$ rpki-client -vvf repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft File: 8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft (raw, json) Hash identifier: wQAN3CVx1QeaPOTIUxEoncnZllYWS+BNa2NSubQESPc= Subject key identifier: BA:A3:61:63:0D:A7:45:BC:C7:6F:D9:B3:58:94:5A:86:91:F6:34:65 Authority key identifier: 8D:5A:49:C9:E4:2E:37:1B:FD:1E:67:AC:E1:B3:D5:5E:C1:AB:F7:3F Certificate issuer: /CN=8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F Certificate serial: 6E678EB8364514A4E002B67062DB1840CF93BCD0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft Manifest number: 5B Signing time: Tue 15 Apr 2025 23:20:51 +0000 Manifest this update: Tue 15 Apr 2025 23:15:51 +0000 Manifest next update: Sat 19 Apr 2025 06:00:51 +0000 Files and hashes: 1: 8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.crl (hash: GbE+wI3ViDlM8xHjIsw8SsXsZUAUgiNCOObKDk9T7Tw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.crl rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 06:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:67:8e:b8:36:45:14:a4:e0:02:b6:70:62:db:18:40:cf:93:bc:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F Validity Not Before: Apr 15 23:15:51 2025 GMT Not After : Apr 19 06:00:51 2025 GMT Subject: CN=BAA361630DA745BCC76FD9B358945A8691F63465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:cb:b3:0f:00:f3:96:a7:8d:52:8a:84:c2:bd: 64:25:bc:01:18:c6:04:0b:fd:b2:02:51:4d:c5:b1: 23:80:35:a8:01:64:2f:17:09:34:45:d0:4d:c3:7f: d4:ed:04:a2:67:d0:6c:af:d5:da:79:44:89:23:d5: 6b:a7:14:9b:1e:4a:28:3c:28:56:f1:88:37:dc:d6: be:9f:a6:a9:66:d0:ad:6f:d3:0a:76:ad:e5:0b:0b: 83:be:36:20:e8:4d:57:b0:8e:0f:34:38:8e:10:57: e5:b7:55:7e:08:3e:83:4e:e1:b0:4d:b8:ee:3c:8c: 6c:72:9f:c9:63:20:37:03:18:4d:a3:19:d6:04:69: 7a:b2:82:1e:c7:45:a4:56:3b:42:fe:7b:1c:e7:7b: e7:61:4a:60:a1:2c:b4:09:30:17:b4:f3:1a:42:09: 28:18:3c:73:ab:c4:1b:9d:40:a9:bd:f3:f9:39:74: f7:e4:66:a9:44:d3:e8:e7:73:08:69:48:27:7f:59: ec:cf:42:ed:7b:15:5b:a4:6a:3d:6b:e9:ce:67:5f: e0:d5:ae:74:3a:e4:03:15:72:51:e0:26:b3:56:81: f1:6e:4c:e2:d1:26:20:02:3d:8d:4d:7e:68:68:8e: 19:6c:72:b5:89:2f:94:8f:49:ad:6a:cb:ef:a4:61: 8b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:A3:61:63:0D:A7:45:BC:C7:6F:D9:B3:58:94:5A:86:91:F6:34:65 X509v3 Authority Key Identifier: keyid:8D:5A:49:C9:E4:2E:37:1B:FD:1E:67:AC:E1:B3:D5:5E:C1:AB:F7:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:2c:dc:0f:bd:50:9a:8a:b8:3b:1c:08:31:88:e6:05:6f:34: 