$ rpki-client -vvf repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.mft File: D4D0F3E6E684847D602FC73758893CE2BB05D399.mft (raw, json) Hash identifier: YifTlhqcVpt/LGQQSb7xwZd1T+I0McIeDnpGBJq/pQI= Subject key identifier: 45:76:54:36:2E:2F:C4:73:B1:5A:AE:B5:F9:0F:65:BA:B5:E6:81:6D Authority key identifier: D4:D0:F3:E6:E6:84:84:7D:60:2F:C7:37:58:89:3C:E2:BB:05:D3:99 Certificate issuer: /CN=D4D0F3E6E684847D602FC73758893CE2BB05D399 Certificate serial: 0FF4B783745C335B44EA66DE29604732D5E426EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4D0F3E6E684847D602FC73758893CE2BB05D399.cer Subject info access: rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.mft Manifest number: 0164 Signing time: Fri 04 Apr 2025 08:50:41 +0000 Manifest this update: Fri 04 Apr 2025 08:45:41 +0000 Manifest next update: Mon 07 Apr 2025 10:23:41 +0000 Files and hashes: 1: D4D0F3E6E684847D602FC73758893CE2BB05D399.crl (hash: dPc/1FKxe7WaY8ZgK6s3RHoDUAsjf4v7Mitg4O7PAYo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.crl rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4D0F3E6E684847D602FC73758893CE2BB05D399.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 10:23:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:f4:b7:83:74:5c:33:5b:44:ea:66:de:29:60:47:32:d5:e4:26:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4D0F3E6E684847D602FC73758893CE2BB05D399 Validity Not Before: Apr 4 08:45:41 2025 GMT Not After : Apr 7 10:23:41 2025 GMT Subject: CN=457654362E2FC473B15AAEB5F90F65BAB5E6816D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:53:0b:47:f4:53:63:83:00:d5:f6:3f:a0:83: 44:11:6f:36:67:01:d3:7e:3f:e7:ab:28:25:91:f9: 17:af:1a:c0:f2:e0:8d:7a:14:1c:8f:c6:b5:92:0a: 6b:e5:83:f6:f7:bc:7a:ca:de:6b:d7:35:c3:70:98: 6c:de:8c:08:c0:a4:af:cd:d7:87:2b:31:bb:a2:e5: 0d:7c:19:4e:a6:5f:a4:b6:78:42:a4:db:c9:30:fd: f0:11:1b:d7:e8:8e:c8:8c:e5:07:e8:b7:5b:9d:20: e0:cf:b4:6c:3c:2c:b1:0d:08:28:46:52:ab:b4:32: 6e:e6:9e:71:c3:f6:91:9b:d4:3e:bd:dc:9c:52:17: eb:4b:54:e6:6c:75:79:b2:cb:b3:cb:04:34:61:e7: a6:a5:17:d1:1c:12:f0:00:bf:f9:52:ee:82:4d:77: 85:19:71:67:79:c5:e5:3d:95:48:cf:73:55:f7:45: 84:ca:ff:9b:b2:64:32:cf:64:1e:12:4a:4f:fa:04: 5c:c6:df:57:5a:f3:a8:3e:2e:e9:7c:fb:2e:d2:68: 64:60:08:2d:3a:f7:16:9d:9d:b5:72:00:b1:3f:aa: 01:ef:20:2a:8b:27:63:5f:72:d9:63:92:88:13:a8: 32:94:57:a4:7c:71:45:5a:2c:78:d1:5f:7c:9c:41: a5:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:76:54:36:2E:2F:C4:73:B1:5A:AE:B5:F9:0F:65:BA:B5:E6:81:6D X509v3 Authority Key Identifier: keyid:D4:D0:F3:E6:E6:84:84:7D:60:2F:C7:37:58:89:3C:E2:BB:05:D3:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4D0F3E6E684847D602FC73758893CE2BB05D399.