$ rpki-client -vvf repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.mft File: 396B7BA56F2872793C0806B4A8EE93316605958B.mft (raw, json) Hash identifier: yX4CIOnR+2gD2dVXH52rPR+566qeDdFPznl47tTCU/w= Subject key identifier: 50:85:97:1E:EE:ED:AB:7E:25:D7:96:41:4A:7D:6D:19:EC:C9:66:19 Authority key identifier: 39:6B:7B:A5:6F:28:72:79:3C:08:06:B4:A8:EE:93:31:66:05:95:8B Certificate issuer: /CN=396B7BA56F2872793C0806B4A8EE93316605958B Certificate serial: 454ED8A9770F84D3266B2F09DEA9818C19B19225 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/396B7BA56F2872793C0806B4A8EE93316605958B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.mft Manifest number: 0172 Signing time: Fri 04 Apr 2025 13:20:58 +0000 Manifest this update: Fri 04 Apr 2025 13:15:58 +0000 Manifest next update: Mon 07 Apr 2025 16:44:58 +0000 Files and hashes: 1: 396B7BA56F2872793C0806B4A8EE93316605958B.crl (hash: pGnHNGjlZPfAfgUiTLv/pRFk/fGIsLcyjpUUeElKrIY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.crl rsync://repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/396B7BA56F2872793C0806B4A8EE93316605958B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 16:44:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:4e:d8:a9:77:0f:84:d3:26:6b:2f:09:de:a9:81:8c:19:b1:92:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=396B7BA56F2872793C0806B4A8EE93316605958B Validity Not Before: Apr 4 13:15:58 2025 GMT Not After : Apr 7 16:44:58 2025 GMT Subject: CN=5085971EEEEDAB7E25D796414A7D6D19ECC96619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:59:e5:cd:2b:8c:55:39:a7:65:36:8a:e9:72: 29:31:68:4e:c6:6b:d3:42:e9:16:a1:7e:20:17:41: 67:2f:ac:61:1b:55:9c:ca:c1:fb:ba:41:e1:fc:48: 0b:ab:db:96:2a:60:16:1c:70:7b:7f:97:cb:14:6b: f3:84:67:38:60:d0:81:f3:df:43:86:08:3d:e9:0b: 89:1e:74:e1:2c:6e:12:bf:66:84:ad:31:1a:21:7b: a4:a1:0c:01:f6:aa:e6:90:c3:12:ad:92:06:35:97: be:d3:2d:34:97:db:f5:bb:71:aa:1c:df:03:e9:f5: 27:f4:7e:f5:90:73:f5:f2:3e:c8:0f:fd:68:50:33: 5c:2b:b1:e6:ed:ad:b1:e4:96:26:0d:aa:73:d1:34: a3:19:c2:54:ed:9c:c4:bd:28:aa:c6:b3:c2:c9:9e: aa:1f:fd:8c:ec:13:9e:4c:91:3f:43:f3:08:7c:cf: de:81:8b:b0:74:71:91:bb:2a:df:0d:cd:1f:e5:80: 89:0e:95:0b:82:8b:b8:bc:0f:8b:ad:2b:44:f8:3a: 1a:21:38:19:9d:42:d7:59:5c:ee:e4:a4:e3:35:23: cd:1a:17:9f:a5:10:8a:a1:c2:c1:fa:18:08:94:80: 8f:fa:b0:44:f1:5e:26:2d:5e:59:c5:60:3f:17:e6: 26:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:85:97:1E:EE:ED:AB:7E:25:D7:96:41:4A:7D:6D:19:EC:C9:66:19 X509v3 Authority Key Identifier: keyid:39:6B:7B:A5:6F:28:72:79:3C:08:06:B4:A8:EE:93:31:66:05:95:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/396B7BA56F2872793C0806B4A8EE93316605958B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e93f876-d51e-4857-a6ce-c8d87cb40e17/0/396B7BA56F2872793C0806B4A8EE93316605958B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:8a:da:83:fa:42:a6:2a:ab:4c:b3:2d:07:02:a3:ac:64:ad: ec:a6:0f:fc:d6:e6:10:8d:98:59:d1:02:54:36:87:dd:f2:a8: f7:c3:28:6a:44:14:87:b3:f9:f1:56:89:15:8c:1f:84:cb:28: 49:3f:33:be:7e:61:ee:58:94:45:eb:37:4a:ee:0a:ce:57:a8: f0:12:da:f9:05:44:9e:22:cc:57:97:dd:89:c9:be:c4:ee:29: 3d:51:7b:da:d2:08:f9:df:a6:cc:f3:3b:cf:7d:61:dd:ec:38: af:c1:83:cc:49:db:f9:0c:84:de:fa:33:27:cf:65:2b:a0:81: db:45:c1:e1:1a:7e:91:cd:84:99:bf:f9:17:a0:92:2b:49:32: ad:16:4c:d3:a1:53:c1:98:c7:50:1c:62:7d:aa:36:45:49:80: c1:3b:72:87:93:f6:c4:57:bc:76:39:fb:3d:8e:85:1e:d6:17: 44:ad:f3:ab:f9:10:9b:d9:8a:13:0a:e5:b4:dd:b1:06:78:77: 7a:72:69:28:e5:84:d5:29:be:2f:ca:b1:80:a7:89:52:3b:bf: 5d:96:e5:cd:1b:01:68:f8:a2:c6:0f:2c:97:cc:fb:6c:c6:1a: c5:f9:55:6a:78:b6:b2:ee:82:b5:9a:43:10:e5:c3:ca:89:8f: 02:a1:b9:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURU7YqXcPhNMmay8J3qmBjBmxkiUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzk2QjdCQTU2RjI4NzI3OTNDMDgwNkI0QThFRTkzMzE2 NjA1OTU4QjAeFw0yNTA0MDQxMzE1NThaFw0yNTA0MDcxNjQ0NThaMDMxMTAvBgNV BAMTKDUwODU5NzFFRUVFREFCN0UyNUQ3OTY0MTRBN0Q2RDE5RUNDOTY2MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSWeXNK4xVOadlNorpcikxaE7G a9NC6RahfiAXQWcvrGEbVZzKwfu6QeH8SAur25YqYBYccHt/l8sUa/OEZzhg0IHz 30OGCD3pC4kedOEsbhK/ZoStMRohe6ShDAH2quaQwxKtkgY1l77TLTSX2/W7caoc 3wPp9Sf0fvWQc/XyPsgP/WhQM1wrsebtrbHkliYNqnPRNKMZwlTtnMS9KKrGs8LJ nqof/YzsE55MkT9D8wh8z96Bi7B0cZG7Kt8NzR/lgIkOlQuCi7i8D4utK0T4Ohoh OBmdQtdZXO7kpOM1I80aF5+lEIqhwsH6GAiUgI/6sETxXiYtXlnFYD8X5iZdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUIWXHu7tq34l15ZBSn1tGezJZhkwHwYDVR0j BBgwFoAUOWt7pW8ocnk8CAa0qO6TMWYFlYswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTkzZjg3Ni1kNTFlLTQ4NTctYTZjZS1jOGQ4N2NiNDBlMTcvMC8zOTZCN0JBNTZG Mjg3Mjc5M0MwODA2QjRBOEVFOTMzMTY2MDU5NThCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzk2QjdCQTU2RjI4NzI3OTNDMDgwNkI0QThFRTkzMzE2NjA1 OTU4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWU5M2Y4NzYtZDUxZS00ODU3LWE2 Y2UtYzhkODdjYjQwZTE3LzAvMzk2QjdCQTU2RjI4NzI3OTNDMDgwNkI0QThFRTkz MzE2NjA1OTU4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADyK2oP6QqYqq0yzLQcCo6xkreymD/zW5hCN mFnRAlQ2h93yqPfDKGpEFIez+fFWiRWMH4TLKEk/M75+Ye5YlEXrN0ruCs5XqPAS 2vkFRJ4izFeX3YnJvsTuKT1Re9rSCPnfpszzO899Yd3sOK/Bg8xJ2/kMhN76MyfP ZSuggdtFweEafpHNhJm/+RegkitJMq0WTNOhU8GYx1AcYn2qNkVJgME7coeT9sRX vHY5+z2OhR7WF0St86v5EJvZihMK5bTdsQZ4d3pyaSjlhNUpvi/KsYCniVI7v12W 5c0bAWj4osYPLJfM+2zGGsX5VWp4trLugrWaQxDlw8qJjwKhuUE= -----END CERTIFICATE-----Generated at Sat Apr 5 15:30:42 2025 by rpki-client