$ rpki-client -vvf repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft File: 96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft (raw, json) Hash identifier: qdcLPPhe9NnqUdTwytN/wSSApVeKk9CtNsTL3RNWVMo= Subject key identifier: E1:04:53:77:34:A8:97:CE:B8:83:80:B0:C1:61:A5:D6:A3:54:F0:CE Authority key identifier: 96:FB:31:74:E7:1D:4C:E9:BB:1C:57:29:5C:2F:55:E7:46:41:F8:EE Certificate issuer: /CN=96FB3174E71D4CE9BB1C57295C2F55E74641F8EE Certificate serial: 2D0414DBB576CC6FBB0049463BD2FA5440BA7E88 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft Manifest number: 3F Signing time: Thu 08 May 2025 02:32:11 +0000 Manifest this update: Thu 08 May 2025 02:27:11 +0000 Manifest next update: Sun 11 May 2025 03:52:11 +0000 Files and hashes: 1: 96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.crl (hash: C5JMbCC+WV6wH4xwIqstrlwARD7/i48B5RYtOga6A64=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.crl rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 03:52:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:04:14:db:b5:76:cc:6f:bb:00:49:46:3b:d2:fa:54:40:ba:7e:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96FB3174E71D4CE9BB1C57295C2F55E74641F8EE Validity Not Before: May 8 02:27:11 2025 GMT Not After : May 11 03:52:11 2025 GMT Subject: CN=E104537734A897CEB88380B0C161A5D6A354F0CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b7:44:ab:e2:ac:f1:0e:93:c3:57:ec:12:d3: cd:8b:8d:e5:8c:ab:a8:23:ac:d1:41:7d:c4:44:74: 15:0e:4c:95:34:7f:b8:02:40:56:9b:b9:58:db:89: d2:d0:00:9a:c8:5e:27:95:97:b0:97:86:f4:f9:9c: 32:64:90:c6:20:a9:7d:d2:53:97:37:18:8a:74:f4: c6:f6:d4:20:83:1f:5a:fc:15:af:e2:99:e3:3c:f7: 5e:96:53:f4:09:6f:ed:62:4d:d7:b7:8b:33:67:4e: 57:4c:fa:1f:c7:59:3e:dc:78:03:a9:63:a8:3a:dc: f9:5d:3d:55:49:be:b7:47:b5:f9:17:c7:78:27:85: dc:bb:fe:47:4a:15:e1:e3:05:bf:dd:81:06:c6:0d: 14:f4:fe:44:66:cc:4a:fa:09:20:60:b4:1b:66:63: b9:1c:cf:ca:9a:d3:18:cd:94:f8:9b:56:01:df:3e: 53:ba:bb:46:43:00:f6:f3:c6:80:c1:a3:15:2c:3a: aa:d1:2b:27:a8:c8:7a:64:b4:ac:f0:57:a8:00:4c: be:93:02:dc:9f:fc:a3:e8:7c:80:c9:d7:1b:dc:c5: 1d:b3:65:1e:e4:4e:58:80:8c:8e:34:9e:66:c2:f3: ca:fa:ea:e3:25:73:ec:f1:77:bb:c4:a0:5b:dc:12: fa:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:04:53:77:34:A8:97:CE:B8:83:80:B0:C1:61:A5:D6:A3:54:F0:CE X509v3 Authority Key Identifier: keyid:96:FB:31:74:E7:1D:4C:E9:BB:1C:57:29:5C:2F:55:E7:46:41:F8:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:a0:9e:e4:b4:ca:aa:c5:cc:60:8a:81:55:e3:fc:f3:15:e9: 