$ rpki-client -vvf repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.mft File: 23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.mft (raw, json) Hash identifier: JqUsRlbiwRIV+FAjpUTyxg0zL9EGLHKrDBUaJreZ6bk= Subject key identifier: 20:FF:4C:4A:BE:E8:B9:D1:7E:28:93:DC:D4:34:F3:BE:CD:85:D1:5A Authority key identifier: 23:C6:22:F8:76:18:AB:8B:04:22:E7:A6:A4:6D:2E:91:BF:CC:7E:36 Certificate issuer: /CN=23C622F87618AB8B0422E7A6A46D2E91BFCC7E36 Certificate serial: 27C8B75258BEBCD82A1A2784FBAD5658DE56C373 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.mft Manifest number: 85 Signing time: Sat 05 Apr 2025 13:20:50 +0000 Manifest this update: Sat 05 Apr 2025 13:15:50 +0000 Manifest next update: Tue 08 Apr 2025 23:54:50 +0000 Files and hashes: 1: 23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.crl (hash: 9d3GT0ppuLxRePhU040maCwi/dDVQF1TnOvS5UIdeVw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.crl rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:c8:b7:52:58:be:bc:d8:2a:1a:27:84:fb:ad:56:58:de:56:c3:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23C622F87618AB8B0422E7A6A46D2E91BFCC7E36 Validity Not Before: Apr 5 13:15:50 2025 GMT Not After : Apr 8 23:54:50 2025 GMT Subject: CN=20FF4C4ABEE8B9D17E2893DCD434F3BECD85D15A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bf:7a:ae:19:97:f4:00:41:55:26:f1:58:3e: 47:78:15:36:48:19:76:b0:77:6d:fb:6e:78:ee:17: dc:1f:dd:32:dd:85:3d:b2:d1:9c:4d:08:3e:22:1f: 0e:b9:43:cd:15:43:92:11:6b:ca:d9:c2:84:92:43: 93:99:c2:5e:be:9d:76:82:d5:9c:ca:c8:fb:b8:9d: a4:74:8b:5c:38:1c:41:b9:58:e7:7f:6c:ad:82:a7: 8d:3a:7f:35:80:1f:01:df:79:65:d9:3b:d6:ee:a6: 81:30:2f:7b:dd:2a:d8:35:c9:87:4c:01:fe:f9:49: 59:fd:b2:26:64:a9:eb:7d:43:8f:37:fe:12:22:0e: 70:11:c6:b0:08:72:4d:f4:2c:1e:e1:e0:2c:10:b6: ff:23:61:6e:13:4a:1e:9a:81:e4:30:66:ba:20:b5: 38:22:3e:5a:d8:d2:f1:bd:f9:6f:49:a3:82:ff:ef: d8:ef:2b:ea:2f:e9:ad:ae:02:8d:e4:6f:9d:00:0e: 80:e1:13:bd:f4:c2:2b:19:b4:8e:8f:de:34:ff:fa: e4:ac:50:b8:d4:9a:f9:63:57:88:81:d2:76:b7:cd: 7d:4c:61:b3:51:c0:be:f5:2a:b0:b5:bf:63:5c:98: cb:0e:d2:61:30:fc:eb:de:6e:5a:e8:2b:da:e0:71: 27:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:FF:4C:4A:BE:E8:B9:D1:7E:28:93:DC:D4:34:F3:BE:CD:85:D1:5A X509v3 Authority Key Identifier: keyid:23:C6:22:F8:76:18:AB:8B:04:22:E7:A6:A4:6D:2E:91:BF:CC:7E:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f7d2894-c077-421c-bc1d-37d6f9d9897d/1/23C622F87618AB8B0422E7A6A46D2E91BFCC7E36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:79:a6:57:59:af:62:74:e3:b7:85:27:eb:6c:fa:21:6e:10: 