$ rpki-client -vvf repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.mft File: C83A14814153DADF0B9F754B65105F431A2C552D.mft (raw, json) Hash identifier: fiyMeQ5ZVbiL6L768LQP7uP2pzn4alRTzuotjT99Vuk= Subject key identifier: 0F:81:C2:A3:85:40:F6:B0:FC:EF:12:99:95:A1:87:91:8B:1D:7C:28 Authority key identifier: C8:3A:14:81:41:53:DA:DF:0B:9F:75:4B:65:10:5F:43:1A:2C:55:2D Certificate issuer: /CN=C83A14814153DADF0B9F754B65105F431A2C552D Certificate serial: 5551FC500421C50D86BE458678056AF02C5FC38E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C83A14814153DADF0B9F754B65105F431A2C552D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.mft Manifest number: 01C4 Signing time: Thu 03 Apr 2025 22:21:25 +0000 Manifest this update: Thu 03 Apr 2025 22:16:25 +0000 Manifest next update: Sun 06 Apr 2025 23:56:25 +0000 Files and hashes: 1: C83A14814153DADF0B9F754B65105F431A2C552D.crl (hash: D84Ij3I5GVUK7WYh2hoP55ayE3R44XJuTaVlLoseaYY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.crl rsync://repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C83A14814153DADF0B9F754B65105F431A2C552D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 23:56:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:51:fc:50:04:21:c5:0d:86:be:45:86:78:05:6a:f0:2c:5f:c3:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C83A14814153DADF0B9F754B65105F431A2C552D Validity Not Before: Apr 3 22:16:25 2025 GMT Not After : Apr 6 23:56:25 2025 GMT Subject: CN=0F81C2A38540F6B0FCEF129995A187918B1D7C28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:cc:ef:bb:af:ef:22:7f:1c:3f:ca:28:3a:0f: 08:1b:18:d4:47:08:c4:8f:8e:c5:ef:ca:30:57:fa: 21:c4:2d:12:a4:45:7c:56:99:8c:4f:58:34:d0:30: 4c:5e:fa:a8:00:cc:78:cd:c8:e2:12:f9:e6:4a:ec: b8:a2:8f:c2:de:1e:3f:f9:de:59:f1:55:85:b7:15: 3b:d5:35:51:bc:b1:01:a5:b8:10:57:d3:1d:42:4f: 2a:79:48:28:c4:63:4f:77:e3:60:d2:1f:9b:9a:b2: b7:8f:ac:c8:d4:96:8c:34:c5:2a:4a:d6:62:09:9c: cd:61:73:bf:a4:f5:74:d7:32:bf:84:ed:2e:0f:24: 1a:07:63:04:59:ac:06:68:c7:0e:d0:80:9f:9d:50: 13:e0:9b:fa:b3:f5:4d:4f:4b:06:ed:70:21:4f:1b: 9c:42:5d:ae:1a:3b:ad:9e:cc:cc:40:6d:26:76:51: 18:c0:36:6a:a7:6c:9c:e3:7f:f9:43:89:82:de:c7: 0d:a7:07:db:87:d8:5b:11:e5:a6:9b:37:5d:59:5a: 48:6f:66:56:73:e2:3d:b7:c9:9c:f5:fe:96:07:5d: 10:d7:a4:fe:b2:47:cb:97:26:a0:04:25:70:55:02: 0b:46:c1:78:37:ee:70:03:fb:e5:4d:eb:36:3d:38: bd:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:81:C2:A3:85:40:F6:B0:FC:EF:12:99:95:A1:87:91:8B:1D:7C:28 X509v3 Authority Key Identifier: keyid:C8:3A:14:81:41:53:DA:DF:0B:9F:75:4B:65:10:5F:43:1A:2C:55:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C83A14814153DADF0B9F754B65105F431A2C552D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/C83A14814153DADF0B9F754B65105F431A2C552D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:5d:d4:33:08:03:8f:72:f4:22:10:16:cc:75:b3:65:7d:55: d1:2d:7e:2d:04:22:62:9a:4a:ba:de:f0:aa:f7:f4:eb:7f:e2: 2c:d3:3f:d6:7c:87:0d:b8:74:39:65:d5:de:8c:b2:90:b7:2d: fe:fd:c1:ed:74:04:95:de:7a:66:79:84:62:d7:37:66:5d:22: 12:bb:b4:a6:4f:61:79:ae:e8:42:41:99:87:ac:52:4c:fe:d0: c9:da:3d:8d:99:44:ab:76:64:9e:ed:e3:63:15:3c:1c:51:a4: f6:7c:c8:99:5b:4a:0d:18:33:8c:3c:84:e6:77:e5:2e:b5:5b: 23:77:2e:ad:a8:e8:17:3b:cf:67:b7:65:62:93:00:a9:37:0c: e2:29:43:c7:16:28:b9:23:78:1e:93:a8:86:fe:f0:bb:ac:35: 72:6c:8c:54:0a:e0:e5:e9:76:93:4f:b3:c1:62:22:ca:60:3b: 82:77:0f:8f:d6:a8:78:6f:10:9f:06:a9:5d:a8:c6:21:44:2d: ea:2e:a9:2d:f8:ce:c8:05:54:b8:61:a3:f0:ab:da:a0:f6:5c: b7:f8:ec:6a:b2:4b:4c:58:6f:4c:0b:b4:a7:c8:5d:8f:dd:93: 4f:2d:f2:45:9d:44:6e:a1:74:98:ba:9e:15:97:fb:7d:c5:d7: d5:df:88:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVVH8UAQhxQ2GvkWGeAVq8Cxfw44wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzgzQTE0ODE0MTUzREFERjBCOUY3NTRCNjUxMDVGNDMx QTJDNTUyRDAeFw0yNTA0MDMyMjE2MjVaFw0yNTA0MDYyMzU2MjVaMDMxMTAvBgNV BAMTKDBGODFDMkEzODU0MEY2QjBGQ0VGMTI5OTk1QTE4NzkxOEIxRDdDMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzzO+7r+8ifxw/yig6DwgbGNRH CMSPjsXvyjBX+iHELRKkRXxWmYxPWDTQMExe+qgAzHjNyOIS+eZK7Liij8LeHj/5 3lnxVYW3FTvVNVG8sQGluBBX0x1CTyp5SCjEY09342DSH5uasrePrMjUlow0xSpK 1mIJnM1hc7+k9XTXMr+E7S4PJBoHYwRZrAZoxw7QgJ+dUBPgm/qz9U1PSwbtcCFP G5xCXa4aO62ezMxAbSZ2URjANmqnbJzjf/lDiYLexw2nB9uH2FsR5aabN11ZWkhv ZlZz4j23yZz1/pYHXRDXpP6yR8uXJqAEJXBVAgtGwXg37nAD++VN6zY9OL0/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD4HCo4VA9rD87xKZlaGHkYsdfCgwHwYDVR0j BBgwFoAUyDoUgUFT2t8Ln3VLZRBfQxosVS0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MDliNTFhMi02M2Q1LTQ0YjItODJiMi1kOTRjNTE2ZGQ1ZjgvMC9DODNBMTQ4MTQx NTNEQURGMEI5Rjc1NEI2NTEwNUY0MzFBMkM1NTJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzgzQTE0ODE0MTUzREFERjBCOUY3NTRCNjUxMDVGNDMxQTJD NTUyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTA5YjUxYTItNjNkNS00NGIyLTgy YjItZDk0YzUxNmRkNWY4LzAvQzgzQTE0ODE0MTUzREFERjBCOUY3NTRCNjUxMDVG NDMxQTJDNTUyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHZd1DMIA49y9CIQFsx1s2V9VdEtfi0EImKa Srre8Kr39Ot/4izTP9Z8hw24dDll1d6MspC3Lf79we10BJXeemZ5hGLXN2ZdIhK7 tKZPYXmu6EJBmYesUkz+0MnaPY2ZRKt2ZJ7t42MVPBxRpPZ8yJlbSg0YM4w8hOZ3 5S61WyN3Lq2o6Bc7z2e3ZWKTAKk3DOIpQ8cWKLkjeB6TqIb+8LusNXJsjFQK4OXp dpNPs8FiIspgO4J3D4/WqHhvEJ8GqV2oxiFELeouqS34zsgFVLhho/Cr2qD2XLf4 7GqyS0xYb0wLtKfIXY/dk08t8kWdRG6hdJi6nhWX+33F19XfiD4= -----END CERTIFICATE-----Generated at Sat Apr 5 15:31:35 2025 by rpki-client