$ rpki-client -vvf repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft File: ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft (raw, json) Hash identifier: 6T0mIyTQ15EKzaYbNEWJiGLCKiK896bv6P0MJvScgfc= Subject key identifier: 09:47:9A:DF:C6:15:0C:C3:EF:65:75:7E:31:60:0B:E3:0F:64:86:79 Authority key identifier: ED:7A:48:EA:D1:0D:1F:E9:7C:7E:F2:3A:A6:EA:2A:D6:55:BF:B0:AF Certificate issuer: /CN=ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF Certificate serial: 02E6696A02CE0F4A9E27DAD73107F3A2D81FE92E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft Manifest number: 01CA Signing time: Mon 17 Feb 2025 21:21:28 +0000 Manifest this update: Mon 17 Feb 2025 21:16:28 +0000 Manifest next update: Fri 21 Feb 2025 02:06:28 +0000 Files and hashes: 1: ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.crl (hash: JAxBGo6HNwv6iZtWxm28CmhUnuEagCGrPa9ixSbm8Ao=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.crl rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Feb 2025 02:06:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:e6:69:6a:02:ce:0f:4a:9e:27:da:d7:31:07:f3:a2:d8:1f:e9:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF Validity Not Before: Feb 17 21:16:28 2025 GMT Not After : Feb 21 02:06:28 2025 GMT Subject: CN=09479ADFC6150CC3EF65757E31600BE30F648679 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b9:0e:73:da:fb:f8:37:e5:b8:2b:4a:3e:70: 1f:ee:e2:11:18:dd:c7:7c:9b:97:c3:f0:1b:49:c3: b1:ce:8f:d2:6b:2a:65:a0:52:75:87:59:9e:ad:ee: 7b:62:13:23:5b:95:de:9f:8a:3c:95:37:f5:af:bd: b4:45:a8:95:9b:bf:57:1f:ac:e8:a3:f8:06:d0:86: d3:3c:4c:1e:8f:a0:ac:19:a1:60:d4:d2:f4:07:ff: da:6f:6c:7f:a0:57:48:75:9d:55:8a:56:aa:71:12: 22:4d:2a:7b:10:3c:ff:9b:03:35:a3:30:fa:53:47: 49:4e:11:6a:76:bb:fc:42:21:fd:60:de:76:e4:cf: 1c:57:fc:b7:3d:a7:10:36:52:4e:9b:27:42:46:1c: 5a:52:ea:89:77:f4:72:bf:b2:f5:6c:c2:de:81:58: 33:a3:e1:d7:06:c7:bf:29:51:2a:14:10:1d:93:b8: 6f:4a:f3:32:4b:e1:59:54:fb:3b:cf:e4:33:71:ee: 26:bc:4f:fe:4a:aa:aa:79:5b:4e:90:96:f2:51:c9: ae:71:2f:63:7e:40:be:59:33:b7:a5:be:72:01:61: 69:e6:78:57:fa:98:51:83:d6:c8:52:ff:95:c2:90: 08:85:35:7d:f0:63:08:d2:87:b0:41:c5:5f:e8:c2: 10:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:47:9A:DF:C6:15:0C:C3:EF:65:75:7E:31:60:0B:E3:0F:64:86:79 X509v3 Authority Key Identifier: keyid:ED:7A:48:EA:D1:0D:1F:E9:7C:7E:F2:3A:A6:EA:2A:D6:55:BF:B0:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:3b:b4:c7:8b:52:2e:d1:a8:73:52:f8:5e:16:3b:d0:16:0c: