$ rpki-client -vvf repo-rpki.idnic.net/repo/e7b1f14f-4d90-46c5-9fbc-9c9aa6b9dfa5/0/164D60A5876A6B9B50D1CB09453536273A893898.mft File: 164D60A5876A6B9B50D1CB09453536273A893898.mft (raw, json) Hash identifier: 15CduiS3JQYbaP9fgdmZq5bazKdLX1wTYcsBELYv2dM= Subject key identifier: 6F:41:7D:8E:50:C9:0C:C1:50:CC:A0:B9:8D:7C:19:19:6C:1E:B5:04 Authority key identifier: 16:4D:60:A5:87:6A:6B:9B:50:D1:CB:09:45:35:36:27:3A:89:38:98 Certificate issuer: /CN=164D60A5876A6B9B50D1CB09453536273A893898 Certificate serial: 18150ACB7F24A0D581C718BC735496ECA0C4F8A3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/164D60A5876A6B9B50D1CB09453536273A893898.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e7b1f14f-4d90-46c5-9fbc-9c9aa6b9dfa5/0/164D60A5876A6B9B50D1CB09453536273A893898.mft Manifest number: 84 Signing time: Sun 04 May 2025 12:11:52 +0000 Manifest this update: Sun 04 May 2025 12:06:52 +0000 Manifest next update: Wed 07 May 2025 14:20:52 +0000 Files and hashes: 1: 164D60A5876A6B9B50D1CB09453536273A893898.crl (hash: 76A9b+zqvAhJW/53/VhHsCps452H61E4/jXScdXpklA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e7b1f14f-4d90-46c5-9fbc-9c9aa6b9dfa5/0/164D60A5876A6B9B50D1CB09453536273A893898.crl rsync://repo-rpki.idnic.net/repo/e7b1f14f-4d90-46c5-9fbc-9c9aa6b9dfa5/0/164D60A5876A6B9B50D1CB09453536273A893898.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/164D60A5876A6B9B50D1CB09453536273A893898.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 14:20:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:15:0a:cb:7f:24:a0:d5:81:c7:18:bc:73:54:96:ec:a0:c4:f8:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=164D60A5876A6B9B50D1CB09453536273A893898 Validity Not Before: May 4 12:06:52 2025 GMT Not After : May 7 14:20:52 2025 GMT Subject: CN=6F417D8E50C90CC150CCA0B98D7C19196C1EB504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4b:bc:a9:a2:20:db:48:4d:19:e1:3e:b4:4b: 31:a1:65:45:12:e8:81:b3:b9:eb:09:a7:a9:78:e6: 1a:30:80:c1:b7:cc:d9:11:47:bc:6d:ab:72:d1:f2: 41:4f:dd:7e:6e:dd:75:4b:8b:fa:29:cf:fc:50:0c: 61:4a:eb:b9:d8:c8:25:b1:cc:21:d1:4b:58:d1:2e: 57:80:0f:b3:74:4a:c9:b3:32:06:d4:23:a5:6f:58: 1c:d0:7d:87:15:a8:22:56:de:92:d7:03:6d:09:52: a4:bb:f4:d2:51:30:28:fa:d0:cb:b3:6f:7b:97:ef: e9:b4:50:b4:5b:82:2e:80:8e:87:d9:73:e2:62:ac: 79:88:6e:22:84:4d:93:44:a7:a2:33:c0:46:93:38: c5:af:af:a0:0b:87:e2:c6:c8:65:ea:05:e3:48:3d: e8:d6:19:22:94:95:f7:72:ea:7b:fb:45:38:f4:00: cd:21:cf:77:bb:66:8d:c6:af:4c:d1:23:23:19:3f: 84:64:63:c2:53:a4:57:3c:7f:7a:81:83:05:4b:6a: 94:be:dc:50:b9:91:1e:91:6e:24:28:e8:c1:fb:0a: 22:64:b7:da:81:e3:42:2c:9e:4e:70:98:24:76:37: a6:ee:b9:6c:32:6e:55:5d:3e:df:0c:ff:8e:cf:49: 2b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:41:7D:8E:50:C9:0C:C1:50:CC:A0:B9:8D:7C:19:19:6C:1E:B5:04 X509v3 Authority Key Identifier: keyid:16:4D:60:A5:87:6A:6B:9B:50:D1:CB:09:45:35:36:27:3A:89:38:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e7b1f14f-4d90-46c5-9fbc-9c9aa6b9dfa5/0/164D60A5876A6B9B50D1CB09453536273A893898.