$ rpki-client -vvf repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft File: 0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft (raw, json) Hash identifier: 3V5MWCxoW/5dewy03RG9TFgUhtQgv453YwIKuNAgHPs= Subject key identifier: 09:5B:27:F8:0C:67:6D:6D:B9:9F:A6:A8:15:E4:A1:C5:D2:D6:8D:ED Authority key identifier: 0F:BA:D9:2F:48:DF:15:47:7E:4D:D9:3C:DC:7A:52:77:FE:93:A8:EB Certificate issuer: /CN=0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB Certificate serial: 57E28090C6346F30BFAD31F4695BDC6BA7F943BF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft Manifest number: 4F Signing time: Fri 04 Apr 2025 18:01:01 +0000 Manifest this update: Fri 04 Apr 2025 17:56:01 +0000 Manifest next update: Mon 07 Apr 2025 22:49:01 +0000 Files and hashes: 1: 0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.crl (hash: +faIsSfAoo17d6kGiGKt8tTKfcz7142ZeNX8jEkaLwc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.crl rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:e2:80:90:c6:34:6f:30:bf:ad:31:f4:69:5b:dc:6b:a7:f9:43:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB Validity Not Before: Apr 4 17:56:01 2025 GMT Not After : Apr 7 22:49:01 2025 GMT Subject: CN=095B27F80C676D6DB99FA6A815E4A1C5D2D68DED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ff:b5:af:4f:8c:69:01:d7:d7:a1:47:fc:a2: 8f:05:cd:b1:a3:f0:49:c9:0f:70:94:2d:b9:08:fc: d3:07:a7:a3:60:0c:90:9c:d0:8e:6e:cc:c3:ee:b3: 2d:ef:bd:12:43:7c:f9:d9:00:b9:e8:0c:c6:f7:c6: 4a:97:75:61:81:a0:08:2a:2f:fa:e8:b6:21:69:4b: 91:fb:70:20:3a:ec:a0:42:bf:6a:31:b3:c4:98:aa: 78:88:f3:b3:7d:78:75:82:ee:42:34:94:95:b7:a1: 1d:fe:84:f9:29:71:0d:4c:83:99:be:eb:85:c2:b3: 11:f7:ba:5b:77:88:af:6f:1a:d0:62:df:c1:a3:b5: 44:43:3d:8a:a2:bf:e4:b8:93:bf:ee:24:12:4b:f5: c9:39:5e:15:21:60:ce:f5:c8:36:6c:f3:7f:15:0e: e6:62:72:4d:71:5b:0d:50:e6:24:92:67:75:89:e8: 4e:dc:f6:9a:ca:69:62:aa:65:c3:df:36:16:28:2a: 93:e6:3d:0c:a5:9e:52:82:f0:3a:52:4d:08:f4:9c: da:2f:29:af:a6:c6:af:ac:e3:72:69:00:4e:51:25: f1:f7:0c:2b:80:a9:8a:ed:94:e3:b5:45:10:a8:58: e4:75:42:aa:2c:ae:f4:7d:3e:6b:31:c2:57:5e:ed: 19:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:5B:27:F8:0C:67:6D:6D:B9:9F:A6:A8:15:E4:A1:C5:D2:D6:8D:ED X509v3 Authority Key Identifier: keyid:0F:BA:D9:2F:48:DF:15:47:7E:4D:D9:3C:DC:7A:52:77:FE:93:A8:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:b7:d7:57:03:b1:7b:28:a8:6c:e9:4e:b8:69:39:fa:36:e7: 19:d6:92:60:c3:50:ae:6e:40:1b:c2:58:5b:2e:a7:97:1b:f7: 