$ rpki-client -vvf repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft File: 3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft (raw, json) Hash identifier: wSj4f27FGYsU52XZIFgaKynHfm0+HjqkXtQy2EPCjJk= Subject key identifier: 77:B1:40:AB:6C:4D:A7:D8:A6:9B:CB:07:F6:FF:8C:8A:63:E3:21:64 Authority key identifier: 3D:6B:7D:1E:71:83:96:2C:FD:ED:18:9F:6C:36:FF:F3:03:A0:DA:00 Certificate issuer: /CN=3D6B7D1E7183962CFDED189F6C36FFF303A0DA00 Certificate serial: 53F57AFAE4F11BA9B83465CA36A60AD9CC0804B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft Manifest number: C5 Signing time: Sat 05 Apr 2025 13:00:43 +0000 Manifest this update: Sat 05 Apr 2025 12:55:43 +0000 Manifest next update: Tue 08 Apr 2025 22:47:43 +0000 Files and hashes: 1: 3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.crl (hash: CcAYjLoXpNMfl66ExHp/FMfT3hcb67/q/nXKiZNlFtk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.crl rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:f5:7a:fa:e4:f1:1b:a9:b8:34:65:ca:36:a6:0a:d9:cc:08:04:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D6B7D1E7183962CFDED189F6C36FFF303A0DA00 Validity Not Before: Apr 5 12:55:43 2025 GMT Not After : Apr 8 22:47:43 2025 GMT Subject: CN=77B140AB6C4DA7D8A69BCB07F6FF8C8A63E32164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a6:5a:ab:7a:af:e1:c6:7f:02:b8:b8:4f:48: 3c:b6:cf:10:65:9e:97:17:d2:9c:95:70:05:3f:66: 4e:04:6a:bb:54:68:50:70:16:18:41:cc:83:df:9c: dd:79:0f:ca:bf:55:51:44:7d:48:49:dc:31:e0:82: 80:bb:7d:15:84:42:d7:72:9a:54:d2:92:35:06:b5: da:a3:5f:8f:7e:20:71:89:88:be:cf:c7:0d:d4:9d: 12:52:6a:2c:ba:3e:29:ef:e5:0f:37:17:e2:2f:93: 81:6c:2a:ed:8e:83:7f:9f:12:f9:44:f7:08:82:8a: f6:4f:8e:3f:6b:eb:d9:b1:89:71:0b:ed:31:1c:5f: 55:c9:c2:07:85:95:40:ef:7a:0e:3b:46:08:85:14: a2:30:39:a5:80:21:ce:3e:5f:3a:95:c3:4b:eb:86: 89:c5:e4:f0:aa:c2:98:ed:86:cc:53:80:5f:15:d3: b9:0b:1c:32:9a:2a:b4:11:4e:62:9f:a2:db:05:f3: 52:12:83:3c:91:19:c5:0c:08:1a:fb:9e:03:43:4f: d8:6e:1c:d5:6c:8b:9f:8b:46:04:76:7d:52:af:78: 3f:7b:00:bc:e4:2e:bf:f5:35:b7:d8:c5:9b:3d:d1: 6e:bb:cd:02:b7:43:f7:94:e8:e2:1c:3e:6f:dd:9a: e2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:B1:40:AB:6C:4D:A7:D8:A6:9B:CB:07:F6:FF:8C:8A:63:E3:21:64 X509v3 Authority Key Identifier: keyid:3D:6B:7D:1E:71:83:96:2C:FD:ED:18:9F:6C:36:FF:F3:03:A0:DA:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52bd0e94-8603-457f-b537-9231084bc450/0/3D6B7D1E7183962CFDED189F6C36FFF303A0DA00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:a9:e6:ca:ff:03:72:b4:8c:ba:f4:a3:5c:14:07:e8:42:26: 