$ rpki-client -vvf repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft File: C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft (raw, json) Hash identifier: G8+E9b99urYllQF2mEVB8KK76WpGN/1AQ6dSBe3g/e8= Subject key identifier: 75:F1:77:71:49:3A:B7:4E:D0:BE:A0:70:DC:C9:FC:1F:23:36:41:C5 Authority key identifier: C3:0D:E7:1F:7C:AE:16:CA:2D:8D:AB:6D:01:CA:43:D7:2F:B4:FE:6E Certificate issuer: /CN=C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E Certificate serial: 5E3C0D8C667360F6E99E7380E34E56DD1EC6959B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft Manifest number: 03AE Signing time: Sat 05 Apr 2025 15:50:52 +0000 Manifest this update: Sat 05 Apr 2025 15:45:52 +0000 Manifest next update: Tue 08 Apr 2025 19:44:52 +0000 Files and hashes: 1: C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.crl (hash: WND2urt0NK9XvlrRPpH06tGElmSl+yBp068N9QTOkMU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.crl rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:3c:0d:8c:66:73:60:f6:e9:9e:73:80:e3:4e:56:dd:1e:c6:95:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E Validity Not Before: Apr 5 15:45:52 2025 GMT Not After : Apr 8 19:44:52 2025 GMT Subject: CN=75F17771493AB74ED0BEA070DCC9FC1F233641C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e1:cc:c2:8b:38:26:ce:85:36:d0:0d:3a:9d: f2:b3:cc:5c:15:17:aa:b4:92:c7:dc:d1:ee:95:51: 16:3f:dc:46:69:e6:14:33:43:95:c7:a2:e7:76:60: 46:23:32:3c:fd:73:22:a2:86:50:b6:cc:b2:64:95: 83:ea:03:8f:34:90:29:22:f8:81:90:ea:0d:96:29: 8f:4c:67:33:4d:87:03:e8:9a:b9:a8:e2:30:94:9a: 3f:f1:0d:7b:de:29:0d:86:34:f3:27:0c:36:30:26: 16:c7:72:22:39:b4:b2:c5:46:e8:9f:45:97:b9:d8: 76:f5:2f:b5:76:70:f4:44:b4:d2:e1:64:09:77:56: dc:ed:68:c2:f6:ba:19:7d:84:47:6b:94:29:15:b4: a3:18:cb:dc:4d:6c:0b:ec:a0:a9:d5:49:cb:79:4f: 59:16:89:d8:ef:27:98:86:7e:af:a3:b6:f3:8e:e7: 30:12:1b:c7:82:b4:a8:86:90:43:b7:1d:55:e6:bf: 78:79:2d:c2:b8:04:75:97:3a:9e:2d:b2:f7:88:79: 8e:82:31:15:07:c0:76:18:4f:8a:f4:40:e8:d0:ec: 7d:22:fb:96:df:5e:f5:9c:79:5e:92:57:9d:46:9a: ad:56:1a:c6:b4:f0:9f:22:d2:8f:70:58:df:9b:ae: 3a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:F1:77:71:49:3A:B7:4E:D0:BE:A0:70:DC:C9:FC:1F:23:36:41:C5 X509v3 Authority Key Identifier: keyid:C3:0D:E7:1F:7C:AE:16:CA:2D:8D:AB:6D:01:CA:43:D7:2F:B4:FE:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:3e:86:a9:d8:3c:e8:40:43:b0:10:2e:7d:e3:8b:ba:67:a6: 07:b4:df:75:03:4e:65:e4:9e:28:7f:d3:c0:7f:08:c3:82:5c: c3:9e:8f:7c:8d:e7:a8:b7:0c:13:c9:5c:1e:88:a5:f1:6e:95: 67:96:40:98:41:1c:de:7b:54:5e:06:e3:f0:44:3f:33:5d:92: 64:f6:13:d1:54:0f:2e:36:bf:c1:f7:c4:ec:55:2b:5f:12:24: aa:d5:11:37:be:97:c0:e7:a6:45:d7:ca:27:eb:ad:53:c6:67: 5a:86:e9:f3:3f:5a:79:af:8c:06:5a:79:51:1d:44:9c:3d:3c: bf:10:d8:92:0a:c5:1f:1c:e0:db:4e:fd:58:d6:98:c3:b1:73: 07:a5:65:88:bf:b3:62:38:91:8e:b5:9d:37:f9:24:f8:6a:24: 50:1e:e6:0f:ea:c7:da:61:84:f9:df:5a:84:b0:53:b0:b3:3d: 7e:ab:9c:97:69:20:b9:20:7c:a5:1e:15:0a:01:cd:91:02:54: 03:04:91:5f:3f:42:46:1b:5d:5b:96:cc:31:20:c1:0d:1d:33: 8e:b1:f6:9c:73:02:2e:56:d6:cb:11:e9:c7:0d:c3:f9:e5:6e: e6:2b:28:c5:b6:fd:e4:08:a1:c9:bd:dc:80:46:20:94:a8:8b: bd:2f:03:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXjwNjGZzYPbpnnOA405W3R7GlZswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMwREU3MUY3Q0FFMTZDQTJEOERBQjZEMDFDQTQzRDcy RkI0RkU2RTAeFw0yNTA0MDUxNTQ1NTJaFw0yNTA0MDgxOTQ0NTJaMDMxMTAvBgNV BAMTKDc1RjE3NzcxNDkzQUI3NEVEMEJFQTA3MERDQzlGQzFGMjMzNjQxQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE4czCizgmzoU20A06nfKzzFwV F6q0ksfc0e6VURY/3EZp5hQzQ5XHoud2YEYjMjz9cyKihlC2zLJklYPqA480kCki +IGQ6g2WKY9MZzNNhwPomrmo4jCUmj/xDXveKQ2GNPMnDDYwJhbHciI5tLLFRuif RZe52Hb1L7V2cPREtNLhZAl3VtztaML2uhl9hEdrlCkVtKMYy9xNbAvsoKnVSct5 T1kWidjvJ5iGfq+jtvOO5zASG8eCtKiGkEO3HVXmv3h5LcK4BHWXOp4tsveIeY6C MRUHwHYYT4r0QOjQ7H0i+5bfXvWceV6SV51Gmq1WGsa08J8i0o9wWN+brjpVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdfF3cUk6t07QvqBw3Mn8HyM2QcUwHwYDVR0j BBgwFoAUww3nH3yuFsotjattAcpD1y+0/m4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w M2I1OWNlNC02NmEyLTRmNGQtYjNkNi05Mjk5NDg0YmE1NmIvMC9DMzBERTcxRjdD QUUxNkNBMkQ4REFCNkQwMUNBNDNENzJGQjRGRTZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMwREU3MUY3Q0FFMTZDQTJEOERBQjZEMDFDQTQzRDcyRkI0 RkU2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDNiNTljZTQtNjZhMi00ZjRkLWIz ZDYtOTI5OTQ4NGJhNTZiLzAvQzMwREU3MUY3Q0FFMTZDQTJEOERBQjZEMDFDQTQz RDcyRkI0RkU2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMc+hqnYPOhAQ7AQLn3ji7pnpge033UDTmXk nih/08B/CMOCXMOej3yN56i3DBPJXB6IpfFulWeWQJhBHN57VF4G4/BEPzNdkmT2 E9FUDy42v8H3xOxVK18SJKrVETe+l8DnpkXXyifrrVPGZ1qG6fM/WnmvjAZaeVEd RJw9PL8Q2JIKxR8c4NtO/VjWmMOxcwelZYi/s2I4kY61nTf5JPhqJFAe5g/qx9ph hPnfWoSwU7CzPX6rnJdpILkgfKUeFQoBzZECVAMEkV8/QkYbXVuWzDEgwQ0dM46x 9pxzAi5W1ssR6ccNw/nlbuYrKMW2/eQIocm93IBGIJSoi70vA7Y= -----END CERTIFICATE-----Generated at Sat Apr 5 22:26:42 2025 by rpki-client