$ rpki-client -vvf repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.mft File: F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.mft (raw, json) Hash identifier: NTMvkmflcSwMsclbMRQLe02tfASq9y8rln+TYoZUyXE= Subject key identifier: AE:DC:76:ED:1D:99:22:8B:C8:52:AD:9B:5D:AE:37:F5:10:4D:98:4D Authority key identifier: F6:D1:AD:EF:8B:F1:34:4A:2F:5C:BD:A1:88:22:BA:85:D6:EF:6D:17 Certificate issuer: /CN=F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17 Certificate serial: 361C87078106B1464C84FE8AF69E40023800566D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.mft Manifest number: 0258 Signing time: Fri 18 Apr 2025 07:40:59 +0000 Manifest this update: Fri 18 Apr 2025 07:35:59 +0000 Manifest next update: Mon 21 Apr 2025 15:56:59 +0000 Files and hashes: 1: F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.crl (hash: 3MojcWHKBmrXjMmV7Ld0/pKnnimgdJnmWd4dBptjlnU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.crl rsync://repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 15:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:1c:87:07:81:06:b1:46:4c:84:fe:8a:f6:9e:40:02:38:00:56:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17 Validity Not Before: Apr 18 07:35:59 2025 GMT Not After : Apr 21 15:56:59 2025 GMT Subject: CN=AEDC76ED1D99228BC852AD9B5DAE37F5104D984D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d9:10:a1:d6:bd:99:f8:5b:9b:47:c0:20:46: d9:b5:ba:2f:b9:09:85:c0:0d:72:a6:50:44:86:2c: 12:ad:a4:76:1a:7b:3e:e8:3a:f4:43:01:b0:3e:a4: 13:21:ff:b3:f4:01:e9:aa:80:10:85:d3:bf:6a:53: ad:91:03:8f:d7:93:3d:e1:4b:ab:ad:df:2a:78:d8: d2:c9:24:77:04:b4:4f:bb:3b:36:02:7f:28:c8:5e: c0:41:b9:5f:22:ad:88:eb:68:79:3e:93:9a:fb:f3: 26:6f:24:f8:cd:fc:69:4e:e6:60:00:32:2c:7e:48: fe:53:7d:06:59:fb:b6:5b:0b:5e:0e:52:e9:b6:21: 45:13:5e:ca:22:6f:98:e4:c2:3b:97:5b:a0:d0:80: 03:b5:30:3f:a8:3b:1e:33:6b:16:61:8b:9b:3c:c5: 95:8a:29:c5:87:1b:8e:9a:66:1c:b2:34:e4:c4:06: 1a:fc:3f:30:71:cd:f0:4d:bc:d3:0e:e7:5a:9c:34: e4:cc:82:51:57:1a:61:9a:e3:b3:20:ee:d2:b2:95: 96:d5:fa:27:a7:1e:9a:4b:30:c0:e7:bd:2d:31:af: 4b:99:bc:41:a9:a1:c5:8a:b0:92:d4:59:4b:5c:57: b6:ed:93:67:df:8b:67:78:cd:46:62:76:c2:80:34: 6b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:DC:76:ED:1D:99:22:8B:C8:52:AD:9B:5D:AE:37:F5:10:4D:98:4D X509v3 Authority Key Identifier: keyid:F6:D1:AD:EF:8B:F1:34:4A:2F:5C:BD:A1:88:22:BA:85:D6:EF:6D:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9113e7c4-773f-474c-b06d-6260a306a0ca/0/F6D1ADEF8BF1344A2F5CBDA18822BA85D6EF6D17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:14:e1:04:dc:34:ea:64:3b:78:60:c7:9c:90:21:f1:9c:77: 