$ rpki-client -vvf repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft File: 357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft (raw, json) Hash identifier: ukwot+f21iN8bIdKQYyAJoSNoPfVmCOqe3hEhginOS4= Subject key identifier: 4A:40:D0:35:6A:F4:ED:38:6B:4F:4E:9E:C7:53:48:D9:A9:2A:2E:5A Authority key identifier: 35:7B:7A:D7:5E:6E:33:8A:26:C2:FC:9C:E4:B3:A7:A2:74:FB:76:05 Certificate issuer: /CN=357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605 Certificate serial: 5985EA84FEB87A4851C5ED0B8EDBE4BC50905D69 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft Manifest number: 047F Signing time: Fri 18 Apr 2025 22:21:04 +0000 Manifest this update: Fri 18 Apr 2025 22:16:04 +0000 Manifest next update: Tue 22 Apr 2025 07:33:04 +0000 Files and hashes: 1: 357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.crl (hash: Cb6r5lURkK8L2ATC9LgsmMZ3Eyi/AKO63EZgpJK9ba8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.crl rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 00:59:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:85:ea:84:fe:b8:7a:48:51:c5:ed:0b:8e:db:e4:bc:50:90:5d:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605 Validity Not Before: Apr 18 22:16:04 2025 GMT Not After : Apr 22 07:33:04 2025 GMT Subject: CN=4A40D0356AF4ED386B4F4E9EC75348D9A92A2E5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3f:63:87:7b:67:40:0e:c6:27:a6:bd:a4:e2: c2:61:e1:aa:58:7e:74:da:ca:35:3e:42:8c:0c:2e: 72:07:7e:e9:ac:e7:76:84:7c:00:50:75:1d:ee:e7: b5:bb:74:db:ee:91:b9:c7:62:43:81:ce:88:c6:27: 65:94:e6:a9:61:04:59:31:e7:d5:df:f0:b0:c8:44: e6:c4:33:b2:bd:fe:7b:c5:92:91:4b:1b:ed:9b:ce: 55:87:1d:fd:4c:1c:af:15:ff:68:95:91:68:6e:a3: d3:f5:69:f2:b5:75:18:a0:c5:53:49:d1:1b:8a:00: 3f:8f:c9:41:16:4f:76:b2:1d:c0:56:07:82:34:f1: ec:45:3d:c8:27:7c:a3:57:85:d2:49:cb:d7:8a:cc: 60:32:4e:cd:47:33:63:7d:64:2c:99:e1:fa:a6:b9: 43:8b:77:71:6f:25:88:78:98:b5:30:f4:99:f2:f3: 07:d2:7c:aa:b9:f5:fc:94:b1:a5:99:97:0f:62:3f: 8e:aa:21:68:57:b5:be:ca:4a:80:0d:66:cd:89:fb: b2:d8:8b:29:c7:b6:c6:48:97:37:70:60:51:9a:00: 24:3e:0c:0f:2e:d5:01:50:85:8c:63:42:0c:2b:81: ae:8a:0c:91:a5:9d:93:e1:ee:81:9a:cd:10:d0:b1: a3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:40:D0:35:6A:F4:ED:38:6B:4F:4E:9E:C7:53:48:D9:A9:2A:2E:5A X509v3 Authority Key Identifier: keyid:35:7B:7A:D7:5E:6E:33:8A:26:C2:FC:9C:E4:B3:A7:A2:74:FB:76:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:c4:a3:2f:86:14:c0:5d:74:4f:98:2e:55:f7:0a:bf:92:ee: 