$ rpki-client -vvf repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.mft File: 2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.mft (raw, json) Hash identifier: kyfv6P4hLQpqsxoI6PmpiiwH/B/916YLGUFE2T/pX1k= Subject key identifier: 36:E3:4F:34:41:88:16:53:90:F6:5A:30:88:DA:13:53:67:7A:2A:17 Authority key identifier: 25:66:F4:DF:5C:09:FF:A8:E4:F4:D6:99:99:41:B9:AB:A2:B7:22:8B Certificate issuer: /CN=2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B Certificate serial: 529C7AB4C70BB2DC947C340C1EF6D81A9666C06E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.mft Manifest number: D4 Signing time: Fri 09 May 2025 08:02:01 +0000 Manifest this update: Fri 09 May 2025 07:57:01 +0000 Manifest next update: Mon 12 May 2025 19:07:01 +0000 Files and hashes: 1: 2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.crl (hash: WScFh9u7HXGuJmjyjAKZPZHP7psPJHY1RZqxf1DeIbw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.crl rsync://repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 19:07:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:9c:7a:b4:c7:0b:b2:dc:94:7c:34:0c:1e:f6:d8:1a:96:66:c0:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B Validity Not Before: May 9 07:57:01 2025 GMT Not After : May 12 19:07:01 2025 GMT Subject: CN=36E34F344188165390F65A3088DA1353677A2A17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:45:45:c3:56:b7:85:a5:51:1e:76:c3:86:56: 54:08:9e:97:0f:23:1b:88:56:64:80:fd:32:3a:8f: 00:59:c0:1f:90:2c:ec:85:fa:d0:f7:04:72:57:22: d1:69:34:7f:9c:70:66:67:3c:08:cb:e5:b2:cc:45: ed:24:07:ee:36:8c:6c:77:6b:1e:3f:35:4c:14:e2: d5:c0:3f:a8:80:b5:20:0b:33:bc:31:1a:93:aa:c7: e2:8f:4c:73:44:c0:f9:ff:f6:e6:6d:01:9a:c8:d8: b7:9e:bb:27:79:26:84:9a:02:9c:17:de:72:49:4d: cc:05:23:0f:ff:d6:14:02:69:95:59:51:44:17:2e: 0c:b9:e3:79:fb:79:62:81:ad:64:1c:a5:a8:a5:a6: ff:bb:36:e9:8b:97:68:8f:72:7a:87:33:25:3a:ec: dd:d7:ca:06:f5:6e:87:7f:79:91:2e:64:a2:8e:03: 5a:8a:d8:9d:54:4d:71:5d:16:60:d8:87:3d:62:45: e5:bd:4d:39:89:6b:54:cf:ca:70:45:5c:79:ee:6b: 7d:39:a7:0e:19:d0:bc:2a:06:a3:c4:ae:ad:fd:91: 84:2c:22:5d:31:1b:5a:b4:ad:21:a0:e5:8a:da:af: 3b:8e:52:90:c0:15:12:40:2a:1b:76:4c:09:cc:d8: 12:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:E3:4F:34:41:88:16:53:90:F6:5A:30:88:DA:13:53:67:7A:2A:17 X509v3 Authority Key Identifier: keyid:25:66:F4:DF:5C:09:FF:A8:E4:F4:D6:99:99:41:B9:AB:A2:B7:22:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:21:e4:0d:1c:02:99:c2:cc:c7:32:11:66:1a:a8:60:f9:24: d3:49:a1:25:09:aa:bb:c6:06:b0:02:38:45:fc:f6:d2:aa:5a: 4f:03:48:cb:d0:c0:5e:b4:74:a9:27:8f:8b:3e:cc:11:a2:43: f9:ab:a6:a6:fc:4a:bc:d2:1f:84:41:52:c1:00:f6:79:c9:6a: 86:33:00:d1:48:6a:76:b7:30:75:11:8b:3a:6d:38:b3:33:90: 80:0c:59:fa:68:4e:6e:e7:09:b3:31:bf:39:c9:dc:47:09:d6: ae:d6:8e:20:e8:b9:99:5b:27:51:ab:a8:e4:81:91:b8:c7:ab: ad:c5:05:af:bb:d9:7d:4d:67:1d:33:e1:6b:49:00:54:d9:dc: ce:bb:19:e4:30:d2:33:28:2e:be:0a:b9:9a:3e:a7:dd:00:56: 61:b8:f7:1c:36:21:02:d2:e3:32:44:a5:b1:08:1d:d6:44:8e: 67:4b:96:25:37:53:16:cb:46:5b:93:2c:f3:a9:1d:d0:81:ad: 9f:9b:6e:e4:12:a7:0b:e7:79:89:d9:73:74:d6:1f:23:8a:3f: d7:fd:07:95:33:17:f4:1f:11:c3:1e:aa:36:74:b9:dd:66:01: 70:c7:05:36:a3:f2:37:86:6e:ed:fa:02:13:5b:69:73:9b:38: 06:7d:70:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUpx6tMcLstyUfDQMHvbYGpZmwG4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU2NkY0REY1QzA5RkZBOEU0RjRENjk5OTk0MUI5QUJB MkI3MjI4QjAeFw0yNTA1MDkwNzU3MDFaFw0yNTA1MTIxOTA3MDFaMDMxMTAvBgNV BAMTKDM2RTM0RjM0NDE4ODE2NTM5MEY2NUEzMDg4REExMzUzNjc3QTJBMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpRUXDVreFpVEedsOGVlQInpcP IxuIVmSA/TI6jwBZwB+QLOyF+tD3BHJXItFpNH+ccGZnPAjL5bLMRe0kB+42jGx3 ax4/NUwU4tXAP6iAtSALM7wxGpOqx+KPTHNEwPn/9uZtAZrI2Leeuyd5JoSaApwX 3nJJTcwFIw//1hQCaZVZUUQXLgy543n7eWKBrWQcpailpv+7NumLl2iPcnqHMyU6 7N3Xygb1bod/eZEuZKKOA1qK2J1UTXFdFmDYhz1iReW9TTmJa1TPynBFXHnua305 pw4Z0LwqBqPErq39kYQsIl0xG1q0rSGg5YrarzuOUpDAFRJAKht2TAnM2BKXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNuNPNEGIFlOQ9lowiNoTU2d6KhcwHwYDVR0j BBgwFoAUJWb031wJ/6jk9NaZmUG5q6K3IoswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTE2NDExZi03OGNhLTQ5MTYtODkxOS0zN2MxZDk5ZWZiZDgvMC8yNTY2RjRERjVD MDlGRkE4RTRGNEQ2OTk5OTQxQjlBQkEyQjcyMjhCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjU2NkY0REY1QzA5RkZBOEU0RjRENjk5OTk0MUI5QUJBMkI3 MjI4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkxNjQxMWYtNzhjYS00OTE2LTg5 MTktMzdjMWQ5OWVmYmQ4LzAvMjU2NkY0REY1QzA5RkZBOEU0RjRENjk5OTk0MUI5 QUJBMkI3MjI4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJYh5A0cApnCzMcyEWYaqGD5JNNJoSUJqrvG BrACOEX89tKqWk8DSMvQwF60dKknj4s+zBGiQ/mrpqb8SrzSH4RBUsEA9nnJaoYz ANFIana3MHURizptOLMzkIAMWfpoTm7nCbMxvznJ3EcJ1q7WjiDouZlbJ1GrqOSB kbjHq63FBa+72X1NZx0z4WtJAFTZ3M67GeQw0jMoLr4KuZo+p90AVmG49xw2IQLS 4zJEpbEIHdZEjmdLliU3UxbLRluTLPOpHdCBrZ+bbuQSpwvneYnZc3TWHyOKP9f9 B5UzF/QfEcMeqjZ0ud1mAXDHBTaj8jeGbu36AhNbaXObOAZ9cK0= -----END CERTIFICATE-----Generated at Sat May 10 02:21:29 2025 by rpki-client