$ rpki-client -vvf repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft File: 4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft (raw, json) Hash identifier: 9yq/qMFejB9/19Zt/t+GWMEUvBVTVNZmwVtMgPZ4GEM= Subject key identifier: D4:58:B0:12:D9:B8:C3:AE:BD:FA:13:58:E6:14:8B:03:CD:C2:F8:62 Authority key identifier: 4B:6A:F7:33:5E:C0:7F:E7:46:BC:2A:36:83:02:43:6E:F6:B1:B9:EB Certificate issuer: /CN=4B6AF7335EC07FE746BC2A368302436EF6B1B9EB Certificate serial: 09208CAFD2DC225E21FADD9EA80C6EA3BE894ACD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft Manifest number: 0450 Signing time: Fri 04 Apr 2025 10:21:24 +0000 Manifest this update: Fri 04 Apr 2025 10:16:24 +0000 Manifest next update: Mon 07 Apr 2025 18:56:24 +0000 Files and hashes: 1: 4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.crl (hash: 6A+j2bQQY8s+kqyPZ8YPMttQYIkcYNQCx6o1BCnWjrk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.crl rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:20:8c:af:d2:dc:22:5e:21:fa:dd:9e:a8:0c:6e:a3:be:89:4a:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B6AF7335EC07FE746BC2A368302436EF6B1B9EB Validity Not Before: Apr 4 10:16:24 2025 GMT Not After : Apr 7 18:56:24 2025 GMT Subject: CN=D458B012D9B8C3AEBDFA1358E6148B03CDC2F862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d2:96:99:4c:13:a0:0f:aa:26:ec:d1:c3:da: e7:b2:79:a9:c5:80:62:16:84:97:ce:34:94:c7:eb: bd:8e:71:51:28:b2:c2:32:1d:c7:98:2d:14:68:15: 1f:58:92:9f:cd:9e:e4:10:46:c1:6b:3f:07:45:8b: 14:c3:f8:e6:43:e9:89:01:fa:65:5d:53:37:e9:43: ed:e4:85:22:21:21:c0:6c:25:73:f8:d1:d1:53:73: a4:71:36:68:ab:d0:16:8e:14:15:af:71:22:53:8a: 2f:0d:6b:f9:aa:2a:d3:42:60:14:6c:f0:5c:44:c8: ff:f5:12:13:18:f4:73:c9:34:18:ad:fb:7a:be:07: 31:72:8b:6a:d5:bd:97:37:68:de:81:2d:18:6f:96: 64:1e:d8:6d:25:ac:e6:f1:6d:39:1c:8d:5b:35:a5: 8c:6d:c4:ef:13:5a:67:e5:6b:d5:85:fb:0e:9f:b3: cb:a9:8e:a4:2f:3d:c4:85:d1:b6:c0:00:9c:a4:46: ee:40:e9:a6:6e:84:cc:55:58:d1:da:39:3e:ec:6a: e9:4f:53:50:eb:cb:85:66:89:2e:70:4e:52:bf:04: c2:e9:38:2b:0e:d1:4a:46:4b:52:74:58:a4:7d:d1: b2:08:eb:3b:b2:4d:bd:ac:2d:49:83:ac:22:a3:d9: db:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:58:B0:12:D9:B8:C3:AE:BD:FA:13:58:E6:14:8B:03:CD:C2:F8:62 X509v3 Authority Key Identifier: keyid:4B:6A:F7:33:5E:C0:7F:E7:46:BC:2A:36:83:02:43:6E:F6:B1:B9:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:4a:6c:39:5e:b2:e0:19:6d:05:ab:c0:13:79:60:dd:3e:f5: 