$ rpki-client -vvf repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft File: 114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft (raw, json) Hash identifier: aoSrEHyc/HKBkXBH8gLBD34YdG3EEU6mHbg0JMxhVMo= Subject key identifier: 15:C4:CD:BC:EA:B6:1A:1C:9A:EC:D5:8E:0A:A6:36:EB:92:00:13:AF Authority key identifier: 11:4C:9E:7E:A9:1F:63:87:C2:CB:F1:D1:6E:A8:24:58:0C:D6:85:87 Certificate issuer: /CN=114C9E7EA91F6387C2CBF1D16EA824580CD68587 Certificate serial: 4EDC41F022814E132C25FCEBFCA629E4E23287CD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/114C9E7EA91F6387C2CBF1D16EA824580CD68587.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft Manifest number: 04BE Signing time: Sat 05 Apr 2025 03:31:58 +0000 Manifest this update: Sat 05 Apr 2025 03:26:58 +0000 Manifest next update: Tue 08 Apr 2025 04:25:58 +0000 Files and hashes: 1: 114C9E7EA91F6387C2CBF1D16EA824580CD68587.crl (hash: 56gvthkGbueW67wRklUA5Yy5Lmc073ub+oIZPyVd+gA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.crl rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/114C9E7EA91F6387C2CBF1D16EA824580CD68587.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:dc:41:f0:22:81:4e:13:2c:25:fc:eb:fc:a6:29:e4:e2:32:87:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=114C9E7EA91F6387C2CBF1D16EA824580CD68587 Validity Not Before: Apr 5 03:26:58 2025 GMT Not After : Apr 8 04:25:58 2025 GMT Subject: CN=15C4CDBCEAB61A1C9AECD58E0AA636EB920013AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:22:9c:75:98:ee:35:de:6e:61:d4:cd:00:99: bd:09:b2:bf:aa:24:a1:d7:ea:fa:ff:59:0e:e0:3c: f1:03:f8:08:18:ba:b9:cc:b4:11:ea:d2:bc:1c:73: 47:17:0e:68:82:20:de:a8:f8:ba:e0:b8:2b:6e:65: 9f:a3:76:9a:ae:a3:c4:93:7c:24:b9:42:63:7a:2c: 75:d9:f2:27:02:ab:c0:15:6b:bf:43:eb:a0:21:96: 95:6c:8e:74:67:63:ec:e8:a5:f1:98:d1:71:c2:0e: 92:bd:66:b6:d7:56:36:a0:d6:09:56:64:34:f5:53: 70:76:05:b3:9f:b0:50:52:f4:43:ec:5d:74:f9:5d: 97:1b:f7:d2:6b:d7:52:ee:69:fd:61:27:db:83:20: 74:23:a9:e9:6e:93:e1:a2:11:f6:91:1c:d0:e1:c8: 06:a2:48:de:34:50:b8:2d:e0:f1:40:85:f5:88:e9: dd:9b:35:af:2a:1f:f9:2a:09:93:52:63:7a:65:8a: 0e:51:14:ac:47:b8:a9:92:54:2b:f3:97:d4:f8:5e: fb:80:a3:82:d1:26:f4:e9:da:f7:d1:ff:3d:1e:8d: 8c:bd:cd:be:8f:00:6a:6a:5b:e7:0f:cd:ea:e2:c5: 1d:fa:e1:29:43:6d:a1:fd:18:b3:2a:a0:54:3d:46: 51:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:C4:CD:BC:EA:B6:1A:1C:9A:EC:D5:8E:0A:A6:36:EB:92:00:13:AF X509v3 Authority Key Identifier: keyid:11:4C:9E:7E:A9:1F:63:87:C2:CB:F1:D1:6E:A8:24:58:0C:D6:85:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/114C9E7EA91F6387C2CBF1D16EA824580CD68587.