$ rpki-client -vvf repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.mft File: 8902A1A2A87110119F8477271D6D224973A35F04.mft (raw, json) Hash identifier: 3e0zctsDqqzmbGxDOJ8u46kVe8Z1gzRHEjUAblxZ4aU= Subject key identifier: A2:80:5A:92:4E:18:F3:81:B0:31:A0:90:B6:F5:A0:19:1A:8C:A1:32 Authority key identifier: 89:02:A1:A2:A8:71:10:11:9F:84:77:27:1D:6D:22:49:73:A3:5F:04 Certificate issuer: /CN=8902A1A2A87110119F8477271D6D224973A35F04 Certificate serial: 53BC1680881BE9FE9EEA0E82DB74E7CD857224D3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8902A1A2A87110119F8477271D6D224973A35F04.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.mft Manifest number: 0248 Signing time: Fri 04 Apr 2025 11:00:02 +0000 Manifest this update: Fri 04 Apr 2025 10:55:02 +0000 Manifest next update: Mon 07 Apr 2025 11:16:02 +0000 Files and hashes: 1: 8902A1A2A87110119F8477271D6D224973A35F04.crl (hash: CUPkNvp1yik5tRj7JfF5W7ledixAHf8kewipJvW4pWQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.crl rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8902A1A2A87110119F8477271D6D224973A35F04.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 11:16:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:bc:16:80:88:1b:e9:fe:9e:ea:0e:82:db:74:e7:cd:85:72:24:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8902A1A2A87110119F8477271D6D224973A35F04 Validity Not Before: Apr 4 10:55:02 2025 GMT Not After : Apr 7 11:16:02 2025 GMT Subject: CN=A2805A924E18F381B031A090B6F5A0191A8CA132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c2:82:32:bc:b3:36:77:07:8d:87:fc:29:a3: 0a:38:eb:11:8b:49:7a:33:78:68:98:f4:a8:c9:b5: b0:d7:5d:2e:47:7a:9d:a6:c8:20:af:08:73:c4:54: 0e:58:46:09:ed:c7:65:98:b1:34:bc:24:5b:46:b7: a1:55:ca:9c:28:e8:1f:56:b5:53:3e:6e:a3:f9:7c: 42:d6:d2:d9:88:50:ca:a1:df:21:f3:33:04:b9:ce: bc:df:80:e2:fc:39:1d:0a:1c:c3:c8:a5:24:7c:d3: 19:f2:b9:b1:d0:9f:b4:57:f0:d4:86:c3:65:75:16: c4:2d:90:5c:b2:42:d0:cf:99:f8:8d:94:6e:f1:04: ef:72:0c:b0:95:48:e7:a0:c7:d0:12:c9:a6:17:22: 7f:a6:6d:03:e1:26:c7:60:26:26:a1:67:7e:5c:42: a7:a4:f7:a1:7a:90:5f:91:87:d8:90:aa:87:0c:c6: be:03:c1:92:2e:0c:a5:ee:41:db:f0:c5:96:93:da: a6:4e:29:3a:05:20:6a:6b:13:33:3a:10:b3:aa:28: e9:d6:47:35:0c:86:02:c8:cb:75:61:96:bc:41:a3: ef:0e:9c:d2:60:5e:eb:72:f7:2b:0c:d1:51:86:3d: d1:41:e7:f7:b2:6f:63:e2:fd:43:9f:ae:ce:ce:9a: 98:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:80:5A:92:4E:18:F3:81:B0:31:A0:90:B6:F5:A0:19:1A:8C:A1:32 X509v3 Authority Key Identifier: keyid:89:02:A1:A2:A8:71:10:11:9F:84:77:27:1D:6D:22:49:73:A3:5F:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8902A1A2A87110119F8477271D6D224973A35F04.