$ rpki-client -vvf repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft File: 0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft (raw, json) Hash identifier: 4mxLPGGUFOgNnshjt/Zl4PwAeTWUgRfUZ9GFR3rq8bo= Subject key identifier: CE:C9:AC:A3:A4:A0:CA:64:56:5A:FD:13:3B:48:82:9C:42:EB:83:2D Authority key identifier: 0F:44:BF:25:8D:75:F2:D1:C4:45:D5:29:C3:01:5F:9F:E5:1B:28:0F Certificate issuer: /CN=0F44BF258D75F2D1C445D529C3015F9FE51B280F Certificate serial: 681CE4DD9C0EAA8B0B5E822215468859252DE54B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0F44BF258D75F2D1C445D529C3015F9FE51B280F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft Manifest number: 24 Signing time: Thu 20 Feb 2025 08:12:07 +0000 Manifest this update: Thu 20 Feb 2025 08:07:07 +0000 Manifest next update: Sun 23 Feb 2025 10:06:07 +0000 Files and hashes: 1: 0F44BF258D75F2D1C445D529C3015F9FE51B280F.crl (hash: GQIiPLE9CYHHXjbz4nwXuuY2Rb6PfmMaTwG7MBX7j00=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.crl rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0F44BF258D75F2D1C445D529C3015F9FE51B280F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 23 Feb 2025 10:06:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:1c:e4:dd:9c:0e:aa:8b:0b:5e:82:22:15:46:88:59:25:2d:e5:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F44BF258D75F2D1C445D529C3015F9FE51B280F Validity Not Before: Feb 20 08:07:07 2025 GMT Not After : Feb 23 10:06:07 2025 GMT Subject: CN=CEC9ACA3A4A0CA64565AFD133B48829C42EB832D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f0:c3:bd:69:fc:7d:de:2f:23:45:d7:e6:d8: 7b:be:ec:68:15:f5:07:a4:58:54:2b:7d:39:ec:b3: 2d:39:ea:63:b0:6c:d3:79:28:40:da:40:2a:41:b7: aa:9b:0e:a8:11:e8:39:0a:f8:d7:4c:76:1d:ff:2b: 08:3c:60:a1:e8:cc:a5:b1:f3:f7:d9:52:2d:c5:39: d9:9a:14:ad:17:94:3c:a8:16:64:3f:f1:9d:59:5d: 8f:37:f9:95:11:84:4b:9d:eb:d8:9c:43:59:04:a4: dd:31:2b:11:ed:86:04:d6:dc:f2:06:e7:a4:65:99: b6:79:aa:cc:a9:ae:2b:8a:a1:31:c2:4d:83:88:78: da:c6:75:0c:99:70:d4:a9:9f:66:a2:69:f5:42:bc: 57:52:e7:e1:ab:69:d3:39:80:3e:28:24:eb:b8:83: ae:2c:2a:68:bc:52:13:88:9a:c4:fb:04:02:d1:50: f1:65:c5:45:54:39:d6:5a:0f:fe:d9:ab:a4:6c:88: 53:8a:ca:98:3a:ce:95:7a:af:27:de:f4:78:e5:8d: 46:d1:d1:f2:58:00:eb:35:1d:b1:9b:f0:db:48:e1: 21:04:e7:82:99:30:52:be:58:f7:72:f5:a8:e3:4f: c2:14:20:5c:7f:eb:ce:d5:7a:0d:64:5a:ee:26:f8: 5e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:C9:AC:A3:A4:A0:CA:64:56:5A:FD:13:3B:48:82:9C:42:EB:83:2D X509v3 Authority Key Identifier: keyid:0F:44:BF:25:8D:75:F2:D1:C4:45:D5:29:C3:01:5F:9F:E5:1B:28:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0F44BF258D75F2D1C445D529C3015F9FE51B280F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption