$ rpki-client -vvf repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft File: D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft (raw, json) Hash identifier: Y89aSIz83CiK3zjgK3lhBOU7iwvaMiImLaZD+AiFhAU= Subject key identifier: 29:E8:08:68:C8:C0:98:EA:7F:B0:DF:FA:09:53:DF:7F:77:05:87:39 Authority key identifier: D2:89:2B:AB:EE:5F:3B:29:8F:67:4D:48:B1:A6:A8:D6:38:54:6C:DF Certificate issuer: /CN=D2892BABEE5F3B298F674D48B1A6A8D638546CDF Certificate serial: 1C3BCD36978B4E3A8047DE5C4E899543DBB73B4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft Manifest number: 04AE Signing time: Sat 05 Apr 2025 14:02:05 +0000 Manifest this update: Sat 05 Apr 2025 13:57:05 +0000 Manifest next update: Tue 08 Apr 2025 23:31:05 +0000 Files and hashes: 1: D2892BABEE5F3B298F674D48B1A6A8D638546CDF.crl (hash: hlXguSWdIzc5aaHxbZ8kzl1SdW2P32Ek9MZiZlEA6LA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.crl rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:3b:cd:36:97:8b:4e:3a:80:47:de:5c:4e:89:95:43:db:b7:3b:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2892BABEE5F3B298F674D48B1A6A8D638546CDF Validity Not Before: Apr 5 13:57:05 2025 GMT Not After : Apr 8 23:31:05 2025 GMT Subject: CN=29E80868C8C098EA7FB0DFFA0953DF7F77058739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:33:37:ec:29:71:e3:4d:0f:78:6b:4c:ba:c6: 49:64:6d:96:1d:19:46:e4:bd:36:1e:21:8c:96:e4: b7:82:54:74:4b:82:9d:1c:f4:d0:c6:90:45:6f:c0: f8:e3:6b:20:ef:20:5f:c7:65:d2:94:fe:9e:91:c3: 41:51:70:38:92:98:c9:9a:9a:64:06:ed:ec:62:34: 32:31:62:41:5b:c0:0c:51:04:08:e3:a0:d9:5d:c4: 40:ac:ed:e5:a4:e9:64:0b:74:8d:72:95:ff:28:05: 5a:5d:27:fe:2d:7b:cc:cd:20:98:39:1b:7a:f9:2a: a8:f4:30:1b:f4:b3:fb:d2:5e:90:ea:37:fe:e7:a8: 10:8a:62:40:bc:d7:0a:2a:70:fb:ca:43:80:93:cf: b6:f4:ff:75:fd:fa:b8:d3:b6:f9:51:24:3d:15:1b: e5:8d:c8:2f:6d:02:c4:e2:ec:6c:cc:1f:9e:1e:21: af:23:01:c8:b8:eb:d9:07:0c:2d:9b:78:61:19:40: a1:99:b7:7f:91:1b:e1:b9:0f:ba:af:b9:da:6f:c5: f5:3f:61:70:f8:48:9e:20:70:25:bb:81:55:d9:4c: 20:b3:ed:b3:75:0c:f3:99:2b:9b:50:a9:19:0e:32: 4b:81:d8:e7:5b:68:a0:0f:5f:64:ed:d3:bb:d5:0d: b9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:E8:08:68:C8:C0:98:EA:7F:B0:DF:FA:09:53:DF:7F:77:05:87:39 X509v3 Authority Key Identifier: keyid:D2:89:2B:AB:EE:5F:3B:29:8F:67:4D:48:B1:A6:A8:D6:38:54:6C:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:d4:df:1b:d0:3b:74:69:98:96:5f:5d:ee:6b:48:f5:7e:5a: 