$ rpki-client -vvf repo-rpki.idnic.net/repo/c31328cb-dd48-43bb-b31f-07eb8030c8f4/0/92FFDECB7B4BC69043740B159B29A018D07273F1.mft File: 92FFDECB7B4BC69043740B159B29A018D07273F1.mft (raw, json) Hash identifier: Aik4a2aHf+WpR6NEMWyMp5deZ4Szrd+CsDkrrNMauEk= Subject key identifier: 3E:29:D8:CF:9E:EA:93:53:2C:A8:FD:A8:B3:C1:C1:08:C8:69:40:63 Authority key identifier: 92:FF:DE:CB:7B:4B:C6:90:43:74:0B:15:9B:29:A0:18:D0:72:73:F1 Certificate issuer: /CN=92FFDECB7B4BC69043740B159B29A018D07273F1 Certificate serial: 2AD41C87C48868320738E4ED959EB7BB9DB776D4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/92FFDECB7B4BC69043740B159B29A018D07273F1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c31328cb-dd48-43bb-b31f-07eb8030c8f4/0/92FFDECB7B4BC69043740B159B29A018D07273F1.mft Manifest number: CE Signing time: Sat 19 Apr 2025 05:02:05 +0000 Manifest this update: Sat 19 Apr 2025 04:57:05 +0000 Manifest next update: Tue 22 Apr 2025 09:11:05 +0000 Files and hashes: 1: 92FFDECB7B4BC69043740B159B29A018D07273F1.crl (hash: IR+tfc+k/N+3lhJmNg1FjLWnB6Am9BcKy1SmYvJeWuQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c31328cb-dd48-43bb-b31f-07eb8030c8f4/0/92FFDECB7B4BC69043740B159B29A018D07273F1.crl rsync://repo-rpki.idnic.net/repo/c31328cb-dd48-43bb-b31f-07eb8030c8f4/0/92FFDECB7B4BC69043740B159B29A018D07273F1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/92FFDECB7B4BC69043740B159B29A018D07273F1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 09:11:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:d4:1c:87:c4:88:68:32:07:38:e4:ed:95:9e:b7:bb:9d:b7:76:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92FFDECB7B4BC69043740B159B29A018D07273F1 Validity Not Before: Apr 19 04:57:05 2025 GMT Not After : Apr 22 09:11:05 2025 GMT Subject: CN=3E29D8CF9EEA93532CA8FDA8B3C1C108C8694063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:70:f9:75:41:31:83:34:f7:24:c0:1d:f5:0c: 37:33:a8:e1:5c:78:6f:cf:39:6c:fe:24:c9:d4:f0: ca:19:1c:b0:73:1d:93:81:b6:7f:25:37:7b:dd:29: 98:9f:1b:c5:17:b0:a0:fc:76:7b:67:1f:d5:d1:4c: 8f:fd:1f:09:ff:9a:83:33:29:2d:2c:2b:4d:9b:da: c5:ff:01:61:92:e1:42:8a:e8:dc:ea:18:96:6c:be: 48:ed:ef:61:bb:fe:aa:d0:b3:d8:43:ae:7b:64:ad: 72:f9:05:b5:7e:c3:5c:0c:7f:91:cb:a8:f8:7b:75: 31:46:0b:a2:4e:5e:5f:c5:8d:cf:5a:3d:93:9c:57: 81:27:87:47:4a:97:3e:b9:8b:33:4b:25:0d:30:4f: 24:e8:16:36:67:00:a3:4a:05:fa:f8:cb:76:3f:de: f8:94:4a:91:6f:e7:1e:29:9f:c8:74:92:ac:4b:eb: 7b:b1:86:cc:2a:8a:80:df:d1:91:86:1c:5c:0c:d2: e7:9e:80:92:df:c4:05:56:9f:45:da:bb:09:fc:f9: 87:c3:47:12:79:95:9f:b2:f7:34:db:fe:78:bf:f3: bc:9b:03:b3:23:51:97:f3:c7:e8:7a:2a:b2:09:b1: a6:82:cf:c5:2b:61:9d:83:7b:1d:dc:4f:da:25:0c: 54:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:29:D8:CF:9E:EA:93:53:2C:A8:FD:A8:B3:C1:C1:08:C8:69:40:63 X509v3 Authority Key Identifier: keyid:92:FF:DE:CB:7B:4B:C6:90:43:74:0B:15:9B:29:A0:18:D0:72:73:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c31328cb-dd48-43bb-b31f-07eb8030c8f4/0/92FFDECB7B4BC69043740B159B29A018D07273F1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/92FFDECB7B4BC69043740B159B29A018D07273F1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c31328cb-dd48-43bb-b31f-07eb8030c8f4/0/92FFDECB7B4BC69043740B159B29A018D07273F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:c3:14:0d:83:73:0a:57:7d:99:46:80:db:46:a1:0b:cd:e6: b2:be:6c:a3:46:42:79:b5:b1:eb:d4:06:e1:7d:e4:3b:73:cc: a6:32:a7:b9:2e:4b:8e:e0:d6:26:4b:37:45:0b:07:28:5a:a1: fc:25:bc:d9:73:7e:0e:bc:e6:05:3c:31:e9:e4:e2:4d:cb:6b: 9f:69:48:63:6c:3b:8f:fc:6a:22:74:b6:c2:72:c5:d2:d6:25: 55:35:c5:21:33:1f:df:03:52:35:40:73:6d:13:8f:37:11:e2: 0f:5f:d0:dc:6a:b0:79:82:f8:41:53:2f:18:47:b7:42:1f:68: d7:e4:fa:cf:d0:f5:6b:21:92:87:04:b2:8c:cc:ee:37:6c:a6: 43:9e:d3:ee:e5:16:d1:5f:26:31:7d:05:8e:be:db:83:b6:64: 17:ab:7f:30:fc:71:63:f2:ac:bd:b9:f7:bd:f6:8e:17:33:99: 08:99:78:e7:3d:92:88:60:ef:9b:ab:bd:11:b4:ac:ac:81:22: 82:8e:f8:14:4c:92:7a:3d:d2:28:95:26:22:db:52:d2:ea:66: fc:ac:33:cd:bf:62:e1:fa:0d:72:2e:41:88:84:90:8a:8d:a9: 65:69:7b:b3:68:90:78:0a:61:03:da:bb:b5:f8:61:34:e3:ca: 6f:ca:47:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKtQch8SIaDIHOOTtlZ63u523dtQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJGRkRFQ0I3QjRCQzY5MDQzNzQwQjE1OUIyOUEwMThE MDcyNzNGMTAeFw0yNTA0MTkwNDU3MDVaFw0yNTA0MjIwOTExMDVaMDMxMTAvBgNV BAMTKDNFMjlEOENGOUVFQTkzNTMyQ0E4RkRBOEIzQzFDMTA4Qzg2OTQwNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGcPl1QTGDNPckwB31DDczqOFc eG/POWz+JMnU8MoZHLBzHZOBtn8lN3vdKZifG8UXsKD8dntnH9XRTI/9Hwn/moMz KS0sK02b2sX/AWGS4UKK6NzqGJZsvkjt72G7/qrQs9hDrntkrXL5BbV+w1wMf5HL qPh7dTFGC6JOXl/Fjc9aPZOcV4Enh0dKlz65izNLJQ0wTyToFjZnAKNKBfr4y3Y/ 3viUSpFv5x4pn8h0kqxL63uxhswqioDf0ZGGHFwM0ueegJLfxAVWn0Xauwn8+YfD RxJ5lZ+y9zTb/ni/87ybA7MjUZfzx+h6KrIJsaaCz8UrYZ2Dex3cT9olDFRfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPinYz57qk1MsqP2os8HBCMhpQGMwHwYDVR0j BBgwFoAUkv/ey3tLxpBDdAsVmymgGNByc/EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzEzMjhjYi1kZDQ4LTQzYmItYjMxZi0wN2ViODAzMGM4ZjQvMC85MkZGREVDQjdC NEJDNjkwNDM3NDBCMTU5QjI5QTAxOEQwNzI3M0YxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTJGRkRFQ0I3QjRCQzY5MDQzNzQwQjE1OUIyOUEwMThEMDcy NzNGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzMxMzI4Y2ItZGQ0OC00M2JiLWIz MWYtMDdlYjgwMzBjOGY0LzAvOTJGRkRFQ0I3QjRCQzY5MDQzNzQwQjE1OUIyOUEw MThEMDcyNzNGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMLDFA2DcwpXfZlGgNtGoQvN5rK+bKNGQnm1 sevUBuF95DtzzKYyp7kuS47g1iZLN0ULByhaofwlvNlzfg685gU8Menk4k3La59p SGNsO4/8aiJ0tsJyxdLWJVU1xSEzH98DUjVAc20TjzcR4g9f0NxqsHmC+EFTLxhH t0IfaNfk+s/Q9WshkocEsozM7jdspkOe0+7lFtFfJjF9BY6+24O2ZBerfzD8cWPy rL259732jhczmQiZeOc9kohg75urvRG0rKyBIoKO+BRMkno90iiVJiLbUtLqZvys M82/YuH6DXIuQYiEkIqNqWVpe7NokHgKYQPau7X4YTTjym/KR5U= -----END CERTIFICATE-----Generated at Sun Apr 20 13:22:42 2025 by rpki-client