$ rpki-client -vvf repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft File: CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft (raw, json) Hash identifier: kv0sYiORr7iTpKaaMVAjJnZWoGrxuxH47GAdd/9Brgg= Subject key identifier: 8D:80:F9:D3:44:99:5D:CD:E4:CC:42:CF:C9:D9:2A:52:7D:80:E1:A6 Authority key identifier: CA:3C:35:A9:3B:14:C0:DF:6C:BB:C2:46:81:F5:BF:97:BE:8C:79:0D Certificate issuer: /CN=CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D Certificate serial: 6815E64DA8A09F989881E8DDA8177918D3F7DAC6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft Manifest number: 026D Signing time: Thu 03 Apr 2025 16:21:15 +0000 Manifest this update: Thu 03 Apr 2025 16:16:15 +0000 Manifest next update: Mon 07 Apr 2025 02:18:15 +0000 Files and hashes: 1: CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.crl (hash: 1m0ejAsraQcBnKU4VmrbupG+xrhy+Z8jFAu/BFMdck0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.crl rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 02:18:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:15:e6:4d:a8:a0:9f:98:98:81:e8:dd:a8:17:79:18:d3:f7:da:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D Validity Not Before: Apr 3 16:16:15 2025 GMT Not After : Apr 7 02:18:15 2025 GMT Subject: CN=8D80F9D344995DCDE4CC42CFC9D92A527D80E1A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:96:ce:bc:f0:11:85:48:3b:dc:ab:e4:99:25: 2e:d5:d4:e7:04:2b:41:e4:2b:99:b4:4f:82:c3:67: 04:be:4c:cf:fb:74:5e:b4:c8:0f:7f:05:ff:8a:7d: f7:97:85:dc:0e:fe:52:4d:61:1a:57:0f:75:1c:a9: 5a:a0:3c:fe:68:54:80:94:a6:04:5c:e7:d5:64:68: cd:98:5d:15:9c:09:c1:2e:94:6f:b7:5e:82:71:9c: 56:a0:62:b0:9a:85:67:99:03:aa:4d:8b:72:d6:6e: 08:71:e6:9f:09:93:01:b1:58:79:26:13:1d:4d:5a: da:0c:5a:75:6f:28:c0:61:b8:70:5e:21:4e:d2:3f: d9:6d:b8:c8:12:e6:1c:9d:83:cc:a1:b3:d9:a0:aa: d6:d0:cf:85:de:51:2f:f3:38:a6:96:39:50:a0:0c: 9c:08:9b:b8:7e:19:cd:2b:c5:59:bd:c3:6f:6c:97: fd:6d:97:7e:22:87:5d:7c:e8:dc:2a:4a:86:9f:36: 34:0e:90:73:62:ed:6b:d4:0a:24:d3:1f:50:66:cf: 2d:d4:3d:84:eb:aa:1b:c6:6f:cd:7f:68:19:a2:a8: e3:a8:10:a0:48:3e:a5:10:6f:00:5e:45:bd:a2:de: 24:ac:c6:a5:b9:35:37:50:7f:dd:09:bd:77:b1:99: 15:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:80:F9:D3:44:99:5D:CD:E4:CC:42:CF:C9:D9:2A:52:7D:80:E1:A6 X509v3 Authority Key Identifier: keyid:CA:3C:35:A9:3B:14:C0:DF:6C:BB:C2:46:81:F5:BF:97:BE:8C:79:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/64c28293-b6fb-4ff4-9ce2-06663cbe6819/0/CA3C35A93B14C0DF6CBBC24681F5BF97BE8C790D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:b5:1b:db:86:f1:37:14:4e:9b:64:a4:8e:b8:ce:b1:89:ed: f8:cc:fc:8c:5f:9a:81:46:16:b7:9b:5c:90:73:d1:4f:7c:77: 82:6e:ae:da:31:88:11:7d:69:b6:29:91:26:d8:ce:f8:0f:b0: 74:86:11:85:89:3a:81:70:b2:6b:7d:d6:de:2d:21:4c:c9:a1: 28:f6:a7:0b:e8:21:50:49:f2:17:bc:6b:27:d1:a4:85:21:a1: fc:53:b8:dc:0a:26:de:a5:ab:bb:9e:22:05:4a:0d:38:10:0b: 89:db:ad:eb:66:70:f5:02:e8:d2:71:17:37:c3:7d:1f:8d:1d: 59:c7:0c:f2:4d:43:f9:43:fd:c4:2c:f2:dc:82:cf:c2:7f:68: c6:e7:61:bb:6c:29:75:07:52:23:b4:1e:71:d6:4e:b5:56:cd: 7c:fd:ff:3c:f6:60:1c:74:a7:86:70:78:a8:96:bf:30:95:a2: 94:20:eb:4f:ea:fc:51:8d:7e:b5:de:ba:b3:f2:9d:30:47:c4: c8:0d:af:a8:8a:09:74:f4:50:97:30:5c:61:35:0b:41:c9:ab: 6c:ac:b4:82:51:80:2e:fe:01:2e:9e:0a:d8:c9:cd:27:b7:ad: 74:66:79:fe:53:ae:56:83:26:82:db:54:5e:3f:77:65:f5:0b: e4:12:8f:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaBXmTaign5iYgejdqBd5GNP32sYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0EzQzM1QTkzQjE0QzBERjZDQkJDMjQ2ODFGNUJGOTdC RThDNzkwRDAeFw0yNTA0MDMxNjE2MTVaFw0yNTA0MDcwMjE4MTVaMDMxMTAvBgNV BAMTKDhEODBGOUQzNDQ5OTVEQ0RFNENDNDJDRkM5RDkyQTUyN0Q4MEUxQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUls688BGFSDvcq+SZJS7V1OcE K0HkK5m0T4LDZwS+TM/7dF60yA9/Bf+KffeXhdwO/lJNYRpXD3UcqVqgPP5oVICU pgRc59VkaM2YXRWcCcEulG+3XoJxnFagYrCahWeZA6pNi3LWbghx5p8JkwGxWHkm Ex1NWtoMWnVvKMBhuHBeIU7SP9ltuMgS5hydg8yhs9mgqtbQz4XeUS/zOKaWOVCg DJwIm7h+Gc0rxVm9w29sl/1tl34ih1186NwqSoafNjQOkHNi7WvUCiTTH1Bmzy3U PYTrqhvGb81/aBmiqOOoEKBIPqUQbwBeRb2i3iSsxqW5NTdQf90JvXexmRX3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjYD500SZXc3kzELPydkqUn2A4aYwHwYDVR0j BBgwFoAUyjw1qTsUwN9su8JGgfW/l76MeQ0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NGMyODI5My1iNmZiLTRmZjQtOWNlMi0wNjY2M2NiZTY4MTkvMC9DQTNDMzVBOTNC MTRDMERGNkNCQkMyNDY4MUY1QkY5N0JFOEM3OTBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0EzQzM1QTkzQjE0QzBERjZDQkJDMjQ2ODFGNUJGOTdCRThD NzkwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjRjMjgyOTMtYjZmYi00ZmY0LTlj ZTItMDY2NjNjYmU2ODE5LzAvQ0EzQzM1QTkzQjE0QzBERjZDQkJDMjQ2ODFGNUJG OTdCRThDNzkwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHm1G9uG8TcUTptkpI64zrGJ7fjM/IxfmoFG FrebXJBz0U98d4JurtoxiBF9abYpkSbYzvgPsHSGEYWJOoFwsmt91t4tIUzJoSj2 pwvoIVBJ8he8ayfRpIUhofxTuNwKJt6lq7ueIgVKDTgQC4nbretmcPUC6NJxFzfD fR+NHVnHDPJNQ/lD/cQs8tyCz8J/aMbnYbtsKXUHUiO0HnHWTrVWzXz9/zz2YBx0 p4ZweKiWvzCVopQg60/q/FGNfrXeurPynTBHxMgNr6iKCXT0UJcwXGE1C0HJq2ys tIJRgC7+AS6eCtjJzSe3rXRmef5TrlaDJoLbVF4/d2X1C+QSj1U= -----END CERTIFICATE-----Generated at Sat Apr 5 17:51:01 2025 by rpki-client