$ rpki-client -vvf repo-rpki.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/D00472C77B42BC0E23D929360AA568BBAE2AA668.mft File: D00472C77B42BC0E23D929360AA568BBAE2AA668.mft (raw, json) Hash identifier: 3HUPXPdXvwjLl+HOZR1xA5go8OZq3u1nzNM7VawLuLU= Subject key identifier: D7:B6:51:B3:55:2D:1F:19:20:40:92:52:9A:1B:4D:4F:B1:9D:15:3A Authority key identifier: D0:04:72:C7:7B:42:BC:0E:23:D9:29:36:0A:A5:68:BB:AE:2A:A6:68 Certificate issuer: /CN=D00472C77B42BC0E23D929360AA568BBAE2AA668 Certificate serial: 72839E2A107151899367EF9BE08C20916F0651F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D00472C77B42BC0E23D929360AA568BBAE2AA668.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/D00472C77B42BC0E23D929360AA568BBAE2AA668.mft Manifest number: 01E4 Signing time: Fri 04 Apr 2025 02:40:04 +0000 Manifest this update: Fri 04 Apr 2025 02:35:04 +0000 Manifest next update: Mon 07 Apr 2025 08:47:04 +0000 Files and hashes: 1: D00472C77B42BC0E23D929360AA568BBAE2AA668.crl (hash: L0F1sLuTrg3GUgEJAsdaBPTUq0W/Zho5r1lg1yfJQdQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/D00472C77B42BC0E23D929360AA568BBAE2AA668.crl rsync://repo-rpki.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/D00472C77B42BC0E23D929360AA568BBAE2AA668.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D00472C77B42BC0E23D929360AA568BBAE2AA668.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 08:47:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:83:9e:2a:10:71:51:89:93:67:ef:9b:e0:8c:20:91:6f:06:51:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D00472C77B42BC0E23D929360AA568BBAE2AA668 Validity Not Before: Apr 4 02:35:04 2025 GMT Not After : Apr 7 08:47:04 2025 GMT Subject: CN=D7B651B3552D1F19204092529A1B4D4FB19D153A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d5:85:7a:cc:5c:7d:30:ea:ce:48:ea:f5:af: 24:d8:88:f9:f5:18:c6:ba:17:2d:94:28:5e:b7:34: 8a:98:b5:57:8e:67:07:55:86:1d:5b:67:b4:cb:9e: cb:b2:1d:b4:32:87:dc:dd:94:65:62:e8:a4:cb:38: 4b:fa:dd:e6:fd:10:36:cf:e1:63:80:fd:a3:e7:a3: 40:61:ac:29:ca:ef:ec:27:14:39:da:e0:a9:1a:a8: 77:9a:fd:5b:27:41:cf:4a:e2:9c:75:36:53:44:14: 9a:b5:96:5f:c2:26:28:9b:2a:74:ad:88:94:2a:30: 03:35:0c:7e:99:d1:d9:3b:ad:60:66:9d:ec:dc:c0: 5a:72:e7:91:29:9a:42:09:91:17:07:78:ed:b3:18: ec:5d:76:4e:a0:52:85:19:47:b3:b8:77:fe:62:70: cf:87:87:6d:26:62:8f:1f:d0:c2:8b:0b:f9:61:a1: 88:85:b4:d1:9a:c7:0a:7c:c1:2e:01:6c:1b:06:e2: e2:87:98:64:92:a9:3b:fb:ad:43:76:fe:45:80:87: 04:44:0c:8a:01:5d:d1:4a:0c:df:67:d8:c6:1d:34: f6:6c:25:15:54:99:76:0e:35:cf:9b:6f:32:61:1f: 89:f0:e5:ee:20:73:b0:f4:0b:40:98:85:42:e9:8e: 3b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:B6:51:B3:55:2D:1F:19:20:40:92:52:9A:1B:4D:4F:B1:9D:15:3A X509v3 Authority Key Identifier: keyid:D0:04:72:C7:7B:42:BC:0E:23:D9:29:36:0A:A5:68:BB:AE:2A:A6:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/D00472C77B42BC0E23D929360AA568BBAE2AA668.