$ rpki-client -vvf repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft File: 0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft (raw, json) Hash identifier: EuB/l+mgsbmkkGySevpqDQKo01546PDfthCJ2ZOFSn0= Subject key identifier: A7:37:CA:E0:FF:AC:A1:35:77:6D:28:0A:89:74:C5:39:5F:76:D1:DE Authority key identifier: 0A:FD:8F:6B:02:40:5F:4D:E9:A9:46:84:0C:C5:AE:2E:6A:C8:E4:0C Certificate issuer: /CN=0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C Certificate serial: ED415D4C62808C040133C269B2184E5BA853CD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft Manifest number: 041E Signing time: Tue 08 Apr 2025 15:40:02 +0000 Manifest this update: Tue 08 Apr 2025 15:35:02 +0000 Manifest next update: Fri 11 Apr 2025 18:49:02 +0000 Files and hashes: 1: 0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.crl (hash: u3uWl48pUGHQq7G11RICtwB24OZfYjaFNIqK4Fn7WW4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.crl rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:49:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: ed:41:5d:4c:62:80:8c:04:01:33:c2:69:b2:18:4e:5b:a8:53:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C Validity Not Before: Apr 8 15:35:02 2025 GMT Not After : Apr 11 18:49:02 2025 GMT Subject: CN=A737CAE0FFACA135776D280A8974C5395F76D1DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a2:78:49:15:f3:d9:50:99:79:f2:e2:c8:1c: 7e:f2:c7:c9:73:20:d7:5e:cf:aa:86:30:61:5f:06: d0:fc:d6:57:df:3a:e7:29:b2:d9:a5:72:d4:13:28: b8:37:a3:6a:39:66:55:81:ac:4d:df:99:cd:3a:af: 33:8f:e7:b2:86:b5:fa:05:b8:e6:b4:1a:cd:9c:21: 14:b9:01:5b:d6:ec:af:99:71:bd:c2:8b:5c:b8:e4: 43:63:02:4b:d0:4f:de:c3:f7:fc:ff:2c:bb:94:14: a1:47:5f:bd:08:86:ff:87:3f:a8:a6:06:b7:de:fc: 68:46:ac:ce:4e:33:d8:0e:e9:52:eb:90:70:33:b2: f4:56:4d:fc:c7:9c:e3:f0:f9:a8:43:9b:59:ca:e3: f7:b0:cc:d7:65:6d:84:33:42:02:21:a5:79:77:93: 06:35:cb:a1:14:70:bb:cc:3e:1f:63:cb:ab:54:a0: 3a:6d:26:cc:d5:7f:b9:44:06:b0:47:e5:c5:5d:78: c6:d1:ae:48:08:00:12:81:ed:11:a5:62:7c:7d:31: 80:8d:ec:21:ca:5c:65:e8:be:c2:95:bb:d1:66:c1: 96:24:a8:e1:09:0a:50:9c:4a:b0:32:b6:5d:6e:44: 81:88:e1:16:ed:1c:f7:fb:09:be:d9:c7:41:ef:08: c7:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:37:CA:E0:FF:AC:A1:35:77:6D:28:0A:89:74:C5:39:5F:76:D1:DE X509v3 Authority Key Identifier: keyid:0A:FD:8F:6B:02:40:5F:4D:E9:A9:46:84:0C:C5:AE:2E:6A:C8:E4:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:11:f9:81:63:39:8e:a3:90:3d:29:b3:ec:e9:c0:33:a0:85: 