$ rpki-client -vvf repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.mft File: 2244AB179BDE031980D325EEBEAFEC994CA8B419.mft (raw, json) Hash identifier: Ds2nj1qR6SMEQs/KLnYoVZcWiKmc5BBWz7g3gF2YTSY= Subject key identifier: 9C:6B:91:02:E1:3D:64:1A:8D:4B:E0:59:BF:5F:BF:B4:F7:C6:65:AB Authority key identifier: 22:44:AB:17:9B:DE:03:19:80:D3:25:EE:BE:AF:EC:99:4C:A8:B4:19 Certificate issuer: /CN=2244AB179BDE031980D325EEBEAFEC994CA8B419 Certificate serial: 50458D4A20C65688068D59EC9BB73A3CBCBC3F03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2244AB179BDE031980D325EEBEAFEC994CA8B419.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.mft Manifest number: 63 Signing time: Fri 04 Apr 2025 22:20:57 +0000 Manifest this update: Fri 04 Apr 2025 22:15:57 +0000 Manifest next update: Tue 08 Apr 2025 09:52:57 +0000 Files and hashes: 1: 2244AB179BDE031980D325EEBEAFEC994CA8B419.crl (hash: aGQVVDrrgRwFmvXdHcprTsOIRNmnYWqjZqsGMgxRlbk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.crl rsync://repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2244AB179BDE031980D325EEBEAFEC994CA8B419.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:45:8d:4a:20:c6:56:88:06:8d:59:ec:9b:b7:3a:3c:bc:bc:3f:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2244AB179BDE031980D325EEBEAFEC994CA8B419 Validity Not Before: Apr 4 22:15:57 2025 GMT Not After : Apr 8 09:52:57 2025 GMT Subject: CN=9C6B9102E13D641A8D4BE059BF5FBFB4F7C665AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b6:39:d0:8a:d2:b1:e7:2d:70:02:a6:4f:9f: 8b:45:91:41:4c:22:c1:d0:f3:39:8f:f0:ae:d1:99: 04:90:04:f8:c8:4c:ae:32:07:a9:66:d3:7b:bb:74: b6:94:ba:f9:5a:9c:0e:42:bb:bd:79:69:b9:cd:46: 09:81:05:c3:34:6b:02:62:60:ca:bd:71:ac:24:ca: d8:df:e9:11:64:96:71:85:7e:43:ff:58:e4:1f:b3: b4:4e:a9:df:5b:cb:19:ee:3e:97:11:e6:05:26:f0: 0a:1d:3e:7f:25:74:9d:e2:39:4f:35:af:e7:2c:74: 0a:91:e3:23:59:ad:72:55:cc:51:b3:a9:2b:40:94: bb:a6:ef:2e:28:40:b8:69:95:33:27:c7:ff:43:d4: 31:ba:c7:db:bc:a5:4b:ac:89:b7:24:27:2c:07:27: dd:a0:46:7d:7e:1e:79:9b:02:da:0f:0d:18:b0:11: 00:eb:22:97:d7:56:c8:b9:8d:c3:61:b9:eb:0c:e9: 75:fc:de:62:fd:3e:1c:bc:ff:29:78:ad:26:50:00: 43:63:58:c1:04:84:88:74:ea:6c:18:da:74:d9:16: 5c:68:6e:36:59:91:c7:50:ee:80:89:35:9e:15:c8: 24:3f:1c:37:a0:dd:7c:0f:42:7c:74:db:d7:9e:56: 4e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:6B:91:02:E1:3D:64:1A:8D:4B:E0:59:BF:5F:BF:B4:F7:C6:65:AB X509v3 Authority Key Identifier: keyid:22:44:AB:17:9B:DE:03:19:80:D3:25:EE:BE:AF:EC:99:4C:A8:B4:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2244AB179BDE031980D325EEBEAFEC994CA8B419.