bf:34:1d:86:77:e8:7d:d2:6e:87:9a:60:90:a7:60:65:73:ed: bf:a8:55:e4:10:54:7e:1f:a0:84:a9:a3:e7:6e:b2:e3:8a:9b: 20:c5:c4:4e:8f:47:8a:6f:86:aa:ee:8f:81:19:2e:92:a3:da: 17:c4:54:a7:a8:5c:36:a6:01:a3:85:d6:08:e8:86:eb:fc:67: 48:41:dc:6d:92:34:96:81:25:51:8f:8d:29:98:d5:e4:1f:00: 67:c6:06:93:b4:22:cf:48:46:77:69:6a:af:a6:c9:fe:e2:77: 45:1b:0a:c3:8c:3b:cc:77:7a:29:02:11:66:6e:82:c6:ad:5a: a3:9b:63:dc:6d:b0:12:34:88:72:a6:4f:a8:82:bf:92:9d:0b: 69:99:27:b9:6c:39:2c:0d:0c:f8:92:76:ea:59:2f:f1:dd:16: a8:12:af:f4:69:70:8d:30:1c:3e:77:9e:2e:da:ef:5a:e7:6e: 14:f2:29:b2:10:bf:27:70:f7:42:61:61:94:8b:6a:b5:8b:f1: 26:48:ff:ea:90:5b:69:51:dc:88:f3:7e:76:87:18:52:10:0a: 93:a0:30:f6:56:f5:d7:2b:6c:82:69:94:c5:a9:03:6b:9d:61: f1:f6:ae:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAuZpagLOD0qeJ9rXMQfzotgf6S4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQ3QTQ4RUFEMTBEMUZFOTdDN0VGMjNBQTZFQTJBRDY1 NUJGQjBBRjAeFw0yNTAyMTcyMTE2MjhaFw0yNTAyMjEwMjA2MjhaMDMxMTAvBgNV BAMTKDA5NDc5QURGQzYxNTBDQzNFRjY1NzU3RTMxNjAwQkUzMEY2NDg2NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiuQ5z2vv4N+W4K0o+cB/u4hEY 3cd8m5fD8BtJw7HOj9JrKmWgUnWHWZ6t7ntiEyNbld6fijyVN/WvvbRFqJWbv1cf rOij+AbQhtM8TB6PoKwZoWDU0vQH/9pvbH+gV0h1nVWKVqpxEiJNKnsQPP+bAzWj MPpTR0lOEWp2u/xCIf1g3nbkzxxX/Lc9pxA2Uk6bJ0JGHFpS6ol39HK/svVswt6B WDOj4dcGx78pUSoUEB2TuG9K8zJL4VlU+zvP5DNx7ia8T/5Kqqp5W06QlvJRya5x L2N+QL5ZM7elvnIBYWnmeFf6mFGD1shS/5XCkAiFNX3wYwjSh7BBxV/owhBRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCUea38YVDMPvZXV+MWAL4w9khnkwHwYDVR0j BBgwFoAU7XpI6tENH+l8fvI6puoq1lW/sK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NDMzZTM0NC1lODE5LTQ0MzgtYjhjYS0xZjU4YzNkNTI3Y2IvMC9FRDdBNDhFQUQx MEQxRkU5N0M3RUYyM0FBNkVBMkFENjU1QkZCMEFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUQ3QTQ4RUFEMTBEMUZFOTdDN0VGMjNBQTZFQTJBRDY1NUJG QjBBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzQzM2UzNDQtZTgxOS00NDM4LWI4 Y2EtMWY1OGMzZDUyN2NiLzAvRUQ3QTQ4RUFEMTBEMUZFOTdDN0VGMjNBQTZFQTJB RDY1NUJGQjBBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF07tMeLUi7RqHNS+F4WO9AWDL80HYZ36H3S boeaYJCnYGVz7b+oVeQQVH4foISpo+dusuOKmyDFxE6PR4pvhqruj4EZLpKj2hfE VKeoXDamAaOF1gjohuv8Z0hB3G2SNJaBJVGPjSmY1eQfAGfGBpO0Is9IRndpaq+m yf7id0UbCsOMO8x3eikCEWZugsatWqObY9xtsBI0iHKmT6iCv5KdC2mZJ7lsOSwN DPiSdupZL/HdFqgSr/RpcI0wHD53ni7a71rnbhTyKbIQvydw90JhYZSLarWL8SZI /+qQW2lR3IjzfnaHGFIQCpOgMPZW9dcrbIJplMWpA2udYfH2rsY= -----END CERTIFICATE-----Generated at Wed Feb 19 22:15:44 2025 by rpki-client