$ rpki-client -vvf repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.mft File: 338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.mft (raw, json) Hash identifier: htCw32YcJ5Ldk4X0OJjvrEjrQBQYbnplatbkmgPyB+o= Subject key identifier: 66:68:27:76:57:6C:69:8E:FD:8D:37:7E:C6:75:17:01:4C:B1:FD:C9 Authority key identifier: 33:8D:EB:8D:70:51:C6:3F:C6:CC:D7:B1:A5:DD:8C:9E:3C:93:B9:6B Certificate issuer: /CN=338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B Certificate serial: 72ECD5E51FBB95B96CCE874F95E5214A2BC2BB7A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.mft Manifest number: 048D Signing time: Thu 03 Apr 2025 05:21:59 +0000 Manifest this update: Thu 03 Apr 2025 05:16:59 +0000 Manifest next update: Sun 06 Apr 2025 15:30:59 +0000 Files and hashes: 1: 338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.crl (hash: xM58J8kAWvixsJ1pKekyyW/uDGyqcCqeG0qa9b+P+D4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.crl rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 15:30:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:ec:d5:e5:1f:bb:95:b9:6c:ce:87:4f:95:e5:21:4a:2b:c2:bb:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B Validity Not Before: Apr 3 05:16:59 2025 GMT Not After : Apr 6 15:30:59 2025 GMT Subject: CN=66682776576C698EFD8D377EC67517014CB1FDC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d9:7c:78:92:52:f7:6e:56:a0:d4:f5:25:21: 03:9e:72:1a:f0:b3:78:97:1f:d3:a9:ad:94:0a:79: d3:f6:4a:d4:1e:1b:50:2b:d7:64:32:03:d0:58:6f: 66:33:67:e6:b9:ac:7e:fd:4c:2c:9e:71:b6:48:d3: 1f:a4:9d:3d:f0:73:97:97:40:de:5b:38:40:1a:ea: ef:bb:cf:22:26:1d:1e:44:30:75:3a:6d:a6:ec:69: b8:2a:45:1c:a6:67:82:91:af:0a:f0:ee:2d:af:87: 9e:d8:37:e6:d9:0b:8f:fa:5d:c6:07:df:38:21:13: d2:c4:9a:a0:fd:75:d6:b6:e5:27:2e:5e:0a:d1:6b: 87:77:63:6f:e2:38:42:89:e0:08:16:62:10:52:ae: 4a:9a:17:5f:be:e7:a4:07:26:14:ca:7b:85:73:21: de:d8:84:bd:d5:af:86:e5:2e:c6:c6:22:a8:f7:a6: 20:c9:51:9a:91:f7:73:26:e1:84:35:ef:d0:20:9b: 88:93:f9:97:c3:18:d4:34:c9:55:11:3d:8a:1f:05: 18:2d:b2:33:e2:c1:b2:97:ca:69:da:35:53:e5:ba: f6:a8:81:42:1a:3b:d7:64:60:c5:78:40:64:b1:66: 6f:dc:de:de:47:45:9b:af:8a:2d:17:5d:6a:03:7e: b5:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:68:27:76:57:6C:69:8E:FD:8D:37:7E:C6:75:17:01:4C:B1:FD:C9 X509v3 Authority Key Identifier: keyid:33:8D:EB:8D:70:51:C6:3F:C6:CC:D7:B1:A5:DD:8C:9E:3C:93:B9:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:9d:89:0e:8c:5f:83:b8:b1:38:ff:f0:8c:97:03:ae:95:14: 