$ rpki-client -vvf repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft File: 1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft (raw, json) Hash identifier: xQal2KFuKnpXBnnsQtilqtljpyXouCpYkkcvrVeyx6M= Subject key identifier: 10:42:74:8B:5B:92:FE:7A:BA:E4:49:37:AA:92:5E:26:4D:1B:CB:17 Authority key identifier: 1D:02:4B:7D:F6:A4:F5:42:13:C5:0C:40:5A:E1:E3:7B:85:21:B4:9A Certificate issuer: /CN=1D024B7DF6A4F54213C50C405AE1E37B8521B49A Certificate serial: 11C836A4B4D8D6E4D83E619D88A218A194EE287A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft Manifest number: 26 Signing time: Fri 21 Feb 2025 02:51:11 +0000 Manifest this update: Fri 21 Feb 2025 02:46:11 +0000 Manifest next update: Mon 24 Feb 2025 11:59:11 +0000 Files and hashes: 1: 1D024B7DF6A4F54213C50C405AE1E37B8521B49A.crl (hash: byxm6km3QBCae00G/EUWJLgP7ITSfADCZw7gBrwcZWA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.crl rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 24 Feb 2025 11:59:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:c8:36:a4:b4:d8:d6:e4:d8:3e:61:9d:88:a2:18:a1:94:ee:28:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D024B7DF6A4F54213C50C405AE1E37B8521B49A Validity Not Before: Feb 21 02:46:11 2025 GMT Not After : Feb 24 11:59:11 2025 GMT Subject: CN=1042748B5B92FE7ABAE44937AA925E264D1BCB17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:5f:c8:94:46:11:93:52:98:60:94:42:d7:4c: 02:a1:8f:e2:4c:40:7c:da:7e:23:23:55:86:f6:cb: b9:c1:8d:7e:ef:d7:94:48:3e:02:2f:91:da:cd:a4: da:99:28:e8:5c:f2:3a:4b:a4:e4:f6:06:5b:d8:68: a3:de:c3:a5:26:5e:41:99:30:98:a5:7d:2d:43:aa: 12:b7:b8:a4:19:c7:c6:74:25:8a:05:13:ea:48:66: 82:47:e0:00:c4:d2:5a:59:c9:5e:88:38:dd:fb:82: 78:47:1a:ba:a0:59:42:58:5a:30:f5:33:a0:85:f8: 4e:16:46:58:f2:74:cf:6b:44:d9:4f:53:72:4a:1e: 53:1c:fc:53:7d:42:8c:ce:7c:c8:31:8f:f9:d5:46: 38:09:74:56:27:12:40:df:aa:9b:3d:23:cc:f7:5c: 8f:84:c3:58:67:23:bb:0e:af:ad:8b:a0:69:8a:64: 84:33:2b:6a:56:94:04:91:88:65:10:4c:64:65:86: b2:12:9c:b8:df:2c:b9:0e:1e:0f:74:98:81:d9:da: 13:35:a0:1c:12:1c:4f:fc:23:5b:8c:0d:ba:cf:6d: 00:99:59:0c:09:d7:3c:64:ba:86:ab:e2:b2:5a:99: 55:11:de:8e:92:db:76:be:52:54:03:e6:f8:ee:de: 51:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:42:74:8B:5B:92:FE:7A:BA:E4:49:37:AA:92:5E:26:4D:1B:CB:17 X509v3 Authority Key Identifier: keyid:1D:02:4B:7D:F6:A4:F5:42:13:C5:0C:40:5A:E1:E3:7B:85:21:B4:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dc:d7:ac:a4:d9:a5:d1:d9:83:7c:99:2f:77:fa:77:05:b4:44: 