$ rpki-client -vvf repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft File: F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft (raw, json) Hash identifier: 5l9tSsHFtABdwC6WkfCNAcCnENNklOkmn984DGXOOXc= Subject key identifier: BA:DD:D2:AA:49:78:BF:AE:3F:E2:3D:85:7A:3A:30:40:61:2C:3F:90 Authority key identifier: F2:B4:D5:C9:8B:07:24:CE:76:E2:12:DF:B6:55:B4:92:8B:4A:C3:25 Certificate issuer: /CN=F2B4D5C98B0724CE76E212DFB655B4928B4AC325 Certificate serial: 16ECBA566F15D846EBBBBAE94863D056477948F7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft Manifest number: 2D Signing time: Thu 17 Apr 2025 09:11:56 +0000 Manifest this update: Thu 17 Apr 2025 09:06:56 +0000 Manifest next update: Sun 20 Apr 2025 21:00:56 +0000 Files and hashes: 1: F2B4D5C98B0724CE76E212DFB655B4928B4AC325.crl (hash: 01Ci8LNpPJNdbvH0X5JEzpkVRktvnD+G22e2Yq/LR8U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.crl rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 21:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:ec:ba:56:6f:15:d8:46:eb:bb:ba:e9:48:63:d0:56:47:79:48:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2B4D5C98B0724CE76E212DFB655B4928B4AC325 Validity Not Before: Apr 17 09:06:56 2025 GMT Not After : Apr 20 21:00:56 2025 GMT Subject: CN=BADDD2AA4978BFAE3FE23D857A3A3040612C3F90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d7:a9:54:8f:f7:e0:98:56:9f:6f:30:37:a3: 9e:fc:3c:50:3d:4a:75:71:2c:c1:2f:b0:d9:e4:a6: 94:22:dd:85:71:eb:63:ab:47:90:27:11:42:d8:2c: 92:c5:c6:ee:a6:c0:10:93:33:9b:40:65:ae:8c:1a: d8:9e:7f:f8:6a:e2:38:81:c8:d9:33:95:b4:ed:0c: d8:7d:89:8a:bc:e1:e2:3b:68:a8:06:3d:0c:a1:88: ea:cd:b2:58:59:c0:07:76:00:ae:b5:4a:e5:e0:02: 36:e4:4c:6a:e2:1e:12:f9:18:f1:b3:f7:89:20:46: 9c:83:0c:46:87:90:b0:fd:92:99:1e:18:3e:eb:22: ef:81:e3:a1:4c:cd:a2:d2:aa:52:87:88:54:01:7e: 4d:2d:b4:16:96:3f:08:45:96:c3:96:10:4a:2a:ae: 0b:9d:8f:27:de:7d:59:39:be:b7:26:89:bf:1b:20: 43:97:c6:1f:c3:10:59:a7:de:90:2d:c9:81:f1:0d: 85:79:2e:f9:f8:a1:a5:75:96:18:de:66:65:40:82: 60:8a:dc:99:f5:9c:05:be:b6:30:bd:49:c1:a3:89: 02:58:20:a4:ba:ed:37:85:2f:e3:47:a8:92:2d:08: 3f:e3:d9:c5:61:93:fd:82:f7:6d:38:d7:55:cc:70: f5:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:DD:D2:AA:49:78:BF:AE:3F:E2:3D:85:7A:3A:30:40:61:2C:3F:90 X509v3 Authority Key Identifier: keyid:F2:B4:D5:C9:8B:07:24:CE:76:E2:12:DF:B6:55:B4:92:8B:4A:C3:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:b3:a4:7e:82:18:5b:e3:3d:93:ac:81:1c:47:06:7b:29:76: 