69:c2:a5:be:cb:12:ae:54:72:91:aa:ff:67:f7:c5:5a:00:bb: 45:95:c9:72:55:46:1c:ea:8e:83:86:00:b9:4c:94:d4:fb:05: 58:68:1f:96:b4:1d:df:b9:88:df:01:68:16:67:65:af:35:65: 4b:a8:10:e6:76:38:a5:79:b0:c5:5f:ba:22:ca:da:ba:b1:54: 03:ad:b0:47:65:d1:0e:73:c1:e5:08:bc:62:8d:21:80:28:85: 72:cf:88:a2:76:ba:d0:74:63:7a:61:4d:b2:d6:63:aa:ab:06: 43:7b:78:b1:ba:cc:43:79:13:41:f5:db:98:af:a4:1e:a4:39: 14:46:c7:15:9f:fc:00:c3:96:b0:34:67:a5:ce:08:5b:0d:9c: 0b:b0:e7:e0:0a:b0:72:f6:d3:ce:86:cc:db:3c:4a:9c:e8:41: 1c:28:a1:f0:ee:fb:84:01:16:d7:c3:45:b1:01:63:a4:a9:9f: ab:0d:28:37:1a:80:77:92:1a:ab:b5:ef:b5:fe:22:67:3a:97: 99:ab:b3:fb:fe:2d:f7:11:89:73:b6:8f:7d:03:8c:a0:96:d6: 4c:b0:93:fd:77:3c:df:5c:95:b6:6d:c7:d7:82:c1:a8:77:1d: a9:ec:58:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcuzV5R+7lblszodPleUhSivCu3owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM4REVCOEQ3MDUxQzYzRkM2Q0NEN0IxQTVERDhDOUUz QzkzQjk2QjAeFw0yNTA0MDMwNTE2NTlaFw0yNTA0MDYxNTMwNTlaMDMxMTAvBgNV BAMTKDY2NjgyNzc2NTc2QzY5OEVGRDhEMzc3RUM2NzUxNzAxNENCMUZEQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE2Xx4klL3blag1PUlIQOechrw s3iXH9OprZQKedP2StQeG1Ar12QyA9BYb2YzZ+a5rH79TCyecbZI0x+knT3wc5eX QN5bOEAa6u+7zyImHR5EMHU6babsabgqRRymZ4KRrwrw7i2vh57YN+bZC4/6XcYH 3zghE9LEmqD9dda25ScuXgrRa4d3Y2/iOEKJ4AgWYhBSrkqaF1++56QHJhTKe4Vz Id7YhL3Vr4blLsbGIqj3piDJUZqR93Mm4YQ179Agm4iT+ZfDGNQ0yVURPYofBRgt sjPiwbKXymnaNVPluvaogUIaO9dkYMV4QGSxZm/c3t5HRZuvii0XXWoDfrWLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZmgndldsaY79jTd+xnUXAUyx/ckwHwYDVR0j BBgwFoAUM43rjXBRxj/GzNexpd2MnjyTuWswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MjRhNjVmNC00ZjRiLTQ0YjYtYTJlYi01OTk1N2JjNmE0ZDMvMC8zMzhERUI4RDcw NTFDNjNGQzZDQ0Q3QjFBNUREOEM5RTNDOTNCOTZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzM4REVCOEQ3MDUxQzYzRkM2Q0NEN0IxQTVERDhDOUUzQzkz Qjk2Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzI0YTY1ZjQtNGY0Yi00NGI2LWEy ZWItNTk5NTdiYzZhNGQzLzAvMzM4REVCOEQ3MDUxQzYzRkM2Q0NEN0IxQTVERDhD OUUzQzkzQjk2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJCdiQ6MX4O4sTj/8IyXA66VFGnCpb7LEq5U cpGq/2f3xVoAu0WVyXJVRhzqjoOGALlMlNT7BVhoH5a0Hd+5iN8BaBZnZa81ZUuo EOZ2OKV5sMVfuiLK2rqxVAOtsEdl0Q5zweUIvGKNIYAohXLPiKJ2utB0Y3phTbLW Y6qrBkN7eLG6zEN5E0H125ivpB6kORRGxxWf/ADDlrA0Z6XOCFsNnAuw5+AKsHL2 086GzNs8SpzoQRwoofDu+4QBFtfDRbEBY6Spn6sNKDcagHeSGqu177X+Imc6l5mr s/v+LfcRiXO2j30DjKCW1kywk/13PN9clbZtx9eCwah3HansWPQ= -----END CERTIFICATE-----Generated at Sat Apr 5 16:39:53 2025 by rpki-client