$ rpki-client -vvf repo-rpki.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.mft File: B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.mft (raw, json) Hash identifier: 1XsVRb3w6wK9vHMwz8MFs3MNnW/ncq9sFtlLkJOC4Ws= Subject key identifier: 6E:DB:DD:77:0F:36:8F:64:B4:D6:8D:84:56:29:E2:EE:7D:18:07:59 Authority key identifier: B0:D5:A0:53:40:C5:5C:7E:2C:DC:83:AD:CE:47:74:AF:0C:C1:84:C1 Certificate issuer: /CN=B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1 Certificate serial: 533A41638B9EC8D52D431BE8BFC191D446362EE2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.mft Manifest number: 02BD Signing time: Sat 19 Apr 2025 08:20:58 +0000 Manifest this update: Sat 19 Apr 2025 08:15:58 +0000 Manifest next update: Tue 22 Apr 2025 09:18:58 +0000 Files and hashes: 1: B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.crl (hash: eajtIRN8pNpa02eZVcKVH915eBOMPRR/ab6RIhy0QRs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.crl rsync://repo-rpki.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 09:18:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:3a:41:63:8b:9e:c8:d5:2d:43:1b:e8:bf:c1:91:d4:46:36:2e:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1 Validity Not Before: Apr 19 08:15:58 2025 GMT Not After : Apr 22 09:18:58 2025 GMT Subject: CN=6EDBDD770F368F64B4D68D845629E2EE7D180759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8f:70:a4:5f:3b:3b:75:2c:06:a6:75:11:4f: 8d:e8:ff:1d:c2:5f:bd:56:a1:e5:2b:86:f9:97:a3: ae:67:29:e4:57:10:e0:6f:8f:06:27:c3:7d:0c:b2: fc:c2:f4:08:26:86:d1:c0:97:f5:fe:4c:0c:2f:af: 78:14:07:f9:71:34:e6:4b:0b:66:21:62:c5:ba:e4: be:dd:6e:70:25:3a:d7:77:db:72:cd:42:eb:df:4e: df:d2:80:4e:f3:93:f1:0a:a2:09:b9:d2:49:90:5f: d9:02:1f:64:81:af:a5:55:4d:8b:7d:37:a2:73:20: 9f:4b:55:4b:48:dd:5e:9f:ee:c2:53:86:29:39:99: 12:c1:99:06:1a:37:8a:c3:ec:4e:8c:91:22:4d:f7: 33:9a:81:a7:93:a7:a2:2a:71:d7:2a:0a:b6:7f:53: b4:82:c2:ba:66:f1:48:b2:5b:dd:7f:aa:ad:18:04: bd:80:eb:48:19:e6:78:f8:86:f1:bf:83:56:15:dd: bf:c9:d5:c7:1a:85:7e:6d:9b:06:35:63:73:cc:ee: d3:d5:fe:7a:30:b6:f0:12:2a:19:e9:81:50:a5:c0: 11:a5:5d:d2:de:0d:b7:f1:ce:1f:bf:11:77:5f:27: 9c:62:1b:6a:12:e3:9b:50:6f:73:be:80:35:e1:d4: 62:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:DB:DD:77:0F:36:8F:64:B4:D6:8D:84:56:29:E2:EE:7D:18:07:59 X509v3 Authority Key Identifier: keyid:B0:D5:A0:53:40:C5:5C:7E:2C:DC:83:AD:CE:47:74:AF:0C:C1:84:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:c8:6e:17:dc:aa:8a:27:05:33:56:3a:73:a8:7e:8e:cd:36: 