$ rpki-client -vvf repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft File: 416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft (raw, json) Hash identifier: sSlns7G3BBA/cuY7cyMjF2h03kiIZqWRhenNyvxuB5Q= Subject key identifier: 4E:EA:F0:05:2C:64:79:6E:D8:A1:17:33:68:FD:5A:AC:14:00:BB:55 Authority key identifier: 41:66:66:F3:F3:35:ED:7A:8B:1B:CB:AD:17:E6:ED:C4:F3:B7:E7:30 Certificate issuer: /CN=416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730 Certificate serial: 0825ACEE07503DA0365663FB9CDA99849BA52E4A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.cer Subject info access: rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft Manifest number: 04C6 Signing time: Sat 19 Apr 2025 02:41:40 +0000 Manifest this update: Sat 19 Apr 2025 02:36:40 +0000 Manifest next update: Tue 22 Apr 2025 06:21:40 +0000 Files and hashes: 1: 416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.crl (hash: 3kshv1hzXs4oXSdX5ZB2uO7Rp7octZNimyNjnRArADA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.crl rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 00:59:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:25:ac:ee:07:50:3d:a0:36:56:63:fb:9c:da:99:84:9b:a5:2e:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730 Validity Not Before: Apr 19 02:36:40 2025 GMT Not After : Apr 22 06:21:40 2025 GMT Subject: CN=4EEAF0052C64796ED8A1173368FD5AAC1400BB55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:3f:c1:a2:0f:ab:34:5c:d4:3e:e0:1f:6c:01: 17:fb:b8:5d:28:a3:4a:a2:70:4c:a5:92:a5:81:83: ed:95:fc:2d:47:f7:bf:de:c3:5a:4e:88:02:50:8d: db:bc:2a:0a:25:f7:88:27:e8:7e:8d:43:bc:44:df: 26:8f:3d:e8:9a:68:d0:51:8b:5e:12:e9:2d:07:a6: 33:50:a1:e2:cd:2b:06:da:10:d7:5d:d1:bd:9d:8a: a6:b2:8b:b2:31:3a:4c:f5:ab:d9:9b:9a:4a:bd:87: e1:21:6c:fa:2e:d7:b9:5f:3b:2e:3e:eb:06:5c:89: 04:5b:36:80:17:f4:4c:0e:61:31:ed:9e:63:90:11: 3d:94:4f:d3:2d:65:2e:9f:5f:96:43:5a:02:11:46: 76:42:57:97:0f:f8:8d:8c:24:12:87:ee:34:20:f4: 6d:0c:e9:2d:b9:a7:14:02:24:bc:02:6a:2c:ef:00: ce:1a:52:dc:9e:49:af:ad:f8:f6:6e:5b:ba:34:7f: e2:d6:f5:fc:f4:ed:ad:c3:b1:c1:20:83:d4:7b:7a: 4b:ae:9c:66:9d:a1:6a:3d:8b:48:7d:62:3a:5c:37: ea:8a:a1:55:c3:9b:59:1a:d8:24:6c:27:d2:e6:e8: f9:79:30:29:fb:e5:f1:70:d6:0b:de:39:33:62:99: 5c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:EA:F0:05:2C:64:79:6E:D8:A1:17:33:68:FD:5A:AC:14:00:BB:55 X509v3 Authority Key Identifier: keyid:41:66:66:F3:F3:35:ED:7A:8B:1B:CB:AD:17:E6:ED:C4:F3:B7:E7:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:34:4c:dc:09:71:f8:1e:62:75:eb:60:24:26:ad:4a:80:6f: d9:a0:7f:7d:fa:4c:65:c7:77:32:7a:40:fb:24:d8:39:33:fc: ba:2b:d9:95:88:01:5e:b9:3d:ae:32:06:09:09:32:8c:f6:47: 7b:bc:d6:94:81:0c:cd:86:f6:49:a0:c5:f2:d0:0e:ec:f8:73: 42:79:5f:99:55:97:cc:98:83:0b:da:c2:67:44:37:5e:77:72: 4c:dd:e9:4b:1b:1f:a6:7a:75:7a:39:29:18:96:d9:94:12:c5: d9:52:6b:cb:2c:ec:9d:91:72:33:17:e9:a7:aa:12:69:95:2f: 8b:f7:03:d6:9d:4d:e4:5b:06:2b:a5:16:c9:c9:eb:4f:f5:65: 75:74:f8:a4:5d:85:0f:fa:66:c4:ca:98:70:c0:c0:a1:8c:41: fa:c1:d6:43:57:5d:25:d4:55:57:ed:6e:73:f1:56:75:1a:87: 23:f1:19:e4:53:ee:97:4a:73:bc:a1:2a:8d:8f:7a:1e:04:7b: cb:cf:65:be:be:ac:63:39:24:8c:cb:d8:ab:3c:34:fa:27:85: 32:67:07:15:46:57:3a:9c:53:d1:aa:91:8d:e9:16:bd:4a:71: 60:d3:0f:a5:a6:8e:cd:63:48:83:40:d6:75:15:b8:92:37:92: 22:8a:69:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCCWs7gdQPaA2VmP7nNqZhJulLkowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDE2NjY2RjNGMzM1RUQ3QThCMUJDQkFEMTdFNkVEQzRG M0I3RTczMDAeFw0yNTA0MTkwMjM2NDBaFw0yNTA0MjIwNjIxNDBaMDMxMTAvBgNV BAMTKDRFRUFGMDA1MkM2NDc5NkVEOEExMTczMzY4RkQ1QUFDMTQwMEJCNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfP8GiD6s0XNQ+4B9sARf7uF0o o0qicEylkqWBg+2V/C1H97/ew1pOiAJQjdu8Kgol94gn6H6NQ7xE3yaPPeiaaNBR i14S6S0HpjNQoeLNKwbaENdd0b2diqayi7IxOkz1q9mbmkq9h+EhbPou17lfOy4+ 6wZciQRbNoAX9EwOYTHtnmOQET2UT9MtZS6fX5ZDWgIRRnZCV5cP+I2MJBKH7jQg 9G0M6S25pxQCJLwCaizvAM4aUtyeSa+t+PZuW7o0f+LW9fz07a3DscEgg9R7ekuu nGadoWo9i0h9YjpcN+qKoVXDm1ka2CRsJ9Lm6Pl5MCn75fFw1gveOTNimVx3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTurwBSxkeW7YoRczaP1arBQAu1UwHwYDVR0j BBgwFoAUQWZm8/M17XqLG8utF+btxPO35zAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDM5MTY5OC0wOGVjLTQ3OTAtYTE4NC05MjI4NTJmYTRkMGEvMC80MTY2NjZGM0Yz MzVFRDdBOEIxQkNCQUQxN0U2RURDNEYzQjdFNzMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDE2NjY2RjNGMzM1RUQ3QThCMUJDQkFEMTdFNkVEQzRGM0I3 RTczMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQzOTE2OTgtMDhlYy00NzkwLWEx ODQtOTIyODUyZmE0ZDBhLzAvNDE2NjY2RjNGMzM1RUQ3QThCMUJDQkFEMTdFNkVE QzRGM0I3RTczMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABU0TNwJcfgeYnXrYCQmrUqAb9mgf336TGXH dzJ6QPsk2Dkz/Lor2ZWIAV65Pa4yBgkJMoz2R3u81pSBDM2G9kmgxfLQDuz4c0J5 X5lVl8yYgwvawmdEN153ckzd6UsbH6Z6dXo5KRiW2ZQSxdlSa8ss7J2RcjMX6aeq EmmVL4v3A9adTeRbBiulFsnJ60/1ZXV0+KRdhQ/6ZsTKmHDAwKGMQfrB1kNXXSXU VVftbnPxVnUahyPxGeRT7pdKc7yhKo2Peh4Ee8vPZb6+rGM5JIzL2Ks8NPonhTJn BxVGVzqcU9GqkY3pFr1KcWDTD6Wmjs1jSINA1nUVuJI3kiKKaWI= -----END CERTIFICATE-----Generated at Sat Apr 19 07:14:34 2025 by rpki-client