$ rpki-client -vvf repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft File: 2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft (raw, json) Hash identifier: tvDyqKhOM6x83/oYyufI6aVH9u1Y/h662WyQcX4138g= Subject key identifier: F0:C5:63:BB:A3:A1:9D:8A:D0:DA:58:08:FE:C8:84:16:15:0C:38:E6 Authority key identifier: 25:96:AD:9D:A9:03:31:FB:33:6D:C5:2C:5B:72:F9:92:D7:D4:9D:37 Certificate issuer: /CN=2596AD9DA90331FB336DC52C5B72F992D7D49D37 Certificate serial: 7477C28A6C0B0AD1C9CF242CDA2DA6E5D420A30E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2596AD9DA90331FB336DC52C5B72F992D7D49D37.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft Manifest number: 83 Signing time: Sat 05 Apr 2025 13:42:12 +0000 Manifest this update: Sat 05 Apr 2025 13:37:12 +0000 Manifest next update: Tue 08 Apr 2025 22:27:12 +0000 Files and hashes: 1: 2596AD9DA90331FB336DC52C5B72F992D7D49D37.crl (hash: GE4a/twi96UDEScbUOFndu8rtMnBdqqpk+IXuKaEqHs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.crl rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2596AD9DA90331FB336DC52C5B72F992D7D49D37.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:77:c2:8a:6c:0b:0a:d1:c9:cf:24:2c:da:2d:a6:e5:d4:20:a3:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2596AD9DA90331FB336DC52C5B72F992D7D49D37 Validity Not Before: Apr 5 13:37:12 2025 GMT Not After : Apr 8 22:27:12 2025 GMT Subject: CN=F0C563BBA3A19D8AD0DA5808FEC88416150C38E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:12:c4:a5:a6:86:ae:9d:23:54:6d:a8:8b:93: 5a:8a:58:8c:41:ff:03:99:aa:31:e8:62:a5:af:2f: 04:a9:fe:96:26:1d:5d:83:bf:7e:ea:db:eb:e5:90: 83:15:ec:fd:4c:79:93:63:08:8d:62:26:c5:8b:c1: 56:1d:6a:6f:42:95:b3:9e:47:53:bf:e4:1f:6c:65: 1e:a6:c5:51:86:82:d8:c8:e0:16:6b:93:4e:d4:ee: 44:b7:60:a9:54:b2:eb:0c:04:ce:fc:ac:6e:7c:ab: 02:c0:02:f7:c1:26:c4:45:42:5b:d3:03:bf:71:5f: c9:b3:06:4a:9d:62:7a:9b:5f:bc:45:62:19:94:9a: 1a:c1:b8:cc:ce:db:09:de:85:56:a4:a3:89:1e:0e: 16:8c:3a:1e:0f:6a:09:53:a6:1b:c9:05:b3:15:df: 35:fc:71:18:95:c8:fc:01:c6:f1:ba:ed:da:ce:a9: 4c:5e:07:1a:d8:c0:a5:78:cc:70:f9:62:2a:84:7e: 9a:70:d2:d3:b7:db:2f:30:35:e4:8b:d0:19:fb:58: 66:ae:32:ff:6b:5a:d2:88:72:26:c4:65:42:ae:4b: d6:c1:d9:de:e6:1b:3d:a4:c0:36:97:9c:7d:2e:58: bf:6b:ca:4f:a6:c7:cb:1b:76:38:12:00:07:04:ac: d4:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:C5:63:BB:A3:A1:9D:8A:D0:DA:58:08:FE:C8:84:16:15:0C:38:E6 X509v3 Authority Key Identifier: keyid:25:96:AD:9D:A9:03:31:FB:33:6D:C5:2C:5B:72:F9:92:D7:D4:9D:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2596AD9DA90331FB336DC52C5B72F992D7D49D37.