$ rpki-client -vvf repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.mft File: 597734A26158D77A6ED02222DF93D1CE2BD6EA03.mft (raw, json) Hash identifier: hbB1m4uGtHTWxkYXoQ9a6FSm9aoHS+zOGRwqIQIG0SU= Subject key identifier: F5:85:62:A6:39:26:EE:CD:9A:24:10:93:C1:A2:58:7C:78:11:8E:F8 Authority key identifier: 59:77:34:A2:61:58:D7:7A:6E:D0:22:22:DF:93:D1:CE:2B:D6:EA:03 Certificate issuer: /CN=597734A26158D77A6ED02222DF93D1CE2BD6EA03 Certificate serial: 0D7F45428F266DC6A3CEF759E8B6C56C2DB1682A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/597734A26158D77A6ED02222DF93D1CE2BD6EA03.cer Subject info access: rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.mft Manifest number: 97 Signing time: Fri 04 Apr 2025 06:10:56 +0000 Manifest this update: Fri 04 Apr 2025 06:05:56 +0000 Manifest next update: Mon 07 Apr 2025 15:02:56 +0000 Files and hashes: 1: 597734A26158D77A6ED02222DF93D1CE2BD6EA03.crl (hash: FnWAcMGxtxmNHRM4BAR9JhimKXVjiLr+omdNdjIk5qk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.crl rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/597734A26158D77A6ED02222DF93D1CE2BD6EA03.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 15:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:7f:45:42:8f:26:6d:c6:a3:ce:f7:59:e8:b6:c5:6c:2d:b1:68:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=597734A26158D77A6ED02222DF93D1CE2BD6EA03 Validity Not Before: Apr 4 06:05:56 2025 GMT Not After : Apr 7 15:02:56 2025 GMT Subject: CN=F58562A63926EECD9A241093C1A2587C78118EF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:36:91:cc:1c:9c:c9:0c:80:51:07:be:fe:0d: ca:2c:8d:2c:d3:37:38:4c:34:6d:b9:10:c0:ed:ac: ac:03:ba:5f:74:a8:b5:f8:1a:56:16:29:dc:03:f4: dd:2c:6a:90:1d:ca:2b:b7:25:a7:cc:1e:ff:4c:ad: 37:b7:53:63:14:b6:55:3d:80:e3:e1:ca:62:ff:9f: 97:ed:30:3c:ef:b6:48:70:9a:11:35:83:73:b9:b2: c4:15:df:45:ce:93:6b:ea:13:3e:1b:ba:be:9b:a7: 33:3e:77:25:42:4b:58:90:94:f6:67:78:49:1e:ee: db:15:c3:8f:95:db:cf:3f:f2:f1:97:d5:8b:9f:e5: 79:97:aa:9a:4a:e5:af:c6:24:a4:21:ea:03:b6:cd: 2e:9a:77:29:f2:65:54:d1:36:ba:a5:c2:40:d8:28: eb:5b:32:c2:4d:b8:cd:7e:5b:78:73:c7:c0:cd:f6: d7:42:ab:91:2a:b8:a6:d7:8b:be:c9:60:66:2f:46: 45:20:02:f4:89:23:2b:ad:04:58:f6:5a:60:f8:b6: 06:73:33:60:bc:78:2f:9d:f0:73:9b:bf:9c:96:e2: b3:ba:e3:73:70:35:8d:36:4d:f1:03:9e:a1:37:ec: 61:18:db:b2:3c:ca:98:e6:3c:12:77:a5:89:3e:2f: 93:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:85:62:A6:39:26:EE:CD:9A:24:10:93:C1:A2:58:7C:78:11:8E:F8 X509v3 Authority Key Identifier: keyid:59:77:34:A2:61:58:D7:7A:6E:D0:22:22:DF:93:D1:CE:2B:D6:EA:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/597734A26158D77A6ED02222DF93D1CE2BD6EA03.