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D00472C77B42BC0E23D929360AA568BBAE2AA668.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c17369a-bcc1-42bc-b8b2-f96d50d3749d/0/D00472C77B42BC0E23D929360AA568BBAE2AA668.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption de:14:de:d2:1e:07:6b:f6:cf:5f:52:b9:fb:97:01:11:95:65: c6:27:6b:5b:1d:26:ad:16:38:1a:1c:ce:ab:4e:bc:08:a1:c4: c1:8b:96:a5:02:a3:e8:2c:35:ef:c5:8f:00:d4:57:f9:41:b2: aa:5b:ba:f7:37:b6:56:be:01:da:fe:2e:fc:37:b5:11:e0:4c: 4e:af:93:98:8e:94:9f:74:ae:b1:f2:bf:6d:14:06:e5:f8:81: 34:60:b7:3f:cd:42:f4:1c:2f:c9:bc:5a:e0:ea:6e:43:1f:d7: b0:e6:89:0c:3e:1f:db:20:8c:e0:2a:7c:90:36:c0:cc:6c:f2: b0:20:d2:06:6f:64:13:39:1c:9c:d8:95:3a:d5:7a:48:06:a3: fb:22:93:58:66:11:17:93:4f:7d:a2:0c:05:1b:0d:a9:2a:35: e7:13:d5:23:91:dd:e7:35:f0:0f:21:03:88:d6:7b:28:cb:f4: 67:74:ac:ce:a3:6a:ed:e2:34:bc:50:dd:78:e0:b4:5f:6c:7a: 64:c2:a6:ee:9f:c2:d3:73:76:1f:4a:a5:2d:5d:a7:85:02:e8: 87:19:4f:17:91:23:18:58:c6:3f:53:70:93:76:f3:ea:7b:74: 82:0d:53:f6:50:8f:bf:7f:65:17:12:05:43:b6:ab:7e:c0:e2: d2:c7:81:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcoOeKhBxUYmTZ++b4IwgkW8GUfYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDAwNDcyQzc3QjQyQkMwRTIzRDkyOTM2MEFBNTY4QkJB RTJBQTY2ODAeFw0yNTA0MDQwMjM1MDRaFw0yNTA0MDcwODQ3MDRaMDMxMTAvBgNV BAMTKEQ3QjY1MUIzNTUyRDFGMTkyMDQwOTI1MjlBMUI0RDRGQjE5RDE1M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ1YV6zFx9MOrOSOr1ryTYiPn1 GMa6Fy2UKF63NIqYtVeOZwdVhh1bZ7TLnsuyHbQyh9zdlGVi6KTLOEv63eb9EDbP 4WOA/aPno0BhrCnK7+wnFDna4KkaqHea/VsnQc9K4px1NlNEFJq1ll/CJiibKnSt iJQqMAM1DH6Z0dk7rWBmnezcwFpy55EpmkIJkRcHeO2zGOxddk6gUoUZR7O4d/5i cM+Hh20mYo8f0MKLC/lhoYiFtNGaxwp8wS4BbBsG4uKHmGSSqTv7rUN2/kWAhwRE DIoBXdFKDN9n2MYdNPZsJRVUmXYONc+bbzJhH4nw5e4gc7D0C0CYhULpjjuXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU17ZRs1UtHxkgQJJSmhtNT7GdFTowHwYDVR0j BBgwFoAU0ARyx3tCvA4j2Sk2CqVou64qpmgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzE3MzY5YS1iY2MxLTQyYmMtYjhiMi1mOTZkNTBkMzc0OWQvMC9EMDA0NzJDNzdC NDJCQzBFMjNEOTI5MzYwQUE1NjhCQkFFMkFBNjY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDAwNDcyQzc3QjQyQkMwRTIzRDkyOTM2MEFBNTY4QkJBRTJB QTY2OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMxNzM2OWEtYmNjMS00MmJjLWI4 YjItZjk2ZDUwZDM3NDlkLzAvRDAwNDcyQzc3QjQyQkMwRTIzRDkyOTM2MEFBNTY4 QkJBRTJBQTY2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAN4U3tIeB2v2z19SufuXARGVZcYna1sdJq0W OBoczqtOvAihxMGLlqUCo+gsNe/FjwDUV/lBsqpbuvc3tla+Adr+Lvw3tRHgTE6v k5iOlJ90rrHyv20UBuX4gTRgtz/NQvQcL8m8WuDqbkMf17DmiQw+H9sgjOAqfJA2 wMxs8rAg0gZvZBM5HJzYlTrVekgGo/sik1hmEReTT32iDAUbDakqNecT1SOR3ec1 8A8hA4jWeyjL9Gd0rM6jau3iNLxQ3XjgtF9semTCpu6fwtNzdh9KpS1dp4UC6IcZ TxeRIxhYxj9TcJN28+p7dIINU/ZQj79/ZRcSBUO2q37A4tLHgQU= -----END CERTIFICATE-----Generated at Sat Apr 5 21:19:28 2025 by rpki-client