$ rpki-client -vvf repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.mft File: 8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.mft (raw, json) Hash identifier: mukl7O0vew5MXC3wvABK2rTkfd4Zs7qTUTrLOyF+l5M= Subject key identifier: A3:AF:83:92:EB:98:A6:B0:1A:0B:1F:5A:F3:91:39:73:A7:FC:3B:E9 Authority key identifier: 86:94:CD:BB:52:F4:AE:A8:9A:F4:6C:A5:BF:A5:A6:39:97:3D:73:02 Certificate issuer: /CN=8694CDBB52F4AEA89AF46CA5BFA5A639973D7302 Certificate serial: 0AB3BA0D7665F8CF2638B67F58BFCA9BDE62D9F1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.mft Manifest number: 15 Signing time: Sat 10 May 2025 06:11:37 +0000 Manifest this update: Sat 10 May 2025 06:06:37 +0000 Manifest next update: Tue 13 May 2025 09:31:37 +0000 Files and hashes: 1: 8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.crl (hash: rrwU9tPCbccvDQwT9SKdUs+557ydqvPusfrRqFf+rXY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.crl rsync://repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 08:52:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:b3:ba:0d:76:65:f8:cf:26:38:b6:7f:58:bf:ca:9b:de:62:d9:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8694CDBB52F4AEA89AF46CA5BFA5A639973D7302 Validity Not Before: May 10 06:06:37 2025 GMT Not After : May 13 09:31:37 2025 GMT Subject: CN=A3AF8392EB98A6B01A0B1F5AF3913973A7FC3BE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:77:69:ab:31:ba:71:2c:33:f4:01:bc:7b:44: 30:75:c5:bd:c1:a7:bf:c1:6f:3f:40:a9:34:2b:81: a7:97:a1:e2:ad:28:84:06:1f:30:c2:c4:ba:72:8e: b1:11:5d:89:36:0c:e4:fd:3f:b5:32:99:71:95:8d: ab:a2:61:d8:07:08:bb:82:4c:d1:cc:1d:7e:bd:77: d3:0c:ab:81:6e:ea:9c:a8:68:d9:87:51:24:fb:3a: b0:19:3c:cc:9a:45:bb:28:24:fa:81:a7:6d:cb:f8: c1:e0:44:cc:16:37:1d:42:b5:c2:10:d4:02:a9:d8: 9c:f2:ee:3f:d8:84:cf:52:65:ee:dd:f5:57:31:70: 75:b2:01:ec:fb:2a:5f:b5:84:4c:29:85:a8:b1:47: 66:e3:9a:3e:ec:8a:1e:2b:cd:ea:69:14:bb:d6:21: 2e:83:09:ef:0e:8f:78:c9:d0:fb:f2:4f:1c:f6:5a: 09:53:b1:7f:7e:cc:b2:ec:01:a7:ec:35:ec:b6:9e: c7:18:88:ae:84:54:47:ca:ff:93:51:7e:64:44:74: 5d:77:5d:1d:ba:a4:29:7f:12:5f:df:13:76:76:e6: 37:59:41:cf:ea:c7:41:4e:7f:d8:c0:ac:e5:cd:4a: 31:c6:76:7c:7b:cb:98:32:9e:9a:3a:60:e6:e0:78: d8:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:AF:83:92:EB:98:A6:B0:1A:0B:1F:5A:F3:91:39:73:A7:FC:3B:E9 X509v3 Authority Key Identifier: keyid:86:94:CD:BB:52:F4:AE:A8:9A:F4:6C:A5:BF:A5:A6:39:97:3D:73:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:46:44:fd:60:a8:16:5f:28:be:bd:3a:bc:36:3b:f5:dd:46: 