$ rpki-client -vvf repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft File: 104297C14501204E355A97BD8ED42B1FB7C82B01.mft (raw, json) Hash identifier: tSCn9Wdo/XRdSIwVWFa000P4yHOMeevwX6BFtOVk5WY= Subject key identifier: 0E:03:44:38:DF:03:14:DC:6E:AC:D0:66:15:BA:60:40:15:E5:47:32 Authority key identifier: 10:42:97:C1:45:01:20:4E:35:5A:97:BD:8E:D4:2B:1F:B7:C8:2B:01 Certificate issuer: /CN=104297C14501204E355A97BD8ED42B1FB7C82B01 Certificate serial: 3EFFE83A5CE5B2016B380D8F5A847620521569D2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104297C14501204E355A97BD8ED42B1FB7C82B01.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft Manifest number: 01EB Signing time: Thu 03 Apr 2025 22:31:41 +0000 Manifest this update: Thu 03 Apr 2025 22:26:41 +0000 Manifest next update: Mon 07 Apr 2025 09:20:41 +0000 Files and hashes: 1: 104297C14501204E355A97BD8ED42B1FB7C82B01.crl (hash: QasqvUtZvmANb2EzNK78o14dGe4iFSeothkgK+f+5XQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.crl rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104297C14501204E355A97BD8ED42B1FB7C82B01.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 09:20:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:ff:e8:3a:5c:e5:b2:01:6b:38:0d:8f:5a:84:76:20:52:15:69:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=104297C14501204E355A97BD8ED42B1FB7C82B01 Validity Not Before: Apr 3 22:26:41 2025 GMT Not After : Apr 7 09:20:41 2025 GMT Subject: CN=0E034438DF0314DC6EACD06615BA604015E54732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a0:d9:24:4f:be:32:61:c9:fb:27:9f:ec:85: 4b:03:57:fd:b7:2c:fd:cd:ab:bc:bc:e6:ef:42:87: 55:bb:39:36:95:80:d0:0c:fd:ca:52:8c:08:70:36: 8e:81:96:1c:48:89:b0:a5:7f:71:55:19:1e:0a:4f: 0f:31:b2:79:f2:ba:83:f3:45:72:ac:91:d7:af:95: 9c:14:8f:a0:db:de:6c:98:3b:ac:73:48:52:c4:cd: f3:20:dc:3d:f9:f3:fb:3e:0f:79:a3:ea:78:87:15: 7b:b9:ab:ec:e4:30:f9:cc:ab:33:02:42:1b:21:f3: 07:fd:6c:61:94:11:ec:9b:1c:34:e0:62:82:aa:72: 29:af:56:c6:80:9e:2b:2c:e9:1c:22:f9:54:4a:26: 0e:29:31:f0:51:f6:24:f5:9a:09:b6:df:b7:cb:b0: a9:03:98:f8:aa:7b:50:9b:c3:d9:8d:f8:36:07:27: 7d:36:2f:24:78:3e:ee:47:f6:76:7d:46:fb:e1:c2: 5f:48:15:df:43:73:f2:f9:39:4c:5d:10:0a:18:fe: 22:9d:6f:5b:48:30:6a:2a:4e:64:b6:77:50:84:64: 61:30:2d:b6:8e:a9:ab:cd:9b:fb:15:e5:70:2d:73: 10:2d:fd:24:73:3c:d0:9c:ab:ce:41:74:66:e5:2f: f0:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:03:44:38:DF:03:14:DC:6E:AC:D0:66:15:BA:60:40:15:E5:47:32 X509v3 Authority Key Identifier: keyid:10:42:97:C1:45:01:20:4E:35:5A:97:BD:8E:D4:2B:1F:B7:C8:2B:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104297C14501204E355A97BD8ED42B1FB7C82B01.