$ rpki-client -vvf repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.mft File: 9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.mft (raw, json) Hash identifier: R7ZU9fSyWLSQNAkOXgHI4XlSKlEeDO7w3ntPZ1a6eQU= Subject key identifier: 64:88:9E:25:34:B9:F6:E4:B4:F0:01:5C:E2:18:58:79:87:25:CA:4D Authority key identifier: 9F:5F:18:EC:02:2F:5E:04:65:72:CD:5F:5C:C4:21:FA:9D:AF:FA:EA Certificate issuer: /CN=9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA Certificate serial: 7FC59B8FDDE37F1AB0F1B6205F398E6E78988908 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.mft Manifest number: 33 Signing time: Fri 18 Apr 2025 13:10:03 +0000 Manifest this update: Fri 18 Apr 2025 13:05:03 +0000 Manifest next update: Mon 21 Apr 2025 14:22:03 +0000 Files and hashes: 1: 9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.crl (hash: hIa8kuhYOabi6rTOwJ+p3MGB6PIXKC6V5rCkARRUJt8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.crl rsync://repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 14:22:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:c5:9b:8f:dd:e3:7f:1a:b0:f1:b6:20:5f:39:8e:6e:78:98:89:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA Validity Not Before: Apr 18 13:05:03 2025 GMT Not After : Apr 21 14:22:03 2025 GMT Subject: CN=64889E2534B9F6E4B4F0015CE21858798725CA4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:30:19:24:ca:d2:91:81:7e:78:9e:77:6a:2e: ca:7f:33:ac:7e:c6:b3:16:e3:02:15:bf:22:7f:8a: 67:cf:d5:fa:d7:5e:b2:41:61:87:42:cf:9a:8d:3b: 3c:ff:4d:0b:d0:4e:17:19:4b:51:6e:15:79:88:04: 1d:c3:28:c7:b9:0b:1c:a3:e9:b1:e2:b0:64:56:80: 94:49:32:ee:12:f8:8e:c2:4d:c8:8a:31:dc:04:f6: ab:a8:51:10:ac:c5:d0:6c:f2:ed:a0:60:e7:65:3b: fb:05:25:2a:ee:bf:6d:58:63:e7:f5:0c:35:9d:e2: 30:83:0f:e6:18:50:45:b8:2f:e7:60:79:ce:de:de: 34:a9:29:b3:94:4f:39:45:42:5d:65:32:b3:c7:05: c9:6b:2c:67:86:8e:1e:f0:f9:32:30:54:bf:13:f2: 9f:a4:6f:21:67:54:eb:52:d9:44:2c:c9:90:f6:1a: e7:9e:51:a6:62:b2:12:15:5c:68:49:f0:16:55:9c: eb:d6:1e:58:d9:45:9e:1a:f5:a9:5f:0b:fb:4f:41: 4e:5f:7f:c3:c7:c1:6c:52:03:83:14:70:2f:81:a1: 3a:38:06:52:3a:eb:1e:4d:ee:b7:d1:d7:09:e3:66: 41:89:cd:80:8e:9b:a9:41:69:dd:11:5c:b3:e0:af: 43:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:88:9E:25:34:B9:F6:E4:B4:F0:01:5C:E2:18:58:79:87:25:CA:4D X509v3 Authority Key Identifier: keyid:9F:5F:18:EC:02:2F:5E:04:65:72:CD:5F:5C:C4:21:FA:9D:AF:FA:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:c0:4d:a8:91:12:55:76:59:4d:69:90:fd:f0:2f:38:c3:70: 