8f:3d:57:9e:13:53:78:2d:22:04:7b:94:78:e4:1f:07:70:5b: 1a:0d:c5:77:a0:03:26:fc:99:d0:c0:33:76:92:59:36:32:35: 20:a6:c1:1b:f7:5e:91:08:f3:8b:56:b1:e7:d8:27:8a:f4:7a: 2f:98:ad:cb:a4:56:84:1d:63:e2:89:b3:be:e7:13:ee:f9:66: 81:fa:b4:b8:22:e8:c0:ba:94:e0:0f:f7:8a:56:fd:b8:31:a6: f7:71:d1:1f:bc:5f:92:ec:ed:30:08:16:9c:5b:04:a0:09:78: 36:cb:85:2d:f3:20:9d:7d:31:2d:b4:fb:8c:fd:ae:a7:0f:c6: 78:14:fc:b8:c9:6d:a8:c2:af:e2:41:c3:07:7a:e6:64:29:99: e8:59:d4:0b:aa:a8:95:ff:16:07:85:8c:56:2a:ae:26:94:f0: 7f:d1:b5:21:3b:21:d1:68:13:b0:1f:1b:9b:58:05:e1:c3:d6: bd:23:e5:a9:b7:ad:78:55:69:f9:d6:98:1d:6e:90:36:c8:4b: 45:a2:1f:fd:fe:d3:60:f5:3b:82:12:0c:ac:0c:6f:ae:2b:6b: 45:e1:c8:b0:4c:f5:1e:d2:7f:e6:e3:21:b8:48:82:fd:d0:26: 70:fe:e7:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCrO6DXZl+M8mOLZ/WL/Km95i2fEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY5NENEQkI1MkY0QUVBODlBRjQ2Q0E1QkZBNUE2Mzk5 NzNENzMwMjAeFw0yNTA1MTAwNjA2MzdaFw0yNTA1MTMwOTMxMzdaMDMxMTAvBgNV BAMTKEEzQUY4MzkyRUI5OEE2QjAxQTBCMUY1QUYzOTEzOTczQTdGQzNCRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCad2mrMbpxLDP0Abx7RDB1xb3B p7/Bbz9AqTQrgaeXoeKtKIQGHzDCxLpyjrERXYk2DOT9P7UymXGVjauiYdgHCLuC TNHMHX69d9MMq4Fu6pyoaNmHUST7OrAZPMyaRbsoJPqBp23L+MHgRMwWNx1CtcIQ 1AKp2Jzy7j/YhM9SZe7d9VcxcHWyAez7Kl+1hEwphaixR2bjmj7sih4rzeppFLvW IS6DCe8Oj3jJ0PvyTxz2WglTsX9+zLLsAafsNey2nscYiK6EVEfK/5NRfmREdF13 XR26pCl/El/fE3Z25jdZQc/qx0FOf9jArOXNSjHGdnx7y5gynpo6YObgeNjxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo6+DkuuYprAaCx9a85E5c6f8O+kwHwYDVR0j BBgwFoAUhpTNu1L0rqia9Gylv6WmOZc9cwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Y2YwMGY4YS01Y2JkLTQ2MGYtYmZjNi1iZDg5NDJiNjUzN2MvMC84Njk0Q0RCQjUy RjRBRUE4OUFGNDZDQTVCRkE1QTYzOTk3M0Q3MzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODY5NENEQkI1MkY0QUVBODlBRjQ2Q0E1QkZBNUE2Mzk5NzNE NzMwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGNmMDBmOGEtNWNiZC00NjBmLWJm YzYtYmQ4OTQyYjY1MzdjLzAvODY5NENEQkI1MkY0QUVBODlBRjQ2Q0E1QkZBNUE2 Mzk5NzNENzMwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJtGRP1gqBZfKL69Orw2O/XdRo89V54TU3gt IgR7lHjkHwdwWxoNxXegAyb8mdDAM3aSWTYyNSCmwRv3XpEI84tWsefYJ4r0ei+Y rcukVoQdY+KJs77nE+75ZoH6tLgi6MC6lOAP94pW/bgxpvdx0R+8X5Ls7TAIFpxb BKAJeDbLhS3zIJ19MS20+4z9rqcPxngU/LjJbajCr+JBwwd65mQpmehZ1AuqqJX/ FgeFjFYqriaU8H/RtSE7IdFoE7AfG5tYBeHD1r0j5am3rXhVafnWmB1ukDbIS0Wi H/3+02D1O4ISDKwMb64ra0XhyLBM9R7Sf+bjIbhIgv3QJnD+5+8= -----END CERTIFICATE-----Generated at Sat May 10 16:08:37 2025 by rpki-client