$ rpki-client -vvf repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.mft File: 6886844AB176920850E0984917E9713667D0A025.mft (raw, json) Hash identifier: jvlqoOQ4CcdwVTXXuHC3ydE+1AqlzCrnHffvbH8hGeM= Subject key identifier: A7:A4:7A:DF:6A:D3:53:E5:B2:F8:29:31:19:B4:A6:63:AF:29:4B:6D Authority key identifier: 68:86:84:4A:B1:76:92:08:50:E0:98:49:17:E9:71:36:67:D0:A0:25 Certificate issuer: /CN=6886844AB176920850E0984917E9713667D0A025 Certificate serial: 2C432D059D0538DE1CF811536741953B78B6A41F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6886844AB176920850E0984917E9713667D0A025.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.mft Manifest number: 0173 Signing time: Sat 05 Apr 2025 09:12:13 +0000 Manifest this update: Sat 05 Apr 2025 09:07:13 +0000 Manifest next update: Tue 08 Apr 2025 15:26:13 +0000 Files and hashes: 1: 6886844AB176920850E0984917E9713667D0A025.crl (hash: mRX+99NxSkNgyELVonHPnY7kPhFRApPrW30PtAMPQSQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.crl rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6886844AB176920850E0984917E9713667D0A025.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 15:26:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:43:2d:05:9d:05:38:de:1c:f8:11:53:67:41:95:3b:78:b6:a4:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6886844AB176920850E0984917E9713667D0A025 Validity Not Before: Apr 5 09:07:13 2025 GMT Not After : Apr 8 15:26:13 2025 GMT Subject: CN=A7A47ADF6AD353E5B2F8293119B4A663AF294B6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:29:13:38:2e:48:3f:bf:d2:e7:a1:91:c0:e2: fc:6e:78:ad:4d:58:08:7f:e8:29:98:05:08:fb:4d: a3:e6:ce:75:09:e1:ff:b3:b0:a5:42:30:f8:4c:b5: b5:80:a0:ad:0b:e2:7b:f4:22:4e:ff:c9:28:a8:d0: 3e:1a:21:de:29:21:c2:ee:3e:e0:15:0a:41:cc:a2: 24:00:75:eb:96:f0:4f:fe:a5:3c:8a:41:84:74:76: b9:d5:31:58:19:c4:68:6f:db:c8:2a:be:c4:c4:38: 54:d2:fb:5c:f4:3e:b9:dc:ae:a2:53:4d:9e:53:a3: 64:1a:4f:58:c1:a4:89:3d:64:86:c8:e1:a3:a1:76: 86:a2:de:e5:0b:16:2d:33:80:03:33:2f:84:b5:82: 2e:bf:bd:fb:09:25:96:9b:46:c9:c8:0b:76:81:71: 7b:1d:2b:0f:69:94:58:da:ba:14:ec:84:86:2a:32: 8a:1d:f0:21:e2:50:40:26:cc:15:64:47:60:e5:72: 78:ee:7e:a0:e3:27:81:04:c0:37:20:a1:33:b0:40: 01:26:58:6f:78:1a:49:96:61:99:5e:bb:a5:bd:c4: a9:30:8c:0d:a0:85:50:31:a9:c6:79:4e:6b:ec:47: 5f:3f:8a:e9:0f:6f:15:a2:65:50:73:79:78:c2:09: 3b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:A4:7A:DF:6A:D3:53:E5:B2:F8:29:31:19:B4:A6:63:AF:29:4B:6D X509v3 Authority Key Identifier: keyid:68:86:84:4A:B1:76:92:08:50:E0:98:49:17:E9:71:36:67:D0:A0:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6886844AB176920850E0984917E9713667D0A025.