83:c7:15:27:5f:4e:a3:df:89:c3:5b:93:80:b2:4f:e7:d4:4c: 2a:44:05:fe:f1:6f:69:cd:1b:27:b4:d2:82:08:f6:44:ef:e0: b3:1c:0f:71:05:b5:ff:4d:2f:b6:95:ec:65:59:aa:03:9f:f5: fe:d2:00:37:b5:46:6f:64:ff:b2:ef:10:1f:18:cd:11:1e:b0: 79:19:3d:ce:67:dd:57:6b:c1:20:fd:dc:f1:4d:d7:de:5d:72: 78:5c:2c:2f:1a:92:26:be:cd:9b:f4:96:ad:3d:aa:fc:30:3d: 41:e6:4c:9a:92:b4:4c:b2:89:62:87:97:ad:4e:40:88:b1:dc: 4b:f5:e4:1e:d3:cf:bb:c5:03:cf:f3:cf:ac:26:5d:9e:00:9a: 43:2f:97:99:b1:13:e3:ba:b8:4f:10:62:e5:ad:b2:d6:73:97: d8:22:6a:7f:8e:cb:f3:c9:c4:9c:e9:d7:d0:ed:43:50:27:b3: 20:86:0f:1f:bc:38:51:a9:0a:ab:0b:0e:61:55:f3:90:06:7b: 6e:0b:55:0c:3c:13:98:15:3f:91:d9:ba:cf:65:4a:1c:06:26: 7e:47:6f:1a:0f:fd:4f:25:c2:05:be:bd:95:30:59:76:c0:10: fa:b8:75:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf8Wbj93jfxqw8bYgXzmObniYiQgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY1RjE4RUMwMjJGNUUwNDY1NzJDRDVGNUNDNDIxRkE5 REFGRkFFQTAeFw0yNTA0MTgxMzA1MDNaFw0yNTA0MjExNDIyMDNaMDMxMTAvBgNV BAMTKDY0ODg5RTI1MzRCOUY2RTRCNEYwMDE1Q0UyMTg1ODc5ODcyNUNBNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4MBkkytKRgX54nndqLsp/M6x+ xrMW4wIVvyJ/imfP1frXXrJBYYdCz5qNOzz/TQvQThcZS1FuFXmIBB3DKMe5Cxyj 6bHisGRWgJRJMu4S+I7CTciKMdwE9quoURCsxdBs8u2gYOdlO/sFJSruv21YY+f1 DDWd4jCDD+YYUEW4L+dgec7e3jSpKbOUTzlFQl1lMrPHBclrLGeGjh7w+TIwVL8T 8p+kbyFnVOtS2UQsyZD2GueeUaZishIVXGhJ8BZVnOvWHljZRZ4a9alfC/tPQU5f f8PHwWxSA4MUcC+BoTo4BlI66x5N7rfR1wnjZkGJzYCOm6lBad0RXLPgr0P3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZIieJTS59uS08AFc4hhYeYclyk0wHwYDVR0j BBgwFoAUn18Y7AIvXgRlcs1fXMQh+p2v+uowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MmFlNWUyMS0wOGNjLTRjYTQtYjk5Yy01ZmY1YTBkNDY0OTAvMC85RjVGMThFQzAy MkY1RTA0NjU3MkNENUY1Q0M0MjFGQTlEQUZGQUVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY1RjE4RUMwMjJGNUUwNDY1NzJDRDVGNUNDNDIxRkE5REFG RkFFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjJhZTVlMjEtMDhjYy00Y2E0LWI5 OWMtNWZmNWEwZDQ2NDkwLzAvOUY1RjE4RUMwMjJGNUUwNDY1NzJDRDVGNUNDNDIx RkE5REFGRkFFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEXATaiRElV2WU1pkP3wLzjDcIPHFSdfTqPf icNbk4CyT+fUTCpEBf7xb2nNGye00oII9kTv4LMcD3EFtf9NL7aV7GVZqgOf9f7S ADe1Rm9k/7LvEB8YzREesHkZPc5n3VdrwSD93PFN195dcnhcLC8akia+zZv0lq09 qvwwPUHmTJqStEyyiWKHl61OQIix3Ev15B7Tz7vFA8/zz6wmXZ4AmkMvl5mxE+O6 uE8QYuWtstZzl9gian+Oy/PJxJzp19DtQ1AnsyCGDx+8OFGpCqsLDmFV85AGe24L VQw8E5gVP5HZus9lShwGJn5HbxoP/U8lwgW+vZUwWXbAEPq4dew= -----END CERTIFICATE-----Generated at Sun Apr 20 03:06:03 2025 by rpki-client