$ rpki-client -vvf repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft File: 0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft (raw, json) Hash identifier: trQBEgrkx8Ps31xQb9Tkxscbyct7ed56n3vBGiGHnmI= Subject key identifier: FF:15:BD:E9:56:41:AC:4A:81:6E:CE:18:ED:80:66:13:FF:D6:50:48 Authority key identifier: 0C:E1:FC:47:3D:0C:13:A0:32:D3:9E:E0:43:3A:7A:59:35:A7:BE:00 Certificate issuer: /CN=0CE1FC473D0C13A032D39EE0433A7A5935A7BE00 Certificate serial: 5E69464DAC638BD604A68B4856600804CEF91111 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.cer Subject info access: rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft Manifest number: 28 Signing time: Fri 21 Feb 2025 18:22:19 +0000 Manifest this update: Fri 21 Feb 2025 18:17:19 +0000 Manifest next update: Mon 24 Feb 2025 20:25:19 +0000 Files and hashes: 1: 0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.crl (hash: LMtDl/R5lgQBiwJfjORVVs9dG+36hI4HXo+KovGLmJE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.crl rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 24 Feb 2025 20:25:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:69:46:4d:ac:63:8b:d6:04:a6:8b:48:56:60:08:04:ce:f9:11:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CE1FC473D0C13A032D39EE0433A7A5935A7BE00 Validity Not Before: Feb 21 18:17:19 2025 GMT Not After : Feb 24 20:25:19 2025 GMT Subject: CN=FF15BDE95641AC4A816ECE18ED806613FFD65048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d2:97:da:1d:78:90:01:9f:46:87:fe:0f:ba: 52:0a:a7:9b:99:2d:b8:eb:53:33:6f:64:0a:53:c1: 53:95:88:6d:06:a0:38:09:a3:ee:78:ce:dc:d0:de: 17:c8:b8:21:ee:6f:d2:4b:8b:18:3b:bb:0d:e9:5a: 1d:f8:6f:6a:51:00:0e:8d:ed:53:5b:61:d2:8c:f2: 1d:08:d6:0e:a7:ab:12:39:60:8e:b6:ce:70:e4:6b: d7:c5:93:45:86:52:e0:b0:3b:db:3e:79:37:1c:89: 10:56:ac:17:7b:e6:73:c7:ec:a7:7c:38:2a:da:a7: 26:e1:4b:f5:e6:c8:41:4d:6f:2e:85:0b:0d:89:11: e4:79:42:b1:b7:fc:7c:d2:3e:0e:d9:7c:96:1f:94: 4d:d9:85:70:50:b2:8b:74:00:ba:ed:26:ab:87:25: 79:02:62:e1:38:b4:a9:83:46:aa:59:96:c5:3a:03: 37:b2:40:66:f4:a4:1f:7e:40:24:01:4a:4d:95:bd: a5:f7:a2:a5:82:b9:8d:dd:2f:c7:9b:6f:19:be:a1: 78:ec:fc:b0:21:e6:02:c1:bc:73:14:1a:65:ee:fb: 58:4c:a6:7b:22:6f:d4:2a:16:bd:72:c6:d8:8f:59: 69:7b:bb:ab:c1:a5:2c:43:1c:ad:ab:c9:be:35:4c: 5f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:15:BD:E9:56:41:AC:4A:81:6E:CE:18:ED:80:66:13:FF:D6:50:48 X509v3 Authority Key Identifier: keyid:0C:E1:FC:47:3D:0C:13:A0:32:D3:9E:E0:43:3A:7A:59:35:A7:BE:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:39:3d:54:49:83:f1:b4:40:72:7d:c4:9b:ee:6c:40:8a:2e: a4:f8:3e:23:97:d9:ff:da:e5:a2:55:62:a6:18:36:94:84:ba: 95:b9:b3:63:5d:38:54:c4:ee:88:d8:45:af:c9:aa:03:20:2f: be:15:e2:ad:2e:59:98:cd:0d:f5:9d:f6:ee:31:04:6b:41:92: e1:f6:60:96:2e:10:c0:8a:fa:8e:04:3e:db:e8:ee:ad:fd:dc: bc:6a:73:54:0d:e5:b0:19:1c:38:a4:87:6b:23:12:6a:1f:ae: ff:42:1b:d7:7c:75:34:d3:a3:bf:f4:cb:a6:d8:00:f9:fd:46: 93:d7:16:a0:9e:d9:01:dd:c3:16:34:fd:a5:84:a2:9f:90:56: 47:6b:d0:16:e8:20:50:51:c5:59:46:f0:d1:c6:27:27:ba:66: 3d:78:a4:ff:a9:c4:15:a9:c8:a3:d6:c9:04:5f:14:97:1f:4f: 90:38:75:b7:da:f1:91:4a:b5:c3:d0:4d:00:95:74:70:66:d6: 5f:a0:1d:67:55:8b:42:17:48:ff:d1:70:f9:46:ad:d0:6b:c7: 06:7a:bf:2b:4d:ed:61:bb:49:1d:23:08:fb:ee:80:e1:e4:99: c8:05:52:f8:0f:e3:f9:33:f1:11:66:44:fe:77:fa:fe:be:a9: 1e:17:2d:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXmlGTaxji9YEpotIVmAIBM75EREwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENFMUZDNDczRDBDMTNBMDMyRDM5RUUwNDMzQTdBNTkz NUE3QkUwMDAeFw0yNTAyMjExODE3MTlaFw0yNTAyMjQyMDI1MTlaMDMxMTAvBgNV BAMTKEZGMTVCREU5NTY0MUFDNEE4MTZFQ0UxOEVEODA2NjEzRkZENjUwNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT0pfaHXiQAZ9Gh/4PulIKp5uZ LbjrUzNvZApTwVOViG0GoDgJo+54ztzQ3hfIuCHub9JLixg7uw3pWh34b2pRAA6N 7VNbYdKM8h0I1g6nqxI5YI62znDka9fFk0WGUuCwO9s+eTcciRBWrBd75nPH7Kd8 OCrapybhS/XmyEFNby6FCw2JEeR5QrG3/HzSPg7ZfJYflE3ZhXBQsot0ALrtJquH JXkCYuE4tKmDRqpZlsU6AzeyQGb0pB9+QCQBSk2VvaX3oqWCuY3dL8ebbxm+oXjs /LAh5gLBvHMUGmXu+1hMpnsib9QqFr1yxtiPWWl7u6vBpSxDHK2ryb41TF8hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/xW96VZBrEqBbs4Y7YBmE//WUEgwHwYDVR0j BBgwFoAUDOH8Rz0ME6Ay057gQzp6WTWnvgAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MmY0Nzc2My1iMGUwLTRkMDEtYjZjOC02MGVhNGNhNTYwYjQvMC8wQ0UxRkM0NzNE MEMxM0EwMzJEMzlFRTA0MzNBN0E1OTM1QTdCRTAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMENFMUZDNDczRDBDMTNBMDMyRDM5RUUwNDMzQTdBNTkzNUE3 QkUwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzJmNDc3NjMtYjBlMC00ZDAxLWI2 YzgtNjBlYTRjYTU2MGI0LzAvMENFMUZDNDczRDBDMTNBMDMyRDM5RUUwNDMzQTdB NTkzNUE3QkUwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACM5PVRJg/G0QHJ9xJvubECKLqT4PiOX2f/a 5aJVYqYYNpSEupW5s2NdOFTE7ojYRa/JqgMgL74V4q0uWZjNDfWd9u4xBGtBkuH2 YJYuEMCK+o4EPtvo7q393Lxqc1QN5bAZHDikh2sjEmofrv9CG9d8dTTTo7/0y6bY APn9RpPXFqCe2QHdwxY0/aWEop+QVkdr0BboIFBRxVlG8NHGJye6Zj14pP+pxBWp yKPWyQRfFJcfT5A4dbfa8ZFKtcPQTQCVdHBm1l+gHWdVi0IXSP/RcPlGrdBrxwZ6 vytN7WG7SR0jCPvugOHkmcgFUvgP4/kz8RFmRP53+v6+qR4XLSQ= -----END CERTIFICATE-----Generated at Sat Feb 22 05:59:26 2025 by rpki-client