df:c1:7e:bc:13:45:a9:12:79:84:61:41:35:2c:37:7d:22:06: d7:3e:b2:50:ae:40:f1:45:fe:e7:33:c4:71:5e:ec:27:f2:05: 5d:71:0f:7d:7a:35:54:e0:5c:87:1f:b2:5c:74:e0:24:48:fe: cc:c6:12:03:de:57:d9:60:6b:49:c5:b9:69:3a:87:76:cf:1d: 5a:78:63:0b:14:94:6e:ed:b4:9f:c2:df:e2:d3:d8:bd:18:35: 38:b1:0b:cd:3c:f6:7c:6d:33:74:c6:88:18:25:48:97:9c:a9: b1:27:2d:77:77:f3:c5:54:23:21:62:94:cd:2a:47:1d:9d:70: 74:34:f5:6c:37:c0:c6:0e:e5:49:32:52:75:70:10:f4:5e:cc: 0a:00:0c:98:21:13:fa:06:95:82:63:bf:19:32:92:5c:06:f4: 0a:b6:a1:10:8f:27:4f:1c:4c:f2:70:de:11:57:5a:77:f2:59: 86:72:64:df:4b:05:6c:dc:3c:99:dd:44:04:72:47:58:91:54: dd:95:6a:89:eb:f2:50:e8:4e:7f:e8:a8:10:ce:5b:47:76:47: 74:08:01:c8:ab:c7:c3:0d:65:87:20:b9:92:42:75:f6:76:a6: 95:fb:ed:64:d2:95:03:94:40:59:ae:dd:4f:e3:1c:6f:e7:1f: f1:76:d6:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaBzk3ZwOqosLXoIiFUaIWSUt5UswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEY0NEJGMjU4RDc1RjJEMUM0NDVENTI5QzMwMTVGOUZF NTFCMjgwRjAeFw0yNTAyMjAwODA3MDdaFw0yNTAyMjMxMDA2MDdaMDMxMTAvBgNV BAMTKENFQzlBQ0EzQTRBMENBNjQ1NjVBRkQxMzNCNDg4MjlDNDJFQjgzMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ8MO9afx93i8jRdfm2Hu+7GgV 9QekWFQrfTnssy056mOwbNN5KEDaQCpBt6qbDqgR6DkK+NdMdh3/Kwg8YKHozKWx 8/fZUi3FOdmaFK0XlDyoFmQ/8Z1ZXY83+ZURhEud69icQ1kEpN0xKxHthgTW3PIG 56RlmbZ5qsypriuKoTHCTYOIeNrGdQyZcNSpn2aiafVCvFdS5+GradM5gD4oJOu4 g64sKmi8UhOImsT7BALRUPFlxUVUOdZaD/7Zq6RsiFOKypg6zpV6ryfe9HjljUbR 0fJYAOs1HbGb8NtI4SEE54KZMFK+WPdy9ajjT8IUIFx/687Veg1kWu4m+F43AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzsmso6SgymRWWv0TO0iCnELrgy0wHwYDVR0j BBgwFoAUD0S/JY118tHERdUpwwFfn+UbKA8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTNkZTNlYy00ZDNjLTQ0MDItYTdiOC04YTFiOTYyMjZlNzUvMC8wRjQ0QkYyNThE NzVGMkQxQzQ0NUQ1MjlDMzAxNUY5RkU1MUIyODBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMEY0NEJGMjU4RDc1RjJEMUM0NDVENTI5QzMwMTVGOUZFNTFC MjgwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTEzZGUzZWMtNGQzYy00NDAyLWE3 YjgtOGExYjk2MjI2ZTc1LzAvMEY0NEJGMjU4RDc1RjJEMUM0NDVENTI5QzMwMTVG OUZFNTFCMjgwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAN/BfrwTRakSeYRhQTUsN30iBtc+slCuQPFF /uczxHFe7CfyBV1xD316NVTgXIcfslx04CRI/szGEgPeV9lga0nFuWk6h3bPHVp4 YwsUlG7ttJ/C3+LT2L0YNTixC8089nxtM3TGiBglSJecqbEnLXd388VUIyFilM0q Rx2dcHQ09Ww3wMYO5UkyUnVwEPRezAoADJghE/oGlYJjvxkyklwG9Aq2oRCPJ08c TPJw3hFXWnfyWYZyZN9LBWzcPJndRARyR1iRVN2Vaonr8lDoTn/oqBDOW0d2R3QI Acirx8MNZYcguZJCdfZ2ppX77WTSlQOUQFmu3U/jHG/nH/F21sY= -----END CERTIFICATE-----Generated at Sat Feb 22 04:27:24 2025 by rpki-client