$ rpki-client -vvf repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft File: C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft (raw, json) Hash identifier: YFVeDvSSsqTs8Ky1GrhaygdBAt5nxmzo2i3xYmCDMMg= Subject key identifier: E3:07:CD:78:D6:C6:E1:5E:C3:AD:DC:41:5A:9E:7A:80:85:E1:CA:C2 Authority key identifier: C1:93:44:D0:F4:EF:3C:AD:E2:A7:71:14:81:E3:D1:45:2C:62:1D:62 Certificate issuer: /CN=C19344D0F4EF3CADE2A7711481E3D1452C621D62 Certificate serial: 66E7A0B92171881778AC6370187FC81A1F2DCECA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19344D0F4EF3CADE2A7711481E3D1452C621D62.cer Subject info access: rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft Manifest number: 01B2 Signing time: Thu 17 Apr 2025 23:11:52 +0000 Manifest this update: Thu 17 Apr 2025 23:06:52 +0000 Manifest next update: Mon 21 Apr 2025 02:01:52 +0000 Files and hashes: 1: C19344D0F4EF3CADE2A7711481E3D1452C621D62.crl (hash: ABYEKBDEUKfuaw+X2NX5e2+gT5MDwiyQOiu/zau4eV8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.crl rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19344D0F4EF3CADE2A7711481E3D1452C621D62.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 02:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:e7:a0:b9:21:71:88:17:78:ac:63:70:18:7f:c8:1a:1f:2d:ce:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C19344D0F4EF3CADE2A7711481E3D1452C621D62 Validity Not Before: Apr 17 23:06:52 2025 GMT Not After : Apr 21 02:01:52 2025 GMT Subject: CN=E307CD78D6C6E15EC3ADDC415A9E7A8085E1CAC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e9:a6:cc:ac:83:2c:83:0b:22:34:3c:c6:42: 73:55:f2:1c:37:ab:67:33:61:0c:09:f4:82:0d:6a: 0b:42:74:ae:0c:05:70:ef:12:6e:8c:b0:3c:1c:f9: a9:c4:b9:3f:3c:63:50:4f:1c:fd:fe:b9:ec:51:05: 58:a1:d4:41:75:90:de:9b:e9:0a:94:ce:2a:87:01: 99:ad:d1:f7:e6:0a:81:70:10:ee:c4:49:33:69:f9: 64:10:84:0e:08:7c:78:2b:c7:13:e3:f3:73:1d:6b: f6:31:1a:b3:28:f1:6d:81:e0:51:26:df:11:51:16: d0:46:32:6b:45:64:17:3f:97:a5:51:90:9c:65:98: d1:c8:1a:86:9a:26:09:dd:21:33:02:f7:5c:9c:6f: 6b:80:74:46:27:b4:5d:86:32:e4:c6:9c:d1:0c:4e: 86:4e:e3:2e:26:9e:ee:7a:8f:a4:52:d7:5c:31:a2: 0f:7a:24:4f:8c:49:a8:ba:d8:6c:6f:48:78:a2:31: a8:c0:f9:dd:1f:4d:5d:b8:3c:66:90:6f:04:31:c5: e5:52:8c:cb:5a:d0:a1:5a:d8:12:cd:9a:ed:bd:da: 65:c4:31:50:52:b4:f9:fd:cf:b2:5e:83:5e:98:b6: b2:ba:24:b6:ed:74:c0:06:2d:28:72:8d:ff:59:fb: 12:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:07:CD:78:D6:C6:E1:5E:C3:AD:DC:41:5A:9E:7A:80:85:E1:CA:C2 X509v3 Authority Key Identifier: keyid:C1:93:44:D0:F4:EF:3C:AD:E2:A7:71:14:81:E3:D1:45:2C:62:1D:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19344D0F4EF3CADE2A7711481E3D1452C621D62.