49:a8:9a:e6:11:f0:49:3a:cf:82:18:fe:16:0d:11:9f:df:fe: 40:bb:64:da:ba:42:48:d5:ed:fe:93:ae:67:bb:61:6f:d5:ca: c0:91:ad:73:76:c2:a9:f1:a2:30:1b:64:84:c0:8b:3d:63:7a: 10:d8:c5:7c:59:d2:08:c0:3d:23:d3:13:b2:1c:f5:4f:fd:0e: 96:ce:30:49:0a:ec:55:68:40:a3:3d:d6:49:c2:1d:d4:ef:b0: 0c:90:87:4f:45:e1:9a:52:86:76:f6:fc:a6:2f:3a:a7:8b:4d: 18:74:f6:4f:dd:80:a6:ab:7e:0a:f5:4c:74:22:5f:9b:06:01: ac:11:0a:a6:67:77:82:fa:4e:32:40:88:4f:5e:ba:5a:55:9e: 50:e8:91:92:ae:07:d7:32:c4:aa:eb:7a:39:42:6e:c8:1c:9b: f3:a7:78:32:70:08:07:26:d3:9b:6d:cd:43:28:20:d2:02:b5: 7f:2e:7d:89:ae:91:96:36:fb:01:66:78:55:e6:54:e6:a6:24: 0e:bd:97:88:8a:52:a8:bd:4c:18:04:3f:b8:bb:0c:20:09:6d: 7a:fe:b7:23:1c:d9:59:2b:3b:a1:b1:d5:74:2c:11:d7:79:14: 42:a0:f0:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ8i3Uli+vNgqGieE+61WWN5Ww3MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjNDNjIyRjg3NjE4QUI4QjA0MjJFN0E2QTQ2RDJFOTFC RkNDN0UzNjAeFw0yNTA0MDUxMzE1NTBaFw0yNTA0MDgyMzU0NTBaMDMxMTAvBgNV BAMTKDIwRkY0QzRBQkVFOEI5RDE3RTI4OTNEQ0Q0MzRGM0JFQ0Q4NUQxNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8v3quGZf0AEFVJvFYPkd4FTZI GXawd237bnjuF9wf3TLdhT2y0ZxNCD4iHw65Q80VQ5IRa8rZwoSSQ5OZwl6+nXaC 1ZzKyPu4naR0i1w4HEG5WOd/bK2Cp406fzWAHwHfeWXZO9bupoEwL3vdKtg1yYdM Af75SVn9siZkqet9Q483/hIiDnARxrAIck30LB7h4CwQtv8jYW4TSh6ageQwZrog tTgiPlrY0vG9+W9Jo4L/79jvK+ov6a2uAo3kb50ADoDhE730wisZtI6P3jT/+uSs ULjUmvljV4iB0na3zX1MYbNRwL71KrC1v2NcmMsO0mEw/OveblroK9rgcSc1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIP9MSr7oudF+KJPc1DTzvs2F0VowHwYDVR0j BBgwFoAUI8Yi+HYYq4sEIuempG0ukb/MfjYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjdkMjg5NC1jMDc3LTQyMWMtYmMxZC0zN2Q2ZjlkOTg5N2QvMS8yM0M2MjJGODc2 MThBQjhCMDQyMkU3QTZBNDZEMkU5MUJGQ0M3RTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjNDNjIyRjg3NjE4QUI4QjA0MjJFN0E2QTQ2RDJFOTFCRkND N0UzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGY3ZDI4OTQtYzA3Ny00MjFjLWJj MWQtMzdkNmY5ZDk4OTdkLzEvMjNDNjIyRjg3NjE4QUI4QjA0MjJFN0E2QTQ2RDJF OTFCRkNDN0UzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC95pldZr2J047eFJ+ts+iFuEEmomuYR8Ek6 z4IY/hYNEZ/f/kC7ZNq6QkjV7f6Trme7YW/VysCRrXN2wqnxojAbZITAiz1jehDY xXxZ0gjAPSPTE7Ic9U/9DpbOMEkK7FVoQKM91knCHdTvsAyQh09F4ZpShnb2/KYv OqeLTRh09k/dgKarfgr1THQiX5sGAawRCqZnd4L6TjJAiE9eulpVnlDokZKuB9cy xKrrejlCbsgcm/OneDJwCAcm05ttzUMoINICtX8ufYmukZY2+wFmeFXmVOamJA69 l4iKUqi9TBgEP7i7DCAJbXr+tyMc2VkrO6Gx1XQsEdd5FEKg8Ck= -----END CERTIFICATE-----Generated at Sat Apr 5 16:39:44 2025 by rpki-client