$ rpki-client -vvf repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.mft File: DE99361912581A3A43349B6FFB379A285B0972E7.mft (raw, json) Hash identifier: j4gRouTyxv95EzxsZNp6xuGU9rUd8DNH4xDnHUrFEC4= Subject key identifier: 44:6D:A2:2A:CB:D8:70:38:9D:2D:D2:C7:55:72:6A:06:2B:A0:A4:5D Authority key identifier: DE:99:36:19:12:58:1A:3A:43:34:9B:6F:FB:37:9A:28:5B:09:72:E7 Certificate issuer: /CN=DE99361912581A3A43349B6FFB379A285B0972E7 Certificate serial: 469CC357E1B4CE7E7E042A4FC13670745EB648B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE99361912581A3A43349B6FFB379A285B0972E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.mft Manifest number: 71 Signing time: Mon 21 Apr 2025 14:50:41 +0000 Manifest this update: Mon 21 Apr 2025 14:45:41 +0000 Manifest next update: Thu 24 Apr 2025 16:12:41 +0000 Files and hashes: 1: DE99361912581A3A43349B6FFB379A285B0972E7.crl (hash: 9b9fL2pyDULu8ZhK+baOO6URpMt4Mxcy2MKQ6Pyk6II=) 2: 3130332e3137342e36342e302f32332d3234203d3e20313437313236.roa (hash: mI6PTkpaM6ChlY4guRYd5Ne9UFAZRwUFW3RPT7EOVQM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.crl rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE99361912581A3A43349B6FFB379A285B0972E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Apr 2025 16:12:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:9c:c3:57:e1:b4:ce:7e:7e:04:2a:4f:c1:36:70:74:5e:b6:48:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE99361912581A3A43349B6FFB379A285B0972E7 Validity Not Before: Apr 21 14:45:41 2025 GMT Not After : Apr 24 16:12:41 2025 GMT Subject: CN=446DA22ACBD870389D2DD2C755726A062BA0A45D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:06:d3:6a:b1:d0:08:d3:4f:ec:99:c4:3f:a1: e5:a6:35:f3:a1:01:fa:3e:b1:c0:ce:c8:39:13:64: da:21:78:93:d3:7a:9c:0d:61:bf:ea:10:6f:af:cf: 93:4c:46:61:39:0e:eb:ae:a9:08:52:f4:2b:92:88: 7f:22:30:b0:7a:78:ac:e3:21:fb:e3:7d:62:a0:e4: 7f:49:93:fb:32:5c:3f:ff:65:ff:c1:33:16:d4:83: 58:7c:dc:7d:89:0c:79:49:7c:65:6e:e2:12:ed:7f: d2:20:02:e1:0b:9e:5a:e1:6c:32:2b:e1:13:d6:01: 7a:98:6d:f1:19:e2:2b:31:85:e2:2d:a3:2f:36:53: d6:c9:bf:f9:f4:42:b7:2b:06:40:38:83:6e:5b:3d: 0b:20:ae:36:43:e1:1b:b9:20:27:55:41:0c:6f:f2: e6:3d:14:cd:06:6d:e8:22:49:2a:5c:1e:4f:6c:6e: d7:f4:5d:aa:a3:6a:5f:22:59:4d:d8:6d:fb:3e:93: 54:d6:9e:9a:bb:8d:55:aa:d8:3a:c8:8c:50:08:1e: e6:ba:1c:c1:27:ea:da:96:26:9b:8b:37:54:d6:77: 6a:f0:7c:9b:e0:1b:ea:a3:c0:a6:8b:f6:58:e1:90: 3f:9f:be:3c:98:b6:16:32:59:b6:f1:d5:1b:ed:6d: 9b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:6D:A2:2A:CB:D8:70:38:9D:2D:D2:C7:55:72:6A:06:2B:A0:A4:5D X509v3 Authority Key Identifier: keyid:DE:99:36:19:12:58:1A:3A:43:34:9B:6F:FB:37:9A:28:5B:09:72:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE99361912581A3A43349B6FFB379A285B0972E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91f4abbe-8b5d-402b-9053-50b785c77352/0/DE99361912581A3A43349B6FFB379A285B0972E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:14:ab:fa:c7:cf:fa:a7:19:1e:3f:56:5c:65:11:29:de:30: 0c:d3:48:78:75:24:d2:5b:02:c5:cf:e5:f4:5a:2b:68:6e:76: c7:4a:bd:eb:ad:56:9c:9a:72:24:a4:e8:e2:4b:b8:9b:fa:18: 4a:3c:0c:56:c2:7f:af:cc:0c:47:94:3f:da:60:ec:e4:df:27: 40:39:6c:64:4d:f7:08:0e:31:ab:96:41:d8:df:90:4d:df:15: 9e:4a:bb:08:4a:b4:24:8e:9a:2a:8d:b5:d8:16:f3:71:8b:2d: c1:4f:05:76:6d:92:60:8c:ec:61:9d:63:63:fb:52:99:14:3e: a9:23:57:9c:55:f0:69:fa:85:2a:32:c4:31:23:06:4d:20:3d: 97:27:32:f6:38:16:6e:fd:ce:45:25:61:8c:68:63:05:bd:30: 73:0a:06:19:b6:94:c2:e8:de:1e:a6:72:2c:8a:3a:9b:1a:e1: 2c:b3:c6:ef:d3:01:7f:1b:29:6e:f3:c0:9f:1d:c3:f5:e0:bd: 83:91:4c:5f:fd:45:23:c2:8c:70:60:2d:5a:e4:d0:47:10:72: 1c:d2:56:bb:a5:72:6e:9a:9c:21:c7:b2:62:c3:f3:ca:2d:1a: 43:c4:86:f1:78:92:21:b3:66:f7:71:c8:45:e7:a0:3f:66:40: 35:21:ea:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURpzDV+G0zn5+BCpPwTZwdF62SLEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU5OTM2MTkxMjU4MUEzQTQzMzQ5QjZGRkIzNzlBMjg1 QjA5NzJFNzAeFw0yNTA0MjExNDQ1NDFaFw0yNTA0MjQxNjEyNDFaMDMxMTAvBgNV BAMTKDQ0NkRBMjJBQ0JEODcwMzg5RDJERDJDNzU1NzI2QTA2MkJBMEE0NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0BtNqsdAI00/smcQ/oeWmNfOh Afo+scDOyDkTZNoheJPTepwNYb/qEG+vz5NMRmE5DuuuqQhS9CuSiH8iMLB6eKzj IfvjfWKg5H9Jk/syXD//Zf/BMxbUg1h83H2JDHlJfGVu4hLtf9IgAuELnlrhbDIr 4RPWAXqYbfEZ4isxheItoy82U9bJv/n0QrcrBkA4g25bPQsgrjZD4Ru5ICdVQQxv 8uY9FM0GbegiSSpcHk9sbtf0Xaqjal8iWU3Ybfs+k1TWnpq7jVWq2DrIjFAIHua6 HMEn6tqWJpuLN1TWd2rwfJvgG+qjwKaL9ljhkD+fvjyYthYyWbbx1RvtbZuNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURG2iKsvYcDidLdLHVXJqBiugpF0wHwYDVR0j BBgwFoAU3pk2GRJYGjpDNJtv+zeaKFsJcucwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWY0YWJiZS04YjVkLTQwMmItOTA1My01MGI3ODVjNzczNTIvMC9ERTk5MzYxOTEy NTgxQTNBNDMzNDlCNkZGQjM3OUEyODVCMDk3MkU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREU5OTM2MTkxMjU4MUEzQTQzMzQ5QjZGRkIzNzlBMjg1QjA5 NzJFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFmNGFiYmUtOGI1ZC00MDJiLTkw NTMtNTBiNzg1Yzc3MzUyLzAvREU5OTM2MTkxMjU4MUEzQTQzMzQ5QjZGRkIzNzlB Mjg1QjA5NzJFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK8Uq/rHz/qnGR4/VlxlESneMAzTSHh1JNJb AsXP5fRaK2hudsdKveutVpyaciSk6OJLuJv6GEo8DFbCf6/MDEeUP9pg7OTfJ0A5 bGRN9wgOMauWQdjfkE3fFZ5KuwhKtCSOmiqNtdgW83GLLcFPBXZtkmCM7GGdY2P7 UpkUPqkjV5xV8Gn6hSoyxDEjBk0gPZcnMvY4Fm79zkUlYYxoYwW9MHMKBhm2lMLo 3h6mciyKOpsa4Syzxu/TAX8bKW7zwJ8dw/XgvYORTF/9RSPCjHBgLVrk0EcQchzS Vrulcm6anCHHsmLD88otGkPEhvF4kiGzZvdxyEXnoD9mQDUh6g4= -----END CERTIFICATE-----Generated at Tue Apr 22 19:28:17 2025 by rpki-client