$ rpki-client -vvf repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft File: 9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft (raw, json) Hash identifier: eWOF6T6SgIkm2zdYnVFKRdvzzw8zx4MBnlTl8vnxHpg= Subject key identifier: D1:C5:8F:B5:1F:D3:DE:9C:FB:E6:CA:DD:71:2D:49:C4:37:8E:1C:3B Authority key identifier: 94:79:B8:C5:D5:AE:8F:AB:DC:57:A9:AB:54:9A:DD:E2:0B:E8:A4:B3 Certificate issuer: /CN=9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3 Certificate serial: 04BAE85842EC5D3237D66BCD8E07A5FB4B992E45 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft Manifest number: 01B9 Signing time: Wed 07 May 2025 07:12:00 +0000 Manifest this update: Wed 07 May 2025 07:07:00 +0000 Manifest next update: Sat 10 May 2025 16:06:00 +0000 Files and hashes: 1: 9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.crl (hash: AtCAuflf+6BlEXXJB9mmatsNxskWcLVWStP3uEmLN9E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.crl rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 16:06:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:ba:e8:58:42:ec:5d:32:37:d6:6b:cd:8e:07:a5:fb:4b:99:2e:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3 Validity Not Before: May 7 07:07:00 2025 GMT Not After : May 10 16:06:00 2025 GMT Subject: CN=D1C58FB51FD3DE9CFBE6CADD712D49C4378E1C3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:63:e9:82:a4:b2:66:98:18:12:f3:7e:2e:9a: c5:47:1d:84:c8:12:da:54:ef:37:e4:6d:3f:55:46: 31:45:04:ef:43:4b:a9:cb:39:b1:09:2e:21:43:b4: 25:1c:8d:1c:03:7d:38:f5:b9:09:9f:e0:bb:16:92: ee:ab:5c:c1:a0:27:14:82:eb:dd:d2:24:8d:eb:6e: a6:02:28:43:19:24:33:2f:b2:b1:68:23:d4:e2:16: c1:96:ae:4d:3b:00:74:2f:3a:49:9d:be:e6:07:1e: 52:87:ce:9d:7c:f9:66:29:5d:67:27:c8:8c:35:22: 4d:ab:00:13:3e:8d:4f:3f:3d:72:50:69:67:a0:19: 1d:c3:80:c6:8d:c3:3c:3a:81:14:44:20:c4:d1:ec: e6:e4:57:68:87:e6:91:ec:fe:82:86:9d:d8:02:bf: a4:8f:d4:d2:3e:f1:80:1d:b5:66:95:05:c1:78:ff: 66:2f:0b:e3:3a:f9:43:ed:73:ea:56:97:a9:52:4b: d1:06:7b:f5:55:4b:68:8e:d2:86:ac:8f:46:3b:b9: 9b:b8:e4:e0:18:14:07:51:83:c7:46:c6:f2:aa:39: 81:64:28:95:87:0d:5f:c9:8a:32:1a:85:53:4a:ca: d0:ae:ee:5b:6a:0a:56:f6:d2:94:27:ba:d3:f0:6c: 57:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:C5:8F:B5:1F:D3:DE:9C:FB:E6:CA:DD:71:2D:49:C4:37:8E:1C:3B X509v3 Authority Key Identifier: keyid:94:79:B8:C5:D5:AE:8F:AB:DC:57:A9:AB:54:9A:DD:E2:0B:E8:A4:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:f5:0d:c1:94:84:de:38:83:44:d6:b9:30:e8:66:d1:de:32: 