$ rpki-client -vvf repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft File: 0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft (raw, json) Hash identifier: U+xdiP1mwqIpHReOLwOioiXw5FGOJSOFDgwu7nWlkUE= Subject key identifier: 20:FC:E7:64:F2:AE:F2:77:98:62:A9:EF:9B:A0:F6:DB:60:18:91:F7 Authority key identifier: 0F:BA:D9:2F:48:DF:15:47:7E:4D:D9:3C:DC:7A:52:77:FE:93:A8:EB Certificate issuer: /CN=0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB Certificate serial: 2558E5C803E10906EED8E3300EE66ACA1E6973FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft Manifest number: 5C Signing time: Sun 04 May 2025 02:31:01 +0000 Manifest this update: Sun 04 May 2025 02:26:01 +0000 Manifest next update: Wed 07 May 2025 05:36:01 +0000 Files and hashes: 1: 0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.crl (hash: HTtYAGMSczLCPSoVcr7AiOtP0qb0UQ/Wewf5k7NJwQA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.crl rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 05:36:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:58:e5:c8:03:e1:09:06:ee:d8:e3:30:0e:e6:6a:ca:1e:69:73:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB Validity Not Before: May 4 02:26:01 2025 GMT Not After : May 7 05:36:01 2025 GMT Subject: CN=20FCE764F2AEF2779862A9EF9BA0F6DB601891F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:94:27:91:12:0d:f3:c8:a6:71:c2:5e:8d:4f: 5c:87:fc:e8:c1:6c:50:94:bf:db:65:03:68:e2:14: 4f:c1:1f:33:cc:90:18:7f:ea:f7:0d:07:0b:ab:79: aa:20:a4:06:10:6f:3b:b8:96:53:5e:a5:34:4d:95: d1:7c:72:03:fb:41:e7:56:4f:43:b7:33:ae:c1:04: 5b:fc:46:68:15:c0:cb:14:37:c0:1c:a3:7e:a1:4f: d2:24:c9:43:61:60:19:6d:1a:6c:3c:12:39:68:0e: cc:94:f3:f7:96:c3:cc:6a:9f:5b:b3:3b:95:7f:5a: bf:e4:c7:bb:34:ed:ee:3c:a1:63:ff:33:b4:59:68: c6:5d:de:ad:a1:7e:bf:a8:d5:0a:a9:12:36:21:72: d7:ff:df:32:b7:2c:09:e2:7c:8c:3e:ce:76:5c:33: f0:8a:58:89:ce:28:55:4c:08:f5:3f:c7:80:e7:08: d9:ca:c5:20:f7:4f:01:94:e3:bf:1d:19:fe:68:ad: 89:ec:bd:95:f9:c6:20:b0:af:f5:d1:cb:90:be:e9: 5d:4f:e7:f8:3c:7f:0f:0b:8e:19:f5:ac:69:3f:37: c7:d4:d2:18:5e:7b:0a:17:19:22:9c:9b:18:12:d8: 51:b0:76:cd:aa:9e:75:54:c8:97:05:70:2b:14:4b: 92:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:FC:E7:64:F2:AE:F2:77:98:62:A9:EF:9B:A0:F6:DB:60:18:91:F7 X509v3 Authority Key Identifier: keyid:0F:BA:D9:2F:48:DF:15:47:7E:4D:D9:3C:DC:7A:52:77:FE:93:A8:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:0f:dc:fa:a7:a3:4a:f1:fa:27:96:38:4b:54:66:fe:ff:15: c0:12:4a:67:b9:d2:76:ba:dc:10:0e:10:6c:3b:87:05:cf:b2: 0d:8e:09:90:17:48:8a:1f:d5:a6:a9:b4:f5:e5:46:ce:0b:ac: d6:80:13:e6:52:9a:ae:a1:61:d6:15:ef:52:06:a5:e9:6b:03: a6:fd:3a:71:a5:c9:34:d4:6d:0d:34:7c:0a:dd:6f:1f:18:0f: be:be:f4:66:4b:ea:18:ea:0f:b0:0d:1a:3f:ce:1d:67:20:d3: c9:39:60:67:ff:1d:09:4c:b0:12:f3:95:3b:b5:da:dc:38:bb: f4:8f:f5:9d:b5:2a:e6:21:8d:11:67:28:ba:2b:97:39:d8:eb: c7:f9:91:40:03:6a:86:86:8c:54:f4:a1:b4:91:ee:28:93:84: ff:91:d4:c8:9f:ca:9a:61:ff:fb:b9:fa:62:ee:39:99:22:ce: de:53:8e:57:da:8d:ef:d5:07:9b:f9:80:89:a0:18:74:2a:5b: f2:59:c0:25:2a:0d:9c:0d:15:4e:c0:90:13:3f:7a:fa:d3:6f: 0d:17:c1:b9:d6:3f:68:82:06:73:30:19:c1:62:99:c9:10:7c: 7d:0c:39:5c:ec:ef:84:cd:cb:13:55:83:4c:69:da:d1:0f:4b: 08:52:53:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJVjlyAPhCQbu2OMwDuZqyh5pc/owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZCQUQ5MkY0OERGMTU0NzdFNEREOTNDREM3QTUyNzdG RTkzQThFQjAeFw0yNTA1MDQwMjI2MDFaFw0yNTA1MDcwNTM2MDFaMDMxMTAvBgNV BAMTKDIwRkNFNzY0RjJBRUYyNzc5ODYyQTlFRjlCQTBGNkRCNjAxODkxRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnlCeREg3zyKZxwl6NT1yH/OjB bFCUv9tlA2jiFE/BHzPMkBh/6vcNBwureaogpAYQbzu4llNepTRNldF8cgP7QedW T0O3M67BBFv8RmgVwMsUN8Aco36hT9IkyUNhYBltGmw8EjloDsyU8/eWw8xqn1uz O5V/Wr/kx7s07e48oWP/M7RZaMZd3q2hfr+o1QqpEjYhctf/3zK3LAnifIw+znZc M/CKWInOKFVMCPU/x4DnCNnKxSD3TwGU478dGf5orYnsvZX5xiCwr/XRy5C+6V1P 5/g8fw8Ljhn1rGk/N8fU0hheewoXGSKcmxgS2FGwds2qnnVUyJcFcCsUS5KRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIPznZPKu8neYYqnvm6D222AYkfcwHwYDVR0j BBgwFoAUD7rZL0jfFUd+Tdk83HpSd/6TqOswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODFhZjAyMS0xYzAxLTRhMmUtYjVkMy1jMWJiYjE2NTBjNDMvMC8wRkJBRDkyRjQ4 REYxNTQ3N0U0REQ5M0NEQzdBNTI3N0ZFOTNBOEVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZCQUQ5MkY0OERGMTU0NzdFNEREOTNDREM3QTUyNzdGRTkz QThFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzgxYWYwMjEtMWMwMS00YTJlLWI1 ZDMtYzFiYmIxNjUwYzQzLzAvMEZCQUQ5MkY0OERGMTU0NzdFNEREOTNDREM3QTUy NzdGRTkzQThFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAkP3Pqno0rx+ieWOEtUZv7/FcASSme50na6 3BAOEGw7hwXPsg2OCZAXSIof1aaptPXlRs4LrNaAE+ZSmq6hYdYV71IGpelrA6b9 OnGlyTTUbQ00fArdbx8YD76+9GZL6hjqD7ANGj/OHWcg08k5YGf/HQlMsBLzlTu1 2tw4u/SP9Z21KuYhjRFnKLorlznY68f5kUADaoaGjFT0obSR7iiThP+R1Mifypph //u5+mLuOZkizt5Tjlfaje/VB5v5gImgGHQqW/JZwCUqDZwNFU7AkBM/evrTbw0X wbnWP2iCBnMwGcFimckQfH0MOVzs74TNyxNVg0xp2tEPSwhSU8s= -----END CERTIFICATE-----Generated at Tue May 6 09:07:38 2025 by rpki-client