$ rpki-client -vvf repo-rpki.idnic.net/repo/7f4fc340-af69-4e8e-a777-747dd829dc3f/0/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.mft File: 94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.mft (raw, json) Hash identifier: rmEdaV6s5VRC5b/l9LgqizLfS9SDA6Wh3UzFfqnHKHc= Subject key identifier: 5C:A8:E7:76:F3:E0:36:B8:87:4B:43:26:1C:D6:36:61:80:37:FB:9D Authority key identifier: 94:AE:A1:1A:DC:0F:E7:74:09:4C:A4:A6:66:80:C3:EC:F5:09:2E:4C Certificate issuer: /CN=94AEA11ADC0FE774094CA4A66680C3ECF5092E4C Certificate serial: 0AF245EBBD981B7FCEB196ACC44F05581576D5AE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7f4fc340-af69-4e8e-a777-747dd829dc3f/0/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.mft Manifest number: A7 Signing time: Mon 17 Feb 2025 19:40:41 +0000 Manifest this update: Mon 17 Feb 2025 19:35:41 +0000 Manifest next update: Fri 21 Feb 2025 06:24:41 +0000 Files and hashes: 1: 94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.crl (hash: f2RcEE87cUZbBuejch86goa+xtBoA785TRAM6UZo54U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7f4fc340-af69-4e8e-a777-747dd829dc3f/0/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.crl rsync://repo-rpki.idnic.net/repo/7f4fc340-af69-4e8e-a777-747dd829dc3f/0/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 06:24:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:f2:45:eb:bd:98:1b:7f:ce:b1:96:ac:c4:4f:05:58:15:76:d5:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94AEA11ADC0FE774094CA4A66680C3ECF5092E4C Validity Not Before: Feb 17 19:35:41 2025 GMT Not After : Feb 21 06:24:41 2025 GMT Subject: CN=5CA8E776F3E036B8874B43261CD636618037FB9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:1a:59:82:7c:91:05:02:ee:d9:2b:a6:4a:79: 48:d0:17:34:71:e5:a3:9c:a8:84:75:de:ec:d7:76: 8e:24:27:d2:7e:05:8e:82:81:e3:de:8d:7f:6f:0b: 03:cf:aa:dc:61:f7:74:7d:bc:5d:62:cd:cb:a6:fe: e3:7c:e0:65:50:67:6e:13:e4:2a:ed:a5:96:27:c1: d4:ac:45:87:fc:11:4f:93:48:a9:2b:96:2a:eb:84: 0c:96:9d:ca:74:d0:53:38:93:9d:e2:55:10:75:69: 86:14:f8:62:77:aa:83:a9:7b:a2:f5:69:a4:93:90: dc:39:e5:91:0a:4c:f6:89:66:c0:ee:cc:2f:cc:6b: 32:aa:a5:8b:ff:29:7a:ed:f6:9e:da:df:55:01:f6: 8a:b0:11:7a:e7:20:99:e1:d0:40:61:21:74:41:2b: 53:85:20:d1:12:7d:2e:24:9b:e4:52:54:95:85:63: 1e:ad:5c:3c:6d:c0:bf:f2:37:18:57:76:08:25:dc: be:a1:5e:7f:d9:48:e1:5b:d6:44:e1:71:d6:3a:41: 86:c5:d3:1c:17:11:ba:25:84:19:51:3b:c9:a8:9b: bd:b2:3d:52:43:db:4d:cb:2a:ae:a3:f4:f0:7a:2b: d6:38:b0:95:27:0d:41:7a:80:3d:6a:f9:8b:28:2e: 16:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:A8:E7:76:F3:E0:36:B8:87:4B:43:26:1C:D6:36:61:80:37:FB:9D X509v3 Authority Key Identifier: keyid:94:AE:A1:1A:DC:0F:E7:74:09:4C:A4:A6:66:80:C3:EC:F5:09:2E:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7f4fc340-af69-4e8e-a777-747dd829dc3f/0/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7f4fc340-af69-4e8e-a777-747dd829dc3f/0/94AEA11ADC0FE774094CA4A66680C3ECF5092E4C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:0b:ca:ba:e6:0d:0b:a9:92:70:ef:3e:ea:96:67:cc:98:dc: cd:ad:04:45:ea:48:60:bb:80:3b:60:93:60:d2:cb:44:82:f8: 6b:84:a7:ef:88:a4:f2:c1:58:8e:dd:5c:6a:b6:c0:f0:27:0e: 21:9e:f2:3e:2f:d8:77:64:cf:c4:4b:64:f7:30:0b:0e:b3:a8: 3a:2c:ad:0b:59:e8:56:7f:3b:22:4f:49:69:72:dd:68:49:5a: ff:49:8f:7f:be:ec:ee:5d:c6:b9:27:07:65:f1:45:4a:9f:f3: d9:0f:0a:45:99:44:c8:55:00:f1:41:4a:b9:22:62:00:f2:54: 53:ea:ef:4b:7d:aa:a6:c1:57:91:3d:97:9e:02:01:dc:4a:40: c8:f9:3b:cd:94:b1:b7:8f:cf:a5:8e:21:aa:65:86:48:70:56: b8:ff:67:81:d6:73:43:6b:d8:da:bb:a8:00:f7:44:80:a6:22: b8:aa:35:54:03:c5:ff:4d:a1:0b:8c:be:c2:2f:4d:5a:b9:57: 75:fc:40:0d:64:ff:a2:fa:04:03:f8:37:25:ed:8a:aa:a2:a1: 8f:19:b4:cb:d9:76:68:75:4a:64:a6:24:7c:3c:c4:a8:f2:76: 88:f4:aa:80:5e:8a:04:ae:d5:ff:08:18:45:df:34:92:59:b1: f0:23:df:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCvJF672YG3/OsZasxE8FWBV21a4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTRBRUExMUFEQzBGRTc3NDA5NENBNEE2NjY4MEMzRUNG NTA5MkU0QzAeFw0yNTAyMTcxOTM1NDFaFw0yNTAyMjEwNjI0NDFaMDMxMTAvBgNV BAMTKDVDQThFNzc2RjNFMDM2Qjg4NzRCNDMyNjFDRDYzNjYxODAzN0ZCOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiGlmCfJEFAu7ZK6ZKeUjQFzRx 5aOcqIR13uzXdo4kJ9J+BY6CgePejX9vCwPPqtxh93R9vF1izcum/uN84GVQZ24T 5CrtpZYnwdSsRYf8EU+TSKkrlirrhAyWncp00FM4k53iVRB1aYYU+GJ3qoOpe6L1 aaSTkNw55ZEKTPaJZsDuzC/MazKqpYv/KXrt9p7a31UB9oqwEXrnIJnh0EBhIXRB K1OFINESfS4km+RSVJWFYx6tXDxtwL/yNxhXdggl3L6hXn/ZSOFb1kThcdY6QYbF 0xwXEbolhBlRO8mom72yPVJD203LKq6j9PB6K9Y4sJUnDUF6gD1q+YsoLhb/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXKjndvPgNriHS0MmHNY2YYA3+50wHwYDVR0j BBgwFoAUlK6hGtwP53QJTKSmZoDD7PUJLkwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZjRmYzM0MC1hZjY5LTRlOGUtYTc3Ny03NDdkZDgyOWRjM2YvMC85NEFFQTExQURD MEZFNzc0MDk0Q0E0QTY2NjgwQzNFQ0Y1MDkyRTRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTRBRUExMUFEQzBGRTc3NDA5NENBNEE2NjY4MEMzRUNGNTA5 MkU0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Y0ZmMzNDAtYWY2OS00ZThlLWE3 NzctNzQ3ZGQ4MjlkYzNmLzAvOTRBRUExMUFEQzBGRTc3NDA5NENBNEE2NjY4MEMz RUNGNTA5MkU0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJoLyrrmDQupknDvPuqWZ8yY3M2tBEXqSGC7 gDtgk2DSy0SC+GuEp++IpPLBWI7dXGq2wPAnDiGe8j4v2Hdkz8RLZPcwCw6zqDos rQtZ6FZ/OyJPSWly3WhJWv9Jj3++7O5dxrknB2XxRUqf89kPCkWZRMhVAPFBSrki YgDyVFPq70t9qqbBV5E9l54CAdxKQMj5O82UsbePz6WOIaplhkhwVrj/Z4HWc0Nr 2Nq7qAD3RICmIriqNVQDxf9NoQuMvsIvTVq5V3X8QA1k/6L6BAP4NyXtiqqioY8Z tMvZdmh1SmSmJHw8xKjydoj0qoBeigSu1f8IGEXfNJJZsfAj39M= -----END CERTIFICATE-----Generated at Wed Feb 19 21:59:53 2025 by rpki-client