$ rpki-client -vvf repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.mft File: C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.mft (raw, json) Hash identifier: M33LMQK/vYoiETDkKk7N3QmJp79I1VXvi8toi4CTnQU= Subject key identifier: F9:74:1B:EC:90:22:57:F6:04:37:C9:8A:3C:0D:48:CB:EB:51:BB:4D Authority key identifier: C9:27:69:FD:5D:97:A4:67:70:E3:A1:0F:9D:57:AE:93:1F:9A:9F:C2 Certificate issuer: /CN=C92769FD5D97A46770E3A10F9D57AE931F9A9FC2 Certificate serial: 69CE0F6AB15A6E6D52B98DF03CB20AF070CA1A8A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.mft Manifest number: 0123 Signing time: Fri 09 May 2025 22:52:16 +0000 Manifest this update: Fri 09 May 2025 22:47:16 +0000 Manifest next update: Tue 13 May 2025 03:49:16 +0000 Files and hashes: 1: C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.crl (hash: a4lmxJx4zaZ0sZ/AaXgw/6tNotbgwDWQWUObGpVcs+w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.crl rsync://repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 03:08:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:ce:0f:6a:b1:5a:6e:6d:52:b9:8d:f0:3c:b2:0a:f0:70:ca:1a:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C92769FD5D97A46770E3A10F9D57AE931F9A9FC2 Validity Not Before: May 9 22:47:16 2025 GMT Not After : May 13 03:49:16 2025 GMT Subject: CN=F9741BEC902257F60437C98A3C0D48CBEB51BB4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4e:c5:d2:2a:43:e7:1f:b8:c9:2e:81:c4:13: f4:97:38:5b:d6:e7:f0:95:b5:1f:f1:b2:a7:fe:72: 2e:4b:db:1a:44:e3:2d:95:dc:83:e3:59:d7:7c:d4: e9:52:c5:5c:65:ff:ed:9c:2f:1e:14:ba:5c:4b:52: 6f:d1:8c:3b:8a:9d:70:9d:f2:d2:a3:47:91:91:84: 15:a4:9d:5e:59:a9:bb:47:96:04:4f:d5:4b:f7:ae: 56:44:3c:7a:bf:65:42:80:0b:b2:20:b9:19:bb:bb: 34:ef:94:c7:19:ce:58:b5:7d:03:3d:0f:d2:de:af: 0b:d4:67:0b:7b:aa:1a:4a:a6:a2:48:84:04:52:96: 4e:92:48:94:7f:6c:41:45:fc:c2:fd:af:a5:de:81: 6b:ff:54:53:0a:8e:6f:48:58:4a:3b:26:4b:d9:06: 3d:66:d4:ed:0b:77:a1:e6:08:26:87:a7:1f:48:81: 23:57:46:19:c4:6c:6d:3a:3a:b3:2b:ba:6e:00:c1: 5a:62:ee:41:9e:8a:82:17:ee:0d:32:1f:24:ab:08: a2:ee:39:62:b9:54:44:a1:df:f7:97:c9:b8:66:5d: dc:6d:b5:23:49:bd:04:68:f6:d4:31:6e:c4:64:0f: 0b:c9:24:3a:de:4f:28:0e:fd:60:50:1f:bb:9a:cf: 92:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:74:1B:EC:90:22:57:F6:04:37:C9:8A:3C:0D:48:CB:EB:51:BB:4D X509v3 Authority Key Identifier: keyid:C9:27:69:FD:5D:97:A4:67:70:E3:A1:0F:9D:57:AE:93:1F:9A:9F:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:26:c1:ce:f3:47:94:4d:93:8e:4b:d7:a5:87:72:cd:84:ee: f2:98:30:30:90:31:7d:7d:c0:78:50:b5:e3:4d:b5:b8:32:d0: 51:4a:a8:e6:8e:98:48:84:aa:c5:5b:4f:95:e9:64:d4:0c:ae: 48:05:e0:72:f0:c1:99:f3:40:68:62:11:27:36:7c:02:95:f7: 86:86:9e:01:6b:c0:1b:67:3f:77:37:01:c0:16:a6:c2:5b:7a: 83:0d:98:94:dd:02:12:cc:4e:07:f8:de:85:b5:f7:b3:95:49: ad:25:9c:10:1d:14:da:80:45:eb:b7:14:45:53:4c:f6:5f:62: 79:45:94:a3:9f:20:c7:58:6d:e4:d4:d5:1d:25:29:55:7d:b7: dd:e5:3a:a3:68:24:88:4d:9f:3c:5c:94:9d:8f:9f:ad:79:98: 0f:fb:66:55:b0:99:e6:cf:66:fd:0f:78:85:b2:ea:94:84:df: 4d:28:eb:fe:53:78:e8:11:63:5b:52:f9:55:d6:58:3c:3c:a1: 07:9c:57:87:cf:64:7a:9e:ce:ca:bb:ee:43:67:dc:12:83:38: 49:1c:15:d2:3f:9d:e7:44:6e:c7:e1:77:8f:dd:06:d9:ab:5c: 84:f1:4b:e2:eb:ba:e2:8f:7d:ea:5c:c6:d2:f2:53:6a:5b:78: 6d:fe:05:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUac4ParFabm1SuY3wPLIK8HDKGoowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzkyNzY5RkQ1RDk3QTQ2NzcwRTNBMTBGOUQ1N0FFOTMx RjlBOUZDMjAeFw0yNTA1MDkyMjQ3MTZaFw0yNTA1MTMwMzQ5MTZaMDMxMTAvBgNV BAMTKEY5NzQxQkVDOTAyMjU3RjYwNDM3Qzk4QTNDMEQ0OENCRUI1MUJCNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeTsXSKkPnH7jJLoHEE/SXOFvW 5/CVtR/xsqf+ci5L2xpE4y2V3IPjWdd81OlSxVxl/+2cLx4UulxLUm/RjDuKnXCd 8tKjR5GRhBWknV5ZqbtHlgRP1Uv3rlZEPHq/ZUKAC7IguRm7uzTvlMcZzli1fQM9 D9LerwvUZwt7qhpKpqJIhARSlk6SSJR/bEFF/ML9r6XegWv/VFMKjm9IWEo7JkvZ Bj1m1O0Ld6HmCCaHpx9IgSNXRhnEbG06OrMrum4AwVpi7kGeioIX7g0yHySrCKLu OWK5VESh3/eXybhmXdxttSNJvQRo9tQxbsRkDwvJJDreTygO/WBQH7uaz5I3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+XQb7JAiV/YEN8mKPA1Iy+tRu00wHwYDVR0j BBgwFoAUySdp/V2XpGdw46EPnVeukx+an8IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NWQ3Nzg0MC02MDhlLTQ0OWEtYjIyZi0zNmE2ZTI1MmZiMjMvMC9DOTI3NjlGRDVE OTdBNDY3NzBFM0ExMEY5RDU3QUU5MzFGOUE5RkMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzkyNzY5RkQ1RDk3QTQ2NzcwRTNBMTBGOUQ1N0FFOTMxRjlB OUZDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjVkNzc4NDAtNjA4ZS00NDlhLWIy MmYtMzZhNmUyNTJmYjIzLzAvQzkyNzY5RkQ1RDk3QTQ2NzcwRTNBMTBGOUQ1N0FF OTMxRjlBOUZDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALEmwc7zR5RNk45L16WHcs2E7vKYMDCQMX19 wHhQteNNtbgy0FFKqOaOmEiEqsVbT5XpZNQMrkgF4HLwwZnzQGhiESc2fAKV94aG ngFrwBtnP3c3AcAWpsJbeoMNmJTdAhLMTgf43oW197OVSa0lnBAdFNqAReu3FEVT TPZfYnlFlKOfIMdYbeTU1R0lKVV9t93lOqNoJIhNnzxclJ2Pn615mA/7ZlWwmebP Zv0PeIWy6pSE300o6/5TeOgRY1tS+VXWWDw8oQecV4fPZHqezsq77kNn3BKDOEkc FdI/nedEbsfhd4/dBtmrXITxS+LruuKPfepcxtLyU2pbeG3+BUY= -----END CERTIFICATE-----Generated at Sat May 10 03:44:00 2025 by rpki-client