14:d2:6a:89:29:24:94:af:34:a3:ab:91:ab:2c:2b:2e:35:ee: a5:45:7f:dc:44:ad:83:8c:fd:13:d0:80:ba:6b:cb:23:f7:41: 05:4f:0c:d7:69:da:ac:a7:f6:2d:55:72:c0:ec:26:41:66:a8: c3:85:35:f0:b9:4d:10:8e:17:c1:88:7e:10:64:28:6d:19:ac: 65:27:ba:dc:0e:c7:08:86:ee:73:e0:c6:38:14:bf:00:b2:27: c2:66:44:42:47:66:1f:0e:6f:4b:01:92:fd:00:00:bb:7f:1d: 1d:1c:7a:3e:7b:7a:e5:bc:48:a1:f1:48:93:1b:5d:7b:1d:9e: 4c:7b:23:e0:24:ba:c8:fb:40:c6:4f:ba:4b:be:c4:0e:a4:45: 2a:92:fb:17:03:77:c7:52:82:04:89:06:f5:3a:ba:4c:fc:fe: 44:a5:ea:d0:4f:1c:17:6f:18:1b:a3:f4:79:9b:c4:80:1b:86: ff:5c:df:47:65:f1:63:e7:1b:27:d1:b6:17:f9:ab:07:2a:2e: 03:d3:66:0f:d9:4b:31:97:18:b5:12:d7:60:cb:77:7d:43:4b: e0:0c:2b:26:f1:d0:68:55:1a:c8:a8:ea:f7:32:35:bc:b1:5f: 78:bf:7d:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULQQU27V2zG+7AElGO9L6VEC6fogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZGQjMxNzRFNzFENENFOUJCMUM1NzI5NUMyRjU1RTc0 NjQxRjhFRTAeFw0yNTA1MDgwMjI3MTFaFw0yNTA1MTEwMzUyMTFaMDMxMTAvBgNV BAMTKEUxMDQ1Mzc3MzRBODk3Q0VCODgzODBCMEMxNjFBNUQ2QTM1NEYwQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWt0Sr4qzxDpPDV+wS082LjeWM q6gjrNFBfcREdBUOTJU0f7gCQFabuVjbidLQAJrIXieVl7CXhvT5nDJkkMYgqX3S U5c3GIp09Mb21CCDH1r8Fa/imeM8916WU/QJb+1iTde3izNnTldM+h/HWT7ceAOp Y6g63PldPVVJvrdHtfkXx3gnhdy7/kdKFeHjBb/dgQbGDRT0/kRmzEr6CSBgtBtm Y7kcz8qa0xjNlPibVgHfPlO6u0ZDAPbzxoDBoxUsOqrRKyeoyHpktKzwV6gATL6T Atyf/KPofIDJ1xvcxR2zZR7kTliAjI40nmbC88r66uMlc+zxd7vEoFvcEvrvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4QRTdzSol864g4CwwWGl1qNU8M4wHwYDVR0j BBgwFoAUlvsxdOcdTOm7HFcpXC9V50ZB+O4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzhmOWI2Yi0wMjdhLTRiZTYtYWIwMi0yOGQ1NTFjMzk4MTkvMC85NkZCMzE3NEU3 MUQ0Q0U5QkIxQzU3Mjk1QzJGNTVFNzQ2NDFGOEVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTZGQjMxNzRFNzFENENFOUJCMUM1NzI5NUMyRjU1RTc0NjQx RjhFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTM4ZjliNmItMDI3YS00YmU2LWFi MDItMjhkNTUxYzM5ODE5LzAvOTZGQjMxNzRFNzFENENFOUJCMUM1NzI5NUMyRjU1 RTc0NjQxRjhFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKmgnuS0yqrFzGCKgVXj/PMV6RTSaokpJJSv NKOrkassKy417qVFf9xErYOM/RPQgLpryyP3QQVPDNdp2qyn9i1VcsDsJkFmqMOF NfC5TRCOF8GIfhBkKG0ZrGUnutwOxwiG7nPgxjgUvwCyJ8JmREJHZh8Ob0sBkv0A ALt/HR0cej57euW8SKHxSJMbXXsdnkx7I+Akusj7QMZPuku+xA6kRSqS+xcDd8dS ggSJBvU6ukz8/kSl6tBPHBdvGBuj9HmbxIAbhv9c30dl8WPnGyfRthf5qwcqLgPT Zg/ZSzGXGLUS12DLd31DS+AMKybx0GhVGsio6vcyNbyxX3i/fRo= -----END CERTIFICATE-----Generated at Fri May 9 08:44:35 2025 by rpki-client