$ rpki-client -vvf repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.mft File: C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.mft (raw, json) Hash identifier: /yvOc+lR6QT59B0e2DXubK17BkAmNC1Dc0g9SOQDUTw= Subject key identifier: 96:2A:4F:F3:FE:B4:13:E1:ED:D2:64:8A:58:8B:71:96:68:C2:A9:D2 Authority key identifier: C4:47:AF:C4:54:7D:CF:16:A2:4E:96:FF:B3:A2:FD:98:CA:42:79:6A Certificate issuer: /CN=C447AFC4547DCF16A24E96FFB3A2FD98CA42796A Certificate serial: 4AF1AB31950387EA73D2234D7112A2979B1225E9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.mft Manifest number: 6D Signing time: Mon 17 Feb 2025 05:41:19 +0000 Manifest this update: Mon 17 Feb 2025 05:36:19 +0000 Manifest next update: Thu 20 Feb 2025 16:32:19 +0000 Files and hashes: 1: C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.crl (hash: u+ejKgD2GUeK2T13znrfh8r+Rc1XHJI7v6JJXuYdwM4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.crl rsync://repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Feb 2025 16:32:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:f1:ab:31:95:03:87:ea:73:d2:23:4d:71:12:a2:97:9b:12:25:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C447AFC4547DCF16A24E96FFB3A2FD98CA42796A Validity Not Before: Feb 17 05:36:19 2025 GMT Not After : Feb 20 16:32:19 2025 GMT Subject: CN=962A4FF3FEB413E1EDD2648A588B719668C2A9D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:48:75:d9:7b:6d:47:0c:a0:dd:d7:de:a7:b8: 67:65:0c:c3:57:be:51:7e:bd:e2:39:ca:d6:67:ca: a4:bc:2a:98:07:12:87:1f:f2:65:88:fc:ac:66:8f: 2a:8f:8b:34:aa:7a:ac:d6:8c:55:c3:23:e1:a3:8b: c3:0a:97:de:04:72:bb:50:e5:07:a0:56:5c:31:65: 7a:54:14:66:61:41:b2:89:07:d0:d9:9e:f1:b2:d7: e0:33:45:39:46:23:01:b3:57:1f:7d:52:db:5d:2e: a2:57:10:66:2c:8c:79:2d:b6:da:30:9c:e7:40:f6: 2d:be:8f:19:73:53:b8:0d:0f:cc:3d:08:5b:7a:2e: b3:c9:1f:1f:30:dd:60:83:70:4a:e1:a0:23:81:be: 10:30:d1:52:73:04:2e:c0:a4:f2:3b:a1:c1:21:00: f3:5c:c2:62:f8:b8:5f:61:11:b8:c5:c0:93:3b:fd: 0c:78:8d:21:fb:48:a1:0e:2e:e4:57:5d:44:ab:fa: fd:c6:bf:2b:86:c9:ec:52:82:50:89:2d:aa:1f:34: 7f:67:e0:95:43:e7:8f:35:c7:b1:cb:c0:26:95:2c: 45:0b:21:b6:34:f2:57:ba:aa:a9:9e:d1:82:4b:99: 98:34:6e:2f:3a:8e:4e:ec:c9:c1:d8:b6:20:9f:32: 65:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:2A:4F:F3:FE:B4:13:E1:ED:D2:64:8A:58:8B:71:96:68:C2:A9:D2 X509v3 Authority Key Identifier: keyid:C4:47:AF:C4:54:7D:CF:16:A2:4E:96:FF:B3:A2:FD:98:CA:42:79:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:3e:cc:19:1a:1f:c5:31:91:e6:8b:cd:14:dc:a0:ea:c8:16: 