14:3c:f7:04:94:3c:0b:41:7d:b8:cf:d6:12:97:d7:e4:19:01: db:81:e8:61:85:df:02:21:28:cf:4d:42:e9:c6:c3:0e:20:86: b4:a5:c6:4f:b7:e0:5c:1d:c2:a1:13:3f:43:e7:35:66:21:c9: 3d:54:19:95:0d:3b:e2:a0:6b:28:a9:e6:cd:74:80:e9:38:c9: eb:8e:f0:ce:11:78:65:0f:49:02:e8:5e:51:37:73:7a:a0:64: a7:f9:0f:f9:7b:a5:ed:4e:94:95:6f:d5:77:51:65:f4:ff:a3: 79:9d:7d:d3:08:9e:38:b3:58:17:9a:f7:d9:93:6c:b2:0a:d0: 51:91:0a:5f:42:d6:37:21:e5:84:2d:a9:c0:9e:87:3c:2d:38: f3:6a:53:34:b5:72:62:6f:11:59:a6:d7:70:6e:04:f2:2c:1c: b5:13:8f:34:f0:7a:ba:5b:84:b7:23:57:01:ce:2e:bb:70:a2: 92:65:e6:5b:ae:63:8d:22:c0:92:5d:5d:14:91:d9:7e:97:0a: 6d:89:95:b0:0a:ac:10:47:a1:f1:b4:72:91:89:6e:1c:f3:13: 0c:2a:ec:6e:cb:15:a1:77:59:dc:c9:52:39:58:ca:18:a0:37: 94:35:fa:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFuy6Vm8V2Ebru7rpSGPQVkd5SPcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJCNEQ1Qzk4QjA3MjRDRTc2RTIxMkRGQjY1NUI0OTI4 QjRBQzMyNTAeFw0yNTA0MTcwOTA2NTZaFw0yNTA0MjAyMTAwNTZaMDMxMTAvBgNV BAMTKEJBREREMkFBNDk3OEJGQUUzRkUyM0Q4NTdBM0EzMDQwNjEyQzNGOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY16lUj/fgmFafbzA3o578PFA9 SnVxLMEvsNnkppQi3YVx62OrR5AnEULYLJLFxu6mwBCTM5tAZa6MGtief/hq4jiB yNkzlbTtDNh9iYq84eI7aKgGPQyhiOrNslhZwAd2AK61SuXgAjbkTGriHhL5GPGz 94kgRpyDDEaHkLD9kpkeGD7rIu+B46FMzaLSqlKHiFQBfk0ttBaWPwhFlsOWEEoq rgudjyfefVk5vrcmib8bIEOXxh/DEFmn3pAtyYHxDYV5Lvn4oaV1lhjeZmVAgmCK 3Jn1nAW+tjC9ScGjiQJYIKS67TeFL+NHqJItCD/j2cVhk/2C920411XMcPVtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUut3Sqkl4v64/4j2FejowQGEsP5AwHwYDVR0j BBgwFoAU8rTVyYsHJM524hLftlW0kotKwyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDhlZjExOS03ZGRmLTQ1ZTUtODYzNC0zOGI3NzI1OGNiY2MvMS9GMkI0RDVDOThC MDcyNENFNzZFMjEyREZCNjU1QjQ5MjhCNEFDMzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjJCNEQ1Qzk4QjA3MjRDRTc2RTIxMkRGQjY1NUI0OTI4QjRB QzMyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ4ZWYxMTktN2RkZi00NWU1LTg2 MzQtMzhiNzcyNThjYmNjLzEvRjJCNEQ1Qzk4QjA3MjRDRTc2RTIxMkRGQjY1NUI0 OTI4QjRBQzMyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM6zpH6CGFvjPZOsgRxHBnspdhQ89wSUPAtB fbjP1hKX1+QZAduB6GGF3wIhKM9NQunGww4ghrSlxk+34FwdwqETP0PnNWYhyT1U GZUNO+Kgayip5s10gOk4yeuO8M4ReGUPSQLoXlE3c3qgZKf5D/l7pe1OlJVv1XdR ZfT/o3mdfdMInjizWBea99mTbLIK0FGRCl9C1jch5YQtqcCehzwtOPNqUzS1cmJv EVmm13BuBPIsHLUTjzTwerpbhLcjVwHOLrtwopJl5luuY40iwJJdXRSR2X6XCm2J lbAKrBBHofG0cpGJbhzzEwwq7G7LFaF3WdzJUjlYyhigN5Q1+hg= -----END CERTIFICATE-----Generated at Fri Apr 18 02:05:35 2025 by rpki-client