$ rpki-client -vvf repo-rpki.idnic.net/repo/d4488d56-6ead-4ce4-8d33-2dcf080d0876/0/75124AA5DD7D2B53783B8C956570CF3235324A6C.mft File: 75124AA5DD7D2B53783B8C956570CF3235324A6C.mft (raw, json) Hash identifier: sMwU5suaJEdEQ7bCeOzVq+qN3C3Y4Fk22OlkIcRU9aU= Subject key identifier: 4A:41:C3:CD:8D:A2:9C:34:BB:1B:C6:54:FC:E1:92:E4:44:82:0A:BE Authority key identifier: 75:12:4A:A5:DD:7D:2B:53:78:3B:8C:95:65:70:CF:32:35:32:4A:6C Certificate issuer: /CN=75124AA5DD7D2B53783B8C956570CF3235324A6C Certificate serial: 21BEC977224B2F607DD1CB4BC8A88B2CC16CFD24 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75124AA5DD7D2B53783B8C956570CF3235324A6C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d4488d56-6ead-4ce4-8d33-2dcf080d0876/0/75124AA5DD7D2B53783B8C956570CF3235324A6C.mft Manifest number: 01B9 Signing time: Fri 04 Apr 2025 13:40:57 +0000 Manifest this update: Fri 04 Apr 2025 13:35:57 +0000 Manifest next update: Mon 07 Apr 2025 19:53:57 +0000 Files and hashes: 1: 75124AA5DD7D2B53783B8C956570CF3235324A6C.crl (hash: axktBrSB860673dARgeJqTkPepm4OmU2HDDLuQRm+YI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d4488d56-6ead-4ce4-8d33-2dcf080d0876/0/75124AA5DD7D2B53783B8C956570CF3235324A6C.crl rsync://repo-rpki.idnic.net/repo/d4488d56-6ead-4ce4-8d33-2dcf080d0876/0/75124AA5DD7D2B53783B8C956570CF3235324A6C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75124AA5DD7D2B53783B8C956570CF3235324A6C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:be:c9:77:22:4b:2f:60:7d:d1:cb:4b:c8:a8:8b:2c:c1:6c:fd:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75124AA5DD7D2B53783B8C956570CF3235324A6C Validity Not Before: Apr 4 13:35:57 2025 GMT Not After : Apr 7 19:53:57 2025 GMT Subject: CN=4A41C3CD8DA29C34BB1BC654FCE192E444820ABE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5b:49:c8:5a:b2:50:3e:25:f7:22:59:38:27: 78:bb:99:b2:ac:72:a4:b4:db:16:a1:dc:21:e8:b2: cb:89:c1:bd:c4:ca:7f:1c:f7:36:5b:a1:9c:cc:70: 76:a1:49:b7:cc:06:7a:59:41:4a:83:1c:3b:84:9a: b7:4b:38:44:6b:12:9d:29:2e:cd:34:b8:6f:dc:35: ac:8e:30:f1:44:de:b9:a9:12:e8:a4:3a:83:0e:ee: d0:24:dd:3a:4f:5c:0f:82:0e:62:0d:e6:7a:4c:f9: 72:01:83:30:36:32:5a:8a:37:ef:41:b3:ac:16:25: 6f:64:f0:60:65:35:53:71:15:b7:24:bf:92:f3:ba: 6c:8d:94:c9:b5:b4:8d:15:18:6b:92:bb:a4:1c:e7: 65:f5:ba:53:c7:b2:a9:cf:db:85:ae:e0:b1:d3:53: 02:c0:99:99:6d:17:87:81:4e:2c:bd:9c:d7:48:2b: db:b3:80:af:0e:fa:bc:9c:68:8a:c9:32:38:e5:0e: 00:47:b8:de:e0:d2:41:7d:fe:66:cc:b5:2d:d9:91: c6:4e:c3:3f:ab:08:1d:06:fd:5f:a2:1c:a0:44:8f: 9d:67:c5:af:53:d5:81:8c:a6:a2:39:79:4f:ca:d6: 25:bc:ab:85:ec:de:fc:f2:77:bb:2a:2a:dd:67:e0: 90:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:41:C3:CD:8D:A2:9C:34:BB:1B:C6:54:FC:E1:92:E4:44:82:0A:BE X509v3 Authority Key Identifier: keyid:75:12:4A:A5:DD:7D:2B:53:78:3B:8C:95:65:70:CF:32:35:32:4A:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d4488d56-6ead-4ce4-8d33-2dcf080d0876/0/75124AA5DD7D2B53783B8C956570CF3235324A6C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75124AA5DD7D2B53783B8C956570CF3235324A6C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4488d56-6ead-4ce4-8d33-2dcf080d0876/0/75124AA5DD7D2B53783B8C956570CF3235324A6C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:22:dc:fa:89:f8:8d:2c:a8:43:29:4c:69:5b:49:e0:78:5e: 08:df:c2:ae:ce:40:fb:3a:dc:6c:ca:8f:e9:ba:df:c7:f6:27: 17:72:2a:34:f8:e0:dd:2b:d0:26:fe:68:32:3a:e6:49:0f:9f: a9:5f:85:86:c0:c0:06:ee:af:90:82:41:aa:d0:eb:3f:88:6c: 33:79:ee:fc:b8:c7:ff:b9:7e:5d:7c:8e:66:03:bd:1d:3d:04: d0:8c:cc:68:74:8e:b8:30:32:a3:92:5b:27:4d:64:70:27:6a: e3:45:f4:c9:8d:dc:3d:9a:99:4b:ed:f7:14:7d:2a:ab:c9:e0: dd:dd:6c:10:ea:30:2d:bb:fa:e6:78:96:ac:82:fc:ef:f5:cf: 84:ad:4f:4e:62:90:d4:00:13:fa:36:79:a9:d0:30:f7:ac:7a: 2e:4b:f0:7b:03:ad:ab:7b:f7:6c:58:0f:a1:50:2d:7d:c0:54: d0:0c:6b:42:bf:1a:ff:cc:5d:b0:07:4d:43:06:19:73:b7:f1: 19:91:a0:10:f5:25:1b:0d:68:a8:d7:52:a3:41:d3:29:e8:5d: 0d:6d:96:47:31:29:1a:b5:68:7d:50:1f:36:cf:ce:52:69:f8: 42:41:87:0e:ae:10:02:29:9c:1a:2d:c7:4c:53:fd:90:ea:2e: f2:c3:25:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIb7JdyJLL2B90ctLyKiLLMFs/SQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzUxMjRBQTVERDdEMkI1Mzc4M0I4Qzk1NjU3MENGMzIz NTMyNEE2QzAeFw0yNTA0MDQxMzM1NTdaFw0yNTA0MDcxOTUzNTdaMDMxMTAvBgNV BAMTKDRBNDFDM0NEOERBMjlDMzRCQjFCQzY1NEZDRTE5MkU0NDQ4MjBBQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDW0nIWrJQPiX3Ilk4J3i7mbKs cqS02xah3CHossuJwb3Eyn8c9zZboZzMcHahSbfMBnpZQUqDHDuEmrdLOERrEp0p Ls00uG/cNayOMPFE3rmpEuikOoMO7tAk3TpPXA+CDmIN5npM+XIBgzA2MlqKN+9B s6wWJW9k8GBlNVNxFbckv5LzumyNlMm1tI0VGGuSu6Qc52X1ulPHsqnP24Wu4LHT UwLAmZltF4eBTiy9nNdIK9uzgK8O+rycaIrJMjjlDgBHuN7g0kF9/mbMtS3ZkcZO wz+rCB0G/V+iHKBEj51nxa9T1YGMpqI5eU/K1iW8q4Xs3vzyd7sqKt1n4JBtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSkHDzY2inDS7G8ZU/OGS5ESCCr4wHwYDVR0j BBgwFoAUdRJKpd19K1N4O4yVZXDPMjUySmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NDQ4OGQ1Ni02ZWFkLTRjZTQtOGQzMy0yZGNmMDgwZDA4NzYvMC83NTEyNEFBNURE N0QyQjUzNzgzQjhDOTU2NTcwQ0YzMjM1MzI0QTZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzUxMjRBQTVERDdEMkI1Mzc4M0I4Qzk1NjU3MENGMzIzNTMy NEE2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDQ0ODhkNTYtNmVhZC00Y2U0LThk MzMtMmRjZjA4MGQwODc2LzAvNzUxMjRBQTVERDdEMkI1Mzc4M0I4Qzk1NjU3MENG MzIzNTMyNEE2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACAi3PqJ+I0sqEMpTGlbSeB4Xgjfwq7OQPs6 3GzKj+m638f2JxdyKjT44N0r0Cb+aDI65kkPn6lfhYbAwAbur5CCQarQ6z+IbDN5 7vy4x/+5fl18jmYDvR09BNCMzGh0jrgwMqOSWydNZHAnauNF9MmN3D2amUvt9xR9 KqvJ4N3dbBDqMC27+uZ4lqyC/O/1z4StT05ikNQAE/o2eanQMPesei5L8HsDrat7 92xYD6FQLX3AVNAMa0K/Gv/MXbAHTUMGGXO38RmRoBD1JRsNaKjXUqNB0ynoXQ1t lkcxKRq1aH1QHzbPzlJp+EJBhw6uEAIpnBotx0xT/ZDqLvLDJcs= -----END CERTIFICATE-----Generated at Sat Apr 5 16:41:47 2025 by rpki-client