92:c3:86:fd:f9:ca:c9:2d:f3:83:b4:3b:e8:e9:19:68:b5:15: 88:00:cb:47:af:4d:a1:1c:d0:52:e4:7c:32:8f:50:36:a2:ce: b9:77:2f:70:8a:2b:ed:75:e7:39:09:24:c0:2a:93:f2:c1:1d: ad:b2:5c:17:bb:1d:af:5f:ba:52:27:86:6f:a1:36:0a:f4:e4: a4:e6:58:6c:c0:58:eb:be:a7:1c:06:d3:6f:27:e0:a8:37:bb: 87:b6:25:ce:46:4f:84:fb:35:29:30:87:6a:55:0e:08:e2:f9: ef:46:e2:91:7b:9c:fe:97:bf:90:51:c4:64:0b:66:8d:41:a3: f8:74:59:d5:02:2e:cd:27:67:4b:a7:4c:ef:7f:ff:47:a9:e9: d7:fb:53:c2:57:7d:b4:a6:10:92:8d:fb:0d:c5:bc:b4:a4:e3: d0:a0:85:32:7a:f5:99:cb:6e:df:a4:06:73:3f:ec:b4:d9:6b: 1e:a2:7b:59:97:9f:ab:6a:f8:9a:52:1f:78:f2:11:a1:84:66: 4b:23:7b:0c:1b:af:7d:34:1d:fc:e9:b1:a0:7f:3f:3b:e6:df: 96:7c:c2:b9:88:a8:70:32:8c:62:16:59:54:f8:5f:e5:a4:57: 0c:7f:3d:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU/V6+uTxG6m4NGXKNqYK2cwIBLEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q2QjdEMUU3MTgzOTYyQ0ZERUQxODlGNkMzNkZGRjMw M0EwREEwMDAeFw0yNTA0MDUxMjU1NDNaFw0yNTA0MDgyMjQ3NDNaMDMxMTAvBgNV BAMTKDc3QjE0MEFCNkM0REE3RDhBNjlCQ0IwN0Y2RkY4QzhBNjNFMzIxNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDplqreq/hxn8CuLhPSDy2zxBl npcX0pyVcAU/Zk4EartUaFBwFhhBzIPfnN15D8q/VVFEfUhJ3DHggoC7fRWEQtdy mlTSkjUGtdqjX49+IHGJiL7Pxw3UnRJSaiy6Pinv5Q83F+Ivk4FsKu2Og3+fEvlE 9wiCivZPjj9r69mxiXEL7TEcX1XJwgeFlUDveg47RgiFFKIwOaWAIc4+XzqVw0vr honF5PCqwpjthsxTgF8V07kLHDKaKrQRTmKfotsF81ISgzyRGcUMCBr7ngNDT9hu HNVsi5+LRgR2fVKveD97ALzkLr/1NbfYxZs90W67zQK3Q/eU6OIcPm/dmuJhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd7FAq2xNp9imm8sH9v+MimPjIWQwHwYDVR0j BBgwFoAUPWt9HnGDliz97RifbDb/8wOg2gAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MmJkMGU5NC04NjAzLTQ1N2YtYjUzNy05MjMxMDg0YmM0NTAvMC8zRDZCN0QxRTcx ODM5NjJDRkRFRDE4OUY2QzM2RkZGMzAzQTBEQTAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0Q2QjdEMUU3MTgzOTYyQ0ZERUQxODlGNkMzNkZGRjMwM0Ew REEwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTJiZDBlOTQtODYwMy00NTdmLWI1 MzctOTIzMTA4NGJjNDUwLzAvM0Q2QjdEMUU3MTgzOTYyQ0ZERUQxODlGNkMzNkZG RjMwM0EwREEwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGSp5sr/A3K0jLr0o1wUB+hCJpLDhv35yskt 84O0O+jpGWi1FYgAy0evTaEc0FLkfDKPUDaizrl3L3CKK+115zkJJMAqk/LBHa2y XBe7Ha9fulInhm+hNgr05KTmWGzAWOu+pxwG028n4Kg3u4e2Jc5GT4T7NSkwh2pV Dgji+e9G4pF7nP6Xv5BRxGQLZo1Bo/h0WdUCLs0nZ0unTO9//0ep6df7U8JXfbSm EJKN+w3FvLSk49CghTJ69ZnLbt+kBnM/7LTZax6ie1mXn6tq+JpSH3jyEaGEZksj ewwbr300HfzpsaB/Pzvm35Z8wrmIqHAyjGIWWVT4X+WkVwx/PeU= -----END CERTIFICATE-----Generated at Sat Apr 5 16:44:52 2025 by rpki-client