$ rpki-client -vvf repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft File: 245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft (raw, json) Hash identifier: Wb1ohk3v7KlFy17lCL7qIrRZw/1jtzzT/MiTgE+vtBQ= Subject key identifier: 26:CE:9A:40:50:9B:3D:D0:51:8B:11:BB:40:DA:89:98:D2:C4:F5:48 Authority key identifier: 24:5A:17:CA:DB:2B:B2:FD:C5:78:6C:27:E5:BE:95:96:36:E7:F4:09 Certificate issuer: /CN=245A17CADB2BB2FDC5786C27E5BE959636E7F409 Certificate serial: 48240D7B71F7402020421E1F4DBE101012361F66 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/245A17CADB2BB2FDC5786C27E5BE959636E7F409.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft Manifest number: D2 Signing time: Mon 21 Apr 2025 12:51:19 +0000 Manifest this update: Mon 21 Apr 2025 12:46:19 +0000 Manifest next update: Thu 24 Apr 2025 13:52:19 +0000 Files and hashes: 1: 245A17CADB2BB2FDC5786C27E5BE959636E7F409.crl (hash: EbL5Zj++T1+3nI4sSuVMJNelOP53YL3/sAeaNFUFlCU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.crl rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/245A17CADB2BB2FDC5786C27E5BE959636E7F409.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 12:54:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:24:0d:7b:71:f7:40:20:20:42:1e:1f:4d:be:10:10:12:36:1f:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=245A17CADB2BB2FDC5786C27E5BE959636E7F409 Validity Not Before: Apr 21 12:46:19 2025 GMT Not After : Apr 24 13:52:19 2025 GMT Subject: CN=26CE9A40509B3DD0518B11BB40DA8998D2C4F548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:59:3c:27:f0:5c:e1:0d:1e:68:07:21:db:03: 5b:35:21:9d:5e:cc:1a:a5:99:a5:85:f6:4d:5e:75: 8f:dd:38:63:0b:c8:d9:e9:bf:90:15:65:7d:1e:35: f5:c5:e7:71:69:29:31:ae:28:bd:a5:bb:bb:82:16: 03:86:37:b0:a7:d4:f0:d0:7a:c7:8d:5d:79:9e:7a: 5c:87:35:3d:38:27:0e:c3:d4:f2:45:4c:3b:40:ed: 34:d4:e0:29:17:63:17:f5:d4:04:dc:ec:53:10:d7: 96:6c:6e:68:8a:f4:50:48:f6:54:77:a7:56:83:8b: 10:0d:6d:f6:fa:ad:f8:95:0b:06:d5:a4:1e:b8:29: aa:ca:c5:00:60:77:4b:a2:51:31:b7:bf:d8:06:39: 4b:0d:97:0a:19:1f:e0:03:7c:7c:f9:01:24:cf:28: ab:f3:1c:d6:e1:94:6a:53:8c:50:a1:c3:7f:08:dd: 1d:9b:10:22:e7:2e:b3:f2:b3:f9:de:71:3d:41:96: f6:9b:c7:86:1c:84:ad:e9:23:0e:38:30:5a:18:ec: 47:c3:ba:be:02:9a:a5:e0:53:43:27:8b:7d:a3:10: 8e:31:f5:77:ea:1b:07:f6:5e:62:31:1c:af:8d:1f: eb:00:06:77:79:6d:08:97:e0:2f:93:f4:9a:f0:d5: a7:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:CE:9A:40:50:9B:3D:D0:51:8B:11:BB:40:DA:89:98:D2:C4:F5:48 X509v3 Authority Key Identifier: keyid:24:5A:17:CA:DB:2B:B2:FD:C5:78:6C:27:E5:BE:95:96:36:E7:F4:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/245A17CADB2BB2FDC5786C27E5BE959636E7F409.