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70da5882-b804-4154-959b-6336b24e18b2/0/597734A26158D77A6ED02222DF93D1CE2BD6EA03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:7a:32:de:96:d0:58:a5:44:c8:b2:df:d5:35:63:de:fe:b2: 1d:f6:1e:03:41:79:e8:87:02:67:f6:9b:47:e4:bb:09:64:e4: 5b:2d:30:f8:49:dc:0d:3c:1d:84:24:17:8a:fb:8a:d9:05:e1: 31:ac:4a:7d:0e:27:7c:0d:04:ee:89:fc:1b:c7:d2:33:83:64: 96:c1:c6:5e:03:b9:51:5c:71:5e:87:65:73:4f:b7:58:2a:d2: be:90:6c:f3:a8:47:6e:d0:6e:93:31:86:d7:d6:4e:f4:38:6d: 27:ec:65:67:e2:b6:61:b9:85:b6:de:2f:4d:ba:f8:0a:0b:d3: c8:7c:de:bf:ff:2c:54:b3:33:eb:f3:ec:29:e5:9a:ab:0e:00: b7:1a:4d:65:13:2f:f5:a2:ed:4c:b4:94:21:8e:85:42:95:a2: 01:d3:7e:7c:68:42:1a:60:36:b5:cd:c1:c0:e7:e8:ff:51:d9: 9e:e6:d4:8c:8f:7d:9d:26:c3:00:af:9e:8b:65:59:65:f9:55: 58:5d:e8:28:b8:91:ca:e1:be:f3:30:4f:78:6c:56:c8:bf:17: dc:1f:1d:86:fb:6f:34:99:59:68:d5:6a:95:00:92:ec:1c:48: ff:44:13:f0:f3:7e:a3:9c:7f:e9:44:c4:b0:f4:23:64:04:7d: b6:da:15:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDX9FQo8mbcajzvdZ6LbFbC2xaCowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTk3NzM0QTI2MTU4RDc3QTZFRDAyMjIyREY5M0QxQ0Uy QkQ2RUEwMzAeFw0yNTA0MDQwNjA1NTZaFw0yNTA0MDcxNTAyNTZaMDMxMTAvBgNV BAMTKEY1ODU2MkE2MzkyNkVFQ0Q5QTI0MTA5M0MxQTI1ODdDNzgxMThFRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMNpHMHJzJDIBRB77+DcosjSzT NzhMNG25EMDtrKwDul90qLX4GlYWKdwD9N0sapAdyiu3JafMHv9MrTe3U2MUtlU9 gOPhymL/n5ftMDzvtkhwmhE1g3O5ssQV30XOk2vqEz4bur6bpzM+dyVCS1iQlPZn eEke7tsVw4+V288/8vGX1Yuf5XmXqppK5a/GJKQh6gO2zS6adynyZVTRNrqlwkDY KOtbMsJNuM1+W3hzx8DN9tdCq5EquKbXi77JYGYvRkUgAvSJIyutBFj2WmD4tgZz M2C8eC+d8HObv5yW4rO643NwNY02TfEDnqE37GEY27I8ypjmPBJ3pYk+L5NPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9YVipjkm7s2aJBCTwaJYfHgRjvgwHwYDVR0j BBgwFoAUWXc0omFY13pu0CIi35PRzivW6gMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MGRhNTg4Mi1iODA0LTQxNTQtOTU5Yi02MzM2YjI0ZTE4YjIvMC81OTc3MzRBMjYx NThENzdBNkVEMDIyMjJERjkzRDFDRTJCRDZFQTAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTk3NzM0QTI2MTU4RDc3QTZFRDAyMjIyREY5M0QxQ0UyQkQ2 RUEwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzBkYTU4ODItYjgwNC00MTU0LTk1 OWItNjMzNmIyNGUxOGIyLzAvNTk3NzM0QTI2MTU4RDc3QTZFRDAyMjIyREY5M0Qx Q0UyQkQ2RUEwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGR6Mt6W0FilRMiy39U1Y97+sh32HgNBeeiH Amf2m0fkuwlk5FstMPhJ3A08HYQkF4r7itkF4TGsSn0OJ3wNBO6J/BvH0jODZJbB xl4DuVFccV6HZXNPt1gq0r6QbPOoR27QbpMxhtfWTvQ4bSfsZWfitmG5hbbeL026 +AoL08h83r//LFSzM+vz7CnlmqsOALcaTWUTL/Wi7Uy0lCGOhUKVogHTfnxoQhpg NrXNwcDn6P9R2Z7m1IyPfZ0mwwCvnotlWWX5VVhd6Ci4kcrhvvMwT3hsVsi/F9wf HYb7bzSZWWjVapUAkuwcSP9EE/DzfqOcf+lExLD0I2QEfbbaFSQ= -----END CERTIFICATE-----Generated at Sun Apr 6 07:40:58 2025 by rpki-client