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption db:27:79:92:33:4a:ae:76:fe:5e:ba:5e:79:19:ce:64:89:30: db:72:c9:28:78:74:62:f9:7d:3b:26:f2:62:3e:41:9a:20:76: b6:d2:6d:6c:f4:d8:8c:da:f9:0f:af:1e:fe:c3:34:54:55:aa: d6:1e:23:e6:5b:c9:51:c7:81:42:a1:0b:77:4b:d1:51:87:75: 5d:f3:6a:d2:37:01:d8:88:ca:1e:0e:d0:86:a4:5e:c2:fe:15: 32:00:bd:ab:3b:4d:5a:79:80:a2:9e:9c:e7:34:1c:8d:da:d6: e7:e5:aa:fc:83:0a:c0:4e:fc:17:f9:b9:bb:4d:2e:44:80:da: 5d:6e:8e:88:1f:6a:7d:ce:2d:ad:22:3d:d8:8e:ed:e7:ca:e2: 7d:ee:10:b7:bd:66:af:03:c2:46:18:11:ee:f4:f1:f5:ff:46: fb:3d:d3:33:10:fc:c2:74:40:a4:31:71:f2:f1:e2:be:5b:a9: be:42:a8:71:bf:37:6f:69:98:82:98:0c:72:f1:98:17:05:c7: 26:45:ca:5d:f4:e0:40:49:a1:07:5d:6e:66:db:46:eb:44:79: fb:63:60:b7:63:50:2a:12:e0:fe:5d:6c:2d:4a:44:12:20:33: 2a:7f:9f:c1:20:ab:68:f6:c7:50:cd:d5:c9:4b:fd:ff:ae:f6: 82:39:9e:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUEWNSiDGVogGjVnsm7c6PLy8PwMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI0NEFCMTc5QkRFMDMxOTgwRDMyNUVFQkVBRkVDOTk0 Q0E4QjQxOTAeFw0yNTA0MDQyMjE1NTdaFw0yNTA0MDgwOTUyNTdaMDMxMTAvBgNV BAMTKDlDNkI5MTAyRTEzRDY0MUE4RDRCRTA1OUJGNUZCRkI0RjdDNjY1QUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRtjnQitKx5y1wAqZPn4tFkUFM IsHQ8zmP8K7RmQSQBPjITK4yB6lm03u7dLaUuvlanA5Cu715abnNRgmBBcM0awJi YMq9cawkytjf6RFklnGFfkP/WOQfs7ROqd9byxnuPpcR5gUm8AodPn8ldJ3iOU81 r+csdAqR4yNZrXJVzFGzqStAlLum7y4oQLhplTMnx/9D1DG6x9u8pUusibckJywH J92gRn1+HnmbAtoPDRiwEQDrIpfXVsi5jcNhuesM6XX83mL9Phy8/yl4rSZQAENj WMEEhIh06mwY2nTZFlxobjZZkcdQ7oCJNZ4VyCQ/HDeg3XwPQnx029eeVk4hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnGuRAuE9ZBqNS+BZv1+/tPfGZaswHwYDVR0j BBgwFoAUIkSrF5veAxmA0yXuvq/smUyotBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZGEwY2RkOS03ZjMxLTRmMWYtYWIwOS1hNjBjYzA4NTljZGEvMC8yMjQ0QUIxNzlC REUwMzE5ODBEMzI1RUVCRUFGRUM5OTRDQThCNDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI0NEFCMTc5QkRFMDMxOTgwRDMyNUVFQkVBRkVDOTk0Q0E4 QjQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmRhMGNkZDktN2YzMS00ZjFmLWFi MDktYTYwY2MwODU5Y2RhLzAvMjI0NEFCMTc5QkRFMDMxOTgwRDMyNUVFQkVBRkVD OTk0Q0E4QjQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANsneZIzSq52/l66XnkZzmSJMNtyySh4dGL5 fTsm8mI+QZogdrbSbWz02Iza+Q+vHv7DNFRVqtYeI+ZbyVHHgUKhC3dL0VGHdV3z atI3AdiIyh4O0IakXsL+FTIAvas7TVp5gKKenOc0HI3a1uflqvyDCsBO/Bf5ubtN LkSA2l1ujogfan3OLa0iPdiO7efK4n3uELe9Zq8DwkYYEe708fX/Rvs90zMQ/MJ0 QKQxcfLx4r5bqb5CqHG/N29pmIKYDHLxmBcFxyZFyl304EBJoQddbmbbRutEeftj YLdjUCoS4P5dbC1KRBIgMyp/n8Egq2j2x1DN1clL/f+u9oI5nsI= -----END CERTIFICATE-----Generated at Sat Apr 5 16:45:16 2025 by rpki-client