$ rpki-client -vvf repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft File: 357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft (raw, json) Hash identifier: /4xovRluj9GbWSnh4Hje7z2idXJd++Q461zWzjj0kUo= Subject key identifier: F7:F1:58:98:3C:57:A8:E6:2F:D2:53:71:73:D4:5B:98:AD:F1:97:0F Authority key identifier: 35:7B:7A:D7:5E:6E:33:8A:26:C2:FC:9C:E4:B3:A7:A2:74:FB:76:05 Certificate issuer: /CN=357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605 Certificate serial: 6A6EF5D731C065CB2B4D08F5278F4223A1222E6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft Manifest number: 0465 Signing time: Tue 18 Feb 2025 22:31:05 +0000 Manifest this update: Tue 18 Feb 2025 22:26:05 +0000 Manifest next update: Sat 22 Feb 2025 08:30:05 +0000 Files and hashes: 1: 357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.crl (hash: wf3E0yvv3zniWNJdJaEh2ankPpq3VLmL9FJwxMRw3Bo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.crl rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Feb 2025 08:30:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:6e:f5:d7:31:c0:65:cb:2b:4d:08:f5:27:8f:42:23:a1:22:2e:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605 Validity Not Before: Feb 18 22:26:05 2025 GMT Not After : Feb 22 08:30:05 2025 GMT Subject: CN=F7F158983C57A8E62FD2537173D45B98ADF1970F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9b:22:cd:50:48:64:bb:96:a7:3f:b6:7f:16: bb:9c:53:b4:da:43:81:7d:1d:07:71:2b:58:52:24: 3c:0c:ab:cb:45:7f:1f:cd:9e:71:ed:21:80:81:c9: 9d:49:e4:7e:b1:00:00:31:25:00:d3:5e:45:09:34: 34:e2:9b:1a:67:2c:d8:37:63:12:1b:c2:82:21:7f: f1:4f:fd:40:1d:87:7f:2c:e5:44:dc:a4:38:0e:d0: a7:c1:87:35:a2:91:5b:4f:4d:ec:88:06:43:ce:41: 5b:8a:3a:f7:19:23:9d:b0:fc:0c:b7:90:52:08:4a: b9:43:f3:f7:82:a3:2d:cc:31:e2:fb:bc:fa:a1:04: a0:cd:df:f7:d2:47:91:ad:5a:71:a3:a2:df:c0:e6: 40:75:c3:8f:db:65:d9:d6:e3:d5:da:aa:5d:67:c9: 89:2d:4d:af:58:c6:1e:be:19:dc:2d:ad:d8:f0:ef: b9:d7:53:06:ca:b9:c4:db:c1:cf:dd:bb:69:11:0d: 82:8c:89:38:14:d3:3a:0c:1d:0f:82:6b:6e:2d:77: dc:5b:5c:74:4a:2f:fe:4c:b2:2e:17:d0:90:b3:02: 9a:a4:58:03:75:2c:99:67:3e:f9:5f:1f:34:17:6e: a2:6b:9d:0a:0e:82:14:79:6f:d4:d1:2c:86:53:c7: d2:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:F1:58:98:3C:57:A8:E6:2F:D2:53:71:73:D4:5B:98:AD:F1:97:0F X509v3 Authority Key Identifier: keyid:35:7B:7A:D7:5E:6E:33:8A:26:C2:FC:9C:E4:B3:A7:A2:74:FB:76:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2955f5a6-f378-4252-804b-b0b938654fbf/0/357B7AD75E6E338A26C2FC9CE4B3A7A274FB7605.