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2f13a6ef-3434-4401-b3e1-65153066fb3e/0/245A17CADB2BB2FDC5786C27E5BE959636E7F409.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:82:a5:06:30:c3:25:01:fb:fe:77:ed:a0:7a:8e:a0:ce:6a: cf:a7:b2:a2:fd:0b:c4:d3:ec:82:ac:f1:48:68:8b:01:d1:4f: 77:b4:8b:85:0d:89:b3:79:6c:23:3f:96:2f:4c:38:c4:ef:dd: 3e:04:ce:df:72:2f:d9:45:75:0d:a7:e3:7b:cd:6a:97:3d:b0: 7c:2a:ac:df:9e:9a:a6:43:68:6b:c5:9c:58:99:e4:c6:98:ad: 51:82:17:56:4b:d1:ab:e4:cc:e0:98:6a:b4:04:3f:a6:13:0b: fb:3c:49:16:4c:29:39:8e:39:59:16:cd:4b:8d:3a:27:56:d8: 7b:6a:dc:33:94:0d:f4:9f:71:dd:a1:c2:b0:26:f1:6e:a1:b3: 0d:5e:15:bc:b4:c5:80:68:ed:7d:0b:dc:d4:29:3e:33:cc:14: 28:4f:26:c4:8d:54:c9:fb:3f:66:de:68:de:6e:64:88:81:21: 48:b0:38:13:21:82:3d:d8:a2:af:e8:96:b5:05:5e:e8:f8:9c: 41:6b:2d:a9:ac:d8:1a:5d:9f:f1:4b:3b:9c:d6:b3:72:4d:47: a8:62:51:d9:39:bd:23:cb:a0:9d:e8:8f:52:26:a2:33:d1:e0: d9:27:1b:ad:b1:65:6c:a7:a7:3c:56:3a:b8:94:88:80:31:99: cd:48:1e:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSCQNe3H3QCAgQh4fTb4QEBI2H2YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQ1QTE3Q0FEQjJCQjJGREM1Nzg2QzI3RTVCRTk1OTYz NkU3RjQwOTAeFw0yNTA0MjExMjQ2MTlaFw0yNTA0MjQxMzUyMTlaMDMxMTAvBgNV BAMTKDI2Q0U5QTQwNTA5QjNERDA1MThCMTFCQjQwREE4OTk4RDJDNEY1NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTWTwn8FzhDR5oByHbA1s1IZ1e zBqlmaWF9k1edY/dOGMLyNnpv5AVZX0eNfXF53FpKTGuKL2lu7uCFgOGN7Cn1PDQ eseNXXmeelyHNT04Jw7D1PJFTDtA7TTU4CkXYxf11ATc7FMQ15ZsbmiK9FBI9lR3 p1aDixANbfb6rfiVCwbVpB64KarKxQBgd0uiUTG3v9gGOUsNlwoZH+ADfHz5ASTP KKvzHNbhlGpTjFChw38I3R2bECLnLrPys/necT1Blvabx4YchK3pIw44MFoY7EfD ur4CmqXgU0Mni32jEI4x9XfqGwf2XmIxHK+NH+sABnd5bQiX4C+T9Jrw1ac1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJs6aQFCbPdBRixG7QNqJmNLE9UgwHwYDVR0j BBgwFoAUJFoXytsrsv3FeGwn5b6Vljbn9AkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZjEzYTZlZi0zNDM0LTQ0MDEtYjNlMS02NTE1MzA2NmZiM2UvMC8yNDVBMTdDQURC MkJCMkZEQzU3ODZDMjdFNUJFOTU5NjM2RTdGNDA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjQ1QTE3Q0FEQjJCQjJGREM1Nzg2QzI3RTVCRTk1OTYzNkU3 RjQwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmYxM2E2ZWYtMzQzNC00NDAxLWIz ZTEtNjUxNTMwNjZmYjNlLzAvMjQ1QTE3Q0FEQjJCQjJGREM1Nzg2QzI3RTVCRTk1 OTYzNkU3RjQwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAuCpQYwwyUB+/537aB6jqDOas+nsqL9C8TT 7IKs8UhoiwHRT3e0i4UNibN5bCM/li9MOMTv3T4Ezt9yL9lFdQ2n43vNapc9sHwq rN+emqZDaGvFnFiZ5MaYrVGCF1ZL0avkzOCYarQEP6YTC/s8SRZMKTmOOVkWzUuN OidW2Htq3DOUDfSfcd2hwrAm8W6hsw1eFby0xYBo7X0L3NQpPjPMFChPJsSNVMn7 P2beaN5uZIiBIUiwOBMhgj3Yoq/olrUFXuj4nEFrLams2Bpdn/FLO5zWs3JNR6hi Udk5vSPLoJ3oj1ImojPR4NknG62xZWynpzxWOriUiIAxmc1IHn0= -----END CERTIFICATE-----Generated at Mon Apr 21 16:15:39 2025 by rpki-client