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:86:3e:d7:4c:f1:5b:c3:f0:42:a3:f5:d5:c0:b2:32:b5:a5: b3:b7:94:11:6a:21:ef:0d:f1:fe:e6:b6:d6:99:49:f0:95:ef: 89:de:95:0f:79:b6:fd:48:34:3e:10:69:61:7b:96:09:d0:87: cc:59:25:62:e5:0f:67:41:e0:d3:6e:5d:94:42:07:97:6d:a8: dc:ee:9f:be:5b:ee:32:46:e9:8e:ce:fc:dc:04:78:57:99:f0: a2:44:28:5f:ca:e0:27:82:4d:cb:a3:e8:a1:04:16:0e:ee:8d: 6f:ec:63:dd:20:30:33:b1:b5:5c:e9:01:7a:1f:4e:98:24:14: b7:22:2f:a5:1a:d9:c0:06:25:af:4d:79:fb:4c:0f:82:eb:23: 8e:df:e6:7f:5e:6f:04:a3:25:34:e8:cb:32:6b:44:27:2e:fd: 2a:dc:65:47:48:7b:86:0d:20:11:d8:4f:0b:bb:d5:fe:8f:d7: f0:41:d5:ba:19:79:24:06:70:5a:b4:86:39:e4:fa:14:6b:d8: a0:71:22:5b:0e:62:61:60:3f:fd:b9:e0:3d:b7:c6:13:34:4e: fd:cb:00:d9:70:d6:98:0f:40:7b:2d:d1:1c:2d:d9:c0:84:cd: 22:9f:46:bf:cd:70:a7:6a:f0:8c:9f:5f:48:66:1a:de:04:c7: f2:45:61:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPv/oOlzlsgFrOA2PWoR2IFIVadIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA0Mjk3QzE0NTAxMjA0RTM1NUE5N0JEOEVENDJCMUZC N0M4MkIwMTAeFw0yNTA0MDMyMjI2NDFaFw0yNTA0MDcwOTIwNDFaMDMxMTAvBgNV BAMTKDBFMDM0NDM4REYwMzE0REM2RUFDRDA2NjE1QkE2MDQwMTVFNTQ3MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBoNkkT74yYcn7J5/shUsDV/23 LP3Nq7y85u9Ch1W7OTaVgNAM/cpSjAhwNo6BlhxIibClf3FVGR4KTw8xsnnyuoPz RXKskdevlZwUj6Db3myYO6xzSFLEzfMg3D358/s+D3mj6niHFXu5q+zkMPnMqzMC Qhsh8wf9bGGUEeybHDTgYoKqcimvVsaAniss6Rwi+VRKJg4pMfBR9iT1mgm237fL sKkDmPiqe1Cbw9mN+DYHJ302LyR4Pu5H9nZ9Rvvhwl9IFd9Dc/L5OUxdEAoY/iKd b1tIMGoqTmS2d1CEZGEwLbaOqavNm/sV5XAtcxAt/SRzPNCcq85BdGblL/A9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDgNEON8DFNxurNBmFbpgQBXlRzIwHwYDVR0j BBgwFoAUEEKXwUUBIE41Wpe9jtQrH7fIKwEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h M2ZjMWRhMy04YmYzLTRmZjItOTc3Yy0yM2NiMjczYWQyNDgvMC8xMDQyOTdDMTQ1 MDEyMDRFMzU1QTk3QkQ4RUQ0MkIxRkI3QzgyQjAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA0Mjk3QzE0NTAxMjA0RTM1NUE5N0JEOEVENDJCMUZCN0M4 MkIwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTNmYzFkYTMtOGJmMy00ZmYyLTk3 N2MtMjNjYjI3M2FkMjQ4LzAvMTA0Mjk3QzE0NTAxMjA0RTM1NUE5N0JEOEVENDJC MUZCN0M4MkIwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJCGPtdM8VvD8EKj9dXAsjK1pbO3lBFqIe8N 8f7mttaZSfCV74nelQ95tv1IND4QaWF7lgnQh8xZJWLlD2dB4NNuXZRCB5dtqNzu n75b7jJG6Y7O/NwEeFeZ8KJEKF/K4CeCTcuj6KEEFg7ujW/sY90gMDOxtVzpAXof TpgkFLciL6Ua2cAGJa9NeftMD4LrI47f5n9ebwSjJTToyzJrRCcu/SrcZUdIe4YN IBHYTwu71f6P1/BB1boZeSQGcFq0hjnk+hRr2KBxIlsOYmFgP/254D23xhM0Tv3L ANlw1pgPQHst0Rwt2cCEzSKfRr/NcKdq8IyfX0hmGt4Ex/JFYUc= -----END CERTIFICATE-----Generated at Sat Apr 5 16:45:10 2025 by rpki-client