$ rpki-client -vvf repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.mft File: F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.mft (raw, json) Hash identifier: NS9bI6xU5vk3nv0xYl+F3zE/vOgUa0Li+7LIeVzqZnM= Subject key identifier: ED:7E:92:C3:8E:1E:84:BA:77:97:2F:64:31:07:DD:72:E3:1D:86:E7 Authority key identifier: F6:D1:AD:EF:8B:F1:34:4A:2F:5C:BD:A1:88:22:BA:85:D6:EF:6D:17 Certificate issuer: /CN=F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17 Certificate serial: 30E004D4BF44779BF3504FBB08A502B1EEF68EF5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.mft Manifest number: 023E Signing time: Wed 19 Feb 2025 00:51:01 +0000 Manifest this update: Wed 19 Feb 2025 00:46:01 +0000 Manifest next update: Sat 22 Feb 2025 06:48:01 +0000 Files and hashes: 1: F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.crl (hash: XXwClDY4jenYEdUgzwtK4RAGG2Ng28JjA9tp0atg/ds=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.crl rsync://repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Feb 2025 06:48:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:e0:04:d4:bf:44:77:9b:f3:50:4f:bb:08:a5:02:b1:ee:f6:8e:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17 Validity Not Before: Feb 19 00:46:01 2025 GMT Not After : Feb 22 06:48:01 2025 GMT Subject: CN=ED7E92C38E1E84BA77972F643107DD72E31D86E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:84:19:4e:39:34:39:66:77:15:ae:da:a5:1a: 77:ba:c5:b7:bc:d4:97:c0:60:b9:a5:84:5e:aa:29: a5:96:ba:ad:6b:61:62:c6:9b:db:77:01:36:80:a6: 87:0d:86:e7:a1:25:a7:d8:4e:90:02:83:8e:11:a2: 48:e2:ae:ea:72:23:48:cc:fb:5d:0b:52:cf:51:ff: 33:be:5f:59:d7:d7:42:ff:6b:5b:ae:c1:39:8c:94: d4:23:f8:42:6c:48:5a:53:18:c5:4a:e7:96:27:62: 17:20:43:40:6c:87:b5:c7:46:46:63:b9:41:c0:7b: 8d:fe:83:4b:55:3f:ec:fd:dc:f6:ac:47:70:2e:b1: 29:4e:a2:bb:d1:3b:57:19:92:aa:65:3c:65:21:f3: 3f:b7:63:38:7f:46:02:d5:d1:57:44:ec:67:7d:51: db:ee:00:a2:84:5f:e5:1c:db:b8:0a:0b:e2:75:e8: b3:8c:eb:9e:f7:a6:48:3f:7d:26:5d:8e:5c:ec:e3: 15:93:c1:19:cf:1e:fe:a6:0f:18:cd:00:e9:89:06: 79:f7:4d:12:3f:f7:10:57:2f:47:7c:11:9e:a0:40: 28:5b:85:6a:0f:c5:cc:34:81:35:93:cf:aa:e3:2b: aa:21:06:06:35:14:75:5a:71:74:09:09:43:b0:d3: 39:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:7E:92:C3:8E:1E:84:BA:77:97:2F:64:31:07:DD:72:E3:1D:86:E7 X509v3 Authority Key Identifier: keyid:F6:D1:AD:EF:8B:F1:34:4A:2F:5C:BD:A1:88:22:BA:85:D6:EF:6D:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:ef:29:a2:7a:85:63:a2:75:d3:79:02:88:fe:57:93:da:07: 