$ rpki-client -vvf repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft File: C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft (raw, json) Hash identifier: xq9mAGRE3m0EoeXMikf9VVGoZSUjskaph1f6TyWFsAQ= Subject key identifier: C2:EA:8C:88:E7:48:01:81:A9:69:D2:56:20:82:84:A2:6F:47:17:D8 Authority key identifier: C8:C5:B7:81:B7:F4:3C:62:74:BD:AA:C3:FD:8A:E1:91:4A:BE:ED:88 Certificate issuer: /CN=C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88 Certificate serial: 0BD9DD1D6F3D41F0A5227509A4E9791E568FD16F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft Manifest number: 44 Signing time: Fri 04 Apr 2025 23:21:50 +0000 Manifest this update: Fri 04 Apr 2025 23:16:50 +0000 Manifest next update: Tue 08 Apr 2025 08:12:50 +0000 Files and hashes: 1: C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.crl (hash: HM4Kxoy3IGTcrzOzUsT7+Ay8ED0fS4RVHYspYAPnLQQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.crl rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:d9:dd:1d:6f:3d:41:f0:a5:22:75:09:a4:e9:79:1e:56:8f:d1:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88 Validity Not Before: Apr 4 23:16:50 2025 GMT Not After : Apr 8 08:12:50 2025 GMT Subject: CN=C2EA8C88E7480181A969D256208284A26F4717D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:73:b4:b7:d0:27:35:dd:c7:d8:a8:95:c9:6d: 87:04:c1:3a:76:78:c0:0f:ae:83:09:52:e7:4c:a2: f6:82:45:d9:76:cb:35:3e:c3:48:94:61:e8:92:bd: 51:5c:99:8f:d7:6a:e7:98:ac:4c:b9:42:5d:ba:e1: 49:f5:20:62:1a:7f:76:a6:89:42:e4:ce:77:cd:a8: d5:ae:9c:80:e5:38:07:33:35:48:14:cb:85:90:93: 8d:99:a9:3c:6f:b9:16:76:cf:7b:7a:06:2a:27:90: 90:c7:ed:10:d2:4b:4f:3e:15:0c:78:79:2e:3b:49: 56:91:4f:c1:8e:70:59:f9:df:a2:53:a5:4b:0d:e4: 94:94:3c:b5:5b:36:70:5b:6e:45:02:b0:0b:f1:32: 7d:98:21:92:8d:cb:4a:ca:44:82:84:3f:87:8d:23: 97:c9:4b:7c:b2:ae:36:eb:16:d3:e0:9b:0a:74:99: 50:31:35:11:96:43:71:32:39:2e:da:31:e8:44:77: 33:43:32:36:dc:2d:27:82:32:2f:ac:05:88:19:17: 5e:86:49:9a:96:1e:da:e2:49:fe:c0:3a:c0:6c:a9: b8:84:11:fb:fe:68:64:56:79:26:4a:05:17:26:cd: 4d:3c:d3:94:bd:ae:cf:2a:6d:c1:93:eb:79:92:b3: 8a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:EA:8C:88:E7:48:01:81:A9:69:D2:56:20:82:84:A2:6F:47:17:D8 X509v3 Authority Key Identifier: keyid:C8:C5:B7:81:B7:F4:3C:62:74:BD:AA:C3:FD:8A:E1:91:4A:BE:ED:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:5d:40:ac:f7:4c:4a:42:9d:d8:ad:99:8f:85:d9:67:b3:83: 9d:08:a2:28:8f:f2:67:ac:e0:51:60:88:9d:30:8a:ab:b6:22: 