$ rpki-client -vvf repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft File: 4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft (raw, json) Hash identifier: 9sU3ki+aiQWWOjcRVcp75qLJroIfsJ3E/RvLcCAPA8s= Subject key identifier: 33:28:CA:C5:21:A1:DD:1C:63:D1:D0:E3:4C:BC:AC:57:38:76:52:FE Authority key identifier: 4B:6A:F7:33:5E:C0:7F:E7:46:BC:2A:36:83:02:43:6E:F6:B1:B9:EB Certificate issuer: /CN=4B6AF7335EC07FE746BC2A368302436EF6B1B9EB Certificate serial: 5ACD8E2B2EA17FBEFA1325342BC8EE768A38C17B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft Manifest number: 045D Signing time: Sat 03 May 2025 16:31:24 +0000 Manifest this update: Sat 03 May 2025 16:26:24 +0000 Manifest next update: Tue 06 May 2025 17:42:24 +0000 Files and hashes: 1: 4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.crl (hash: qAtqJbIQHdcfOnk85r4aR03tL2leQR8FjUF5MFZEjA4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.crl rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 May 2025 17:42:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:cd:8e:2b:2e:a1:7f:be:fa:13:25:34:2b:c8:ee:76:8a:38:c1:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B6AF7335EC07FE746BC2A368302436EF6B1B9EB Validity Not Before: May 3 16:26:24 2025 GMT Not After : May 6 17:42:24 2025 GMT Subject: CN=3328CAC521A1DD1C63D1D0E34CBCAC57387652FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d8:70:7e:33:60:ee:f5:c3:3b:94:e8:6c:c5: ed:5b:0a:d4:ee:b0:2f:18:e8:8c:93:5c:e5:1d:c4: c3:7f:f7:92:0d:d6:2f:5a:b7:72:c2:26:80:4d:36: fd:62:3a:8f:cf:a6:c4:35:53:4e:c9:cf:8f:8b:44: 41:ec:ba:c1:d9:fb:e5:f8:f1:f7:6f:a4:e5:2e:50: 51:81:c3:5d:f7:f6:45:f0:aa:05:f4:cd:27:16:2c: af:b1:a7:3a:ce:33:10:f1:9e:c1:85:43:58:df:1c: d4:c6:e4:a3:59:48:62:72:6f:b6:3e:92:8a:c4:fe: c3:7d:c0:a5:60:8c:ff:47:35:3a:ed:38:a3:59:be: e3:39:85:a6:35:cc:d2:e9:65:29:f7:d3:12:53:30: d8:a9:f2:24:6d:41:91:ed:ef:de:da:67:a8:0b:5a: b8:62:cb:79:d2:e3:39:b9:09:dc:bc:e3:3d:cd:5a: e2:ce:eb:24:cc:45:4d:25:65:68:21:4f:91:dc:df: 51:2a:14:01:76:96:a1:a8:ba:79:82:bd:7e:67:b1: c8:8e:c8:7b:df:df:d8:a4:1a:ae:1d:32:f0:d6:da: e6:ac:5a:03:90:bc:81:1b:99:27:f5:6f:07:27:d8: 78:df:e3:f4:66:e1:a2:1d:a2:f1:c0:51:f5:c4:12: e0:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:28:CA:C5:21:A1:DD:1C:63:D1:D0:E3:4C:BC:AC:57:38:76:52:FE X509v3 Authority Key Identifier: keyid:4B:6A:F7:33:5E:C0:7F:E7:46:BC:2A:36:83:02:43:6E:F6:B1:B9:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:03:54:7e:e5:c8:45:c1:ee:8a:13:bd:09:72:1c:e6:92:d7: c2:a8:7d:02:bc:1c:0d:5b:03:0c:dd:60:23:95:24:f2:a2:7d: 8c:7a:83:8e:3f:c6:7c:59:84:f3:c7:28:7e:72:0e:52:19:24: 7b:bc:1c:f1:2f:41:3c:bb:12:0b:a6:f0:91:50:aa:7f:6c:80: 16:a4:83:96:e2:01:7e:be:d6:20:88:6e:64:90:b9:37:97:16: 7f:a7:6f:4b:e9:52:a2:76:0e:9f:3e:41:92:27:ee:a3:79:0f: d0:73:a8:ca:cd:39:eb:ef:a5:48:6e:f3:b9:66:ff:d0:48:ad: 14:51:1b:98:19:90:74:1d:bf:15:47:44:7e:b7:b9:a4:73:a2: 7d:6c:3c:99:bb:b0:e5:58:fc:f8:d4:77:10:8a:5b:dd:32:7b: fd:d7:75:f4:30:f6:15:e3:47:1b:df:cb:39:22:43:a0:e4:1d: 3b:d5:07:22:4f:49:5d:f0:d5:e2:11:fd:af:93:97:2b:06:3c: bc:ec:ca:ef:6e:7d:33:6f:ab:f5:5d:4e:01:83:ab:91:55:ca: 62:4b:0a:4b:f0:c2:17:57:87:09:9f:04:7a:42:8b:31:b8:36: f1:e0:87:de:15:e0:fb:c6:42:46:e2:13:27:c4:fe:0a:b9:71: 31:51:85:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWs2OKy6hf776EyU0K8judoo4wXswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEI2QUY3MzM1RUMwN0ZFNzQ2QkMyQTM2ODMwMjQzNkVG NkIxQjlFQjAeFw0yNTA1MDMxNjI2MjRaFw0yNTA1MDYxNzQyMjRaMDMxMTAvBgNV BAMTKDMzMjhDQUM1MjFBMUREMUM2M0QxRDBFMzRDQkNBQzU3Mzg3NjUyRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS2HB+M2Du9cM7lOhsxe1bCtTu sC8Y6IyTXOUdxMN/95IN1i9at3LCJoBNNv1iOo/PpsQ1U07Jz4+LREHsusHZ++X4 8fdvpOUuUFGBw1339kXwqgX0zScWLK+xpzrOMxDxnsGFQ1jfHNTG5KNZSGJyb7Y+ korE/sN9wKVgjP9HNTrtOKNZvuM5haY1zNLpZSn30xJTMNip8iRtQZHt797aZ6gL Wrhiy3nS4zm5Cdy84z3NWuLO6yTMRU0lZWghT5Hc31EqFAF2lqGounmCvX5nsciO yHvf39ikGq4dMvDW2uasWgOQvIEbmSf1bwcn2Hjf4/Rm4aIdovHAUfXEEuCLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMyjKxSGh3Rxj0dDjTLysVzh2Uv4wHwYDVR0j BBgwFoAUS2r3M17Af+dGvCo2gwJDbvaxueswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDdjZjIwMi1mNWVjLTQxMDEtODA4NS1jZWI4NmVhNjViM2UvMC80QjZBRjczMzVF QzA3RkU3NDZCQzJBMzY4MzAyNDM2RUY2QjFCOUVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEI2QUY3MzM1RUMwN0ZFNzQ2QkMyQTM2ODMwMjQzNkVGNkIx QjlFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA3Y2YyMDItZjVlYy00MTAxLTgw ODUtY2ViODZlYTY1YjNlLzAvNEI2QUY3MzM1RUMwN0ZFNzQ2QkMyQTM2ODMwMjQz NkVGNkIxQjlFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIkDVH7lyEXB7ooTvQlyHOaS18KofQK8HA1b AwzdYCOVJPKifYx6g44/xnxZhPPHKH5yDlIZJHu8HPEvQTy7Egum8JFQqn9sgBak g5biAX6+1iCIbmSQuTeXFn+nb0vpUqJ2Dp8+QZIn7qN5D9BzqMrNOevvpUhu87lm /9BIrRRRG5gZkHQdvxVHRH63uaRzon1sPJm7sOVY/PjUdxCKW90ye/3XdfQw9hXj RxvfyzkiQ6DkHTvVByJPSV3w1eIR/a+TlysGPLzsyu9ufTNvq/VdTgGDq5FVymJL CkvwwhdXhwmfBHpCizG4NvHgh94V4PvGQkbiEyfE/gq5cTFRhUA= -----END CERTIFICATE-----Generated at Tue May 6 12:25:31 2025 by rpki-client