44:00:78:a1:9f:a6:ee:fc:ef:77:a9:e9:f2:29:91:e5:34:70: 4a:6f:d7:76:b5:88:50:05:fa:ae:2b:ab:6c:3a:c1:db:58:9e: d0:d4:19:ba:cb:b7:70:a3:5d:f3:82:6a:d1:5e:8a:81:c7:e0: e3:d9:9e:b4:e5:fe:fd:82:41:f7:b1:86:f3:e0:44:c3:32:cc: 5e:9a:3a:3d:c8:ee:9c:8b:05:9f:99:42:1d:22:15:03:e3:2c: ef:3e:a8:41:8d:7c:c7:b3:bf:ec:95:42:21:69:f2:3c:54:13: 49:21:3d:f5:54:0b:49:e0:0e:25:bc:f2:33:8f:f5:31:03:41: 74:19:60:46:18:f1:6c:0b:a7:1c:ff:41:c4:9e:c8:f6:a6:b6: 20:7b:4b:64:07:58:13:ee:e8:39:79:e2:06:cc:58:b8:72:dc: 24:1a:44:78:6b:83:df:82:34:2c:e1:f4:22:be:78:ab:44:fa: f9:95:58:2f:d7:a0:af:8c:a8:dc:eb:36:c9:c8:68:4d:60:d8: b7:9b:88:ce:12:93:9d:f4:85:a8:91:83:4e:b4:43:5e:01:3b: 85:d6:2f:39:a1:7c:72:a7:3b:c7:d1:d7:4b:fd:56:8c:db:ac: 0c:22:4d:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUzpBY4ueyNUtQxvov8GR1EY2LuIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBENUEwNTM0MEM1NUM3RTJDREM4M0FEQ0U0Nzc0QUYw Q0MxODRDMTAeFw0yNTA0MTkwODE1NThaFw0yNTA0MjIwOTE4NThaMDMxMTAvBgNV BAMTKDZFREJERDc3MEYzNjhGNjRCNEQ2OEQ4NDU2MjlFMkVFN0QxODA3NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjj3CkXzs7dSwGpnURT43o/x3C X71WoeUrhvmXo65nKeRXEOBvjwYnw30MsvzC9AgmhtHAl/X+TAwvr3gUB/lxNOZL C2YhYsW65L7dbnAlOtd323LNQuvfTt/SgE7zk/EKogm50kmQX9kCH2SBr6VVTYt9 N6JzIJ9LVUtI3V6f7sJThik5mRLBmQYaN4rD7E6MkSJN9zOagaeTp6IqcdcqCrZ/ U7SCwrpm8UiyW91/qq0YBL2A60gZ5nj4hvG/g1YV3b/J1ccahX5tmwY1Y3PM7tPV /nowtvASKhnpgVClwBGlXdLeDbfxzh+/EXdfJ5xiG2oS45tQb3O+gDXh1GLRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbtvddw82j2S01o2EVini7n0YB1kwHwYDVR0j BBgwFoAUsNWgU0DFXH4s3IOtzkd0rwzBhMEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MWNmNTY1Ny1lY2RjLTRkOTctYTU5Yy1iNjc2Y2U1M2M4YTEvMC9CMEQ1QTA1MzQw QzU1QzdFMkNEQzgzQURDRTQ3NzRBRjBDQzE4NEMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjBENUEwNTM0MEM1NUM3RTJDREM4M0FEQ0U0Nzc0QUYwQ0Mx ODRDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODFjZjU2NTctZWNkYy00ZDk3LWE1 OWMtYjY3NmNlNTNjOGExLzAvQjBENUEwNTM0MEM1NUM3RTJDREM4M0FEQ0U0Nzc0 QUYwQ0MxODRDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG/IbhfcqoonBTNWOnOofo7NNkQAeKGfpu78 73ep6fIpkeU0cEpv13a1iFAF+q4rq2w6wdtYntDUGbrLt3CjXfOCatFeioHH4OPZ nrTl/v2CQfexhvPgRMMyzF6aOj3I7pyLBZ+ZQh0iFQPjLO8+qEGNfMezv+yVQiFp 8jxUE0khPfVUC0ngDiW88jOP9TEDQXQZYEYY8WwLpxz/QcSeyPamtiB7S2QHWBPu 6Dl54gbMWLhy3CQaRHhrg9+CNCzh9CK+eKtE+vmVWC/XoK+MqNzrNsnIaE1g2Leb iM4Sk530haiRg060Q14BO4XWLzmhfHKnO8fR10v9VozbrAwiTcg= -----END CERTIFICATE-----Generated at Sun Apr 20 04:14:06 2025 by rpki-client