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:60:81:52:a1:91:a1:97:9e:5c:85:37:ae:cc:2f:60:92:22: 62:61:ec:74:16:e7:af:f6:5a:20:4b:99:c2:ea:e9:3c:a9:d0: 15:92:4f:5a:45:34:1f:24:fe:c8:80:21:bb:6e:1a:c2:19:c5: a3:4e:3f:37:ed:94:d8:da:61:8d:5c:88:ad:af:a8:9a:7c:25: fc:a7:b7:6b:f1:39:30:43:98:1a:f8:11:03:03:02:6e:8f:3b: df:1b:44:9f:93:f6:b4:df:bb:58:c1:71:6d:31:91:10:4d:7c: d7:a5:8a:9b:db:7d:27:25:19:c6:3f:3c:0c:06:6f:19:f2:3a: c3:9d:75:40:70:db:09:65:24:3f:a0:ee:e9:b7:fb:72:85:9d: 7c:b6:7b:d2:28:7c:29:68:75:db:77:33:08:84:1d:85:d8:97: a6:f4:31:c4:b0:0d:82:9f:01:f4:b4:50:3b:09:d3:ff:76:2d: 77:58:ce:d9:0f:51:16:00:07:70:e6:87:4f:63:c7:df:44:2c: 2d:28:57:ff:6b:fc:9f:47:38:be:15:ec:4f:4d:55:fa:54:94: 32:8e:1f:39:c0:c8:0d:26:b5:e7:e1:f5:29:bf:c2:de:3c:3c: 01:44:62:ad:f9:fb:d8:19:9f:4d:12:75:71:1e:d9:a3:95:6e: 24:09:5b:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUam711zHAZcsrTQj1J49CI6EiLm0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzU3QjdBRDc1RTZFMzM4QTI2QzJGQzlDRTRCM0E3QTI3 NEZCNzYwNTAeFw0yNTAyMTgyMjI2MDVaFw0yNTAyMjIwODMwMDVaMDMxMTAvBgNV BAMTKEY3RjE1ODk4M0M1N0E4RTYyRkQyNTM3MTczRDQ1Qjk4QURGMTk3MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvmyLNUEhku5anP7Z/FrucU7Ta Q4F9HQdxK1hSJDwMq8tFfx/NnnHtIYCByZ1J5H6xAAAxJQDTXkUJNDTimxpnLNg3 YxIbwoIhf/FP/UAdh38s5UTcpDgO0KfBhzWikVtPTeyIBkPOQVuKOvcZI52w/Ay3 kFIISrlD8/eCoy3MMeL7vPqhBKDN3/fSR5GtWnGjot/A5kB1w4/bZdnW49Xaql1n yYktTa9Yxh6+Gdwtrdjw77nXUwbKucTbwc/du2kRDYKMiTgU0zoMHQ+Ca24td9xb XHRKL/5Msi4X0JCzApqkWAN1LJlnPvlfHzQXbqJrnQoOghR5b9TRLIZTx9IHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9/FYmDxXqOYv0lNxc9RbmK3xlw8wHwYDVR0j BBgwFoAUNXt6115uM4omwvyc5LOnonT7dgUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OTU1ZjVhNi1mMzc4LTQyNTItODA0Yi1iMGI5Mzg2NTRmYmYvMC8zNTdCN0FENzVF NkUzMzhBMjZDMkZDOUNFNEIzQTdBMjc0RkI3NjA1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzU3QjdBRDc1RTZFMzM4QTI2QzJGQzlDRTRCM0E3QTI3NEZC NzYwNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjk1NWY1YTYtZjM3OC00MjUyLTgw NGItYjBiOTM4NjU0ZmJmLzAvMzU3QjdBRDc1RTZFMzM4QTI2QzJGQzlDRTRCM0E3 QTI3NEZCNzYwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFRggVKhkaGXnlyFN67ML2CSImJh7HQW56/2 WiBLmcLq6Typ0BWST1pFNB8k/siAIbtuGsIZxaNOPzftlNjaYY1ciK2vqJp8Jfyn t2vxOTBDmBr4EQMDAm6PO98bRJ+T9rTfu1jBcW0xkRBNfNelipvbfSclGcY/PAwG bxnyOsOddUBw2wllJD+g7um3+3KFnXy2e9IofCloddt3MwiEHYXYl6b0McSwDYKf AfS0UDsJ0/92LXdYztkPURYAB3Dmh09jx99ELC0oV/9r/J9HOL4V7E9NVfpUlDKO HznAyA0mtefh9Sm/wt48PAFEYq35+9gZn00SdXEe2aOVbiQJWy4= -----END CERTIFICATE-----Generated at Wed Feb 19 22:16:37 2025 by rpki-client