$ rpki-client -vvf repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.mft File: 4496E0D8274284254DC2307A2633342BE95C0DD3.mft (raw, json) Hash identifier: 6LOWi+mVNRI/Sk4hEcEbitzqVYFig5a5+fsLfD48CTY= Subject key identifier: 66:67:80:D9:5A:93:36:94:D4:03:55:77:DC:F5:64:E6:F6:C8:00:7B Authority key identifier: 44:96:E0:D8:27:42:84:25:4D:C2:30:7A:26:33:34:2B:E9:5C:0D:D3 Certificate issuer: /CN=4496E0D8274284254DC2307A2633342BE95C0DD3 Certificate serial: 4CABE0C88B87847479BDDD51E6A2F90ED39C179A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4496E0D8274284254DC2307A2633342BE95C0DD3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.mft Manifest number: E3 Signing time: Tue 08 Apr 2025 04:51:50 +0000 Manifest this update: Tue 08 Apr 2025 04:46:50 +0000 Manifest next update: Fri 11 Apr 2025 13:33:50 +0000 Files and hashes: 1: 4496E0D8274284254DC2307A2633342BE95C0DD3.crl (hash: NF49pxoNsv/pnCqDvva/oArKwsT30wH+DQFPzXcoB4o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.crl rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4496E0D8274284254DC2307A2633342BE95C0DD3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 13:33:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:ab:e0:c8:8b:87:84:74:79:bd:dd:51:e6:a2:f9:0e:d3:9c:17:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4496E0D8274284254DC2307A2633342BE95C0DD3 Validity Not Before: Apr 8 04:46:50 2025 GMT Not After : Apr 11 13:33:50 2025 GMT Subject: CN=666780D95A933694D4035577DCF564E6F6C8007B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:05:b4:75:08:ab:74:35:eb:59:8e:55:15:43: d7:71:a7:6a:c7:51:db:11:27:bf:d4:c8:13:e9:d5: c6:39:ab:d2:ce:14:23:26:17:5a:99:20:68:f7:7b: 50:6e:bc:93:22:1c:c0:d1:ae:cc:52:c0:b8:0c:07: e9:9e:48:02:1c:f6:a1:46:01:38:ea:90:95:6c:7b: be:61:fe:be:0b:5c:ef:16:9f:8f:d6:82:b4:be:8f: 93:17:40:57:20:01:0f:96:55:3e:9f:fe:96:0a:f0: c4:ff:7a:03:fa:fb:ee:28:84:7c:26:4d:e2:0f:92: 19:19:ff:8d:28:0a:83:fd:fc:5b:08:19:38:de:65: 57:68:96:48:73:2e:96:6f:ba:67:81:6a:4a:3d:ea: 90:4e:24:78:94:eb:f9:74:ee:bd:5d:e9:ab:a3:54: 3f:f0:ee:bc:7b:c5:89:0b:28:70:b0:43:35:c5:bb: 5e:93:a9:9d:b5:ff:5b:23:95:54:6d:23:d9:12:e1: fd:43:79:84:24:fb:97:4d:27:28:f6:dc:6c:0c:b3: 6e:e8:31:11:8a:11:3b:73:58:63:25:25:5c:08:58: 04:9e:e4:a6:24:e5:99:b8:8f:c7:2a:45:8e:35:26: 0d:73:ce:c2:8f:1b:dc:6f:37:ca:f1:fc:d9:64:fa: ec:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:67:80:D9:5A:93:36:94:D4:03:55:77:DC:F5:64:E6:F6:C8:00:7B X509v3 Authority Key Identifier: keyid:44:96:E0:D8:27:42:84:25:4D:C2:30:7A:26:33:34:2B:E9:5C:0D:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4496E0D8274284254DC2307A2633342BE95C0DD3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:ff:91:84:ff:8e:56:de:8e:30:89:86:24:9d:dd:11:a3:c9: 52:db:25:5e:91:b7:ce:29:da:c1:8f:e7:20:bf:40:47:19:81: fb:69:2b:b5:d8:83:f7:53:c7:fa:db:dd:ed:35:86:06:e0:a3: 6d:21:75:8a:f2:e1:82:4e:d5:7b:b8:ff:32:6a:91:cf:e7:af: b3:07:80:4a:62:75:7d:f4:ed:69:7d:8d:72:9c:e0:2b:fc:60: e8:e4:67:c0:bd:cc:d4:f5:ac:ab:b4:d8:04:38:4e:62:68:33: 2c:95:5d:91:f2:ec:37:c4:87:30:30:c6:4b:87:df:bf:a1:bd: 3c:37:27:d0:ec:e9:a0:90:58:44:cc:54:e7:bb:a5:f4:37:62: e8:cf:25:a3:0b:a2:02:2a:11:35:02:da:55:12:b6:2e:d8:45: 6c:b3:6a:38:c2:65:12:9e:00:f7:2c:40:86:1f:b4:11:07:2a: 7d:17:2d:81:e6:2e:ed:5a:96:d5:db:f1:a6:70:5e:f8:b7:ac: ee:8f:82:74:91:95:80:85:9a:ad:08:19:e5:69:c5:56:0a:44: 49:70:54:35:58:29:1a:2c:41:05:db:80:fb:f5:b5:11:04:21: c4:4a:d2:4e:40:17:4e:c7:cb:49:3f:65:23:c4:e1:04:81:a8: 76:55:a6:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTKvgyIuHhHR5vd1R5qL5DtOcF5owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQ5NkUwRDgyNzQyODQyNTREQzIzMDdBMjYzMzM0MkJF OTVDMEREMzAeFw0yNTA0MDgwNDQ2NTBaFw0yNTA0MTExMzMzNTBaMDMxMTAvBgNV BAMTKDY2Njc4MEQ5NUE5MzM2OTRENDAzNTU3N0RDRjU2NEU2RjZDODAwN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrBbR1CKt0NetZjlUVQ9dxp2rH UdsRJ7/UyBPp1cY5q9LOFCMmF1qZIGj3e1BuvJMiHMDRrsxSwLgMB+meSAIc9qFG ATjqkJVse75h/r4LXO8Wn4/WgrS+j5MXQFcgAQ+WVT6f/pYK8MT/egP6++4ohHwm TeIPkhkZ/40oCoP9/FsIGTjeZVdolkhzLpZvumeBako96pBOJHiU6/l07r1d6auj VD/w7rx7xYkLKHCwQzXFu16TqZ21/1sjlVRtI9kS4f1DeYQk+5dNJyj23GwMs27o MRGKETtzWGMlJVwIWASe5KYk5Zm4j8cqRY41Jg1zzsKPG9xvN8rx/Nlk+uzZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZmeA2VqTNpTUA1V33PVk5vbIAHswHwYDVR0j BBgwFoAURJbg2CdChCVNwjB6JjM0K+lcDdMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDY2YjAwNS0xNzIxLTQ5NDUtODVjMC1iMDM5OWNlZGNjZmUvMC80NDk2RTBEODI3 NDI4NDI1NERDMjMwN0EyNjMzMzQyQkU5NUMwREQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQ5NkUwRDgyNzQyODQyNTREQzIzMDdBMjYzMzM0MkJFOTVD MEREMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ2NmIwMDUtMTcyMS00OTQ1LTg1 YzAtYjAzOTljZWRjY2ZlLzAvNDQ5NkUwRDgyNzQyODQyNTREQzIzMDdBMjYzMzM0 MkJFOTVDMEREMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKn/kYT/jlbejjCJhiSd3RGjyVLbJV6Rt84p 2sGP5yC/QEcZgftpK7XYg/dTx/rb3e01hgbgo20hdYry4YJO1Xu4/zJqkc/nr7MH gEpidX307Wl9jXKc4Cv8YOjkZ8C9zNT1rKu02AQ4TmJoMyyVXZHy7DfEhzAwxkuH 37+hvTw3J9Ds6aCQWETMVOe7pfQ3YujPJaMLogIqETUC2lUSti7YRWyzajjCZRKe APcsQIYftBEHKn0XLYHmLu1altXb8aZwXvi3rO6PgnSRlYCFmq0IGeVpxVYKRElw VDVYKRosQQXbgPv1tREEIcRK0k5AF07Hy0k/ZSPE4QSBqHZVpuQ= -----END CERTIFICATE-----Generated at Fri Apr 11 03:10:50 2025 by rpki-client