8b:f2:c7:7e:73:a1:44:45:ce:86:82:28:86:dc:e0:2f:d5:0e: b0:ac:6b:19:6b:6a:77:46:79:ae:38:f1:93:b6:01:ee:ef:75: 2f:26:d1:1a:dd:9d:95:e4:2a:63:42:8e:ea:3c:c7:50:f5:92: aa:ea:0d:a7:fd:b3:90:9e:e5:e1:82:3b:40:3f:eb:de:a5:dc: 7c:3f:66:36:f9:0f:ab:a8:4a:d9:d0:b6:a3:d8:1c:57:5c:0b: 70:40:d3:de:1e:c6:8a:2f:94:a6:bd:bc:eb:21:17:b7:bc:11: f2:24:a0:92:c6:fc:d0:13:69:1c:8b:82:1b:a3:c8:b5:35:be: 27:0e:1b:f0:f8:bd:c3:07:ac:db:11:ec:aa:53:d8:bc:0d:2a: b6:44:17:51:a7:9d:4b:c5:82:2a:9d:ca:ac:61:a7:49:ec:4e: d6:51:bc:13:b6:ba:92:11:4b:8a:ea:79:fe:e8:06:93:b7:51: 48:d8:44:39:6e:9d:af:c8:87:8e:9e:41:df:c6:9f:7d:b2:17: 7c:99:91:20:87:c0:d0:74:ff:98:75:6e:72:61:cc:02:12:67: b3:e1:eb:f3:ee:53:6c:c3:4e:c2:8c:57:7b:e5:2b:b4:cf:db: f3:90:be:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHDvNNpeLTjqAR95cTomVQ9u3O00wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI4OTJCQUJFRTVGM0IyOThGNjc0RDQ4QjFBNkE4RDYz ODU0NkNERjAeFw0yNTA0MDUxMzU3MDVaFw0yNTA0MDgyMzMxMDVaMDMxMTAvBgNV BAMTKDI5RTgwODY4QzhDMDk4RUE3RkIwREZGQTA5NTNERjdGNzcwNTg3MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3MzfsKXHjTQ94a0y6xklkbZYd GUbkvTYeIYyW5LeCVHRLgp0c9NDGkEVvwPjjayDvIF/HZdKU/p6Rw0FRcDiSmMma mmQG7exiNDIxYkFbwAxRBAjjoNldxECs7eWk6WQLdI1ylf8oBVpdJ/4te8zNIJg5 G3r5Kqj0MBv0s/vSXpDqN/7nqBCKYkC81woqcPvKQ4CTz7b0/3X9+rjTtvlRJD0V G+WNyC9tAsTi7GzMH54eIa8jAci469kHDC2beGEZQKGZt3+RG+G5D7qvudpvxfU/ YXD4SJ4gcCW7gVXZTCCz7bN1DPOZK5tQqRkOMkuB2OdbaKAPX2Tt07vVDbl5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKegIaMjAmOp/sN/6CVPff3cFhzkwHwYDVR0j BBgwFoAU0okrq+5fOymPZ01Isaao1jhUbN8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmJjZjFlYy05MjJkLTRjZDctOGNhNi03MjcyNGY2NmU1ZmIvMC9EMjg5MkJBQkVF NUYzQjI5OEY2NzRENDhCMUE2QThENjM4NTQ2Q0RGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI4OTJCQUJFRTVGM0IyOThGNjc0RDQ4QjFBNkE4RDYzODU0 NkNERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjJiY2YxZWMtOTIyZC00Y2Q3LThj YTYtNzI3MjRmNjZlNWZiLzAvRDI4OTJCQUJFRTVGM0IyOThGNjc0RDQ4QjFBNkE4 RDYzODU0NkNERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABHU3xvQO3RpmJZfXe5rSPV+Wovyx35zoURF zoaCKIbc4C/VDrCsaxlrandGea448ZO2Ae7vdS8m0RrdnZXkKmNCjuo8x1D1kqrq Daf9s5Ce5eGCO0A/696l3Hw/Zjb5D6uoStnQtqPYHFdcC3BA094exoovlKa9vOsh F7e8EfIkoJLG/NATaRyLghujyLU1vicOG/D4vcMHrNsR7KpT2LwNKrZEF1GnnUvF giqdyqxhp0nsTtZRvBO2upIRS4rqef7oBpO3UUjYRDluna/Ih46eQd/Gn32yF3yZ kSCHwNB0/5h1bnJhzAISZ7Ph6/PuU2zDTsKMV3vlK7TP2/OQvkc= -----END CERTIFICATE-----Generated at Sun Apr 6 00:02:03 2025 by rpki-client