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:e7:ff:43:ee:5e:c0:d4:2d:4e:d2:b2:66:7d:c6:fd:f6:b9: 79:9c:70:d5:e3:8a:61:c0:a2:6d:be:d5:01:ac:1b:4f:02:39: 9b:94:a5:a8:42:5c:14:7b:3a:8c:11:e1:96:1f:80:0d:17:19: 1e:b9:90:b2:c9:a7:58:62:f9:6e:62:d9:bd:3a:f8:cc:23:5f: 01:a6:1d:f5:da:fe:9d:cc:68:84:a8:32:9f:ae:0f:27:76:be: d6:29:54:4a:c1:e1:61:39:18:20:8d:5c:63:af:c6:e5:46:5c: 95:15:83:6a:4d:ab:67:e9:38:98:3a:a3:22:a9:b5:cd:50:e7: 80:fd:21:43:72:10:40:65:81:d7:75:01:a4:70:d6:07:f9:97: a2:ce:fc:48:93:9b:ed:b9:b0:2f:13:39:cb:75:30:e5:50:10: 0e:2f:dc:04:fb:2b:c3:89:c0:f4:e2:c8:bd:55:d2:10:ad:53: 1a:45:59:a5:87:46:10:0d:cd:cc:68:da:8a:1a:7e:71:23:2e: 4b:ad:fc:a6:ad:9c:54:1c:e7:e8:bc:f3:4e:b1:2c:78:09:05: ac:ae:1f:09:53:6a:03:f8:a2:18:9d:0b:4a:6f:4d:26:80:1a: 5f:e4:ab:68:46:85:60:fd:a7:76:d8:66:97:4a:94:76:bd:36: 6f:6e:81:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdHfCimwLCtHJzyQs2i2m5dQgow4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU5NkFEOURBOTAzMzFGQjMzNkRDNTJDNUI3MkY5OTJE N0Q0OUQzNzAeFw0yNTA0MDUxMzM3MTJaFw0yNTA0MDgyMjI3MTJaMDMxMTAvBgNV BAMTKEYwQzU2M0JCQTNBMTlEOEFEMERBNTgwOEZFQzg4NDE2MTUwQzM4RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSEsSlpoaunSNUbaiLk1qKWIxB /wOZqjHoYqWvLwSp/pYmHV2Dv37q2+vlkIMV7P1MeZNjCI1iJsWLwVYdam9ClbOe R1O/5B9sZR6mxVGGgtjI4BZrk07U7kS3YKlUsusMBM78rG58qwLAAvfBJsRFQlvT A79xX8mzBkqdYnqbX7xFYhmUmhrBuMzO2wnehVako4keDhaMOh4PaglTphvJBbMV 3zX8cRiVyPwBxvG67drOqUxeBxrYwKV4zHD5YiqEfppw0tO32y8wNeSL0Bn7WGau Mv9rWtKIcibEZUKuS9bB2d7mGz2kwDaXnH0uWL9ryk+mx8sbdjgSAAcErNTdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8MVju6OhnYrQ2lgI/siEFhUMOOYwHwYDVR0j BBgwFoAUJZatnakDMfszbcUsW3L5ktfUnTcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjAzNmI3NC04YTVkLTQwYWEtOTYwYy05MjFlNjNhNzBhNGMvMC8yNTk2QUQ5REE5 MDMzMUZCMzM2REM1MkM1QjcyRjk5MkQ3RDQ5RDM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjU5NkFEOURBOTAzMzFGQjMzNkRDNTJDNUI3MkY5OTJEN0Q0 OUQzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGYwMzZiNzQtOGE1ZC00MGFhLTk2 MGMtOTIxZTYzYTcwYTRjLzAvMjU5NkFEOURBOTAzMzFGQjMzNkRDNTJDNUI3MkY5 OTJEN0Q0OUQzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM/n/0PuXsDULU7SsmZ9xv32uXmccNXjimHA om2+1QGsG08COZuUpahCXBR7OowR4ZYfgA0XGR65kLLJp1hi+W5i2b06+MwjXwGm HfXa/p3MaISoMp+uDyd2vtYpVErB4WE5GCCNXGOvxuVGXJUVg2pNq2fpOJg6oyKp tc1Q54D9IUNyEEBlgdd1AaRw1gf5l6LO/EiTm+25sC8TOct1MOVQEA4v3AT7K8OJ wPTiyL1V0hCtUxpFWaWHRhANzcxo2ooafnEjLkut/KatnFQc5+i8806xLHgJBayu HwlTagP4ohidC0pvTSaAGl/kq2hGhWD9p3bYZpdKlHa9Nm9ugYo= -----END CERTIFICATE-----Generated at Sat Apr 5 17:50:33 2025 by rpki-client