9e:a7:82:8d:81:11:90:d6:c8:ab:c2:f1:01:66:36:8d:18:34: d0:53:2c:74:8e:4c:2e:c8:28:ef:9f:4e:0e:7e:cb:f3:91:c3: ea:31:6b:57:84:f2:ed:e7:96:6a:b6:f6:24:cf:95:dc:97:97: 01:d1:05:e9:54:51:2c:52:b5:f6:b9:0a:7c:93:cb:17:1e:db: 74:5f:29:93:69:b6:dd:d5:6a:7b:12:1e:6d:e9:3a:30:d4:1c: c2:20:1b:ca:3c:b9:54:af:f2:c8:8d:f3:03:84:0b:2f:13:e9: fc:70:e0:6b:89:3b:60:13:ef:66:32:02:96:be:7d:e8:bc:58: 63:62:95:79:48:92:2f:00:5a:d8:ac:ed:6f:e9:02:22:b9:bc: 80:6b:20:0b:1d:8f:5b:bc:56:cc:bf:54:0e:ce:ca:8b:91:85: 68:47:eb:21:de:aa:a4:38:1d:08:f3:6b:09:1d:84:b5:06:2e: 63:8c:8f:1e:47:f9:95:f7:12:d3:2c:5b:f1:01:31:08:8b:0a: a6:44:96:dd:95:89:ce:ad:8b:5b:8c:08:94:6b:62:31:3f:82: ed:5e:bc:1d:8f:24:61:bb:01:9a:c9:41:27:01:f2:43:8c:88: 9a:a5:08:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWYXqhP64ekhRxe0LjtvkvFCQXWkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU3QjdBRDc1RTZFMzM4QTI2QzJGQzlDRTRCM0E3QTI3 NEZCNzYwNTAeFw0yNTA0MTgyMjE2MDRaFw0yNTA0MjIwNzMzMDRaMDMxMTAvBgNV BAMTKDRBNDBEMDM1NkFGNEVEMzg2QjRGNEU5RUM3NTM0OEQ5QTkyQTJFNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoP2OHe2dADsYnpr2k4sJh4apY fnTayjU+QowMLnIHfums53aEfABQdR3u57W7dNvukbnHYkOBzojGJ2WU5qlhBFkx 59Xf8LDIRObEM7K9/nvFkpFLG+2bzlWHHf1MHK8V/2iVkWhuo9P1afK1dRigxVNJ 0RuKAD+PyUEWT3ayHcBWB4I08exFPcgnfKNXhdJJy9eKzGAyTs1HM2N9ZCyZ4fqm uUOLd3FvJYh4mLUw9Jny8wfSfKq59fyUsaWZlw9iP46qIWhXtb7KSoANZs2J+7LY iynHtsZIlzdwYFGaACQ+DA8u1QFQhYxjQgwrga6KDJGlnZPh7oGazRDQsaOrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSkDQNWr07ThrT06ex1NI2akqLlowHwYDVR0j BBgwFoAUNXt6115uM4omwvyc5LOnonT7dgUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OTU1ZjVhNi1mMzc4LTQyNTItODA0Yi1iMGI5Mzg2NTRmYmYvMC8zNTdCN0FENzVF NkUzMzhBMjZDMkZDOUNFNEIzQTdBMjc0RkI3NjA1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU3QjdBRDc1RTZFMzM4QTI2QzJGQzlDRTRCM0E3QTI3NEZC NzYwNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjk1NWY1YTYtZjM3OC00MjUyLTgw NGItYjBiOTM4NjU0ZmJmLzAvMzU3QjdBRDc1RTZFMzM4QTI2QzJGQzlDRTRCM0E3 QTI3NEZCNzYwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAETEoy+GFMBddE+YLlX3Cr+S7p6ngo2BEZDW yKvC8QFmNo0YNNBTLHSOTC7IKO+fTg5+y/ORw+oxa1eE8u3nlmq29iTPldyXlwHR BelUUSxStfa5CnyTyxce23RfKZNptt3VansSHm3pOjDUHMIgG8o8uVSv8siN8wOE Cy8T6fxw4GuJO2AT72YyApa+fei8WGNilXlIki8AWtis7W/pAiK5vIBrIAsdj1u8 Vsy/VA7OyouRhWhH6yHeqqQ4HQjzawkdhLUGLmOMjx5H+ZX3EtMsW/EBMQiLCqZE lt2Vic6ti1uMCJRrYjE/gu1evB2PJGG7AZrJQScB8kOMiJqlCFU= -----END CERTIFICATE-----Generated at Sat Apr 19 15:28:10 2025 by rpki-client