59:6e:e9:25:e3:3f:d7:fa:ea:a5:7f:89:3c:9a:f0:80:54:b3: 0a:90:8e:25:1e:07:f5:68:d6:72:47:c1:72:54:36:9b:c8:e2: db:69:5d:41:9a:70:ab:07:9f:34:21:16:db:bb:87:9a:ae:84: 92:90:a8:fd:97:03:2f:b5:49:8d:c0:93:83:5b:ca:c1:61:29: c5:b3:a5:2b:65:27:5a:84:6b:b9:4d:5f:91:64:d0:02:0e:e6: 79:9d:a4:1e:23:4b:17:ad:67:0e:16:85:77:f8:48:95:aa:05: 75:db:aa:d4:c2:1b:43:0e:c1:6f:86:8c:2a:a8:2c:b8:67:37: b4:b3:cf:90:1e:22:50:02:be:08:8d:06:23:30:44:7e:ff:b4: b0:81:86:01:02:0b:85:ee:72:ab:b5:a2:24:ef:23:85:43:f6: b7:46:97:c2:fc:e1:3a:cb:d6:e7:84:70:cf:5c:9e:e6:18:b2: dd:b8:63:f2:cf:4e:45:be:55:c9:f7:f0:fd:02:b1:d1:7e:45: 62:c9:79:73:47:e7:70:d1:15:8b:56:e4:eb:73:8e:c0:9a:67: 5a:2b:a6:05:50:ee:09:d4:81:08:1f:f0:6e:ec:d4:73:ab:f8: 3b:cc:78:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSvGrMZUDh+pz0iNNcRKil5sSJekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ0N0FGQzQ1NDdEQ0YxNkEyNEU5NkZGQjNBMkZEOThD QTQyNzk2QTAeFw0yNTAyMTcwNTM2MTlaFw0yNTAyMjAxNjMyMTlaMDMxMTAvBgNV BAMTKDk2MkE0RkYzRkVCNDEzRTFFREQyNjQ4QTU4OEI3MTk2NjhDMkE5RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClSHXZe21HDKDd196nuGdlDMNX vlF+veI5ytZnyqS8KpgHEocf8mWI/KxmjyqPizSqeqzWjFXDI+Gji8MKl94EcrtQ 5QegVlwxZXpUFGZhQbKJB9DZnvGy1+AzRTlGIwGzVx99UttdLqJXEGYsjHktttow nOdA9i2+jxlzU7gND8w9CFt6LrPJHx8w3WCDcErhoCOBvhAw0VJzBC7ApPI7ocEh APNcwmL4uF9hEbjFwJM7/Qx4jSH7SKEOLuRXXUSr+v3GvyuGyexSglCJLaofNH9n 4JVD5481x7HLwCaVLEULIbY08le6qqme0YJLmZg0bi86jk7sycHYtiCfMmX7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlipP8/60E+Ht0mSKWItxlmjCqdIwHwYDVR0j BBgwFoAUxEevxFR9zxaiTpb/s6L9mMpCeWowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzVhOWRkZi1jMTA5LTRmYzEtYTMwZC04ZjA0YjgzMzgxYmUvMC9DNDQ3QUZDNDU0 N0RDRjE2QTI0RTk2RkZCM0EyRkQ5OENBNDI3OTZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzQ0N0FGQzQ1NDdEQ0YxNkEyNEU5NkZGQjNBMkZEOThDQTQy Nzk2QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzM1YTlkZGYtYzEwOS00ZmMxLWEz MGQtOGYwNGI4MzM4MWJlLzAvQzQ0N0FGQzQ1NDdEQ0YxNkEyNEU5NkZGQjNBMkZE OThDQTQyNzk2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALU+zBkaH8UxkeaLzRTcoOrIFllu6SXjP9f6 6qV/iTya8IBUswqQjiUeB/Vo1nJHwXJUNpvI4ttpXUGacKsHnzQhFtu7h5quhJKQ qP2XAy+1SY3Ak4NbysFhKcWzpStlJ1qEa7lNX5Fk0AIO5nmdpB4jSxetZw4WhXf4 SJWqBXXbqtTCG0MOwW+GjCqoLLhnN7Szz5AeIlACvgiNBiMwRH7/tLCBhgECC4Xu cqu1oiTvI4VD9rdGl8L84TrL1ueEcM9cnuYYst24Y/LPTkW+Vcn38P0CsdF+RWLJ eXNH53DRFYtW5OtzjsCaZ1orpgVQ7gnUgQgf8G7s1HOr+DvMeP0= -----END CERTIFICATE-----Generated at Wed Feb 19 22:25:50 2025 by rpki-client