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/164D60A5876A6B9B50D1CB09453536273A893898.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e7b1f14f-4d90-46c5-9fbc-9c9aa6b9dfa5/0/164D60A5876A6B9B50D1CB09453536273A893898.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:1e:51:76:3a:62:a5:99:d6:ad:3e:dc:ae:54:78:f2:36:26: 83:6a:90:83:d9:83:72:47:79:e8:76:dd:fc:3e:36:76:e8:a9: cd:95:5b:6a:bb:e5:37:cf:d9:ff:ac:d4:d2:e9:49:6c:3f:f1: 3a:31:61:d1:2b:64:a2:94:a1:50:13:a9:61:cf:63:69:bc:87: cd:03:ec:0d:c1:83:ab:c7:c4:dd:3b:bf:3f:a4:94:3b:4e:ea: 88:fd:6e:b0:85:28:99:25:f0:29:d3:ef:ba:67:d6:cc:ad:74: 13:36:36:e9:ef:d6:2a:c3:68:cc:b0:de:d2:2d:6a:00:48:e3: de:48:6d:04:36:b3:83:88:79:02:39:35:11:f1:40:ce:e3:9b: af:7b:24:de:22:28:bf:75:40:b2:3e:25:3f:d1:43:4c:65:be: cc:df:5d:5e:06:be:db:21:64:72:38:74:2b:64:11:59:b8:74: 9f:a6:45:28:8d:11:24:a9:22:0e:99:61:2f:e7:ea:21:2a:69: 5f:ba:4f:79:b8:0c:4b:c2:2b:c5:ac:f8:b9:84:eb:b2:84:28: c0:f4:31:a1:ba:ed:2c:2a:0f:79:1e:30:d2:a3:0b:5f:5f:3e: c7:1b:10:2b:85:e4:e0:fe:87:8d:3d:29:ea:1e:56:3e:b3:d1: 53:b4:aa:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGBUKy38koNWBxxi8c1SW7KDE+KMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY0RDYwQTU4NzZBNkI5QjUwRDFDQjA5NDUzNTM2Mjcz QTg5Mzg5ODAeFw0yNTA1MDQxMjA2NTJaFw0yNTA1MDcxNDIwNTJaMDMxMTAvBgNV BAMTKDZGNDE3RDhFNTBDOTBDQzE1MENDQTBCOThEN0MxOTE5NkMxRUI1MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDES7ypoiDbSE0Z4T60SzGhZUUS 6IGzuesJp6l45howgMG3zNkRR7xtq3LR8kFP3X5u3XVLi/opz/xQDGFK67nYyCWx zCHRS1jRLleAD7N0SsmzMgbUI6VvWBzQfYcVqCJW3pLXA20JUqS79NJRMCj60Muz b3uX7+m0ULRbgi6AjofZc+JirHmIbiKETZNEp6IzwEaTOMWvr6ALh+LGyGXqBeNI PejWGSKUlfdy6nv7RTj0AM0hz3e7Zo3Gr0zRIyMZP4RkY8JTpFc8f3qBgwVLapS+ 3FC5kR6RbiQo6MH7CiJkt9qB40Isnk5wmCR2N6buuWwyblVdPt8M/47PSSvPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb0F9jlDJDMFQzKC5jXwZGWwetQQwHwYDVR0j BBgwFoAUFk1gpYdqa5tQ0csJRTU2JzqJOJgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l N2IxZjE0Zi00ZDkwLTQ2YzUtOWZiYy05YzlhYTZiOWRmYTUvMC8xNjRENjBBNTg3 NkE2QjlCNTBEMUNCMDk0NTM1MzYyNzNBODkzODk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY0RDYwQTU4NzZBNkI5QjUwRDFDQjA5NDUzNTM2MjczQTg5 Mzg5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTdiMWYxNGYtNGQ5MC00NmM1LTlm YmMtOWM5YWE2YjlkZmE1LzAvMTY0RDYwQTU4NzZBNkI5QjUwRDFDQjA5NDUzNTM2 MjczQTg5Mzg5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADAeUXY6YqWZ1q0+3K5UePI2JoNqkIPZg3JH eeh23fw+Nnboqc2VW2q75TfP2f+s1NLpSWw/8ToxYdErZKKUoVATqWHPY2m8h80D 7A3Bg6vHxN07vz+klDtO6oj9brCFKJkl8CnT77pn1sytdBM2Nunv1irDaMyw3tIt agBI495IbQQ2s4OIeQI5NRHxQM7jm697JN4iKL91QLI+JT/RQ0xlvszfXV4Gvtsh ZHI4dCtkEVm4dJ+mRSiNESSpIg6ZYS/n6iEqaV+6T3m4DEvCK8Ws+LmE67KEKMD0 MaG67SwqD3keMNKjC19fPscbECuF5OD+h409KeoeVj6z0VO0qp4= -----END CERTIFICATE-----Generated at Wed May 7 11:06:13 2025 by rpki-client