18:61:5c:4c:82:2e:19:86:17:1a:9c:51:07:ed:e1:13:31:70: ed:ad:dd:55:6b:0c:ca:16:de:71:07:47:9f:ab:52:70:7a:ab: e0:7f:dc:be:ff:30:82:8e:45:63:a5:c2:81:3f:b6:eb:b5:14: d3:ad:b2:35:50:54:2b:10:de:09:d7:5d:79:b4:d5:a9:cb:ce: 39:4c:bd:c6:71:f3:6b:e7:9a:42:4a:fa:73:6c:60:0e:c9:26: c0:3c:2d:5f:04:88:5b:3b:71:cc:43:32:d3:04:d4:bf:d6:68: 0f:71:f1:f0:4e:df:76:cc:f8:27:2c:9d:d7:24:0e:fd:ff:d4: ae:dd:98:7c:5e:34:29:0b:88:9e:9b:3e:75:e8:c0:d8:19:af: db:65:70:65:c8:b2:97:d8:72:f6:ee:1c:06:6e:61:bb:96:a5: 75:66:fa:73:1c:3c:a7:c1:ea:f4:3d:74:39:93:ff:74:e8:41: b8:bd:aa:1f:e9:ab:ca:07:dc:d4:01:f2:f1:08:01:19:1c:1b: 36:97:0f:ae:f0:b9:ad:b7:cd:7c:c8:31:b3:34:33:fd:48:08: 36:4c:f5:be:7f:a6:65:38:ab:0d:31:be:be:9b:42:42:f5:c0: c2:5f:e7:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNhyHB4EGsUZMhP6K9p5AAjgAVm0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjZEMUFERUY4QkYxMzQ0QTJGNUNCREExODgyMkJBODVE NkVGNkQxNzAeFw0yNTA0MTgwNzM1NTlaFw0yNTA0MjExNTU2NTlaMDMxMTAvBgNV BAMTKEFFREM3NkVEMUQ5OTIyOEJDODUyQUQ5QjVEQUUzN0Y1MTA0RDk4NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY2RCh1r2Z+FubR8AgRtm1ui+5 CYXADXKmUESGLBKtpHYaez7oOvRDAbA+pBMh/7P0AemqgBCF079qU62RA4/Xkz3h S6ut3yp42NLJJHcEtE+7OzYCfyjIXsBBuV8irYjraHk+k5r78yZvJPjN/GlO5mAA Mix+SP5TfQZZ+7ZbC14OUum2IUUTXsoib5jkwjuXW6DQgAO1MD+oOx4zaxZhi5s8 xZWKKcWHG46aZhyyNOTEBhr8PzBxzfBNvNMO51qcNOTMglFXGmGa47Mg7tKylZbV +ienHppLMMDnvS0xr0uZvEGpocWKsJLUWUtcV7btk2ffi2d4zUZidsKANGv5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrtx27R2ZIovIUq2bXa439RBNmE0wHwYDVR0j BBgwFoAU9tGt74vxNEovXL2hiCK6hdbvbRcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MTEzZTdjNC03NzNmLTQ3NGMtYjA2ZC02MjYwYTMwNmEwY2EvMC9GNkQxQURFRjhC RjEzNDRBMkY1Q0JEQTE4ODIyQkE4NUQ2RUY2RDE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjZEMUFERUY4QkYxMzQ0QTJGNUNCREExODgyMkJBODVENkVG NkQxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTExM2U3YzQtNzczZi00NzRjLWIw NmQtNjI2MGEzMDZhMGNhLzAvRjZEMUFERUY4QkYxMzQ0QTJGNUNCREExODgyMkJB ODVENkVGNkQxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM8U4QTcNOpkO3hgx5yQIfGcdxhhXEyCLhmG FxqcUQft4RMxcO2t3VVrDMoW3nEHR5+rUnB6q+B/3L7/MIKORWOlwoE/tuu1FNOt sjVQVCsQ3gnXXXm01anLzjlMvcZx82vnmkJK+nNsYA7JJsA8LV8EiFs7ccxDMtME 1L/WaA9x8fBO33bM+CcsndckDv3/1K7dmHxeNCkLiJ6bPnXowNgZr9tlcGXIspfY cvbuHAZuYbuWpXVm+nMcPKfB6vQ9dDmT/3ToQbi9qh/pq8oH3NQB8vEIARkcGzaX D67wua23zXzIMbM0M/1ICDZM9b5/pmU4qw0xvr6bQkL1wMJf5zM= -----END CERTIFICATE-----Generated at Sat Apr 19 15:12:09 2025 by rpki-client