$ rpki-client -vvf repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft File: 0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft (raw, json) Hash identifier: xm7iY+PRoEznJYJN1ECZsO3FrDOW2oMvfIJCRKSF1tA= Subject key identifier: 74:E1:DD:F8:FF:9B:90:FA:C7:07:9D:C2:FE:D5:B0:6E:FF:FA:63:7D Authority key identifier: 0F:44:BF:25:8D:75:F2:D1:C4:45:D5:29:C3:01:5F:9F:E5:1B:28:0F Certificate issuer: /CN=0F44BF258D75F2D1C445D529C3015F9FE51B280F Certificate serial: 595E6ABFE87013455FF88E1BB8D690ECA5FA9830 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0F44BF258D75F2D1C445D529C3015F9FE51B280F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft Manifest number: 3D Signing time: Sat 19 Apr 2025 01:01:10 +0000 Manifest this update: Sat 19 Apr 2025 00:56:10 +0000 Manifest next update: Tue 22 Apr 2025 03:06:10 +0000 Files and hashes: 1: 0F44BF258D75F2D1C445D529C3015F9FE51B280F.crl (hash: zaiIWeUCYBFnv3IhDKdGM38vMwWG9X9ZY9xjIdjVBsQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.crl rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0F44BF258D75F2D1C445D529C3015F9FE51B280F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 03:06:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:5e:6a:bf:e8:70:13:45:5f:f8:8e:1b:b8:d6:90:ec:a5:fa:98:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F44BF258D75F2D1C445D529C3015F9FE51B280F Validity Not Before: Apr 19 00:56:10 2025 GMT Not After : Apr 22 03:06:10 2025 GMT Subject: CN=74E1DDF8FF9B90FAC7079DC2FED5B06EFFFA637D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:6c:77:cc:ba:ce:3f:06:6f:4e:60:42:8e:49: ef:dc:8d:c4:23:e3:64:27:de:6e:31:dd:ff:c9:c3: 97:05:bb:8e:7f:48:a3:04:a8:9e:f6:bd:77:2d:b7: 46:fc:b3:fb:d1:b0:d5:ec:04:4d:35:f2:d3:a0:57: 19:6d:19:9f:3f:98:ae:09:9f:d6:8b:65:2f:fc:92: fa:78:62:8f:f2:80:0e:55:03:d4:14:ed:9d:29:e2: ca:fc:23:84:f3:f7:83:e7:09:d7:2b:19:09:8c:fd: a3:8e:5a:2e:e0:13:d2:e1:02:67:ce:7f:ef:46:f9: c1:76:f9:09:4d:b8:53:2f:29:56:55:13:4c:14:2b: f9:f1:85:98:bf:5d:22:82:58:2c:a1:5e:09:e8:f1: 5b:10:ad:b0:7c:fd:8b:a3:b0:35:6b:88:b7:49:5f: f4:cf:68:59:ed:fa:cb:86:25:4e:a2:36:cc:02:de: c9:72:15:38:4a:da:da:0f:50:38:b9:a0:0b:70:19: 5e:fb:2b:00:b7:82:b3:86:6d:e6:25:35:18:a1:6a: fb:ae:1a:18:fc:ff:2a:43:6e:33:76:ba:2a:eb:21: c7:09:43:75:4c:ef:ee:3e:b2:17:a4:5f:0e:e6:f5: 90:7f:5c:3d:77:b5:4d:f2:40:0c:3e:06:93:98:34: fe:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:E1:DD:F8:FF:9B:90:FA:C7:07:9D:C2:FE:D5:B0:6E:FF:FA:63:7D X509v3 Authority Key Identifier: keyid:0F:44:BF:25:8D:75:F2:D1:C4:45:D5:29:C3:01:5F:9F:E5:1B:28:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0F44BF258D75F2D1C445D529C3015F9FE51B280F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:69:43:91:19:98:26:b0:00:e7:06:45:75:21:73:59:dc:b2: 1a:8c:90:c7:c3:01:74:88:69:fa:6d:57:23:48:8a:45:0e:b7: 13:92:13:5a:c6:8d:1f:4a:87:89:34:b4:89:80:90:9d:b6:77: c2:5f:0e:bf:83:5d:a9:9a:26:49:f1:ab:e6:de:ce:a5:8f:9c: ac:7a:b2:21:a1:11:65:c5:cd:cf:d9:5c:d3:bb:7c:13:3a:07: 7e:ee:88:79:ff:41:33:da:86:90:5e:fa:22:34:48:42:11:db: 9f:29:fd:07:d4:2e:b1:46:72:28:00:95:e4:eb:8c:a8:21:73: 25:6d:e0:04:e1:c1:fe:14:38:70:e9:b1:9f:b7:41:c4:02:db: 21:da:05:07:d5:95:58:06:75:47:e8:f5:59:f2:56:af:e5:b6: a3:1d:9f:24:80:5f:87:6a:2c:54:7c:d8:54:29:5e:38:63:ef: e9:b2:85:65:33:ad:c8:37:4d:84:6e:7e:af:b3:3e:e2:88:2c: 38:43:11:9d:0d:40:68:74:b0:fe:ed:76:af:65:41:55:9f:5a: 45:b0:9c:27:a9:a9:05:3b:ef:27:00:fe:8f:85:dc:92:6a:cf: 8b:69:37:7c:7c:c1:a7:10:83:0e:b9:91:88:0d:f9:32:32:f6: 48:f2:1a:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWV5qv+hwE0Vf+I4buNaQ7KX6mDAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEY0NEJGMjU4RDc1RjJEMUM0NDVENTI5QzMwMTVGOUZF NTFCMjgwRjAeFw0yNTA0MTkwMDU2MTBaFw0yNTA0MjIwMzA2MTBaMDMxMTAvBgNV BAMTKDc0RTFEREY4RkY5QjkwRkFDNzA3OURDMkZFRDVCMDZFRkZGQTYzN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD+bHfMus4/Bm9OYEKOSe/cjcQj 42Qn3m4x3f/Jw5cFu45/SKMEqJ72vXctt0b8s/vRsNXsBE018tOgVxltGZ8/mK4J n9aLZS/8kvp4Yo/ygA5VA9QU7Z0p4sr8I4Tz94PnCdcrGQmM/aOOWi7gE9LhAmfO f+9G+cF2+QlNuFMvKVZVE0wUK/nxhZi/XSKCWCyhXgno8VsQrbB8/YujsDVriLdJ X/TPaFnt+suGJU6iNswC3slyFThK2toPUDi5oAtwGV77KwC3grOGbeYlNRihavuu Ghj8/ypDbjN2uirrIccJQ3VM7+4+shekXw7m9ZB/XD13tU3yQAw+BpOYNP4vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdOHd+P+bkPrHB53C/tWwbv/6Y30wHwYDVR0j BBgwFoAUD0S/JY118tHERdUpwwFfn+UbKA8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTNkZTNlYy00ZDNjLTQ0MDItYTdiOC04YTFiOTYyMjZlNzUvMC8wRjQ0QkYyNThE NzVGMkQxQzQ0NUQ1MjlDMzAxNUY5RkU1MUIyODBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMEY0NEJGMjU4RDc1RjJEMUM0NDVENTI5QzMwMTVGOUZFNTFC MjgwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTEzZGUzZWMtNGQzYy00NDAyLWE3 YjgtOGExYjk2MjI2ZTc1LzAvMEY0NEJGMjU4RDc1RjJEMUM0NDVENTI5QzMwMTVG OUZFNTFCMjgwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMhpQ5EZmCawAOcGRXUhc1ncshqMkMfDAXSI afptVyNIikUOtxOSE1rGjR9Kh4k0tImAkJ22d8JfDr+DXamaJknxq+bezqWPnKx6 siGhEWXFzc/ZXNO7fBM6B37uiHn/QTPahpBe+iI0SEIR258p/QfULrFGcigAleTr jKghcyVt4AThwf4UOHDpsZ+3QcQC2yHaBQfVlVgGdUfo9VnyVq/ltqMdnySAX4dq LFR82FQpXjhj7+myhWUzrcg3TYRufq+zPuKILDhDEZ0NQGh0sP7tdq9lQVWfWkWw nCepqQU77ycA/o+F3JJqz4tpN3x8wacQgw65kYgN+TIy9kjyGhs= -----END CERTIFICATE-----Generated at Sun Apr 20 03:26:45 2025 by rpki-client