$ rpki-client -vvf repo-rpki.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/E810D41602DB2D5449939EA97EB71C350841BC5D.mft File: E810D41602DB2D5449939EA97EB71C350841BC5D.mft (raw, json) Hash identifier: bQvPDBeJRgekQP/aczuYBPzVXws55uJPayXh4t+ZzuI= Subject key identifier: A1:F6:E2:10:C3:C8:B4:0E:4F:2C:F5:31:19:EF:79:DE:B2:33:9A:EA Authority key identifier: E8:10:D4:16:02:DB:2D:54:49:93:9E:A9:7E:B7:1C:35:08:41:BC:5D Certificate issuer: /CN=E810D41602DB2D5449939EA97EB71C350841BC5D Certificate serial: 1AD4DEED9E70625C3B2E71A847257E5AF0AA5F35 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E810D41602DB2D5449939EA97EB71C350841BC5D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/E810D41602DB2D5449939EA97EB71C350841BC5D.mft Manifest number: 01DA Signing time: Fri 04 Apr 2025 19:51:04 +0000 Manifest this update: Fri 04 Apr 2025 19:46:04 +0000 Manifest next update: Tue 08 Apr 2025 07:07:04 +0000 Files and hashes: 1: E810D41602DB2D5449939EA97EB71C350841BC5D.crl (hash: jJZ5euYyK8yK5GdlDROptvQawpCiZUhmqd+V8/BAJqk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/E810D41602DB2D5449939EA97EB71C350841BC5D.crl rsync://repo-rpki.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/E810D41602DB2D5449939EA97EB71C350841BC5D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E810D41602DB2D5449939EA97EB71C350841BC5D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:d4:de:ed:9e:70:62:5c:3b:2e:71:a8:47:25:7e:5a:f0:aa:5f:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E810D41602DB2D5449939EA97EB71C350841BC5D Validity Not Before: Apr 4 19:46:04 2025 GMT Not After : Apr 8 07:07:04 2025 GMT Subject: CN=A1F6E210C3C8B40E4F2CF53119EF79DEB2339AEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:9e:78:bf:0d:5c:41:f1:5a:94:11:5a:65:0c: 87:06:67:cb:9b:8c:bd:13:b2:ae:b3:44:51:3f:6b: fe:9d:bc:2b:82:ae:84:6a:5d:60:42:01:f7:a1:b8: 4f:fa:a5:fd:40:98:45:bd:98:84:c6:ff:4c:a6:33: 99:5f:01:28:36:b6:f6:cf:61:f7:23:c9:18:ec:38: 38:8f:1b:bf:6a:50:75:28:8b:62:20:ac:ba:8d:24: 50:fe:fd:aa:4d:b6:0b:64:e9:08:0f:2b:33:57:e9: 49:bc:e2:4a:f1:6d:96:f2:42:10:0d:34:29:a1:3c: 8e:d0:d2:ca:bf:07:27:85:d2:d6:90:32:ee:3a:e7: 5c:03:0a:0d:ad:07:db:0b:48:66:10:d9:2c:0a:cf: d0:3b:08:ac:d7:1d:c1:5a:7e:4d:0c:8c:e5:84:c5: a9:c5:69:56:36:fa:1b:fa:6f:ce:06:17:48:8f:f0: 9f:b7:ba:23:3b:e4:93:d2:35:aa:b9:9c:79:54:ed: b3:ea:4a:a1:dd:f9:f7:8a:10:59:f4:27:31:a5:ad: cc:ae:a0:2a:cb:15:3c:c7:f9:b3:82:4c:0d:e4:99: b1:fc:c5:56:b5:51:3d:ef:8b:ee:09:1c:b1:63:e1: 0a:21:7f:19:19:24:29:48:34:16:41:df:fb:7d:41: f3:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:F6:E2:10:C3:C8:B4:0E:4F:2C:F5:31:19:EF:79:DE:B2:33:9A:EA X509v3 Authority Key Identifier: keyid:E8:10:D4:16:02:DB:2D:54:49:93:9E:A9:7E:B7:1C:35:08:41:BC:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/E810D41602DB2D5449939EA97EB71C350841BC5D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E810D41602DB2D5449939EA97EB71C350841BC5D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/E810D41602DB2D5449939EA97EB71C350841BC5D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:b2:05:1c:4a:dd:0f:e6:0c:d0:6c:a2:a0:3d:29:2d:58:2a: 2f:36:e9:ea:b3:18:17:62:cc:40:1f:b5:0f:c4:9f:dd:8e:33: 91:bf:61:c2:b8:7d:88:fd:58:3d:7d:bb:f1:32:ed:c8:36:5e: 6e:d9:7e:3e:59:27:53:51:88:2f:c4:99:8d:e1:0c:0f:de:56: 47:bb:51:c6:85:bc:0d:1f:10:76:23:7c:1c:7a:17:1b:78:65: f7:17:46:5a:61:8c:cd:26:45:73:a0:06:77:a3:12:0a:1e:c3: a4:bf:40:e6:d6:aa:90:53:79:f6:52:db:d8:3d:e6:27:b7:12: d4:aa:4d:f4:04:c2:0f:da:a8:bb:4d:75:d6:10:ec:4b:a8:9a: 99:97:6c:22:e4:7a:80:c5:2d:80:5b:be:a0:d5:0c:30:29:57: e1:35:6e:5f:83:d0:43:73:61:18:14:18:47:51:74:4c:01:d4: 44:10:40:fd:6d:14:a5:eb:82:f1:25:cc:81:67:12:3b:11:13: 71:56:9c:9d:8c:34:7d:f4:e0:37:ee:75:78:f9:fb:6b:f5:c0: 8d:73:f0:1a:63:ac:3f:67:c1:4d:c1:83:3b:04:33:13:06:39: c5:de:7f:53:ca:76:1d:02:7d:3c:0d:f9:b2:1e:d0:2c:58:7c: eb:61:a1:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGtTe7Z5wYlw7LnGoRyV+WvCqXzUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTgxMEQ0MTYwMkRCMkQ1NDQ5OTM5RUE5N0VCNzFDMzUw ODQxQkM1RDAeFw0yNTA0MDQxOTQ2MDRaFw0yNTA0MDgwNzA3MDRaMDMxMTAvBgNV BAMTKEExRjZFMjEwQzNDOEI0MEU0RjJDRjUzMTE5RUY3OURFQjIzMzlBRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxnni/DVxB8VqUEVplDIcGZ8ub jL0Tsq6zRFE/a/6dvCuCroRqXWBCAfehuE/6pf1AmEW9mITG/0ymM5lfASg2tvbP YfcjyRjsODiPG79qUHUoi2IgrLqNJFD+/apNtgtk6QgPKzNX6Um84krxbZbyQhAN NCmhPI7Q0sq/ByeF0taQMu4651wDCg2tB9sLSGYQ2SwKz9A7CKzXHcFafk0MjOWE xanFaVY2+hv6b84GF0iP8J+3uiM75JPSNaq5nHlU7bPqSqHd+feKEFn0JzGlrcyu oCrLFTzH+bOCTA3kmbH8xVa1UT3vi+4JHLFj4QohfxkZJClINBZB3/t9QfNhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUofbiEMPItA5PLPUxGe953rIzmuowHwYDVR0j BBgwFoAU6BDUFgLbLVRJk56pfrccNQhBvF0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTkwNWI4Zi01YzBhLTQ1NzktYjRmNy0wOTI2N2I1NTg5NjgvMC9FODEwRDQxNjAy REIyRDU0NDk5MzlFQTk3RUI3MUMzNTA4NDFCQzVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTgxMEQ0MTYwMkRCMkQ1NDQ5OTM5RUE5N0VCNzFDMzUwODQx QkM1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk5MDViOGYtNWMwYS00NTc5LWI0 ZjctMDkyNjdiNTU4OTY4LzAvRTgxMEQ0MTYwMkRCMkQ1NDQ5OTM5RUE5N0VCNzFD MzUwODQxQkM1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGuyBRxK3Q/mDNBsoqA9KS1YKi826eqzGBdi zEAftQ/En92OM5G/YcK4fYj9WD19u/Ey7cg2Xm7Zfj5ZJ1NRiC/EmY3hDA/eVke7 UcaFvA0fEHYjfBx6Fxt4ZfcXRlphjM0mRXOgBnejEgoew6S/QObWqpBTefZS29g9 5ie3EtSqTfQEwg/aqLtNddYQ7EuompmXbCLkeoDFLYBbvqDVDDApV+E1bl+D0ENz YRgUGEdRdEwB1EQQQP1tFKXrgvElzIFnEjsRE3FWnJ2MNH304DfudXj5+2v1wI1z 8BpjrD9nwU3BgzsEMxMGOcXef1PKdh0CfTwN+bIe0CxYfOthoX0= -----END CERTIFICATE-----Generated at Sat Apr 5 16:39:40 2025 by rpki-client