$ rpki-client -vvf repo-rpki.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/7769348B43C31740A116F7F9EEA09178E4104B66.mft File: 7769348B43C31740A116F7F9EEA09178E4104B66.mft (raw, json) Hash identifier: EKy/nUZgQWJGEe2rsbSLpq4hJutwSv2v1ZnIOZ4Sq5I= Subject key identifier: 84:45:90:BB:AC:CB:59:18:6E:3C:72:33:4C:41:97:94:6E:67:2A:BD Authority key identifier: 77:69:34:8B:43:C3:17:40:A1:16:F7:F9:EE:A0:91:78:E4:10:4B:66 Certificate issuer: /CN=7769348B43C31740A116F7F9EEA09178E4104B66 Certificate serial: 79CBE72C6C2BAFE04C60B025ED32522B9D639C16 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7769348B43C31740A116F7F9EEA09178E4104B66.cer Subject info access: rsync://repo-rpki.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/7769348B43C31740A116F7F9EEA09178E4104B66.mft Manifest number: 2C Signing time: Fri 18 Apr 2025 19:31:59 +0000 Manifest this update: Fri 18 Apr 2025 19:26:59 +0000 Manifest next update: Tue 22 Apr 2025 00:16:59 +0000 Files and hashes: 1: 7769348B43C31740A116F7F9EEA09178E4104B66.crl (hash: bkzo4jkHFcqsvVrup6gVu8gO11p2dljsJ33+4q8FYbw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/7769348B43C31740A116F7F9EEA09178E4104B66.crl rsync://repo-rpki.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/7769348B43C31740A116F7F9EEA09178E4104B66.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7769348B43C31740A116F7F9EEA09178E4104B66.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 00:09:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:cb:e7:2c:6c:2b:af:e0:4c:60:b0:25:ed:32:52:2b:9d:63:9c:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7769348B43C31740A116F7F9EEA09178E4104B66 Validity Not Before: Apr 18 19:26:59 2025 GMT Not After : Apr 22 00:16:59 2025 GMT Subject: CN=844590BBACCB59186E3C72334C4197946E672ABD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bc:e1:97:6b:82:10:fc:b9:57:6a:d2:da:90: 49:c4:ce:35:44:68:3c:c7:f1:32:dd:8d:c4:93:53: f4:92:61:f1:12:83:5d:00:ac:40:32:5a:bd:43:7d: e6:a4:9f:46:b8:1a:ce:1a:65:46:a2:0f:9b:8c:f1: 5e:5c:74:9e:f3:f0:8d:32:87:9c:f3:2f:2d:2d:ea: c7:ac:88:32:30:14:ca:23:e0:74:15:e4:40:04:6c: bc:b1:65:f0:1b:0e:a8:30:32:4e:75:cd:ae:b0:a3: 6c:48:25:5f:5f:36:60:c6:9c:58:20:a4:8e:ab:2d: 41:d1:86:8a:f6:72:56:52:27:18:1e:69:15:d5:1f: 28:38:cc:18:5d:f2:06:82:f6:e4:e4:3d:e7:56:96: ff:23:30:5a:97:9c:96:96:33:63:38:5b:6f:80:cc: b6:13:74:a6:f0:a7:7a:1c:64:a8:62:c6:35:4c:2f: 76:35:e2:83:eb:06:0a:bd:ae:45:3a:09:8f:28:0b: 0c:fd:24:41:1d:30:03:63:df:1f:bf:f2:a8:d6:11: 01:39:b5:bc:34:f1:02:86:d0:fb:dc:49:cd:6c:35: 8b:90:68:08:d1:41:66:a1:c3:47:3e:7d:61:3e:c3: 1b:38:7a:32:bc:8b:d3:cf:ea:8b:bc:bc:09:b9:85: 55:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:45:90:BB:AC:CB:59:18:6E:3C:72:33:4C:41:97:94:6E:67:2A:BD X509v3 Authority Key Identifier: keyid:77:69:34:8B:43:C3:17:40:A1:16:F7:F9:EE:A0:91:78:E4:10:4B:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/7769348B43C31740A116F7F9EEA09178E4104B66.