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:83:39:a2:06:68:19:eb:45:3c:e1:88:9c:09:7e:78:4d:d1: c4:e2:69:52:6d:f2:1d:f4:01:71:aa:cb:23:6b:ee:c6:5d:c8: d5:0c:02:ed:b5:df:19:bf:ec:79:32:aa:ca:db:af:32:4d:23: 8a:73:ab:38:fa:86:a5:94:0c:ab:44:d5:f9:cc:52:a3:db:76: ab:c3:91:95:63:df:63:e9:96:6e:92:16:0d:ed:87:e9:5f:14: a4:37:19:84:8f:6a:79:95:0d:24:e4:17:1b:d4:4f:1e:28:c1: 2f:80:ec:72:3c:04:6c:ca:cf:25:fc:a8:43:c6:26:df:2b:39: 2b:0d:b7:38:2c:71:6b:93:96:4a:02:f2:55:94:b6:47:29:f3: 94:f6:3a:f0:16:a4:17:6a:9f:15:d7:b8:80:f0:f4:9e:46:52: 76:b8:26:2d:14:bb:03:31:a0:89:ca:72:fc:64:01:ad:85:8a: e5:3d:2b:ba:d6:df:4b:bc:eb:a6:ea:d9:9d:e7:cc:e5:59:3d: 47:2f:d1:3b:24:dc:c9:ac:47:90:a3:2a:d7:1e:b7:6e:bc:75: 51:32:98:51:cd:72:04:b3:03:c7:ae:ec:0d:70:8d:cf:16:0f: 17:f5:f6:70:a3:ba:e4:db:02:40:9b:d3:64:bc:a6:e6:3a:c9: 93:62:66:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZueguSFxiBd4rGNwGH/IGh8tzsowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE5MzQ0RDBGNEVGM0NBREUyQTc3MTE0ODFFM0QxNDUy QzYyMUQ2MjAeFw0yNTA0MTcyMzA2NTJaFw0yNTA0MjEwMjAxNTJaMDMxMTAvBgNV BAMTKEUzMDdDRDc4RDZDNkUxNUVDM0FEREM0MTVBOUU3QTgwODVFMUNBQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe6abMrIMsgwsiNDzGQnNV8hw3 q2czYQwJ9IINagtCdK4MBXDvEm6MsDwc+anEuT88Y1BPHP3+uexRBVih1EF1kN6b 6QqUziqHAZmt0ffmCoFwEO7ESTNp+WQQhA4IfHgrxxPj83Mda/YxGrMo8W2B4FEm 3xFRFtBGMmtFZBc/l6VRkJxlmNHIGoaaJgndITMC91ycb2uAdEYntF2GMuTGnNEM ToZO4y4mnu56j6RS11wxog96JE+MSai62GxvSHiiMajA+d0fTV24PGaQbwQxxeVS jMta0KFa2BLNmu292mXEMVBStPn9z7Jeg16YtrK6JLbtdMAGLShyjf9Z+xKrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4wfNeNbG4V7DrdxBWp56gIXhysIwHwYDVR0j BBgwFoAUwZNE0PTvPK3ip3EUgePRRSxiHWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MWI2ZGQ5Yi1kMTUyLTRjOGYtODdiNy02MjllYjgwOGY5MTEvMC9DMTkzNDREMEY0 RUYzQ0FERTJBNzcxMTQ4MUUzRDE0NTJDNjIxRDYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE5MzQ0RDBGNEVGM0NBREUyQTc3MTE0ODFFM0QxNDUyQzYy MUQ2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDFiNmRkOWItZDE1Mi00YzhmLTg3 YjctNjI5ZWI4MDhmOTExLzAvQzE5MzQ0RDBGNEVGM0NBREUyQTc3MTE0ODFFM0Qx NDUyQzYyMUQ2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFeDOaIGaBnrRTzhiJwJfnhN0cTiaVJt8h30 AXGqyyNr7sZdyNUMAu213xm/7HkyqsrbrzJNI4pzqzj6hqWUDKtE1fnMUqPbdqvD kZVj32Pplm6SFg3th+lfFKQ3GYSPanmVDSTkFxvUTx4owS+A7HI8BGzKzyX8qEPG Jt8rOSsNtzgscWuTlkoC8lWUtkcp85T2OvAWpBdqnxXXuIDw9J5GUna4Ji0UuwMx oInKcvxkAa2FiuU9K7rW30u866bq2Z3nzOVZPUcv0Tsk3MmsR5CjKtcet268dVEy mFHNcgSzA8eu7A1wjc8WDxf19nCjuuTbAkCb02S8puY6yZNiZow= -----END CERTIFICATE-----Generated at Sat Apr 19 12:15:05 2025 by rpki-client