$ rpki-client -vvf repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft File: 2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft (raw, json) Hash identifier: B5tjd5M/E7OUpm13kRjwjpd3vJY1FIYI6uik02vdecw= Subject key identifier: 9D:AE:6F:85:C0:52:5D:D9:76:84:75:FB:FB:2C:0E:DB:EB:C6:4F:14 Authority key identifier: 2A:57:5A:DD:64:4E:97:D6:1D:2E:BF:FF:2A:23:05:6B:78:EF:AE:6C Certificate issuer: /CN=2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C Certificate serial: 1DD329212DE9A57AAF16B33434BFE814A2310D2C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft Manifest number: 7B Signing time: Mon 14 Apr 2025 07:41:37 +0000 Manifest this update: Mon 14 Apr 2025 07:36:37 +0000 Manifest next update: Thu 17 Apr 2025 19:11:37 +0000 Files and hashes: 1: 2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.crl (hash: aPsY3mHTIadafLt7w3BAV3qWOwT3xNKlL8qR1OYFalc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.crl rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 22:10:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:d3:29:21:2d:e9:a5:7a:af:16:b3:34:34:bf:e8:14:a2:31:0d:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C Validity Not Before: Apr 14 07:36:37 2025 GMT Not After : Apr 17 19:11:37 2025 GMT Subject: CN=9DAE6F85C0525DD9768475FBFB2C0EDBEBC64F14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:02:b8:84:2f:1d:a2:b4:4b:ea:d7:f8:5b:f7: 65:63:59:a2:82:10:59:4a:b1:f8:f2:e6:33:79:c0: ee:77:d9:a7:9d:e6:28:5e:1a:b1:89:86:51:68:7a: 06:ea:37:7a:6a:6d:13:54:52:fd:f2:71:fc:0e:11: 50:c9:c2:bd:3f:3c:d7:d6:08:88:6a:02:59:4a:96: df:cf:d0:e0:fe:f0:ef:04:e8:d6:ff:82:cc:2d:04: c7:fa:d8:86:3c:82:3a:4f:32:97:84:29:77:3c:dd: 5a:f6:2b:3f:c1:d2:d7:94:a5:31:09:02:c4:ad:d4: 4c:49:7e:ea:b1:7b:46:3a:82:fa:38:67:1a:31:2f: ea:f5:94:31:4d:fa:d2:7a:71:f1:4e:40:7d:07:a2: 6d:df:bb:71:d0:1c:16:90:cc:39:b9:5f:76:0f:15: a3:8d:cd:94:dd:8b:3c:ec:e2:d5:2b:7a:89:0f:98: ac:7c:69:40:02:1b:43:7a:e4:6c:1b:d8:bb:6f:40: 3b:c3:03:c1:37:02:bb:c5:74:f0:ad:0b:e1:00:14: 69:80:e5:1e:95:fd:c8:f3:c3:1f:5f:c8:8a:39:a9: 5b:3f:29:c4:10:74:c7:30:a3:bb:4b:8e:9e:c3:8b: e5:50:3c:6e:6f:58:6a:2b:f8:27:8a:d1:44:f3:c7: 7e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:AE:6F:85:C0:52:5D:D9:76:84:75:FB:FB:2C:0E:DB:EB:C6:4F:14 X509v3 Authority Key Identifier: keyid:2A:57:5A:DD:64:4E:97:D6:1D:2E:BF:FF:2A:23:05:6B:78:EF:AE:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:0f:e9:7e:ff:a4:3f:34:0d:19:05:2a:7f:83:7e:79:1b:36: 