84:ec:8e:ad:c3:ec:7a:6d:4d:28:d7:20:97:da:69:10:4d:24: 68:5d:9d:02:a4:aa:41:11:69:af:23:ed:03:91:33:c9:75:7d: ad:c8:c6:e7:fe:ae:b6:e3:68:8a:88:87:ef:91:b3:e0:c0:9f: b8:cf:22:d6:33:4d:a1:a3:6a:7b:88:f1:fd:80:d3:fd:36:50: e6:82:b6:8e:12:bb:b1:17:22:78:93:bc:f8:12:10:29:ec:a9: 92:fc:a4:ca:94:83:ed:b9:eb:d0:37:68:71:9b:7f:46:af:56: 47:4e:c7:10:fb:8c:cc:60:93:e1:a3:cf:a1:15:6f:b4:14:73: 16:c2:97:6b:3b:9d:f5:35:60:ff:4b:e8:17:5e:83:40:a7:fb: 2d:fa:81:e5:7a:f6:40:95:cd:f8:e9:96:6b:b4:f5:19:07:51: 77:87:79:fe:42:92:a7:d3:13:fb:b6:a8:ec:42:63:fe:7e:0e: 8e:b3:81:6f:fe:bd:f0:b5:0f:72:b1:f1:80:b4:37:e2:7f:b2: 91:a2:9c:3e:24:e2:e2:5f:e9:43:6a:01:98:02:3e:31:1c:c6: e9:cd:ed:a6:90:7b:9c:d1:59:ce:8e:e2:fd:34:27:7f:3d:9f: df:41:77:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCSCMr9LcIl4h+t2eqAxuo76JSs0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEI2QUY3MzM1RUMwN0ZFNzQ2QkMyQTM2ODMwMjQzNkVG NkIxQjlFQjAeFw0yNTA0MDQxMDE2MjRaFw0yNTA0MDcxODU2MjRaMDMxMTAvBgNV BAMTKEQ0NThCMDEyRDlCOEMzQUVCREZBMTM1OEU2MTQ4QjAzQ0RDMkY4NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC10paZTBOgD6om7NHD2ueyeanF gGIWhJfONJTH672OcVEossIyHceYLRRoFR9Ykp/NnuQQRsFrPwdFixTD+OZD6YkB +mVdUzfpQ+3khSIhIcBsJXP40dFTc6RxNmir0BaOFBWvcSJTii8Na/mqKtNCYBRs 8FxEyP/1EhMY9HPJNBit+3q+BzFyi2rVvZc3aN6BLRhvlmQe2G0lrObxbTkcjVs1 pYxtxO8TWmfla9WF+w6fs8upjqQvPcSF0bbAAJykRu5A6aZuhMxVWNHaOT7saulP U1Dry4VmiS5wTlK/BMLpOCsO0UpGS1J0WKR90bII6zuyTb2sLUmDrCKj2duHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1FiwEtm4w669+hNY5hSLA83C+GIwHwYDVR0j BBgwFoAUS2r3M17Af+dGvCo2gwJDbvaxueswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDdjZjIwMi1mNWVjLTQxMDEtODA4NS1jZWI4NmVhNjViM2UvMC80QjZBRjczMzVF QzA3RkU3NDZCQzJBMzY4MzAyNDM2RUY2QjFCOUVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEI2QUY3MzM1RUMwN0ZFNzQ2QkMyQTM2ODMwMjQzNkVGNkIx QjlFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA3Y2YyMDItZjVlYy00MTAxLTgw ODUtY2ViODZlYTY1YjNlLzAvNEI2QUY3MzM1RUMwN0ZFNzQ2QkMyQTM2ODMwMjQz NkVGNkIxQjlFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAERKbDlesuAZbQWrwBN5YN0+9YTsjq3D7Hpt TSjXIJfaaRBNJGhdnQKkqkERaa8j7QORM8l1fa3Ixuf+rrbjaIqIh++Rs+DAn7jP ItYzTaGjanuI8f2A0/02UOaCto4Su7EXIniTvPgSECnsqZL8pMqUg+2569A3aHGb f0avVkdOxxD7jMxgk+Gjz6EVb7QUcxbCl2s7nfU1YP9L6Bdeg0Cn+y36geV69kCV zfjplmu09RkHUXeHef5CkqfTE/u2qOxCY/5+Do6zgW/+vfC1D3Kx8YC0N+J/spGi nD4k4uJf6UNqAZgCPjEcxunN7aaQe5zRWc6O4v00J389n99Bd5U= -----END CERTIFICATE-----Generated at Sun Apr 6 02:01:16 2025 by rpki-client