$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft File: F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft (raw, json) Hash identifier: CMfjek6DyV2a9YP5EkFMXXbqgsWe7CLWLHq+CDOmORU= Subject key identifier: 6F:5E:50:94:81:1D:EA:FD:D3:01:AB:1E:9B:A4:B5:CE:C1:0A:07:3C Authority key identifier: F2:A9:6B:01:3D:78:D9:DD:2A:D0:46:F9:05:29:AB:07:E8:32:FD:44 Certificate issuer: /CN=F2A96B013D78D9DD2AD046F90529AB07E832FD44 Certificate serial: 1F445C1345EDA2ED63D31D7D1EC22BBCE2D31427 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2A96B013D78D9DD2AD046F90529AB07E832FD44.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft Manifest number: 0147 Signing time: Thu 03 Apr 2025 15:41:58 +0000 Manifest this update: Thu 03 Apr 2025 15:36:58 +0000 Manifest next update: Sun 06 Apr 2025 15:52:58 +0000 Files and hashes: 1: F2A96B013D78D9DD2AD046F90529AB07E832FD44.crl (hash: ceIC/Xj3nMmQGg3Dof1OHoUzSmUaxF/L+l7fW8Qizho=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.crl rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2A96B013D78D9DD2AD046F90529AB07E832FD44.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 15:52:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:44:5c:13:45:ed:a2:ed:63:d3:1d:7d:1e:c2:2b:bc:e2:d3:14:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2A96B013D78D9DD2AD046F90529AB07E832FD44 Validity Not Before: Apr 3 15:36:58 2025 GMT Not After : Apr 6 15:52:58 2025 GMT Subject: CN=6F5E5094811DEAFDD301AB1E9BA4B5CEC10A073C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:57:7c:d3:40:ab:36:59:47:4e:1c:56:4c:dd: 76:ce:1e:e0:81:33:56:0d:ba:02:09:9e:97:15:fd: 0a:9e:62:47:74:a0:33:03:cd:18:c3:ac:36:de:73: be:68:9b:c9:77:a1:10:5e:3f:9e:df:26:c2:26:5b: 60:b0:ba:cf:ce:fc:ee:66:a7:8b:d4:53:e2:8c:51: 5b:a7:fa:4d:4f:84:0d:75:62:0a:c9:e6:16:92:e3: a4:23:07:2d:b7:0a:ae:73:d7:53:54:3d:68:b2:9d: f7:be:6d:39:18:fd:50:d7:a3:ba:a5:3b:12:2f:63: 90:ee:93:72:41:9b:d7:8f:be:e8:9f:b8:60:1d:c5: 56:b9:99:28:4f:6a:47:21:61:b7:51:6a:45:a3:b6: 25:4b:db:72:f8:0d:a2:ae:ec:db:47:85:2d:d7:50: 61:04:3e:7b:bc:2b:68:60:4e:6f:62:91:c9:3b:8a: da:37:4b:2c:be:6b:45:b1:bc:a7:64:87:14:dd:a0: d6:20:77:1a:f0:08:be:89:4a:d9:11:e6:aa:a6:4e: f5:59:9d:10:07:cb:9c:88:02:13:20:f7:33:c5:e4: ae:47:fd:41:a9:95:23:bd:3a:e9:ee:2d:22:7b:36: e7:61:65:2b:04:a5:37:dd:b0:da:26:26:e2:34:22: e8:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:5E:50:94:81:1D:EA:FD:D3:01:AB:1E:9B:A4:B5:CE:C1:0A:07:3C X509v3 Authority Key Identifier: keyid:F2:A9:6B:01:3D:78:D9:DD:2A:D0:46:F9:05:29:AB:07:E8:32:FD:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2A96B013D78D9DD2AD046F90529AB07E832FD44.