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:eb:3d:d9:95:f2:62:c5:12:e9:4b:10:00:d1:b5:be:73:85: cb:dd:e4:f6:d6:2b:94:75:c8:d7:c9:0c:93:90:49:24:36:12: 4a:f1:7c:b3:ea:8b:a4:31:6b:fe:e1:a9:da:81:7f:ff:c7:0b: fc:15:51:cf:04:92:b3:c7:17:4b:ce:63:08:b0:b5:60:43:d8: 8a:b4:d2:9b:b1:ae:7d:45:39:a9:95:c4:15:ec:ec:fa:ed:0e: fa:12:03:8d:fa:09:97:50:f0:f2:20:3a:5b:41:18:b0:9f:af: d0:7c:b7:9c:04:5f:16:88:93:bc:e9:5f:ec:b6:61:e7:be:a0: 7d:c1:3d:0f:1b:8b:ef:27:bc:b2:2d:13:bd:1c:eb:5c:b2:14: 0f:fe:92:a9:41:17:87:ed:99:7a:b9:58:65:fb:90:8e:03:96: 11:12:1b:27:cc:c8:ed:bd:14:e7:a1:67:93:e9:32:6e:0b:5b: ca:ab:b2:4b:94:c8:a0:f1:d1:cb:35:8f:3f:bb:d3:bf:4e:55: fd:7a:95:ba:15:eb:c9:5e:80:ba:8c:5f:0e:e6:e9:2e:69:2f: 0e:41:8a:6f:3b:0f:20:86:be:40:bb:80:0d:54:18:58:95:d1: a4:8f:11:71:e8:43:0e:18:a8:e6:42:1e:46:f2:54:68:15:e6: dc:b5:de:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULEMtBZ0FON4c+BFTZ0GVO3i2pB8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg4Njg0NEFCMTc2OTIwODUwRTA5ODQ5MTdFOTcxMzY2 N0QwQTAyNTAeFw0yNTA0MDUwOTA3MTNaFw0yNTA0MDgxNTI2MTNaMDMxMTAvBgNV BAMTKEE3QTQ3QURGNkFEMzUzRTVCMkY4MjkzMTE5QjRBNjYzQUYyOTRCNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLKRM4Lkg/v9LnoZHA4vxueK1N WAh/6CmYBQj7TaPmznUJ4f+zsKVCMPhMtbWAoK0L4nv0Ik7/ySio0D4aId4pIcLu PuAVCkHMoiQAdeuW8E/+pTyKQYR0drnVMVgZxGhv28gqvsTEOFTS+1z0PrncrqJT TZ5To2QaT1jBpIk9ZIbI4aOhdoai3uULFi0zgAMzL4S1gi6/vfsJJZabRsnIC3aB cXsdKw9plFjauhTshIYqMood8CHiUEAmzBVkR2DlcnjufqDjJ4EEwDcgoTOwQAEm WG94GkmWYZleu6W9xKkwjA2ghVAxqcZ5TmvsR18/iukPbxWiZVBzeXjCCTtVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp6R632rTU+Wy+CkxGbSmY68pS20wHwYDVR0j BBgwFoAUaIaESrF2kghQ4JhJF+lxNmfQoCUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDU1Y2IyOS01Mjc2LTRhNzktYjMzYS1jYzUxNTE3YmRkMTgvMC82ODg2ODQ0QUIx NzY5MjA4NTBFMDk4NDkxN0U5NzEzNjY3RDBBMDI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg4Njg0NEFCMTc2OTIwODUwRTA5ODQ5MTdFOTcxMzY2N0Qw QTAyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQ1NWNiMjktNTI3Ni00YTc5LWIz M2EtY2M1MTUxN2JkZDE4LzAvNjg4Njg0NEFCMTc2OTIwODUwRTA5ODQ5MTdFOTcx MzY2N0QwQTAyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHLrPdmV8mLFEulLEADRtb5zhcvd5PbWK5R1 yNfJDJOQSSQ2EkrxfLPqi6Qxa/7hqdqBf//HC/wVUc8EkrPHF0vOYwiwtWBD2Iq0 0puxrn1FOamVxBXs7PrtDvoSA436CZdQ8PIgOltBGLCfr9B8t5wEXxaIk7zpX+y2 Yee+oH3BPQ8bi+8nvLItE70c61yyFA/+kqlBF4ftmXq5WGX7kI4DlhESGyfMyO29 FOehZ5PpMm4LW8qrskuUyKDx0cs1jz+7079OVf16lboV68legLqMXw7m6S5pLw5B im87DyCGvkC7gA1UGFiV0aSPEXHoQw4YqOZCHkbyVGgV5ty13lc= -----END CERTIFICATE-----Generated at Sun Apr 6 11:18:37 2025 by rpki-client