$ rpki-client -vvf repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.mft File: B0AAB728B88975526C1741CCA8673CBC88F7697C.mft (raw, json) Hash identifier: x2DomrUHU668MNkrirDRqCtt9Gc/EEHFDzlvLHWgYvU= Subject key identifier: A7:CA:E7:0A:75:83:14:F2:47:90:F9:70:29:5A:13:6C:14:35:C9:86 Authority key identifier: B0:AA:B7:28:B8:89:75:52:6C:17:41:CC:A8:67:3C:BC:88:F7:69:7C Certificate issuer: /CN=B0AAB728B88975526C1741CCA8673CBC88F7697C Certificate serial: 43AF505B0257D70BA14E8F79CBD0E0E71DD2A53C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0AAB728B88975526C1741CCA8673CBC88F7697C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.mft Manifest number: 0342 Signing time: Thu 03 Apr 2025 10:51:10 +0000 Manifest this update: Thu 03 Apr 2025 10:46:10 +0000 Manifest next update: Sun 06 Apr 2025 20:56:10 +0000 Files and hashes: 1: B0AAB728B88975526C1741CCA8673CBC88F7697C.crl (hash: mioOB9l8QB7UdWyJMFLTcyQFI4Li1tjSaXTvpz0gks4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.crl rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0AAB728B88975526C1741CCA8673CBC88F7697C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 20:56:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:af:50:5b:02:57:d7:0b:a1:4e:8f:79:cb:d0:e0:e7:1d:d2:a5:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0AAB728B88975526C1741CCA8673CBC88F7697C Validity Not Before: Apr 3 10:46:10 2025 GMT Not After : Apr 6 20:56:10 2025 GMT Subject: CN=A7CAE70A758314F24790F970295A136C1435C986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0e:03:b5:28:ab:69:c1:d4:4d:a1:3c:be:2e: 47:fe:39:2a:39:a9:86:be:7d:8a:27:e1:52:06:ec: 47:8a:94:41:3b:f9:41:12:44:87:99:68:d6:be:ea: 79:ef:6c:2a:91:90:9d:ca:cb:b5:05:33:f9:57:35: 06:70:a7:d0:b0:12:fe:18:51:3d:37:e5:ba:2b:95: 9d:32:24:47:c6:b8:72:eb:bd:76:72:a8:bd:e1:8b: 83:c6:67:0f:f6:93:7d:ba:82:6d:45:0f:f0:c3:85: b3:78:08:d5:f0:35:48:9f:c4:da:9c:c9:83:50:73: bf:8c:a7:d3:e0:20:84:5d:1d:d8:10:8e:32:ee:ed: 3a:9e:3c:4c:97:8e:fe:5e:57:c3:f1:46:d5:df:3d: 67:59:6e:74:56:6a:39:27:1c:f3:3b:ac:28:eb:e0: bd:91:45:0d:79:11:f2:5c:84:48:9a:42:af:cf:9e: 98:26:07:83:a0:bb:4f:ce:d5:ed:13:5a:c9:29:0f: b9:87:dd:10:c0:96:50:4a:19:8e:45:89:75:a0:47: 7d:07:12:55:f0:f7:b9:a9:91:ba:0e:37:66:ca:65: 58:d2:95:ff:e9:82:82:91:5b:88:61:c8:10:85:8d: 45:38:57:72:9d:23:8d:97:72:88:a2:5a:9c:e5:f0: 4b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:CA:E7:0A:75:83:14:F2:47:90:F9:70:29:5A:13:6C:14:35:C9:86 X509v3 Authority Key Identifier: keyid:B0:AA:B7:28:B8:89:75:52:6C:17:41:CC:A8:67:3C:BC:88:F7:69:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0AAB728B88975526C1741CCA8673CBC88F7697C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:1d:e0:55:ae:79:3c:73:a5:92:3d:00:13:93:20:f9:e6:c4: 8d:bd:df:1b:49:7b:5d:3b:43:c9:6e:e2:8a:86:e0:39:cf:bf: f2:a0:d3:3f:1e:47:67:83:ae:de:5c:e5:3a:d6:05:11:4b:dd: b1:87:1b:e2:96:aa:c8:57:8d:9f:44:cf:e5:e7:5b:4d:4b:28: a5:19:15:dc:38:66:f5:94:ef:6d:6c:71:2c:e3:98:37:ce:e5: 4a:85:0b:03:9f:44:84:75:22:59:91:0c:02:4f:64:17:a8:07: ad:e1:6d:15:4b:f8:1b:44:d4:3d:32:3a:7e:d1:cf:2d:93:31: dc:c7:af:b9:4d:42:f5:74:ac:7c:c4:6d:31:22:95:3c:33:dc: 46:af:58:57:08:de:3a:37:d9:96:cd:8e:63:3d:c9:48:81:be: 70:b4:98:92:dc:4e:67:24:e1:4a:53:55:ca:32:a4:0f:92:12: 55:7b:90:8e:1f:e3:8e:0a:37:3e:aa:c4:b4:45:9a:c6:b9:8f: e1:24:d3:00:89:a6:99:7f:28:c7:3c:98:0e:bd:62:d5:eb:e0: 55:09:c2:6a:8a:68:df:a2:0b:13:f0:b5:32:30:e8:32:58:b3: a6:b7:45:74:5b:6f:22:57:61:69:88:18:f1:d3:6e:48:e0:9a: 6c:ee:3a:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ69QWwJX1wuhTo95y9Dg5x3SpTwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBBQUI3MjhCODg5NzU1MjZDMTc0MUNDQTg2NzNDQkM4 OEY3Njk3QzAeFw0yNTA0MDMxMDQ2MTBaFw0yNTA0MDYyMDU2MTBaMDMxMTAvBgNV BAMTKEE3Q0FFNzBBNzU4MzE0RjI0NzkwRjk3MDI5NUExMzZDMTQzNUM5ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6DgO1KKtpwdRNoTy+Lkf+OSo5 qYa+fYon4VIG7EeKlEE7+UESRIeZaNa+6nnvbCqRkJ3Ky7UFM/lXNQZwp9CwEv4Y UT035borlZ0yJEfGuHLrvXZyqL3hi4PGZw/2k326gm1FD/DDhbN4CNXwNUifxNqc yYNQc7+Mp9PgIIRdHdgQjjLu7TqePEyXjv5eV8PxRtXfPWdZbnRWajknHPM7rCjr 4L2RRQ15EfJchEiaQq/PnpgmB4Ogu0/O1e0TWskpD7mH3RDAllBKGY5FiXWgR30H ElXw97mpkboON2bKZVjSlf/pgoKRW4hhyBCFjUU4V3KdI42XcoiiWpzl8EtTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp8rnCnWDFPJHkPlwKVoTbBQ1yYYwHwYDVR0j BBgwFoAUsKq3KLiJdVJsF0HMqGc8vIj3aXwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTA1YTFjZS04NDlmLTQxN2MtYjY3My1mZGQzM2YwZDc0NDcvMC9CMEFBQjcyOEI4 ODk3NTUyNkMxNzQxQ0NBODY3M0NCQzg4Rjc2OTdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjBBQUI3MjhCODg5NzU1MjZDMTc0MUNDQTg2NzNDQkM4OEY3 Njk3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGUwNWExY2UtODQ5Zi00MTdjLWI2 NzMtZmRkMzNmMGQ3NDQ3LzAvQjBBQUI3MjhCODg5NzU1MjZDMTc0MUNDQTg2NzND QkM4OEY3Njk3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFkd4FWueTxzpZI9ABOTIPnmxI293xtJe107 Q8lu4oqG4DnPv/Kg0z8eR2eDrt5c5TrWBRFL3bGHG+KWqshXjZ9Ez+XnW01LKKUZ Fdw4ZvWU721scSzjmDfO5UqFCwOfRIR1IlmRDAJPZBeoB63hbRVL+BtE1D0yOn7R zy2TMdzHr7lNQvV0rHzEbTEilTwz3EavWFcI3jo32ZbNjmM9yUiBvnC0mJLcTmck 4UpTVcoypA+SElV7kI4f444KNz6qxLRFmsa5j+Ek0wCJppl/KMc8mA69YtXr4FUJ wmqKaN+iCxPwtTIw6DJYs6a3RXRbbyJXYWmIGPHTbkjgmmzuOlk= -----END CERTIFICATE-----Generated at Sat Apr 5 16:38:16 2025 by rpki-client