4a:de:be:a9:0c:ba:b5:d9:6e:50:1b:fe:94:48:8f:b8:d7:b6: 1b:39:0b:81:0a:0b:d4:8e:19:cf:fa:43:21:35:5d:f9:2b:42: b2:a7:b6:d2:94:0f:86:a4:42:a5:0d:22:d2:4e:15:1f:9c:1b: 4b:10:1b:c0:93:09:74:7b:b4:ad:7a:b8:c4:1c:10:d8:80:be: 19:ca:94:58:7e:0f:4c:3d:a5:f8:85:d7:8d:53:c1:e0:19:dd: f6:02:7d:b0:9c:3e:a2:de:5b:d9:eb:d5:31:dc:aa:62:99:14: a1:9c:af:64:de:8a:8d:58:b3:15:92:25:3c:f3:7f:b4:a1:46: aa:b2:59:c6:0a:79:61:42:b7:1c:ba:72:4a:74:ca:48:70:8f: 8a:1f:bd:0b:be:5b:fe:fe:52:44:92:fc:c6:6b:85:41:24:9a: 6c:d4:32:a0:9b:3b:4d:02:75:a8:ac:57:19:b0:e2:78:18:87: 32:d4:a2:cb:25:c8:96:1c:38:e1:b2:cd:f3:08:54:7e:6d:61: 5a:39:a2:48:d8:51:26:04:2d:26:7a:9f:04:5a:f0:5f:a0:e0: 3b:43:a2:20:50:38:1a:8e:b4:e5:68:82:c8:0d:1c:50:4f:0e: f7:8b:5d:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEcg2pLTY1uTYPmGdiKIYoZTuKHowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQwMjRCN0RGNkE0RjU0MjEzQzUwQzQwNUFFMUUzN0I4 NTIxQjQ5QTAeFw0yNTAyMjEwMjQ2MTFaFw0yNTAyMjQxMTU5MTFaMDMxMTAvBgNV BAMTKDEwNDI3NDhCNUI5MkZFN0FCQUU0NDkzN0FBOTI1RTI2NEQxQkNCMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoX8iURhGTUphglELXTAKhj+JM QHzafiMjVYb2y7nBjX7v15RIPgIvkdrNpNqZKOhc8jpLpOT2BlvYaKPew6UmXkGZ MJilfS1DqhK3uKQZx8Z0JYoFE+pIZoJH4ADE0lpZyV6ION37gnhHGrqgWUJYWjD1 M6CF+E4WRljydM9rRNlPU3JKHlMc/FN9QozOfMgxj/nVRjgJdFYnEkDfqps9I8z3 XI+Ew1hnI7sOr62LoGmKZIQzK2pWlASRiGUQTGRlhrISnLjfLLkOHg90mIHZ2hM1 oBwSHE/8I1uMDbrPbQCZWQwJ1zxkuoar4rJamVUR3o6S23a+UlQD5vju3lHxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEEJ0i1uS/nq65Ek3qpJeJk0byxcwHwYDVR0j BBgwFoAUHQJLffak9UITxQxAWuHje4UhtJowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTNkZTNlYy00ZDNjLTQ0MDItYTdiOC04YTFiOTYyMjZlNzUvMS8xRDAyNEI3REY2 QTRGNTQyMTNDNTBDNDA1QUUxRTM3Qjg1MjFCNDlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQwMjRCN0RGNkE0RjU0MjEzQzUwQzQwNUFFMUUzN0I4NTIx QjQ5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTEzZGUzZWMtNGQzYy00NDAyLWE3 YjgtOGExYjk2MjI2ZTc1LzEvMUQwMjRCN0RGNkE0RjU0MjEzQzUwQzQwNUFFMUUz N0I4NTIxQjQ5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANzXrKTZpdHZg3yZL3f6dwW0RErevqkMurXZ blAb/pRIj7jXths5C4EKC9SOGc/6QyE1XfkrQrKnttKUD4akQqUNItJOFR+cG0sQ G8CTCXR7tK16uMQcENiAvhnKlFh+D0w9pfiF141TweAZ3fYCfbCcPqLeW9nr1THc qmKZFKGcr2Teio1YsxWSJTzzf7ShRqqyWcYKeWFCtxy6ckp0ykhwj4ofvQu+W/7+ UkSS/MZrhUEkmmzUMqCbO00CdaisVxmw4ngYhzLUosslyJYcOOGyzfMIVH5tYVo5 okjYUSYELSZ6nwRa8F+g4DtDoiBQOBqOtOVogsgNHFBPDveLXVA= -----END CERTIFICATE-----Generated at Sat Feb 22 04:56:29 2025 by rpki-client