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:0f:4c:92:9d:1d:0d:00:15:e0:14:0b:fd:b2:c4:0c:48:9d: 87:72:d1:93:83:4b:ee:14:d1:b9:99:6d:1f:4b:29:df:47:3e: 56:26:02:23:89:03:5d:99:c4:48:e8:e6:53:74:c5:60:21:0c: d0:00:ba:68:7d:39:29:79:bf:b1:e5:ed:bd:3c:1c:e7:44:6b: de:f5:12:56:12:3a:81:22:e4:05:cb:bf:a7:24:4a:c5:3f:cd: d2:0b:71:d9:88:53:f4:0f:8c:25:07:2a:a5:92:ea:4d:69:f9: 89:28:bf:05:65:ba:d5:4f:fd:a5:a3:cd:2a:84:f3:00:e0:00: 82:e4:98:ff:4e:f6:23:1a:49:4f:b2:d4:af:d0:46:04:86:08: 50:30:78:f1:9b:1b:bf:03:75:bd:65:b0:dd:81:cf:bb:da:34: 76:3b:c5:74:23:9b:8e:7c:f8:ac:ed:1d:0d:b5:86:4e:8e:73: 22:fd:80:60:52:dd:af:87:e5:f4:cd:1e:ae:36:46:8d:ea:04: 24:be:e9:67:e0:c4:b1:3f:ed:be:cd:1b:8a:bc:6c:9a:4e:6d: d9:3e:c2:9c:d9:31:fa:b1:6c:e9:ba:2e:c5:d0:27:ea:dc:bf: 8c:74:61:19:d6:f1:dd:96:c5:fe:26:d6:0d:8c:ff:13:cd:25: 50:8e:43:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD/S3g3RcM1tE6mbeKWBHMtXkJu4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDREMEYzRTZFNjg0ODQ3RDYwMkZDNzM3NTg4OTNDRTJC QjA1RDM5OTAeFw0yNTA0MDQwODQ1NDFaFw0yNTA0MDcxMDIzNDFaMDMxMTAvBgNV BAMTKDQ1NzY1NDM2MkUyRkM0NzNCMTVBQUVCNUY5MEY2NUJBQjVFNjgxNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9UwtH9FNjgwDV9j+gg0QRbzZn AdN+P+erKCWR+RevGsDy4I16FByPxrWSCmvlg/b3vHrK3mvXNcNwmGzejAjApK/N 14crMbui5Q18GU6mX6S2eEKk28kw/fARG9fojsiM5Qfot1udIODPtGw8LLENCChG Uqu0Mm7mnnHD9pGb1D693JxSF+tLVOZsdXmyy7PLBDRh56alF9EcEvAAv/lS7oJN d4UZcWd5xeU9lUjPc1X3RYTK/5uyZDLPZB4SSk/6BFzG31da86g+Lul8+y7SaGRg CC069xadnbVyALE/qgHvICqLJ2NfctljkogTqDKUV6R8cUVaLHjRX3ycQaXLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURXZUNi4vxHOxWq61+Q9lurXmgW0wHwYDVR0j BBgwFoAU1NDz5uaEhH1gL8c3WIk84rsF05kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MjM1MzBlYy05OTBlLTQxZDctOWQ3OC1iNzdlMjBkNzZiY2QvMC9ENEQwRjNFNkU2 ODQ4NDdENjAyRkM3Mzc1ODg5M0NFMkJCMDVEMzk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDREMEYzRTZFNjg0ODQ3RDYwMkZDNzM3NTg4OTNDRTJCQjA1 RDM5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODIzNTMwZWMtOTkwZS00MWQ3LTlk NzgtYjc3ZTIwZDc2YmNkLzAvRDREMEYzRTZFNjg0ODQ3RDYwMkZDNzM3NTg4OTND RTJCQjA1RDM5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADkPTJKdHQ0AFeAUC/2yxAxInYdy0ZODS+4U 0bmZbR9LKd9HPlYmAiOJA12ZxEjo5lN0xWAhDNAAumh9OSl5v7Hl7b08HOdEa971 ElYSOoEi5AXLv6ckSsU/zdILcdmIU/QPjCUHKqWS6k1p+YkovwVlutVP/aWjzSqE 8wDgAILkmP9O9iMaSU+y1K/QRgSGCFAwePGbG78Ddb1lsN2Bz7vaNHY7xXQjm458 +KztHQ21hk6OcyL9gGBS3a+H5fTNHq42Ro3qBCS+6WfgxLE/7b7NG4q8bJpObdk+ wpzZMfqxbOm6LsXQJ+rcv4x0YRnW8d2Wxf4m1g2M/xPNJVCOQxE= -----END CERTIFICATE-----Generated at Sat Apr 5 17:50:48 2025 by rpki-client