36:28:5d:8e:c7:46:33:b8:20:f4:76:ee:dc:3c:e7:92:0a:69: a2:00:14:64:6c:8d:b0:07:96:39:98:a5:90:6f:99:18:f9:54: 24:a0:67:13:f1:2d:33:98:80:e1:b6:f5:6d:0d:a0:b1:f8:24: 7d:bc:93:1e:52:78:81:f2:c3:75:69:17:33:1e:5c:ed:f1:1f: 59:0e:6e:73:9f:bb:22:7d:9f:f0:9e:57:93:e0:55:c9:24:c4: 83:19:64:8e:64:1b:7e:8d:37:47:88:91:70:c6:2c:ad:0f:8a: d0:fa:46:34:ec:6f:ae:01:a4:09:43:cc:6c:98:96:09:cb:31: 8c:d3:cc:64:1e:2a:b7:6b:ec:0b:26:7b:1c:26:b4:45:fa:49: 6d:7f:55:d9:09:1e:3f:c4:13:4d:44:b2:24:5e:0f:ef:b1:88: a5:c4:61:a7:ed:37:38:b4:59:2b:47:2e:5f:7c:da:0c:f0:6c: 84:9a:ac:48:10:51:e9:ea:93:71:6e:8d:a0:20:80:99:bc:57: 91:ed:dc:e9:fd:a3:09:1b:d6:bf:23:44:01:46:67:b0:1a:54: 6b:9c:b3:d0:90:1c:d4:dc:07:60:00:19:8b:d6:35:f9:9a:f1: df:bb:c7:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBLroWELsXTI31mvNjgel+0uZLkUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ3OUI4QzVENUFFOEZBQkRDNTdBOUFCNTQ5QURERTIw QkU4QTRCMzAeFw0yNTA1MDcwNzA3MDBaFw0yNTA1MTAxNjA2MDBaMDMxMTAvBgNV BAMTKEQxQzU4RkI1MUZEM0RFOUNGQkU2Q0FERDcxMkQ0OUM0Mzc4RTFDM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCY+mCpLJmmBgS834umsVHHYTI EtpU7zfkbT9VRjFFBO9DS6nLObEJLiFDtCUcjRwDfTj1uQmf4LsWku6rXMGgJxSC 693SJI3rbqYCKEMZJDMvsrFoI9TiFsGWrk07AHQvOkmdvuYHHlKHzp18+WYpXWcn yIw1Ik2rABM+jU8/PXJQaWegGR3DgMaNwzw6gRREIMTR7ObkV2iH5pHs/oKGndgC v6SP1NI+8YAdtWaVBcF4/2YvC+M6+UPtc+pWl6lSS9EGe/VVS2iO0oasj0Y7uZu4 5OAYFAdRg8dGxvKqOYFkKJWHDV/JijIahVNKytCu7ltqClb20pQnutPwbFebAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0cWPtR/T3pz75srdcS1JxDeOHDswHwYDVR0j BBgwFoAUlHm4xdWuj6vcV6mrVJrd4gvopLMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTBhYTE1OC02NTgxLTRjYmUtYjZjZS1kODcyMWM3MTlmYTAvMC85NDc5QjhDNUQ1 QUU4RkFCREM1N0E5QUI1NDlBRERFMjBCRThBNEIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTQ3OUI4QzVENUFFOEZBQkRDNTdBOUFCNTQ5QURERTIwQkU4 QTRCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTkwYWExNTgtNjU4MS00Y2JlLWI2 Y2UtZDg3MjFjNzE5ZmEwLzAvOTQ3OUI4QzVENUFFOEZBQkRDNTdBOUFCNTQ5QURE RTIwQkU4QTRCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKb1DcGUhN44g0TWuTDoZtHeMjYoXY7HRjO4 IPR27tw855IKaaIAFGRsjbAHljmYpZBvmRj5VCSgZxPxLTOYgOG29W0NoLH4JH28 kx5SeIHyw3VpFzMeXO3xH1kObnOfuyJ9n/CeV5PgVckkxIMZZI5kG36NN0eIkXDG LK0PitD6RjTsb64BpAlDzGyYlgnLMYzTzGQeKrdr7AsmexwmtEX6SW1/VdkJHj/E E01EsiReD++xiKXEYaftNzi0WStHLl982gzwbISarEgQUenqk3FujaAggJm8V5Ht 3On9owkb1r8jRAFGZ7AaVGucs9CQHNTcB2AAGYvWNfma8d+7x8o= -----END CERTIFICATE-----Generated at Thu May 8 07:29:57 2025 by rpki-client