17:04:cb:bd:8a:3e:ef:30:7a:36:45:e6:a6:12:67:b4:03:5f: 69:40:f6:9c:29:09:37:f7:b4:81:cc:8c:fd:77:b0:ed:3e:ff: c1:a8:e3:52:2b:ca:d8:f5:08:c7:a4:52:e8:01:5b:b6:8c:4e: e1:1e:67:e4:d4:b8:0e:a6:06:68:df:54:4e:b0:46:d3:33:90: fe:97:14:30:44:8a:ad:e4:73:55:05:0d:a1:2a:f8:6e:38:8a: 25:34:5d:79:23:cf:dc:60:26:58:e5:7c:1e:16:1c:69:14:25: 00:c8:ed:a9:9e:40:35:c0:d2:01:73:91:18:cf:7f:fa:64:c3: 9e:50:4b:2a:fd:12:d6:aa:9d:00:17:ef:6a:43:c4:58:d7:e4: c1:08:cd:3a:0e:73:8f:3b:a3:33:15:82:75:67:04:a3:91:d5: 3f:8a:47:8c:d8:36:63:46:46:b1:e9:c1:9a:52:a4:44:2d:74: 16:1d:bd:a2:8d:d2:14:79:56:67:c9:db:d7:12:d4:54:fb:4a: 49:99:87:b7:b3:58:17:f3:54:0a:88:0f:0c:ab:24:ec:06:ce: 88:75:bf:ed:7a:e9:1b:fd:1d:c7:ae:2f:d9:d5:21:e0:a7:19: 12:cb:19:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAO1BXUxigIwEATPCabIYTluoU80wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEFGRDhGNkIwMjQwNUY0REU5QTk0Njg0MENDNUFFMkU2 QUM4RTQwQzAeFw0yNTA0MDgxNTM1MDJaFw0yNTA0MTExODQ5MDJaMDMxMTAvBgNV BAMTKEE3MzdDQUUwRkZBQ0ExMzU3NzZEMjgwQTg5NzRDNTM5NUY3NkQxREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDConhJFfPZUJl58uLIHH7yx8lz INdez6qGMGFfBtD81lffOucpstmlctQTKLg3o2o5ZlWBrE3fmc06rzOP57KGtfoF uOa0Gs2cIRS5AVvW7K+Zcb3Ci1y45ENjAkvQT97D9/z/LLuUFKFHX70Ihv+HP6im Brfe/GhGrM5OM9gO6VLrkHAzsvRWTfzHnOPw+ahDm1nK4/ewzNdlbYQzQgIhpXl3 kwY1y6EUcLvMPh9jy6tUoDptJszVf7lEBrBH5cVdeMbRrkgIABKB7RGlYnx9MYCN 7CHKXGXovsKVu9FmwZYkqOEJClCcSrAytl1uRIGI4RbtHPf7Cb7Zx0HvCMcxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpzfK4P+soTV3bSgKiXTFOV920d4wHwYDVR0j BBgwFoAUCv2PawJAX03pqUaEDMWuLmrI5AwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NDdjNmVjYi0wYmFlLTQ1YzMtYWFkYS00M2E2YTE3MWMwNDYvMC8wQUZEOEY2QjAy NDA1RjRERTlBOTQ2ODQwQ0M1QUUyRTZBQzhFNDBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEFGRDhGNkIwMjQwNUY0REU5QTk0Njg0MENDNUFFMkU2QUM4 RTQwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTQ3YzZlY2ItMGJhZS00NWMzLWFh ZGEtNDNhNmExNzFjMDQ2LzAvMEFGRDhGNkIwMjQwNUY0REU5QTk0Njg0MENDNUFF MkU2QUM4RTQwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIAR+YFjOY6jkD0ps+zpwDOghRcEy72KPu8w ejZF5qYSZ7QDX2lA9pwpCTf3tIHMjP13sO0+/8Go41Irytj1CMekUugBW7aMTuEe Z+TUuA6mBmjfVE6wRtMzkP6XFDBEiq3kc1UFDaEq+G44iiU0XXkjz9xgJljlfB4W HGkUJQDI7ameQDXA0gFzkRjPf/pkw55QSyr9EtaqnQAX72pDxFjX5MEIzToOc487 ozMVgnVnBKOR1T+KR4zYNmNGRrHpwZpSpEQtdBYdvaKN0hR5VmfJ29cS1FT7SkmZ h7ezWBfzVAqIDwyrJOwGzoh1v+166Rv9HceuL9nVIeCnGRLLGdc= -----END CERTIFICATE-----Generated at Wed Apr 9 12:51:10 2025 by rpki-client