66:38:c9:c5:ec:3f:46:97:2e:a6:db:a6:41:34:20:e8:0d:8a: 69:8f:47:34:b3:c7:e3:07:0a:b5:99:6b:9f:98:75:95:13:ae: a0:06:ae:cd:3d:09:61:2b:7e:25:6a:d7:c9:8b:2c:40:a5:00: 63:21:2a:16:de:d4:8b:24:64:7f:bd:ed:82:c3:d9:cc:ec:7a: c5:a1:e2:ab:e7:3c:7f:d5:4e:32:a5:bb:94:9a:06:af:0f:a8: 44:b2:17:88:ba:e2:ec:f9:47:0a:5e:98:59:d9:07:47:d6:15: 98:0c:f0:3d:b5:57:97:db:5c:b8:99:c8:86:82:a7:ba:3c:76: 28:46:b1:77:5a:f1:ca:5f:7a:15:90:91:6f:ab:9a:8e:f4:bc: 9b:98:b6:41:77:07:96:72:a2:1d:6a:90:ea:27:24:e5:3f:cb: 7c:c9:88:de:b7:81:b9:82:b2:9e:fc:98:98:cb:d1:2f:d0:c0: 24:7a:ff:96:28:fe:9d:d9:90:ad:d7:16:9e:b9:83:1c:6a:2e: 56:26:82:de:18:73:50:df:c2:d6:5c:15:cd:92:3a:87:1a:73: 71:d2:ed:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC9ndHW89QfClInUJpOl5HlaP0W8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhDNUI3ODFCN0Y0M0M2Mjc0QkRBQUMzRkQ4QUUxOTE0 QUJFRUQ4ODAeFw0yNTA0MDQyMzE2NTBaFw0yNTA0MDgwODEyNTBaMDMxMTAvBgNV BAMTKEMyRUE4Qzg4RTc0ODAxODFBOTY5RDI1NjIwODI4NEEyNkY0NzE3RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0c7S30Cc13cfYqJXJbYcEwTp2 eMAProMJUudMovaCRdl2yzU+w0iUYeiSvVFcmY/XaueYrEy5Ql264Un1IGIaf3am iULkznfNqNWunIDlOAczNUgUy4WQk42ZqTxvuRZ2z3t6BionkJDH7RDSS08+FQx4 eS47SVaRT8GOcFn536JTpUsN5JSUPLVbNnBbbkUCsAvxMn2YIZKNy0rKRIKEP4eN I5fJS3yyrjbrFtPgmwp0mVAxNRGWQ3EyOS7aMehEdzNDMjbcLSeCMi+sBYgZF16G SZqWHtriSf7AOsBsqbiEEfv+aGRWeSZKBRcmzU0805S9rs8qbcGT63mSs4ojAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwuqMiOdIAYGpadJWIIKEom9HF9gwHwYDVR0j BBgwFoAUyMW3gbf0PGJ0varD/YrhkUq+7YgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ODg1M2FhYi04ZDZjLTQ1N2YtOWQ1Ny00ODRhY2FjZWE5ZDgvMS9DOEM1Qjc4MUI3 RjQzQzYyNzRCREFBQzNGRDhBRTE5MTRBQkVFRDg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhDNUI3ODFCN0Y0M0M2Mjc0QkRBQUMzRkQ4QUUxOTE0QUJF RUQ4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTg4NTNhYWItOGQ2Yy00NTdmLTlk NTctNDg0YWNhY2VhOWQ4LzEvQzhDNUI3ODFCN0Y0M0M2Mjc0QkRBQUMzRkQ4QUUx OTE0QUJFRUQ4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEldQKz3TEpCnditmY+F2Wezg50IoiiP8mes 4FFgiJ0wiqu2ImY4ycXsP0aXLqbbpkE0IOgNimmPRzSzx+MHCrWZa5+YdZUTrqAG rs09CWErfiVq18mLLEClAGMhKhbe1IskZH+97YLD2czsesWh4qvnPH/VTjKlu5Sa Bq8PqESyF4i64uz5RwpemFnZB0fWFZgM8D21V5fbXLiZyIaCp7o8dihGsXda8cpf ehWQkW+rmo70vJuYtkF3B5Zyoh1qkOonJOU/y3zJiN63gbmCsp78mJjL0S/QwCR6 /5Yo/p3ZkK3XFp65gxxqLlYmgt4Yc1DfwtZcFc2SOocac3HS7b4= -----END CERTIFICATE-----Generated at Sat Apr 5 16:38:04 2025 by rpki-client