$ rpki-client -vvf repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/80437ADADDF5C8522845482A0302AF12B3CBC67D.mft File: 80437ADADDF5C8522845482A0302AF12B3CBC67D.mft (raw, json) Hash identifier: WMqj6trVFfLlA9s87H9PP6I6Fi8j0u6kKrZiNDsAIho= Subject key identifier: 10:32:14:C6:85:63:C3:E9:F7:69:88:5B:25:A3:A8:65:04:AC:EF:77 Authority key identifier: 80:43:7A:DA:DD:F5:C8:52:28:45:48:2A:03:02:AF:12:B3:CB:C6:7D Certificate issuer: /CN=80437ADADDF5C8522845482A0302AF12B3CBC67D Certificate serial: 4FFEBE8F42BD6D5F21858B5D4E592D328E249A73 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80437ADADDF5C8522845482A0302AF12B3CBC67D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/80437ADADDF5C8522845482A0302AF12B3CBC67D.mft Manifest number: 021B Signing time: Tue 06 May 2025 17:20:45 +0000 Manifest this update: Tue 06 May 2025 17:15:45 +0000 Manifest next update: Fri 09 May 2025 22:48:45 +0000 Files and hashes: 1: 80437ADADDF5C8522845482A0302AF12B3CBC67D.crl (hash: bxUn3Vq9s4o3f9E6YvnO9vM8VM73Y1ApZpEdw86XTUk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/80437ADADDF5C8522845482A0302AF12B3CBC67D.crl rsync://repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/80437ADADDF5C8522845482A0302AF12B3CBC67D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80437ADADDF5C8522845482A0302AF12B3CBC67D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 22:48:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:fe:be:8f:42:bd:6d:5f:21:85:8b:5d:4e:59:2d:32:8e:24:9a:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80437ADADDF5C8522845482A0302AF12B3CBC67D Validity Not Before: May 6 17:15:45 2025 GMT Not After : May 9 22:48:45 2025 GMT Subject: CN=103214C68563C3E9F769885B25A3A86504ACEF77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:58:9a:ea:37:13:50:c1:6d:25:21:86:e4:ca: 7c:d9:0f:ef:53:63:ff:94:06:f0:c9:42:6d:20:7d: 70:17:89:3e:56:7f:bf:48:e6:ad:d2:86:c0:9a:ff: fb:d0:8c:c9:b4:29:6e:5d:80:bd:82:15:27:a0:75: 5b:6b:1e:f3:e3:40:b9:5b:bc:3c:67:59:63:de:52: 25:cc:b5:7f:72:bb:28:78:b4:85:7e:b6:71:0b:98: fe:db:35:41:83:18:74:8d:0b:dd:76:7d:f4:de:2d: 6b:a3:c5:c2:fb:1e:4f:4c:11:be:c2:0f:c4:f1:77: 89:85:3c:47:37:00:8b:86:ce:d1:2b:7a:62:f9:e3: 64:7e:9a:2f:da:4d:26:d9:07:be:3e:44:60:64:30: ab:c8:4f:32:1e:90:e0:84:ce:2d:8c:84:67:3f:3a: 0e:47:26:e6:d3:9b:4a:24:de:7d:69:01:58:64:86: 06:08:6e:1e:13:66:c4:af:ef:46:be:35:cf:02:8f: dc:ed:cb:7c:e4:61:29:d7:df:28:e5:05:89:18:58: 5e:1d:f2:35:25:19:8d:67:5a:e5:4d:a3:2a:ca:cf: 02:79:71:8c:2a:cd:da:22:8a:9b:ed:5c:52:69:ff: cd:66:27:a0:1f:a5:97:76:f1:25:5a:b1:63:f3:9e: 8a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:32:14:C6:85:63:C3:E9:F7:69:88:5B:25:A3:A8:65:04:AC:EF:77 X509v3 Authority Key Identifier: keyid:80:43:7A:DA:DD:F5:C8:52:28:45:48:2A:03:02:AF:12:B3:CB:C6:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/80437ADADDF5C8522845482A0302AF12B3CBC67D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80437ADADDF5C8522845482A0302AF12B3CBC67D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bbc83b55-c8c1-461d-b28b-0d4a9953e1dd/0/80437ADADDF5C8522845482A0302AF12B3CBC67D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:bd:e6:07:10:a7:f6:6b:f8:5a:fa:e3:e9:13:6f:15:6b:e6: e0:83:d8:14:d3:1f:44:a4:05:33:89:6b:ef:96:85:86:59:80: 1c:1e:42:ff:00:11:8d:77:4f:a0:0d:45:97:bf:68:dc:ea:b6: 7b:fc:39:3d:4e:21:da:b6:39:48:e1:7a:ef:09:35:d6:24:db: c1:19:ac:3e:d4:bb:d8:d0:cb:d8:0c:06:a0:10:af:e3:c3:a5: d5:6f:f8:f7:a5:d6:d3:69:40:20:6e:4e:d2:29:13:bd:5c:bb: 92:c7:3d:81:17:65:cd:57:f8:ae:e7:b1:1b:1f:90:97:41:bd: 1e:02:57:ea:69:ed:ac:69:7a:e4:c1:c0:9d:6f:db:86:fd:1a: 3c:7c:a4:51:37:28:d6:b2:39:65:1e:26:fd:c9:86:60:87:23: ad:e8:ee:67:a9:c7:97:70:a6:35:b1:68:98:15:55:80:2d:2c: d9:9a:ec:21:d2:c6:5f:cc:73:df:8b:b1:03:dc:5c:b2:74:60: 70:a5:ff:43:a5:ea:c5:e0:14:63:c5:64:7c:f4:e9:0f:67:72: f0:f6:ae:40:3e:36:69:51:df:8c:1a:c7:7c:d7:a9:93:57:8e: 2c:f7:4f:67:a7:e4:03:65:09:65:36:b3:ab:13:33:80:cf:bf: 14:82:bc:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT/6+j0K9bV8hhYtdTlktMo4kmnMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODA0MzdBREFEREY1Qzg1MjI4NDU0ODJBMDMwMkFGMTJC M0NCQzY3RDAeFw0yNTA1MDYxNzE1NDVaFw0yNTA1MDkyMjQ4NDVaMDMxMTAvBgNV BAMTKDEwMzIxNEM2ODU2M0MzRTlGNzY5ODg1QjI1QTNBODY1MDRBQ0VGNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpWJrqNxNQwW0lIYbkynzZD+9T Y/+UBvDJQm0gfXAXiT5Wf79I5q3ShsCa//vQjMm0KW5dgL2CFSegdVtrHvPjQLlb vDxnWWPeUiXMtX9yuyh4tIV+tnELmP7bNUGDGHSNC912ffTeLWujxcL7Hk9MEb7C D8Txd4mFPEc3AIuGztEremL542R+mi/aTSbZB74+RGBkMKvITzIekOCEzi2MhGc/ Og5HJubTm0ok3n1pAVhkhgYIbh4TZsSv70a+Nc8Cj9zty3zkYSnX3yjlBYkYWF4d 8jUlGY1nWuVNoyrKzwJ5cYwqzdoiipvtXFJp/81mJ6AfpZd28SVasWPznoq5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEDIUxoVjw+n3aYhbJaOoZQSs73cwHwYDVR0j BBgwFoAUgEN62t31yFIoRUgqAwKvErPLxn0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YmM4M2I1NS1jOGMxLTQ2MWQtYjI4Yi0wZDRhOTk1M2UxZGQvMC84MDQzN0FEQURE RjVDODUyMjg0NTQ4MkEwMzAyQUYxMkIzQ0JDNjdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODA0MzdBREFEREY1Qzg1MjI4NDU0ODJBMDMwMkFGMTJCM0NC QzY3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmJjODNiNTUtYzhjMS00NjFkLWIy OGItMGQ0YTk5NTNlMWRkLzAvODA0MzdBREFEREY1Qzg1MjI4NDU0ODJBMDMwMkFG MTJCM0NCQzY3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHu95gcQp/Zr+Fr64+kTbxVr5uCD2BTTH0Sk BTOJa++WhYZZgBweQv8AEY13T6ANRZe/aNzqtnv8OT1OIdq2OUjheu8JNdYk28EZ rD7Uu9jQy9gMBqAQr+PDpdVv+Pel1tNpQCBuTtIpE71cu5LHPYEXZc1X+K7nsRsf kJdBvR4CV+pp7axpeuTBwJ1v24b9Gjx8pFE3KNayOWUeJv3JhmCHI63o7mepx5dw pjWxaJgVVYAtLNma7CHSxl/Mc9+LsQPcXLJ0YHCl/0Ol6sXgFGPFZHz06Q9ncvD2 rkA+NmlR34wax3zXqZNXjiz3T2en5ANlCWU2s6sTM4DPvxSCvEw= -----END CERTIFICATE-----Generated at Wed May 7 19:58:09 2025 by rpki-client