$ rpki-client -vvf repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.mft File: 74017DA6C3B6935388C1ADE6008FB78FAC671213.mft (raw, json) Hash identifier: dS6WX+zf51Uf170tuh5uPvYcRtfF6imQBpOQsWGDQyQ= Subject key identifier: FF:55:82:CE:04:DF:16:AB:7E:25:BA:09:D1:BB:2D:CF:F3:EF:B4:9E Authority key identifier: 74:01:7D:A6:C3:B6:93:53:88:C1:AD:E6:00:8F:B7:8F:AC:67:12:13 Certificate issuer: /CN=74017DA6C3B6935388C1ADE6008FB78FAC671213 Certificate serial: 06CF31CC2D0FEA16C348684B952B6B29CDCD8E5F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74017DA6C3B6935388C1ADE6008FB78FAC671213.cer Subject info access: rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.mft Manifest number: 012C Signing time: Sat 19 Apr 2025 17:31:50 +0000 Manifest this update: Sat 19 Apr 2025 17:26:50 +0000 Manifest next update: Tue 22 Apr 2025 19:49:50 +0000 Files and hashes: 1: 74017DA6C3B6935388C1ADE6008FB78FAC671213.crl (hash: wuqPcRPO8YwoG/G3Xl2uzSZ4AERBLj+pl0oL2w9iqWM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.crl rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74017DA6C3B6935388C1ADE6008FB78FAC671213.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 19:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:cf:31:cc:2d:0f:ea:16:c3:48:68:4b:95:2b:6b:29:cd:cd:8e:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74017DA6C3B6935388C1ADE6008FB78FAC671213 Validity Not Before: Apr 19 17:26:50 2025 GMT Not After : Apr 22 19:49:50 2025 GMT Subject: CN=FF5582CE04DF16AB7E25BA09D1BB2DCFF3EFB49E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:33:c5:d1:1d:39:de:1a:d5:8b:c2:2c:6f:24: e9:1d:60:0f:2a:a1:84:2b:1f:7f:97:d3:91:ca:bf: 5b:c0:f2:0c:67:8e:ed:db:6d:7b:5b:ed:5f:29:e4: ca:5f:c0:f1:7c:a7:78:8d:c7:33:d9:25:89:6c:a7: 0f:34:49:6e:c2:f2:e2:00:f3:01:fa:00:9b:9e:81: cf:a2:2c:53:68:a4:11:a3:50:cc:3a:97:81:dd:16: 87:43:10:55:d1:c1:c3:3c:d1:dd:03:bf:af:7b:0d: 66:2f:f6:fb:7b:23:6b:1c:6c:53:00:cb:5a:cc:10: 6d:f7:e6:98:9b:37:2e:c5:0d:62:80:05:86:2f:dc: 8b:91:6b:fd:27:d0:9d:4b:cc:70:79:bc:2c:70:38: a7:4c:56:ad:04:f0:35:48:f8:53:73:8c:6f:0d:49: 3e:e3:74:fc:e8:78:66:9d:e5:6f:4b:13:a6:e7:84: 64:cb:83:61:fd:1d:0a:2b:8b:54:e8:ca:6a:cb:cf: b5:3d:74:37:17:ba:46:c8:26:c5:71:2f:83:48:25: d6:21:b0:8f:26:68:1f:b1:d4:3d:27:ee:bd:4c:f6: cf:ea:bb:4e:3b:ba:13:e9:1a:c1:c8:46:ae:1e:24: 44:84:e9:7f:ad:05:bb:71:91:4c:7c:b9:d1:24:b7: bf:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:55:82:CE:04:DF:16:AB:7E:25:BA:09:D1:BB:2D:CF:F3:EF:B4:9E X509v3 Authority Key Identifier: keyid:74:01:7D:A6:C3:B6:93:53:88:C1:AD:E6:00:8F:B7:8F:AC:67:12:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/74017DA6C3B6935388C1ADE6008FB78FAC671213.