wBGsakeJALbCol7GoUKVXMVNWVAnBbR3w71GFTRk8B9lJ3Hi/JKiVpWrKdApKj3 /4XbD2pjgw4Tm2hZTzF1rdNXC7FCccX7Xa3lTCrZ0+fA2bNNY4CbfdLPZt3vjYVb z/Rq+UB4DxiAg2yeYr8NeVGJRjE+4xzzSRTL3jMd70hTZiJtHcXq1QwCPisDvrqf FWJus6HC8uk9JZbFuOycHuLoWCPqViz3UoDG4XmZBrKV05b/h6U3yGkA1gvvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgFUY+j1O2OkQEQ7xWoPyGTdzTTIwHwYDVR0j BBgwFoAUdItSqMPlT+sQswZ9HhMCQolNuG8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NDNlOWNkNi1iOTBkLTRjOGUtYjBkNi0yMWE1NTI5ZjcyOTEvMC83NDhCNTJBOEMz RTU0RkVCMTBCMzA2N0QxRTEzMDI0Mjg5NERCODZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzQ4QjUyQThDM0U1NEZFQjEwQjMwNjdEMUUxMzAyNDI4OTRE Qjg2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTQzZTljZDYtYjkwZC00YzhlLWIw ZDYtMjFhNTUyOWY3MjkxLzAvNzQ4QjUyQThDM0U1NEZFQjEwQjMwNjdEMUUxMzAy NDI4OTREQjg2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEzRI1D3Y2Asu1Al2SPEHy4sJAPpRVOMcQds fNwK7L29i0e0mvv8CPm8OOWMruSday52HvjSFomloAkJ77jk3RwJRfkpOtXe4nLE UzQ+0V8l2y2ddcDc/X6yGxtwTOfXZXOHrafROLqgpSmNXcSyzZUKyE0VG2LP58GE /Zn7J74bGhIhh2NffoFfX6sBv+OIZfeUCbN1+akEXS/9WIW8aJZO2S4KJext6a4D OrBOFhWYPX7w+uhhqPv/XxBVbwYw3mwEjnCi3EOO1klMqfK2Jpib0PXI41cU/IjD sDaLhkQ3C7mtv1QRpa3rkAwNpVs0WvX3FJNkDIntnUAFO4ORRS8= -----END CERTIFICATE-----Generated at Mon May 12 13:44:36 2025 by rpki-client