$ rpki-client -vvf repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.mft File: 430E302040DE11D8C84431B3397113EC969694A0.mft (raw, json) Hash identifier: X8zmKwBoWNR4zd0CLJ/J6jnFi6JRVW1NgmG54KkKvuI= Subject key identifier: E0:06:38:A4:2A:9A:0B:95:BB:C7:FC:62:2A:30:79:AF:F6:7B:2B:6A Authority key identifier: 43:0E:30:20:40:DE:11:D8:C8:44:31:B3:39:71:13:EC:96:96:94:A0 Certificate issuer: /CN=430E302040DE11D8C84431B3397113EC969694A0 Certificate serial: 7F44984430371DF63974E8F8852D1821C2870442 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/430E302040DE11D8C84431B3397113EC969694A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.mft Manifest number: 0463 Signing time: Thu 17 Apr 2025 16:01:50 +0000 Manifest this update: Thu 17 Apr 2025 15:56:50 +0000 Manifest next update: Sun 20 Apr 2025 22:30:50 +0000 Files and hashes: 1: 430E302040DE11D8C84431B3397113EC969694A0.crl (hash: 1wwpaeRh/if3ngRuvdZD7LsbMSFeD+JKp2k2Ws04L4w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.crl rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/430E302040DE11D8C84431B3397113EC969694A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 22:30:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:44:98:44:30:37:1d:f6:39:74:e8:f8:85:2d:18:21:c2:87:04:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=430E302040DE11D8C84431B3397113EC969694A0 Validity Not Before: Apr 17 15:56:50 2025 GMT Not After : Apr 20 22:30:50 2025 GMT Subject: CN=E00638A42A9A0B95BBC7FC622A3079AFF67B2B6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:df:17:71:21:93:52:42:f1:7a:95:65:e2:a1: 91:57:46:33:46:92:00:13:6b:d5:9a:53:c4:8f:cd: 9b:44:69:3d:e2:01:13:b8:44:74:f9:b7:e6:49:40: f0:42:14:1f:66:d4:29:89:d9:fd:f5:c3:73:77:3f: ba:95:bf:a8:50:f1:2d:e7:ba:d1:3b:51:e0:5b:42: 96:4c:00:15:b5:bf:b3:2b:73:4b:88:a2:ba:15:ca: 8f:de:a8:59:07:25:65:8e:61:ab:a0:ee:38:56:c0: af:a6:8d:88:93:07:18:d6:0a:e5:f5:3e:68:21:2e: 5c:80:95:cd:d1:1f:c8:bf:80:28:43:c6:a8:cf:62: 0e:97:c8:a2:6b:ec:9b:61:ee:31:9b:ce:e4:8e:43: 49:70:54:40:00:0d:4e:24:2f:0c:b6:86:5c:58:d8: 4f:97:46:e0:ed:47:09:63:34:8f:8a:8a:fa:0e:06: b8:3a:2e:6f:66:66:75:dd:18:89:38:af:7a:14:ff: 1c:58:3a:70:bc:2a:82:60:75:70:c9:5b:7f:da:60: dc:d6:a8:b6:78:57:42:c8:cc:42:af:3e:f4:3c:7f: 85:e5:0b:55:47:9c:70:d0:b0:c6:31:d3:7e:15:f0: 7b:b3:29:be:24:79:09:59:0d:c8:c0:d2:35:4c:ea: 46:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:06:38:A4:2A:9A:0B:95:BB:C7:FC:62:2A:30:79:AF:F6:7B:2B:6A X509v3 Authority Key Identifier: keyid:43:0E:30:20:40:DE:11:D8:C8:44:31:B3:39:71:13:EC:96:96:94:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/430E302040DE11D8C84431B3397113EC969694A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e9e01ba-59c9-4047-ac0b-e9b2fe65853c/0/430E302040DE11D8C84431B3397113EC969694A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:a9:4a:cd:a4:7a:9c:ad:19:54:98:0a:86:75:bd:7c:2c:21: 34:fd:bc:50:0c:cd:f7:2c:8f:58:16:59:91:5a:8d:94:c4:08: a0:b1:12:6d:54:30:69:56:95:28:1e:80:4d:97:23:3e:14:e8: 7a:81:42:42:54:74:94:c1:b3:47:0e:d1:5c:c8:59:55:f2:a8: 36:d7:fc:2a:93:83:00:2a:7b:29:86:b6:1c:a3:82:29:96:63: 74:d2:0f:5d:3d:a9:cf:7b:d1:8a:05:35:00:94:9a:12:b8:92: 56:f7:f6:34:23:85:cd:4b:ab:e2:c7:da:e7:45:01:3e:64:b5: e6:4e:64:1a:0c:ea:2f:a9:b2:6f:d1:1a:4e:bc:9f:65:6a:17: e0:2f:49:85:5c:c0:a5:a9:de:74:b0:fc:b0:a7:aa:84:63:a3: aa:7e:dc:f9:5d:8a:32:35:6e:5c:ff:65:55:b0:98:37:51:1d: dc:7b:f8:67:a5:b2:24:d8:b1:dd:16:6d:e1:e9:58:94:b9:17: fb:39:1a:38:0d:8a:13:62:46:03:d9:0f:2c:24:4a:6f:2f:33: 83:71:dd:09:b7:ed:fb:ed:13:0f:0a:39:be:76:6e:29:20:f6: d0:2b:7c:bc:ca:d8:30:51:26:dd:d7:da:94:34:fe:13:c8:4e: 3f:c7:8f:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf0SYRDA3HfY5dOj4hS0YIcKHBEIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMwRTMwMjA0MERFMTFEOEM4NDQzMUIzMzk3MTEzRUM5 Njk2OTRBMDAeFw0yNTA0MTcxNTU2NTBaFw0yNTA0MjAyMjMwNTBaMDMxMTAvBgNV BAMTKEUwMDYzOEE0MkE5QTBCOTVCQkM3RkM2MjJBMzA3OUFGRjY3QjJCNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm3xdxIZNSQvF6lWXioZFXRjNG kgATa9WaU8SPzZtEaT3iARO4RHT5t+ZJQPBCFB9m1CmJ2f31w3N3P7qVv6hQ8S3n utE7UeBbQpZMABW1v7Mrc0uIoroVyo/eqFkHJWWOYaug7jhWwK+mjYiTBxjWCuX1 PmghLlyAlc3RH8i/gChDxqjPYg6XyKJr7Jth7jGbzuSOQ0lwVEAADU4kLwy2hlxY 2E+XRuDtRwljNI+KivoOBrg6Lm9mZnXdGIk4r3oU/xxYOnC8KoJgdXDJW3/aYNzW qLZ4V0LIzEKvPvQ8f4XlC1VHnHDQsMYx034V8HuzKb4keQlZDcjA0jVM6kZTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4AY4pCqaC5W7x/xiKjB5r/Z7K2owHwYDVR0j BBgwFoAUQw4wIEDeEdjIRDGzOXET7JaWlKAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTllMDFiYS01OWM5LTQwNDctYWMwYi1lOWIyZmU2NTg1M2MvMC80MzBFMzAyMDQw REUxMUQ4Qzg0NDMxQjMzOTcxMTNFQzk2OTY5NEEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDMwRTMwMjA0MERFMTFEOEM4NDQzMUIzMzk3MTEzRUM5Njk2 OTRBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U5ZTAxYmEtNTljOS00MDQ3LWFj MGItZTliMmZlNjU4NTNjLzAvNDMwRTMwMjA0MERFMTFEOEM4NDQzMUIzMzk3MTEz RUM5Njk2OTRBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADSpSs2kepytGVSYCoZ1vXwsITT9vFAMzfcs j1gWWZFajZTECKCxEm1UMGlWlSgegE2XIz4U6HqBQkJUdJTBs0cO0VzIWVXyqDbX /CqTgwAqeymGthyjgimWY3TSD109qc970YoFNQCUmhK4klb39jQjhc1Lq+LH2udF AT5kteZOZBoM6i+psm/RGk68n2VqF+AvSYVcwKWp3nSw/LCnqoRjo6p+3PldijI1 blz/ZVWwmDdRHdx7+GelsiTYsd0WbeHpWJS5F/s5GjgNihNiRgPZDywkSm8vM4Nx 3Qm37fvtEw8KOb52bikg9tArfLzK2DBRJt3X2pQ0/hPITj/Hj6k= -----END CERTIFICATE-----Generated at Fri Apr 18 01:53:34 2025 by rpki-client