$ rpki-client -vvf repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/F389B5570A768F4811B6377427EE5A9710A3078F.mft File: F389B5570A768F4811B6377427EE5A9710A3078F.mft (raw, json) Hash identifier: TIzLc0qsGpewNiWiLDk3p12HMT1qGgS9PzzTz1tYO4k= Subject key identifier: DC:9A:12:6E:3C:81:A8:EA:88:8B:EE:9A:A7:6A:50:B5:9B:DD:E8:C4 Authority key identifier: F3:89:B5:57:0A:76:8F:48:11:B6:37:74:27:EE:5A:97:10:A3:07:8F Certificate issuer: /CN=F389B5570A768F4811B6377427EE5A9710A3078F Certificate serial: 6F3426B0B32651A6985218AE0550293082ACD0F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F389B5570A768F4811B6377427EE5A9710A3078F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/F389B5570A768F4811B6377427EE5A9710A3078F.mft Manifest number: 0306 Signing time: Thu 03 Apr 2025 08:00:50 +0000 Manifest this update: Thu 03 Apr 2025 07:55:50 +0000 Manifest next update: Sun 06 Apr 2025 17:24:50 +0000 Files and hashes: 1: F389B5570A768F4811B6377427EE5A9710A3078F.crl (hash: CYHeFiIoCQrzvTrLvrB5IzobEgIjB6GGC98JPkVbbL4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/F389B5570A768F4811B6377427EE5A9710A3078F.crl rsync://repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/F389B5570A768F4811B6377427EE5A9710A3078F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F389B5570A768F4811B6377427EE5A9710A3078F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 17:24:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:34:26:b0:b3:26:51:a6:98:52:18:ae:05:50:29:30:82:ac:d0:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F389B5570A768F4811B6377427EE5A9710A3078F Validity Not Before: Apr 3 07:55:50 2025 GMT Not After : Apr 6 17:24:50 2025 GMT Subject: CN=DC9A126E3C81A8EA888BEE9AA76A50B59BDDE8C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:6a:75:01:16:98:45:f5:12:a3:4e:2a:03:7d: ad:54:10:0d:15:5f:7e:d4:97:ca:ed:2d:2f:f0:a8: ee:4e:88:3e:1e:f6:b4:5d:fd:9f:34:39:86:5b:ed: 23:1e:49:7c:0c:07:f3:ab:89:f4:78:88:ea:33:82: 58:ab:3a:3f:af:a0:34:98:f3:1f:74:74:d0:e4:35: 74:a8:60:7f:b7:60:70:fa:9c:95:92:65:fc:3b:d4: 13:16:ec:23:bb:47:4b:bd:2d:31:70:83:70:9f:d8: da:55:0e:b1:97:43:ac:db:a9:3a:5f:bc:b2:2d:09: be:d7:cb:d6:cd:f4:66:a0:3a:cb:cd:af:b3:46:cd: c0:95:61:dd:bf:14:ae:ff:84:52:9d:92:6c:d1:ac: a5:ce:c9:1b:6a:45:79:47:6f:77:7c:25:24:5b:08: c7:95:f5:5b:6d:8d:20:03:ad:29:62:cc:23:fc:eb: fd:e4:73:cf:0d:f4:24:22:f8:b6:7d:41:73:63:82: a8:08:9e:e4:e8:c7:e0:16:c6:f3:b2:d5:14:38:5c: 46:5b:f9:0b:25:c2:f4:ff:c2:9a:c2:53:e2:79:17: 55:34:45:ed:8c:ff:27:6a:52:67:45:02:c2:a5:52: eb:57:7c:2c:58:99:00:a4:3a:b0:e5:83:90:a9:82: cb:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:9A:12:6E:3C:81:A8:EA:88:8B:EE:9A:A7:6A:50:B5:9B:DD:E8:C4 X509v3 Authority Key Identifier: keyid:F3:89:B5:57:0A:76:8F:48:11:B6:37:74:27:EE:5A:97:10:A3:07:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/F389B5570A768F4811B6377427EE5A9710A3078F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F389B5570A768F4811B6377427EE5A9710A3078F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c8ab3e0-ca68-42f6-98f6-654a252a8648/0/F389B5570A768F4811B6377427EE5A9710A3078F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:04:6b:6a:fa:44:dc:fc:9c:fc:2e:a3:81:c2:45:0d:26:a2: 4f:f5:de:01:03:f4:5f:06:53:ef:27:98:5f:2f:c1:4a:a5:75: ca:ac:be:cb:bd:68:ce:f6:a4:02:7d:fe:b9:ae:4f:d0:3a:6f: 15:e6:b3:fe:b8:35:c1:12:e1:bf:3a:34:ec:09:72:5d:9b:08: 5d:2c:89:66:8c:e1:03:82:12:fd:95:d5:a3:bd:ec:03:21:c2: ea:7b:0d:09:3b:38:f3:b6:51:5e:eb:3b:41:5e:4e:50:6e:14: 6a:df:5f:61:c0:80:a6:3c:2e:64:85:aa:8f:5f:c6:ba:28:32: 94:b5:66:6a:53:16:ec:3a:47:4e:06:01:90:16:23:7a:d3:c1: 23:a3:ea:86:9e:99:c0:90:4c:8f:b0:87:37:47:20:54:29:8e: 50:6d:67:d4:56:21:a3:4f:6a:56:3b:dd:bf:a6:8d:e6:50:e7: d6:61:c1:db:60:95:a8:9f:83:7b:eb:72:35:6e:65:8c:ad:70: c6:1c:67:28:b3:20:98:d3:1b:8d:42:4c:c1:b0:8e:f2:01:14: 7c:89:ed:5b:4f:94:83:15:ed:cc:79:35:0f:84:c8:b4:76:77: 3c:09:95:9b:a5:e1:35:a8:d6:dc:8f:fb:40:ad:c1:f5:2e:a0: 1e:13:1a:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbzQmsLMmUaaYUhiuBVApMIKs0PUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM4OUI1NTcwQTc2OEY0ODExQjYzNzc0MjdFRTVBOTcx MEEzMDc4RjAeFw0yNTA0MDMwNzU1NTBaFw0yNTA0MDYxNzI0NTBaMDMxMTAvBgNV BAMTKERDOUExMjZFM0M4MUE4RUE4ODhCRUU5QUE3NkE1MEI1OUJEREU4QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUanUBFphF9RKjTioDfa1UEA0V X37Ul8rtLS/wqO5OiD4e9rRd/Z80OYZb7SMeSXwMB/OrifR4iOozglirOj+voDSY 8x90dNDkNXSoYH+3YHD6nJWSZfw71BMW7CO7R0u9LTFwg3Cf2NpVDrGXQ6zbqTpf vLItCb7Xy9bN9GagOsvNr7NGzcCVYd2/FK7/hFKdkmzRrKXOyRtqRXlHb3d8JSRb CMeV9VttjSADrSlizCP86/3kc88N9CQi+LZ9QXNjgqgInuTox+AWxvOy1RQ4XEZb +QslwvT/wprCU+J5F1U0Re2M/ydqUmdFAsKlUutXfCxYmQCkOrDlg5CpgssfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3JoSbjyBqOqIi+6ap2pQtZvd6MQwHwYDVR0j BBgwFoAU84m1Vwp2j0gRtjd0J+5alxCjB48wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzhhYjNlMC1jYTY4LTQyZjYtOThmNi02NTRhMjUyYTg2NDgvMC9GMzg5QjU1NzBB NzY4RjQ4MTFCNjM3NzQyN0VFNUE5NzEwQTMwNzhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjM4OUI1NTcwQTc2OEY0ODExQjYzNzc0MjdFRTVBOTcxMEEz MDc4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M4YWIzZTAtY2E2OC00MmY2LTk4 ZjYtNjU0YTI1MmE4NjQ4LzAvRjM4OUI1NTcwQTc2OEY0ODExQjYzNzc0MjdFRTVB OTcxMEEzMDc4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACYEa2r6RNz8nPwuo4HCRQ0mok/13gED9F8G U+8nmF8vwUqldcqsvsu9aM72pAJ9/rmuT9A6bxXms/64NcES4b86NOwJcl2bCF0s iWaM4QOCEv2V1aO97AMhwup7DQk7OPO2UV7rO0FeTlBuFGrfX2HAgKY8LmSFqo9f xrooMpS1ZmpTFuw6R04GAZAWI3rTwSOj6oaemcCQTI+whzdHIFQpjlBtZ9RWIaNP alY73b+mjeZQ59Zhwdtglaifg3vrcjVuZYytcMYcZyizIJjTG41CTMGwjvIBFHyJ 7VtPlIMV7cx5NQ+EyLR2dzwJlZul4TWo1tyP+0CtwfUuoB4TGtQ= -----END CERTIFICATE-----Generated at Sat Apr 5 18:06:40 2025 by rpki-client