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4e1669-68f7-4a39-acc0-57c7187b6cb7/0/F2A96B013D78D9DD2AD046F90529AB07E832FD44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:04:32:78:74:0b:56:14:5a:d4:7b:3f:f1:42:36:dc:c5:11: 6f:6a:f6:5c:ab:ee:44:69:dc:8f:20:f7:71:75:28:38:47:b0: 65:60:8c:88:74:28:37:b9:13:85:4e:32:f1:19:b4:2b:d4:d3: ee:53:71:18:14:a4:05:09:9f:84:06:ad:85:73:ef:35:a6:18: e7:19:34:29:71:72:2d:01:5f:2e:86:4c:67:f7:20:cb:f7:ae: 09:38:6a:b9:c3:67:5d:b9:d6:20:f1:46:d8:6c:6c:50:1b:e3: 62:5b:49:a8:02:de:62:67:79:b1:ce:9c:58:d1:d0:5f:31:99: ac:a4:bf:80:87:bb:43:da:0e:da:db:fe:ae:5b:a2:3e:cb:c9: 54:7b:84:7a:7e:8c:f9:ae:af:5b:57:81:c9:f0:5e:4a:97:50: f2:68:3d:13:80:bd:97:d3:d3:c8:0f:a4:2a:56:0b:bc:1b:40: d4:eb:a2:0e:ab:82:de:2a:67:6a:4a:f3:ac:81:3d:35:fe:84: 38:ef:1d:8a:21:fd:22:fb:73:cf:91:35:3b:f4:77:79:0c:3e: 32:57:55:20:67:d2:04:42:11:79:9f:2b:b6:00:82:2b:d1:49: fc:06:4e:fa:0e:0f:ea:b9:b3:cd:db:ce:c3:43:85:b4:f8:1c: eb:2f:78:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH0RcE0Xtou1j0x19HsIrvOLTFCcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJBOTZCMDEzRDc4RDlERDJBRDA0NkY5MDUyOUFCMDdF ODMyRkQ0NDAeFw0yNTA0MDMxNTM2NThaFw0yNTA0MDYxNTUyNThaMDMxMTAvBgNV BAMTKDZGNUU1MDk0ODExREVBRkREMzAxQUIxRTlCQTRCNUNFQzEwQTA3M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKV3zTQKs2WUdOHFZM3XbOHuCB M1YNugIJnpcV/QqeYkd0oDMDzRjDrDbec75om8l3oRBeP57fJsImW2Cwus/O/O5m p4vUU+KMUVun+k1PhA11YgrJ5haS46QjBy23Cq5z11NUPWiynfe+bTkY/VDXo7ql OxIvY5Duk3JBm9ePvuifuGAdxVa5mShPakchYbdRakWjtiVL23L4DaKu7NtHhS3X UGEEPnu8K2hgTm9ikck7ito3Syy+a0WxvKdkhxTdoNYgdxrwCL6JStkR5qqmTvVZ nRAHy5yIAhMg9zPF5K5H/UGplSO9OunuLSJ7NudhZSsEpTfdsNomJuI0Iuj/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb15QlIEd6v3TAasem6S1zsEKBzwwHwYDVR0j BBgwFoAU8qlrAT142d0q0Eb5BSmrB+gy/UQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YzRlMTY2OS02OGY3LTRhMzktYWNjMC01N2M3MTg3YjZjYjcvMC9GMkE5NkIwMTNE NzhEOUREMkFEMDQ2RjkwNTI5QUIwN0U4MzJGRDQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjJBOTZCMDEzRDc4RDlERDJBRDA0NkY5MDUyOUFCMDdFODMy RkQ0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmM0ZTE2NjktNjhmNy00YTM5LWFj YzAtNTdjNzE4N2I2Y2I3LzAvRjJBOTZCMDEzRDc4RDlERDJBRDA0NkY5MDUyOUFC MDdFODMyRkQ0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACoEMnh0C1YUWtR7P/FCNtzFEW9q9lyr7kRp 3I8g93F1KDhHsGVgjIh0KDe5E4VOMvEZtCvU0+5TcRgUpAUJn4QGrYVz7zWmGOcZ NClxci0BXy6GTGf3IMv3rgk4arnDZ1251iDxRthsbFAb42JbSagC3mJnebHOnFjR 0F8xmaykv4CHu0PaDtrb/q5boj7LyVR7hHp+jPmur1tXgcnwXkqXUPJoPROAvZfT 08gPpCpWC7wbQNTrog6rgt4qZ2pK86yBPTX+hDjvHYoh/SL7c8+RNTv0d3kMPjJX VSBn0gRCEXmfK7YAgivRSfwGTvoOD+q5s83bzsNDhbT4HOsveIc= -----END CERTIFICATE-----Generated at Sat Apr 5 17:50:23 2025 by rpki-client