37:7c:21:e6:7a:02:9f:ea:90:a7:dc:fc:e4:72:b6:14:4a:20: 6f:29:04:cd:89:61:1e:95:5d:e2:f7:57:72:cd:1e:0a:e8:76: c6:22:83:4e:a5:a3:1d:3f:61:3e:cc:cb:c0:7a:68:8f:a7:ed: c5:29:05:06:e4:45:9e:68:bd:76:af:db:a4:a1:0f:38:64:d0: 63:9f:e5:60:ea:83:9e:b7:c0:8c:2b:f3:1e:08:7d:92:c3:61: d8:0f:00:f0:df:00:3b:08:c2:b1:5a:6b:f0:fa:46:71:61:f3: bd:81:b9:e2:67:88:ec:20:36:f5:27:00:e5:7f:60:86:94:8b: 02:02:22:ff:ed:81:3f:99:43:7f:91:1f:21:5e:e6:c2:77:51: 0f:ac:72:ed:0a:78:5b:80:49:ef:a2:cf:03:88:8a:b2:89:d9: 7b:a9:e4:4d:09:b9:4a:52:5a:7a:c2:1a:88:23:10:f4:9d:77: fd:20:7b:e1:b7:e5:b8:a5:6c:3d:9a:aa:62:45:42:f5:35:42: 8f:48:22:b5:eb:bb:a7:e1:45:65:55:2a:25:0c:1a:3a:6a:f6: db:22:9a:30:df:37:cd:20:ae:ee:6b:33:36:2c:ba:f2:b6:7f: 45:c5:02:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbmeOuDZFFKTgArZwYtsYQM+TvNAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ1QTQ5QzlFNDJFMzcxQkZEMUU2N0FDRTFCM0Q1NUVD MUFCRjczRjAeFw0yNTA0MTUyMzE1NTFaFw0yNTA0MTkwNjAwNTFaMDMxMTAvBgNV BAMTKEJBQTM2MTYzMERBNzQ1QkNDNzZGRDlCMzU4OTQ1QTg2OTFGNjM0NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwy7MPAPOWp41SioTCvWQlvAEY xgQL/bICUU3FsSOANagBZC8XCTRF0E3Df9TtBKJn0Gyv1dp5RIkj1WunFJseSig8 KFbxiDfc1r6fpqlm0K1v0wp2reULC4O+NiDoTVewjg80OI4QV+W3VX4IPoNO4bBN uO48jGxyn8ljIDcDGE2jGdYEaXqygh7HRaRWO0L+exzne+dhSmChLLQJMBe08xpC CSgYPHOrxBudQKm98/k5dPfkZqlE0+jncwhpSCd/WezPQu17FVukaj1r6c5nX+DV rnQ65AMVclHgJrNWgfFuTOLRJiACPY1NfmhojhlscrWJL5SPSa1qy++kYYthAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuqNhYw2nRbzHb9mzWJRahpH2NGUwHwYDVR0j BBgwFoAUjVpJyeQuNxv9Hmes4bPVXsGr9z8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmY1OTg2Yi1jNzY0LTRjZDctYjQxNC1hMjViZDA1YzNmOTIvMC84RDVBNDlDOUU0 MkUzNzFCRkQxRTY3QUNFMUIzRDU1RUMxQUJGNzNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQ1QTQ5QzlFNDJFMzcxQkZEMUU2N0FDRTFCM0Q1NUVDMUFC RjczRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjJmNTk4NmItYzc2NC00Y2Q3LWI0 MTQtYTI1YmQwNWMzZjkyLzAvOEQ1QTQ5QzlFNDJFMzcxQkZEMUU2N0FDRTFCM0Q1 NUVDMUFCRjczRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABws3A+9UJqKuDscCDGI5gVvNDd8IeZ6Ap/q kKfc/ORythRKIG8pBM2JYR6VXeL3V3LNHgrodsYig06lox0/YT7My8B6aI+n7cUp BQbkRZ5ovXav26ShDzhk0GOf5WDqg563wIwr8x4IfZLDYdgPAPDfADsIwrFaa/D6 RnFh872BueJniOwgNvUnAOV/YIaUiwICIv/tgT+ZQ3+RHyFe5sJ3UQ+scu0KeFuA Se+izwOIirKJ2Xup5E0JuUpSWnrCGogjEPSdd/0ge+G35bilbD2aqmJFQvU1Qo9I IrXru6fhRWVVKiUMGjpq9tsimjDfN80gru5rMzYsuvK2f0XFAls= -----END CERTIFICATE-----Generated at Thu Apr 17 17:31:37 2025 by rpki-client