$ rpki-client -vvf repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft File: 1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft (raw, json) Hash identifier: Kegy1vCpxKiF/VwTTGr0PQObtscDTdzmgf72Q6gvwh8= Subject key identifier: DF:DA:3D:11:7E:81:7B:18:57:E4:C6:7F:B1:C7:B7:0E:E4:2A:1B:56 Authority key identifier: 1A:4C:E5:46:9A:9D:AB:D2:77:C7:F1:A6:C2:E0:0D:B1:13:69:7A:D8 Certificate issuer: /CN=1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8 Certificate serial: 1C06B6BA79E9963FE3D0E789FFFACEF86972BDF1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft Manifest number: 8F Signing time: Sat 05 Apr 2025 19:10:04 +0000 Manifest this update: Sat 05 Apr 2025 19:05:04 +0000 Manifest next update: Wed 09 Apr 2025 04:54:04 +0000 Files and hashes: 1: 1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.crl (hash: rLdal+FTD6hEqBJTkjZkd2mzzRIjTxUK6DhMJCsEaq0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.crl rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:06:b6:ba:79:e9:96:3f:e3:d0:e7:89:ff:fa:ce:f8:69:72:bd:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8 Validity Not Before: Apr 5 19:05:04 2025 GMT Not After : Apr 9 04:54:04 2025 GMT Subject: CN=DFDA3D117E817B1857E4C67FB1C7B70EE42A1B56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:53:d9:ec:32:21:16:ce:41:fd:b6:8a:b7:88: 9e:cd:3b:e0:83:5e:78:03:86:ae:bc:f0:de:7e:a6: f2:9b:93:bf:3d:07:6c:8b:79:08:14:5e:33:ae:62: 04:a1:ab:f4:09:6f:d3:30:a2:62:80:ba:5f:d0:62: d1:e6:2e:1b:65:07:a6:ec:84:1e:f1:4f:78:7b:ba: b3:92:e0:74:5f:7d:df:3b:8b:49:b7:27:f6:30:eb: 37:bf:27:5a:2f:ae:35:d1:31:92:c3:e0:dc:03:a1: 7f:2a:1a:d0:99:32:5d:02:39:6a:91:de:83:5f:21: 9b:08:59:6c:cc:54:b5:77:ae:57:f9:47:da:c5:e9: 25:57:7c:10:7d:6c:5c:c8:21:96:a5:3f:55:5c:b2: e0:cb:b7:7f:70:f8:f3:3b:e3:17:05:ee:72:ef:e0: 0c:3d:e9:d7:47:19:73:56:2b:74:7c:16:ca:6b:50: 1d:54:f7:d3:e8:90:39:85:77:a1:8d:11:22:b9:9b: fa:00:cd:a7:e6:dd:35:66:06:18:b6:a8:53:2a:77: 43:35:49:aa:e1:70:6f:8c:ab:5d:1f:6e:ea:b5:8d: a8:7e:7c:8d:4a:fa:77:67:67:2b:09:ad:a3:e9:fc: 9e:0c:a3:e7:6c:13:99:ae:1c:47:d7:ee:11:ba:ba: a2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:DA:3D:11:7E:81:7B:18:57:E4:C6:7F:B1:C7:B7:0E:E4:2A:1B:56 X509v3 Authority Key Identifier: keyid:1A:4C:E5:46:9A:9D:AB:D2:77:C7:F1:A6:C2:E0:0D:B1:13:69:7A:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:6a:53:67:b1:8f:d0:4e:24:e1:99:fb:64:54:d9:fd:c7:ef: a0:0a:89:9d:cc:36:60:12:3a:b7:c2:6a:2d:54:1a:90:27:a4: b1:3d:ea:c9:7c:92:0b:84:b7:2a:b8:eb:8e:a4:0b:83:7d:bb: 46:3a:bd:67:a6:0c:ce:6b:2e:b7:f6:04:8d:97:95:d8:c7:26: a7:e7:ba:20:22:b2:a1:a9:f8:81:f8:27:13:a5:ef:08:18:18: b6:e0:52:17:67:74:76:9d:01:f7:9a:6d:7f:ac:50:57:a8:ea: 6e:cc:15:71:3d:02:34:c8:f8:86:f7:9a:a4:51:58:46:d2:bc: 8b:68:ca:f4:65:47:59:73:c7:76:0f:42:73:c7:de:a9:4c:ae: a0:4a:01:b3:d2:3d:7d:b8:c9:f7:43:8b:52:20:55:f7:56:bb: 59:67:a2:0e:81:22:18:41:d4:61:dc:a1:55:15:4d:bb:68:c9: cb:c0:6c:57:a9:65:18:6e:3f:28:1c:02:3d:8a:8f:0a:da:66: 04:67:55:ee:be:31:69:18:87:1a:c9:f7:07:4f:14:e7:d2:f7: b3:8f:c1:da:fb:d8:04:5a:6d:07:34:87:a2:40:4e:0f:9a:d5: 4f:5b:b8:15:b5:e4:1f:58:bc:22:10:23:61:7b:2e:56:e2:e4: 43:4e:fb:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHAa2unnplj/j0OeJ//rO+GlyvfEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE0Q0U1NDY5QTlEQUJEMjc3QzdGMUE2QzJFMDBEQjEx MzY5N0FEODAeFw0yNTA0MDUxOTA1MDRaFw0yNTA0MDkwNDU0MDRaMDMxMTAvBgNV BAMTKERGREEzRDExN0U4MTdCMTg1N0U0QzY3RkIxQzdCNzBFRTQyQTFCNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEU9nsMiEWzkH9toq3iJ7NO+CD XngDhq688N5+pvKbk789B2yLeQgUXjOuYgShq/QJb9MwomKAul/QYtHmLhtlB6bs hB7xT3h7urOS4HRffd87i0m3J/Yw6ze/J1ovrjXRMZLD4NwDoX8qGtCZMl0COWqR 3oNfIZsIWWzMVLV3rlf5R9rF6SVXfBB9bFzIIZalP1VcsuDLt39w+PM74xcF7nLv 4Aw96ddHGXNWK3R8FsprUB1U99PokDmFd6GNESK5m/oAzafm3TVmBhi2qFMqd0M1 SarhcG+Mq10fbuq1jah+fI1K+ndnZysJraPp/J4Mo+dsE5muHEfX7hG6uqKnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU39o9EX6BexhX5MZ/sce3DuQqG1YwHwYDVR0j BBgwFoAUGkzlRpqdq9J3x/GmwuANsRNpetgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MDM3YjYzYy1lNDk4LTRlNDctYjk3ZS02N2FiYTQ1ODc4MWMvMC8xQTRDRTU0NjlB OURBQkQyNzdDN0YxQTZDMkUwMERCMTEzNjk3QUQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUE0Q0U1NDY5QTlEQUJEMjc3QzdGMUE2QzJFMDBEQjExMzY5 N0FEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzAzN2I2M2MtZTQ5OC00ZTQ3LWI5 N2UtNjdhYmE0NTg3ODFjLzAvMUE0Q0U1NDY5QTlEQUJEMjc3QzdGMUE2QzJFMDBE QjExMzY5N0FEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGlqU2exj9BOJOGZ+2RU2f3H76AKiZ3MNmAS OrfCai1UGpAnpLE96sl8kguEtyq4646kC4N9u0Y6vWemDM5rLrf2BI2XldjHJqfn uiAisqGp+IH4JxOl7wgYGLbgUhdndHadAfeabX+sUFeo6m7MFXE9AjTI+Ib3mqRR WEbSvItoyvRlR1lzx3YPQnPH3qlMrqBKAbPSPX24yfdDi1IgVfdWu1lnog6BIhhB 1GHcoVUVTbtoycvAbFepZRhuPygcAj2KjwraZgRnVe6+MWkYhxrJ9wdPFOfS97OP wdr72ARabQc0h6JATg+a1U9buBW15B9YvCIQI2F7Llbi5ENO+5o= -----END CERTIFICATE-----Generated at Sat Apr 5 21:19:00 2025 by rpki-client