7d:99:ad:5d:9c:65:3f:06:6e:5c:f7:32:fe:1b:fd:1c:89:73: fa:37:d6:64:cb:ee:c5:b0:63:4c:d6:3f:6b:26:b5:8b:f1:0b: 37:58:f0:4b:89:52:38:c2:83:66:5a:30:5d:6d:6a:29:76:28: 2c:fe:b2:5c:26:7b:88:f8:58:ce:3a:da:f3:d4:4a:8d:39:bc: c7:86:84:bc:5b:d9:7f:55:b8:03:52:60:c0:c8:84:e4:15:ad: 1b:1c:63:e0:de:09:1c:e6:45:b2:22:0c:40:bc:a7:28:d1:56: 49:5c:87:50:f7:aa:18:21:b1:d1:f0:29:17:fb:43:ff:c2:c4: 70:e2:3f:23:39:fd:0e:f7:e0:54:db:3c:1f:85:21:a1:ca:59: be:72:5b:63:60:e7:a1:33:55:6e:21:77:03:95:f4:f7:66:b8: cc:58:23:5c:33:03:50:7e:2c:54:8c:8e:28:df:5b:0f:09:7d: fc:91:5d:1f:67:56:b4:e5:62:bf:fd:23:2a:67:78:75:2e:bd: 95:26:2d:02:6a:76:1e:db:21:75:33:2e:1e:10:c0:a5:46:82: 6f:09:15:71:ed:0c:9a:bf:86:99:63:9f:e6:91:13:7c:10:aa: a2:ae:4e:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHdMpIS3ppXqvFrM0NL/oFKIxDSwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE1NzVBREQ2NDRFOTdENjFEMkVCRkZGMkEyMzA1NkI3 OEVGQUU2QzAeFw0yNTA0MTQwNzM2MzdaFw0yNTA0MTcxOTExMzdaMDMxMTAvBgNV BAMTKDlEQUU2Rjg1QzA1MjVERDk3Njg0NzVGQkZCMkMwRURCRUJDNjRGMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPAriELx2itEvq1/hb92VjWaKC EFlKsfjy5jN5wO532aed5iheGrGJhlFoegbqN3pqbRNUUv3ycfwOEVDJwr0/PNfW CIhqAllKlt/P0OD+8O8E6Nb/gswtBMf62IY8gjpPMpeEKXc83Vr2Kz/B0teUpTEJ AsSt1ExJfuqxe0Y6gvo4ZxoxL+r1lDFN+tJ6cfFOQH0Hom3fu3HQHBaQzDm5X3YP FaONzZTdizzs4tUreokPmKx8aUACG0N65Gwb2LtvQDvDA8E3ArvFdPCtC+EAFGmA 5R6V/cjzwx9fyIo5qVs/KcQQdMcwo7tLjp7Di+VQPG5vWGor+CeK0UTzx37HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUna5vhcBSXdl2hHX7+ywO2+vGTxQwHwYDVR0j BBgwFoAUKlda3WROl9YdLr//KiMFa3jvrmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDM1NGMxYi02NzdlLTQxZDYtYWIwZi1lOTZlZGZkOTI5NTcvMC8yQTU3NUFERDY0 NEU5N0Q2MUQyRUJGRkYyQTIzMDU2Qjc4RUZBRTZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkE1NzVBREQ2NDRFOTdENjFEMkVCRkZGMkEyMzA1NkI3OEVG QUU2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmQzNTRjMWItNjc3ZS00MWQ2LWFi MGYtZTk2ZWRmZDkyOTU3LzAvMkE1NzVBREQ2NDRFOTdENjFEMkVCRkZGMkEyMzA1 NkI3OEVGQUU2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG4P6X7/pD80DRkFKn+DfnkbNn2ZrV2cZT8G blz3Mv4b/RyJc/o31mTL7sWwY0zWP2smtYvxCzdY8EuJUjjCg2ZaMF1tail2KCz+ slwme4j4WM462vPUSo05vMeGhLxb2X9VuANSYMDIhOQVrRscY+DeCRzmRbIiDEC8 pyjRVklch1D3qhghsdHwKRf7Q//CxHDiPyM5/Q734FTbPB+FIaHKWb5yW2Ng56Ez VW4hdwOV9PdmuMxYI1wzA1B+LFSMjijfWw8JffyRXR9nVrTlYr/9IypneHUuvZUm LQJqdh7bIXUzLh4QwKVGgm8JFXHtDJq/hpljn+aRE3wQqqKuTj4= -----END CERTIFICATE-----Generated at Tue Apr 15 05:17:02 2025 by rpki-client