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:5f:95:ae:9e:a1:8b:e6:12:20:b0:d8:9f:ed:35:de:94:23: 81:42:29:2f:75:b2:ae:24:d4:b1:55:87:3e:30:52:f3:22:1d: 98:4e:fd:53:d9:55:be:ed:12:59:22:66:be:c7:42:ab:a3:4c: d2:34:b8:4e:f0:99:7e:4c:5f:e9:52:1b:75:87:20:1b:2c:ea: 53:8e:d0:2f:03:25:3a:36:70:21:52:c6:1d:d4:1c:1e:7d:a8: fe:21:e9:e4:75:54:93:69:94:60:c3:e3:2c:54:c5:43:20:95: e4:03:c9:76:bf:f5:e0:32:f2:3d:bf:38:be:d8:e2:0d:8a:ba: ca:41:b3:8a:42:e8:5c:b9:e5:9d:72:40:dd:e9:20:34:ff:37: fb:79:cc:01:44:d2:4e:a4:38:4a:c8:9e:7a:7d:fc:d2:07:64: 87:7f:e9:13:a2:4f:fe:ea:da:23:49:3e:b6:59:b5:fb:21:95: 42:03:12:8f:1a:6f:58:01:2f:83:c0:e8:b6:0a:89:26:5d:67: bf:05:d9:fa:e8:57:6c:e3:89:43:0a:55:59:5d:28:29:cc:9e: 6e:99:68:f7:3f:2e:9b:77:08:86:66:7e:63:37:5f:09:0b:0d: aa:a8:c8:f0:a8:e4:71:04:36:be:e6:3f:a7:54:49:02:64:9c: ee:2c:b9:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTtxB8CKBThMsJfzr/KYp5OIyh80wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE0QzlFN0VBOTFGNjM4N0MyQ0JGMUQxNkVBODI0NTgw Q0Q2ODU4NzAeFw0yNTA0MDUwMzI2NThaFw0yNTA0MDgwNDI1NThaMDMxMTAvBgNV BAMTKDE1QzRDREJDRUFCNjFBMUM5QUVDRDU4RTBBQTYzNkVCOTIwMDEzQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Ipx1mO413m5h1M0Amb0Jsr+q JKHX6vr/WQ7gPPED+AgYurnMtBHq0rwcc0cXDmiCIN6o+LrguCtuZZ+jdpquo8ST fCS5QmN6LHXZ8icCq8AVa79D66AhlpVsjnRnY+zopfGY0XHCDpK9ZrbXVjag1glW ZDT1U3B2BbOfsFBS9EPsXXT5XZcb99Jr11Luaf1hJ9uDIHQjqeluk+GiEfaRHNDh yAaiSN40ULgt4PFAhfWI6d2bNa8qH/kqCZNSY3plig5RFKxHuKmSVCvzl9T4XvuA o4LRJvTp2vfR/z0ejYy9zb6PAGpqW+cPzerixR364SlDbaH9GLMqoFQ9RlErAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFcTNvOq2Ghya7NWOCqY265IAE68wHwYDVR0j BBgwFoAUEUyefqkfY4fCy/HRbqgkWAzWhYcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDNlYzg0ZS02MGVmLTQ0ZDQtOWY0My04NWI2Zjk2YjI2Y2YvMC8xMTRDOUU3RUE5 MUY2Mzg3QzJDQkYxRDE2RUE4MjQ1ODBDRDY4NTg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE0QzlFN0VBOTFGNjM4N0MyQ0JGMUQxNkVBODI0NTgwQ0Q2 ODU4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQzZWM4NGUtNjBlZi00NGQ0LTlm NDMtODViNmY5NmIyNmNmLzAvMTE0QzlFN0VBOTFGNjM4N0MyQ0JGMUQxNkVBODI0 NTgwQ0Q2ODU4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAtfla6eoYvmEiCw2J/tNd6UI4FCKS91sq4k 1LFVhz4wUvMiHZhO/VPZVb7tElkiZr7HQqujTNI0uE7wmX5MX+lSG3WHIBss6lOO 0C8DJTo2cCFSxh3UHB59qP4h6eR1VJNplGDD4yxUxUMgleQDyXa/9eAy8j2/OL7Y 4g2KuspBs4pC6Fy55Z1yQN3pIDT/N/t5zAFE0k6kOErInnp9/NIHZId/6ROiT/7q 2iNJPrZZtfshlUIDEo8ab1gBL4PA6LYKiSZdZ78F2froV2zjiUMKVVldKCnMnm6Z aPc/Lpt3CIZmfmM3XwkLDaqoyPCo5HEENr7mP6dUSQJknO4suT4= -----END CERTIFICATE-----Generated at Sat Apr 5 22:35:04 2025 by rpki-client