$ rpki-client -vvf repo-rpki.idnic.net/repo/c31328cb-dd48-43bb-b31f-07eb8030c8f4/0/92FFDECB7B4BC69043740B159B29A018D07273F1.mft File: 92FFDECB7B4BC69043740B159B29A018D07273F1.mft (raw, json) Hash identifier: tLSf6ediJ93DoP3OMYiY0jOywPGZASIO4TYgd6wnZpA= Subject key identifier: 47:04:32:9E:70:16:D0:F1:77:6F:3A:95:3D:6F:C8:19:3B:C9:55:B8 Authority key identifier: 92:FF:DE:CB:7B:4B:C6:90:43:74:0B:15:9B:29:A0:18:D0:72:73:F1 Certificate issuer: /CN=92FFDECB7B4BC69043740B159B29A018D07273F1 Certificate serial: 4B2455D9C7BDAA67E94C9064F863EF464147E3C0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/92FFDECB7B4BC69043740B159B29A018D07273F1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c31328cb-dd48-43bb-b31f-07eb8030c8f4/0/92FFDECB7B4BC69043740B159B29A018D07273F1.mft Manifest number: B3 Signing time: Mon 17 Feb 2025 04:52:04 +0000 Manifest this update: Mon 17 Feb 2025 04:47:04 +0000 Manifest next update: Thu 20 Feb 2025 06:41:04 +0000 Files and hashes: 1: 92FFDECB7B4BC69043740B159B29A018D07273F1.crl (hash: 7qNfCAfSU62KBElkYAVBDzYkBaRAFsMg9DZwEwsSjBE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c31328cb-dd48-43bb-b31f-07eb8030c8f4/0/92FFDECB7B4BC69043740B159B29A018D07273F1.crl rsync://repo-rpki.idnic.net/repo/c31328cb-dd48-43bb-b31f-07eb8030c8f4/0/92FFDECB7B4BC69043740B159B29A018D07273F1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/92FFDECB7B4BC69043740B159B29A018D07273F1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Feb 2025 06:41:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:24:55:d9:c7:bd:aa:67:e9:4c:90:64:f8:63:ef:46:41:47:e3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92FFDECB7B4BC69043740B159B29A018D07273F1 Validity Not Before: Feb 17 04:47:04 2025 GMT Not After : Feb 20 06:41:04 2025 GMT Subject: CN=4704329E7016D0F1776F3A953D6FC8193BC955B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f8:f1:6c:7b:6b:b6:e3:9b:41:fa:7b:1a:e4: d2:64:b2:46:66:71:cb:3e:4c:a8:7b:94:6f:4e:e1: bb:86:c8:8f:8d:1e:42:89:a8:75:a0:bc:5c:09:96: 31:8c:7a:27:e8:f4:e4:d8:27:19:b6:12:8a:37:f6: 34:2e:98:85:d5:21:c8:c1:ae:40:9e:e3:77:df:ad: 3d:c0:a3:c9:a7:3e:7d:08:cd:00:90:31:b1:7e:9b: 12:60:42:59:70:28:90:96:1b:30:83:b6:86:a7:50: 71:00:d5:6e:26:cb:c7:24:e0:8b:37:12:d1:33:9f: 83:87:fc:2c:2f:a0:18:a8:c2:fa:fb:4b:5a:81:92: ad:99:21:9b:96:a4:dc:a7:48:02:7d:e8:93:4b:dd: b8:b5:c7:a8:0f:3b:00:e1:98:7e:99:1e:6b:a0:8f: c9:ac:c1:66:78:78:e4:c4:d4:0e:5d:a1:17:8e:ad: 19:a5:ee:0d:26:58:86:c2:e1:24:da:cc:44:b0:be: 58:07:b4:16:3a:1e:ec:d4:0e:0a:ba:ad:a4:b0:d6: ed:45:f1:ec:54:24:2e:09:02:50:04:b0:5c:c9:c9: c2:cc:31:91:08:73:5d:c5:02:dd:55:37:48:bd:c5: 4e:61:0b:33:3a:a8:25:d4:0a:9d:5b:3d:da:fc:25: 65:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:04:32:9E:70:16:D0:F1:77:6F:3A:95:3D:6F:C8:19:3B:C9:55:B8 X509v3 Authority Key Identifier: keyid:92:FF:DE:CB:7B:4B:C6:90:43:74:0B:15:9B:29:A0:18:D0:72:73:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c31328cb-dd48-43bb-b31f-07eb8030c8f4/0/92FFDECB7B4BC69043740B159B29A018D07273F1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/92FFDECB7B4BC69043740B159B29A018D07273F1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c31328cb-dd48-43bb-b31f-07eb8030c8f4/0/92FFDECB7B4BC69043740B159B29A018D07273F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:8d:2e:98:71:e3:ae:12:41:e5:b6:b0:a0:42:81:9b:54:c0: b4:bb:f7:ea:3a:3e:27:9d:93:e5:1e:55:12:3a:40:8a:77:13: 47:8f:22:e8:88:5b:81:2c:e0:57:4e:db:c6:9f:42:28:7d:db: 2f:19:44:2e:37:c5:e0:04:5e:30:de:45:a8:34:48:8f:1f:7f: 89:3d:e2:7f:fb:57:9f:7f:f2:36:c1:4a:eb:a3:06:09:39:20: 16:dd:71:48:e5:f7:1a:85:2b:4b:24:b6:5b:9f:f6:2d:f7:a0: 8d:52:f2:9a:82:72:9a:76:bf:65:b0:30:0e:88:8a:78:c5:f2: 23:a3:5e:25:a1:c4:a6:7b:d2:1f:c9:a0:06:80:2a:d7:bb:19: 4e:32:7c:be:8f:7f:da:3e:40:bf:71:b8:4a:a7:0c:01:cd:96: 9a:e6:7d:1e:9d:e2:12:ce:e3:e8:84:1e:a3:07:c9:5f:95:1e: 42:94:97:7b:73:fc:88:7f:b2:85:f3:92:20:53:c1:5d:00:e3: 9f:7f:7c:e9:f4:c8:31:d8:6c:e7:42:c0:3d:01:3b:33:46:db: c3:b1:53:9d:25:51:52:68:10:96:f5:e8:46:d1:66:12:74:a4: 36:0f:bc:92:78:ff:9d:2a:0a:ca:12:ca:f0:5e:3a:c9:0d:32: 38:21:59:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSyRV2ce9qmfpTJBk+GPvRkFH48AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJGRkRFQ0I3QjRCQzY5MDQzNzQwQjE1OUIyOUEwMThE MDcyNzNGMTAeFw0yNTAyMTcwNDQ3MDRaFw0yNTAyMjAwNjQxMDRaMDMxMTAvBgNV BAMTKDQ3MDQzMjlFNzAxNkQwRjE3NzZGM0E5NTNENkZDODE5M0JDOTU1QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM+PFse2u245tB+nsa5NJkskZm ccs+TKh7lG9O4buGyI+NHkKJqHWgvFwJljGMeifo9OTYJxm2Eoo39jQumIXVIcjB rkCe43ffrT3Ao8mnPn0IzQCQMbF+mxJgQllwKJCWGzCDtoanUHEA1W4my8ck4Is3 EtEzn4OH/CwvoBiowvr7S1qBkq2ZIZuWpNynSAJ96JNL3bi1x6gPOwDhmH6ZHmug j8mswWZ4eOTE1A5doReOrRml7g0mWIbC4STazESwvlgHtBY6HuzUDgq6raSw1u1F 8exUJC4JAlAEsFzJycLMMZEIc13FAt1VN0i9xU5hCzM6qCXUCp1bPdr8JWXnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURwQynnAW0PF3bzqVPW/IGTvJVbgwHwYDVR0j BBgwFoAUkv/ey3tLxpBDdAsVmymgGNByc/EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzEzMjhjYi1kZDQ4LTQzYmItYjMxZi0wN2ViODAzMGM4ZjQvMC85MkZGREVDQjdC NEJDNjkwNDM3NDBCMTU5QjI5QTAxOEQwNzI3M0YxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTJGRkRFQ0I3QjRCQzY5MDQzNzQwQjE1OUIyOUEwMThEMDcy NzNGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzMxMzI4Y2ItZGQ0OC00M2JiLWIz MWYtMDdlYjgwMzBjOGY0LzAvOTJGRkRFQ0I3QjRCQzY5MDQzNzQwQjE1OUIyOUEw MThEMDcyNzNGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEGNLphx464SQeW2sKBCgZtUwLS79+o6Pied k+UeVRI6QIp3E0ePIuiIW4Es4FdO28afQih92y8ZRC43xeAEXjDeRag0SI8ff4k9 4n/7V59/8jbBSuujBgk5IBbdcUjl9xqFK0sktluf9i33oI1S8pqCcpp2v2WwMA6I injF8iOjXiWhxKZ70h/JoAaAKte7GU4yfL6Pf9o+QL9xuEqnDAHNlprmfR6d4hLO 4+iEHqMHyV+VHkKUl3tz/Ih/soXzkiBTwV0A459/fOn0yDHYbOdCwD0BOzNG28Ox U50lUVJoEJb16EbRZhJ0pDYPvJJ4/50qCsoSyvBeOskNMjghWRw= -----END CERTIFICATE-----Generated at Wed Feb 19 22:23:10 2025 by rpki-client