64:66:f7:1f:6f:62:7c:e4:35:5b:7d:b5:3d:6c:6d:04:ae:27: 8a:86:0a:2c:a5:e1:93:ad:84:5f:c3:46:e0:d8:8f:7d:20:c9: 1b:18:dc:bd:e7:e3:31:c6:2c:62:2d:89:5e:52:67:15:94:a4: 46:ab:2b:79:90:6e:5c:a4:57:85:17:66:c8:7e:f8:c5:4a:36: dc:58:7b:31:cf:5b:7c:6b:84:35:22:32:25:24:58:ed:55:95: 45:ec:26:74:a9:92:1e:10:6d:6f:1d:7b:20:32:32:19:3f:83: 77:8b:bf:d5:c0:d0:21:87:31:0c:9b:22:cc:bc:c5:99:8b:7c: 59:cc:a9:85:cb:76:78:c7:d6:c5:db:35:88:01:99:c5:40:89: 3b:c7:bc:2b:78:56:4f:60:8e:ee:6f:b4:20:2a:8c:71:fa:b3: d9:43:65:a9:38:7b:2c:84:e2:6e:b7:4b:e2:bf:ae:ea:14:d9: f6:63:a5:89:29:74:db:b3:e6:7c:73:14:28:0c:fd:ee:b7:8a: bd:f3:d6:ee:52:ba:2a:3c:15:fe:57:db:60:f2:bd:26:ab:e5: 81:7d:06:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV+KAkMY0bzC/rTH0aVvca6f5Q78wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZCQUQ5MkY0OERGMTU0NzdFNEREOTNDREM3QTUyNzdG RTkzQThFQjAeFw0yNTA0MDQxNzU2MDFaFw0yNTA0MDcyMjQ5MDFaMDMxMTAvBgNV BAMTKDA5NUIyN0Y4MEM2NzZENkRCOTlGQTZBODE1RTRBMUM1RDJENjhERUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK/7WvT4xpAdfXoUf8oo8FzbGj 8EnJD3CULbkI/NMHp6NgDJCc0I5uzMPusy3vvRJDfPnZALnoDMb3xkqXdWGBoAgq L/rotiFpS5H7cCA67KBCv2oxs8SYqniI87N9eHWC7kI0lJW3oR3+hPkpcQ1Mg5m+ 64XCsxH3ult3iK9vGtBi38GjtURDPYqiv+S4k7/uJBJL9ck5XhUhYM71yDZs838V DuZick1xWw1Q5iSSZ3WJ6E7c9prKaWKqZcPfNhYoKpPmPQylnlKC8DpSTQj0nNov Ka+mxq+s43JpAE5RJfH3DCuAqYrtlOO1RRCoWOR1QqosrvR9Pmsxwlde7RkDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCVsn+AxnbW25n6aoFeShxdLWje0wHwYDVR0j BBgwFoAUD7rZL0jfFUd+Tdk83HpSd/6TqOswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODFhZjAyMS0xYzAxLTRhMmUtYjVkMy1jMWJiYjE2NTBjNDMvMC8wRkJBRDkyRjQ4 REYxNTQ3N0U0REQ5M0NEQzdBNTI3N0ZFOTNBOEVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZCQUQ5MkY0OERGMTU0NzdFNEREOTNDREM3QTUyNzdGRTkz QThFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzgxYWYwMjEtMWMwMS00YTJlLWI1 ZDMtYzFiYmIxNjUwYzQzLzAvMEZCQUQ5MkY0OERGMTU0NzdFNEREOTNDREM3QTUy NzdGRTkzQThFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADm311cDsXsoqGzpTrhpOfo25xnWkmDDUK5u QBvCWFsup5cb92Rm9x9vYnzkNVt9tT1sbQSuJ4qGCiyl4ZOthF/DRuDYj30gyRsY 3L3n4zHGLGItiV5SZxWUpEarK3mQblykV4UXZsh++MVKNtxYezHPW3xrhDUiMiUk WO1VlUXsJnSpkh4QbW8deyAyMhk/g3eLv9XA0CGHMQybIsy8xZmLfFnMqYXLdnjH 1sXbNYgBmcVAiTvHvCt4Vk9gju5vtCAqjHH6s9lDZak4eyyE4m63S+K/ruoU2fZj pYkpdNuz5nxzFCgM/e63ir3z1u5Suio8Ff5X22DyvSar5YF9Bi0= -----END CERTIFICATE-----Generated at Sat Apr 5 16:38:30 2025 by rpki-client