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73adecdd-2533-462d-ace2-ba4a7a2ca4c3/0/74017DA6C3B6935388C1ADE6008FB78FAC671213.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:e9:5b:2a:5b:45:56:8c:06:c7:46:26:41:5f:e1:af:ba:c0: 79:f3:7d:9c:f1:20:26:56:c4:0a:4f:2c:90:82:b9:b6:6b:bf: fc:a8:0d:5c:cc:49:f5:49:55:c5:05:23:3d:e7:a2:02:51:98: 39:1a:cf:b7:5f:fc:c4:9b:de:a2:d7:f8:f3:b8:7a:87:44:28: 9c:79:a6:82:3f:14:3a:7d:78:f5:5e:e3:85:aa:0f:a5:72:c3: 5a:92:41:78:4f:a0:4d:66:2a:8c:1c:d0:87:1a:5c:46:3c:66: 8c:91:97:b0:d4:d5:97:f2:74:8b:a9:dd:59:60:05:d7:e8:cb: ff:ff:21:58:ec:9c:ec:1d:79:b3:33:62:71:13:c3:41:57:5f: 92:32:3f:e4:86:a8:ea:bf:d8:10:e1:f5:c1:8d:7a:cc:46:66: 0d:47:b2:f4:b6:7b:c4:86:36:3c:50:e2:e7:09:03:83:46:59: 4f:56:6c:8b:26:c0:c2:a2:c1:82:60:11:ee:34:59:fa:6a:46: f6:83:a1:f6:22:b8:b8:0f:84:c0:c4:cb:b9:50:72:78:f2:33: 6d:9a:61:b6:f8:46:18:aa:b0:90:ce:e7:2e:cc:fa:30:43:e1: 55:da:44:7d:68:a1:12:ef:73:b4:48:a7:f1:a1:ca:c5:04:d5: fd:01:c5:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBs8xzC0P6hbDSGhLlStrKc3Njl8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQwMTdEQTZDM0I2OTM1Mzg4QzFBREU2MDA4RkI3OEZB QzY3MTIxMzAeFw0yNTA0MTkxNzI2NTBaFw0yNTA0MjIxOTQ5NTBaMDMxMTAvBgNV BAMTKEZGNTU4MkNFMDRERjE2QUI3RTI1QkEwOUQxQkIyRENGRjNFRkI0OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDM8XRHTneGtWLwixvJOkdYA8q oYQrH3+X05HKv1vA8gxnju3bbXtb7V8p5MpfwPF8p3iNxzPZJYlspw80SW7C8uIA 8wH6AJuegc+iLFNopBGjUMw6l4HdFodDEFXRwcM80d0Dv697DWYv9vt7I2scbFMA y1rMEG335pibNy7FDWKABYYv3IuRa/0n0J1LzHB5vCxwOKdMVq0E8DVI+FNzjG8N ST7jdPzoeGad5W9LE6bnhGTLg2H9HQori1ToymrLz7U9dDcXukbIJsVxL4NIJdYh sI8maB+x1D0n7r1M9s/qu047uhPpGsHIRq4eJESE6X+tBbtxkUx8udEkt79JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/1WCzgTfFqt+JboJ0bstz/PvtJ4wHwYDVR0j BBgwFoAUdAF9psO2k1OIwa3mAI+3j6xnEhMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 M2FkZWNkZC0yNTMzLTQ2MmQtYWNlMi1iYTRhN2EyY2E0YzMvMC83NDAxN0RBNkMz QjY5MzUzODhDMUFERTYwMDhGQjc4RkFDNjcxMjEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzQwMTdEQTZDM0I2OTM1Mzg4QzFBREU2MDA4RkI3OEZBQzY3 MTIxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzNhZGVjZGQtMjUzMy00NjJkLWFj ZTItYmE0YTdhMmNhNGMzLzAvNzQwMTdEQTZDM0I2OTM1Mzg4QzFBREU2MDA4RkI3 OEZBQzY3MTIxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJPpWypbRVaMBsdGJkFf4a+6wHnzfZzxICZW xApPLJCCubZrv/yoDVzMSfVJVcUFIz3nogJRmDkaz7df/MSb3qLX+PO4eodEKJx5 poI/FDp9ePVe44WqD6Vyw1qSQXhPoE1mKowc0IcaXEY8ZoyRl7DU1ZfydIup3Vlg Bdfoy///IVjsnOwdebMzYnETw0FXX5IyP+SGqOq/2BDh9cGNesxGZg1HsvS2e8SG NjxQ4ucJA4NGWU9WbIsmwMKiwYJgEe40WfpqRvaDofYiuLgPhMDEy7lQcnjyM22a Ybb4RhiqsJDO5y7M+jBD4VXaRH1ooRLvc7RIp/GhysUE1f0BxfU= -----END CERTIFICATE-----Generated at Mon Apr 21 15:24:50 2025 by rpki-client