71:15:e0:a6:27:13:c9:95:fc:9e:35:79:60:ce:e3:c5:3e:8b: 9e:4d:a1:c5:08:d4:5b:8e:e8:9f:b3:cc:98:04:d2:ce:cd:3c: ac:6b:ee:b7:f7:4b:ae:d6:94:b5:91:58:c8:9b:75:35:ff:c5: a4:7e:a8:f2:ee:31:c7:a0:b7:ca:ed:d7:9d:3a:a6:85:83:85: 17:a3:55:4b:34:d7:cd:70:fe:ae:43:e2:a5:95:41:e9:0d:7c: ed:60:88:c1:7f:1e:f8:11:37:0a:60:06:02:be:f8:1c:6f:13: 92:fd:e4:56:19:e0:f8:53:d8:ca:fd:e5:51:3e:c3:40:f3:a6: 3a:f0:a9:ab:cd:29:a5:c0:cb:6f:88:35:7c:3d:1f:2d:a3:94: b9:93:49:b6:60:cf:c4:d8:e7:73:24:5b:32:ac:82:8f:7e:c1: db:bf:68:25:bb:e4:94:eb:40:ec:f3:25:2a:d4:55:01:77:59: 12:19:06:ea:14:8f:71:f0:c7:f6:a9:d5:88:c2:99:48:7a:38: da:bd:4d:8b:66:a2:a3:d5:66:18:18:0d:20:86:36:91:be:f4: 36:f5:48:66:bb:45:f8:67:c4:5e:93:cc:e5:d4:22:08:db:f6: 7c:d8:a7:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMOAE1L9Ed5vzUE+7CKUCse72jvUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjZEMUFERUY4QkYxMzQ0QTJGNUNCREExODgyMkJBODVE NkVGNkQxNzAeFw0yNTAyMTkwMDQ2MDFaFw0yNTAyMjIwNjQ4MDFaMDMxMTAvBgNV BAMTKEVEN0U5MkMzOEUxRTg0QkE3Nzk3MkY2NDMxMDdERDcyRTMxRDg2RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxhBlOOTQ5ZncVrtqlGne6xbe8 1JfAYLmlhF6qKaWWuq1rYWLGm9t3ATaApocNhuehJafYTpACg44RokjirupyI0jM +10LUs9R/zO+X1nX10L/a1uuwTmMlNQj+EJsSFpTGMVK55YnYhcgQ0Bsh7XHRkZj uUHAe43+g0tVP+z93PasR3AusSlOorvRO1cZkqplPGUh8z+3Yzh/RgLV0VdE7Gd9 UdvuAKKEX+Uc27gKC+J16LOM6573pkg/fSZdjlzs4xWTwRnPHv6mDxjNAOmJBnn3 TRI/9xBXL0d8EZ6gQChbhWoPxcw0gTWTz6rjK6ohBgY1FHVacXQJCUOw0zlDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7X6Sw44ehLp3ly9kMQfdcuMdhucwHwYDVR0j BBgwFoAU9tGt74vxNEovXL2hiCK6hdbvbRcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MTEzZTdjNC03NzNmLTQ3NGMtYjA2ZC02MjYwYTMwNmEwY2EvMC9GNkQxQURFRjhC RjEzNDRBMkY1Q0JEQTE4ODIyQkE4NUQ2RUY2RDE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjZEMUFERUY4QkYxMzQ0QTJGNUNCREExODgyMkJBODVENkVG NkQxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTExM2U3YzQtNzczZi00NzRjLWIw NmQtNjI2MGEzMDZhMGNhLzAvRjZEMUFERUY4QkYxMzQ0QTJGNUNCREExODgyMkJB ODVENkVGNkQxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG/vKaJ6hWOiddN5Aoj+V5PaB3EV4KYnE8mV /J41eWDO48U+i55NocUI1FuO6J+zzJgE0s7NPKxr7rf3S67WlLWRWMibdTX/xaR+ qPLuMcegt8rt1506poWDhRejVUs0181w/q5D4qWVQekNfO1giMF/HvgRNwpgBgK+ +BxvE5L95FYZ4PhT2Mr95VE+w0DzpjrwqavNKaXAy2+INXw9Hy2jlLmTSbZgz8TY 53MkWzKsgo9+wdu/aCW75JTrQOzzJSrUVQF3WRIZBuoUj3Hwx/ap1YjCmUh6ONq9 TYtmoqPVZhgYDSCGNpG+9Db1SGa7RfhnxF6TzOXUIgjb9nzYp4Q= -----END CERTIFICATE-----Generated at Wed Feb 19 22:04:39 2025 by rpki-client