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7769348B43C31740A116F7F9EEA09178E4104B66.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85cd45cb-8d9f-4359-96c0-64cf22a5b0ff/0/7769348B43C31740A116F7F9EEA09178E4104B66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:b8:34:ca:98:20:59:b3:3c:ac:3a:dc:aa:f8:c9:1f:14:87: eb:4c:7b:ae:99:a9:85:fc:28:98:91:84:98:a2:39:24:f9:7d: 83:c3:c0:ff:ef:43:4c:58:45:0b:47:7e:f6:9e:54:55:bc:30: 4b:9e:17:18:81:51:51:d5:08:33:c2:10:7b:b8:9a:ff:9e:00: 97:a5:e6:c9:13:3b:6c:46:bd:cb:0e:79:6d:b5:c2:70:2e:30: 14:76:3e:9e:4e:9c:23:43:a0:9d:0b:2a:7b:f6:ec:b5:8e:02: 14:d3:ab:26:98:4e:d6:9a:c4:cf:55:f2:7c:e9:fb:39:10:ea: 82:d7:c3:21:f5:f8:96:82:2b:2e:aa:d4:d5:39:ef:2c:a2:62: 76:19:14:7f:c4:ea:69:3f:d7:35:3d:9d:80:57:2f:33:55:22: d1:3b:fe:3b:c2:7d:62:fe:61:2e:8b:f8:00:21:b4:f6:a0:0a: e6:e5:db:5c:61:dc:d4:71:77:f5:36:c2:24:24:21:f5:93:b4: 92:32:98:75:99:f5:b7:93:c5:25:ed:51:52:9b:c1:c4:19:27: c4:2e:51:25:6c:9a:5c:f6:7c:0f:0a:e1:05:38:d7:ad:17:d4: ad:60:ae:0e:de:7b:d9:2f:e9:1d:be:94:fc:f7:60:97:14:22: e0:9e:14:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUecvnLGwrr+BMYLAl7TJSK51jnBYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzc2OTM0OEI0M0MzMTc0MEExMTZGN0Y5RUVBMDkxNzhF NDEwNEI2NjAeFw0yNTA0MTgxOTI2NTlaFw0yNTA0MjIwMDE2NTlaMDMxMTAvBgNV BAMTKDg0NDU5MEJCQUNDQjU5MTg2RTNDNzIzMzRDNDE5Nzk0NkU2NzJBQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/vOGXa4IQ/LlXatLakEnEzjVE aDzH8TLdjcSTU/SSYfESg10ArEAyWr1Dfeakn0a4Gs4aZUaiD5uM8V5cdJ7z8I0y h5zzLy0t6sesiDIwFMoj4HQV5EAEbLyxZfAbDqgwMk51za6wo2xIJV9fNmDGnFgg pI6rLUHRhor2clZSJxgeaRXVHyg4zBhd8gaC9uTkPedWlv8jMFqXnJaWM2M4W2+A zLYTdKbwp3ocZKhixjVML3Y14oPrBgq9rkU6CY8oCwz9JEEdMANj3x+/8qjWEQE5 tbw08QKG0PvcSc1sNYuQaAjRQWahw0c+fWE+wxs4ejK8i9PP6ou8vAm5hVX7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhEWQu6zLWRhuPHIzTEGXlG5nKr0wHwYDVR0j BBgwFoAUd2k0i0PDF0ChFvf57qCReOQQS2YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NWNkNDVjYi04ZDlmLTQzNTktOTZjMC02NGNmMjJhNWIwZmYvMC83NzY5MzQ4QjQz QzMxNzQwQTExNkY3RjlFRUEwOTE3OEU0MTA0QjY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzc2OTM0OEI0M0MzMTc0MEExMTZGN0Y5RUVBMDkxNzhFNDEw NEI2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODVjZDQ1Y2ItOGQ5Zi00MzU5LTk2 YzAtNjRjZjIyYTViMGZmLzAvNzc2OTM0OEI0M0MzMTc0MEExMTZGN0Y5RUVBMDkx NzhFNDEwNEI2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD24NMqYIFmzPKw63Kr4yR8Uh+tMe66ZqYX8 KJiRhJiiOST5fYPDwP/vQ0xYRQtHfvaeVFW8MEueFxiBUVHVCDPCEHu4mv+eAJel 5skTO2xGvcsOeW21wnAuMBR2Pp5OnCNDoJ0LKnv27LWOAhTTqyaYTtaaxM9V8nzp +zkQ6oLXwyH1+JaCKy6q1NU57yyiYnYZFH/E6mk/1zU9nYBXLzNVItE7/jvCfWL+ YS6L+AAhtPagCubl21xh3NRxd/U2wiQkIfWTtJIymHWZ9beTxSXtUVKbwcQZJ8Qu USVsmlz2fA8K4QU4160X1K1grg7ee9kv6R2+lPz3YJcUIuCeFBE= -----END CERTIFICATE-----Generated at Sat Apr 19 01:31:26 2025 by rpki-client