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:56:81:25:97:85:95:a9:a0:d5:27:b1:f3:d5:6b:f0:44:80: 22:72:3a:3f:8b:54:86:b7:1c:ff:37:4e:22:f9:c9:2c:46:7f: 8c:e1:8a:39:e9:78:8a:a0:e9:1e:c6:69:49:91:99:98:8f:34: b8:8c:95:be:4a:b2:3a:f1:42:e0:8d:0b:31:44:21:b7:41:15: 60:71:8d:05:8e:51:ba:e8:1f:f2:fb:27:41:30:8c:94:6c:de: 46:78:d6:e5:4a:e2:fe:d3:45:3e:6f:ec:55:4d:b3:80:66:0a: 46:a6:11:e0:cc:81:97:7a:f7:24:5b:9c:38:28:69:b3:88:1e: f4:f0:1e:42:17:81:5d:6a:8f:9f:c5:c1:8a:63:2e:c7:2d:7b: ad:f3:b6:9c:68:66:74:3d:22:a4:8f:2b:a7:75:41:0f:d3:6b: 33:9a:5a:6a:0e:44:e3:db:c8:ef:7b:fb:8d:68:d6:fd:f5:e8: 4e:8e:3c:cc:61:eb:b9:f4:fd:bb:51:27:62:8a:a1:ac:a7:93: 41:c2:36:ff:99:5f:50:e7:db:c0:8b:25:27:35:19:bc:3e:9a: a8:9f:c7:ef:47:ac:07:4a:89:0a:6c:07:66:7d:82:01:7a:6d: 82:ba:e6:f3:d8:77:4b:cb:40:ef:07:ba:2e:18:e0:50:48:e1: 28:ee:30:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU7wWgIgb6f6e6g6C23TnzYVyJNMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkwMkExQTJBODcxMTAxMTlGODQ3NzI3MUQ2RDIyNDk3 M0EzNUYwNDAeFw0yNTA0MDQxMDU1MDJaFw0yNTA0MDcxMTE2MDJaMDMxMTAvBgNV BAMTKEEyODA1QTkyNEUxOEYzODFCMDMxQTA5MEI2RjVBMDE5MUE4Q0ExMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCswoIyvLM2dweNh/wpowo46xGL SXozeGiY9KjJtbDXXS5Hep2myCCvCHPEVA5YRgntx2WYsTS8JFtGt6FVypwo6B9W tVM+bqP5fELW0tmIUMqh3yHzMwS5zrzfgOL8OR0KHMPIpSR80xnyubHQn7RX8NSG w2V1FsQtkFyyQtDPmfiNlG7xBO9yDLCVSOegx9ASyaYXIn+mbQPhJsdgJiahZ35c Qqek96F6kF+Rh9iQqocMxr4DwZIuDKXuQdvwxZaT2qZOKToFIGprEzM6ELOqKOnW RzUMhgLIy3VhlrxBo+8OnNJgXuty9ysM0VGGPdFB5/eyb2Pi/UOfrs7Ompi5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUooBakk4Y84GwMaCQtvWgGRqMoTIwHwYDVR0j BBgwFoAUiQKhoqhxEBGfhHcnHW0iSXOjXwQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OTY1ZGQzOS00OGQwLTQ1NzgtOGZlNS02NmQ5NTMzODRlNTAvMC84OTAyQTFBMkE4 NzExMDExOUY4NDc3MjcxRDZEMjI0OTczQTM1RjA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODkwMkExQTJBODcxMTAxMTlGODQ3NzI3MUQ2RDIyNDk3M0Ez NUYwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzk2NWRkMzktNDhkMC00NTc4LThm ZTUtNjZkOTUzMzg0ZTUwLzAvODkwMkExQTJBODcxMTAxMTlGODQ3NzI3MUQ2RDIy NDk3M0EzNUYwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGxWgSWXhZWpoNUnsfPVa/BEgCJyOj+LVIa3 HP83TiL5ySxGf4zhijnpeIqg6R7GaUmRmZiPNLiMlb5KsjrxQuCNCzFEIbdBFWBx jQWOUbroH/L7J0EwjJRs3kZ41uVK4v7TRT5v7FVNs4BmCkamEeDMgZd69yRbnDgo abOIHvTwHkIXgV1qj5/FwYpjLscte63ztpxoZnQ9IqSPK6d1QQ/TazOaWmoOROPb yO97+41o1v316E6OPMxh67n0/btRJ2KKoaynk0HCNv+ZX1Dn28CLJSc1Gbw+mqif x+9HrAdKiQpsB2Z9ggF6bYK65vPYd0vLQO8Hui4Y4FBI4SjuMIU= -----END CERTIFICATE-----Generated at Sat Apr 5 21:22:00 2025 by rpki-client