$ rpki-client -vvf repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.mft File: E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.mft (raw, json) Hash identifier: qIUJEcFv1ALfvOPTW84/61vsMn01ZmtCD/UQJ7dYjo4= Subject key identifier: 49:D3:FD:61:90:82:38:F6:AE:43:DC:EE:83:EB:B9:9A:BE:CA:B7:5D Authority key identifier: E1:41:ED:0B:8F:1B:83:AB:AC:98:B8:DB:75:8C:25:18:8C:6E:65:A5 Certificate issuer: /CN=E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5 Certificate serial: 48BBBB678AF2D588776164E960A95F7A4BFD4155 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.mft Manifest number: 8F Signing time: Mon 17 Feb 2025 01:51:56 +0000 Manifest this update: Mon 17 Feb 2025 01:46:56 +0000 Manifest next update: Thu 20 Feb 2025 13:27:56 +0000 Files and hashes: 1: E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.crl (hash: sk2NBdkQx/ofSj6QBPUvNxI0GpzLviK+CIcL0veJnWY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.crl rsync://repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Feb 2025 13:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:bb:bb:67:8a:f2:d5:88:77:61:64:e9:60:a9:5f:7a:4b:fd:41:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5 Validity Not Before: Feb 17 01:46:56 2025 GMT Not After : Feb 20 13:27:56 2025 GMT Subject: CN=49D3FD61908238F6AE43DCEE83EBB99ABECAB75D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:c6:f1:6d:b8:a2:49:5a:3a:b2:87:17:e2:05: fb:6e:e3:eb:26:93:0a:8a:dc:78:cd:22:59:e7:d6: e7:6c:15:96:b1:43:5c:76:1b:e4:bd:01:57:b6:a4: cd:7e:a8:31:49:88:f8:01:7e:dc:d6:49:49:d5:b1: 79:fc:5b:11:b8:0d:03:95:51:89:7e:ff:3d:52:f6: 69:d5:2f:f1:51:96:2f:df:ce:e8:4c:b7:1b:4d:f7: 0f:e0:42:42:57:bd:93:2f:51:de:d7:24:ae:74:4a: 06:86:a4:ed:b0:ae:c9:d9:c3:a9:d6:f8:27:6d:0c: 7b:bd:d4:23:86:b0:31:ed:d1:79:13:c4:20:8c:29: 73:09:18:23:62:94:77:60:13:a3:a3:7c:c4:1d:60: 83:0e:0f:08:e2:09:82:8d:b9:d8:c1:8c:49:47:b1: c1:cd:6a:eb:19:e9:24:7c:e1:2c:e1:9f:ff:a6:85: a3:b8:cc:cf:ff:62:91:05:a8:79:b2:b3:36:08:24: 62:bd:ad:d8:74:36:91:df:a5:99:57:a1:23:a9:cd: ce:1b:67:f8:37:f5:5c:8a:e3:55:d4:17:9e:c5:e0: 50:19:a5:b4:e3:18:71:73:98:bd:07:29:4e:b7:5a: 32:75:26:be:b2:21:e5:c0:cf:12:e9:ff:40:44:50: 0a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:D3:FD:61:90:82:38:F6:AE:43:DC:EE:83:EB:B9:9A:BE:CA:B7:5D X509v3 Authority Key Identifier: keyid:E1:41:ED:0B:8F:1B:83:AB:AC:98:B8:DB:75:8C:25:18:8C:6E:65:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/E141ED0B8F1B83ABAC98B8DB758C25188C6E65A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:e0:dc:27:3e:47:5a:5f:d0:33:ba:6c:ab:2e:dc:ae:94:8f: 3d:98:b1:ae:e1:ef:0a:c8:e0:91:c9:d1:cc:c3:d4:21:84:46: 22:5b:b5:8c:42:ca:cd:82:d8:61:48:16:1d:da:91:ab:dc:6d: c8:59:17:7d:76:ad:14:48:a9:9d:93:e4:23:21:b3:93:4d:10: 65:ab:c9:f4:8f:3e:4c:99:ed:33:5c:09:ef:27:9f:44:6c:0c: 1b:19:e8:7b:d0:f5:45:e0:c5:bb:bc:cf:e0:d2:76:b0:3e:80: c4:c0:d0:97:6c:0a:c7:28:f2:c6:ee:09:d5:93:da:66:c3:eb: fa:3e:9a:d6:ea:f2:88:d7:47:fd:f8:27:98:fb:1d:9b:09:a6: 93:ce:be:96:d4:73:da:6c:c2:ff:64:12:bd:74:5d:8c:0c:5c: 98:f7:46:7d:3e:59:8a:89:fa:5a:9c:34:1f:a1:93:53:0e:8d: 3c:a7:28:6f:36:9b:e7:2e:a5:d4:ed:a6:cd:65:0a:d1:7d:e5: 06:0a:39:63:51:a1:21:c9:b1:28:1b:04:8b:44:7e:9b:c3:e8: 90:69:0a:63:ec:fb:01:e7:df:07:88:f2:1e:99:aa:c6:51:d1: 93:17:c4:6f:36:66:d6:c1:39:a2:da:79:cc:32:67:65:4c:15: 4a:05:bf:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSLu7Z4ry1Yh3YWTpYKlfekv9QVUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE0MUVEMEI4RjFCODNBQkFDOThCOERCNzU4QzI1MTg4 QzZFNjVBNTAeFw0yNTAyMTcwMTQ2NTZaFw0yNTAyMjAxMzI3NTZaMDMxMTAvBgNV BAMTKDQ5RDNGRDYxOTA4MjM4RjZBRTQzRENFRTgzRUJCOTlBQkVDQUI3NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyxvFtuKJJWjqyhxfiBftu4+sm kwqK3HjNIlnn1udsFZaxQ1x2G+S9AVe2pM1+qDFJiPgBftzWSUnVsXn8WxG4DQOV UYl+/z1S9mnVL/FRli/fzuhMtxtN9w/gQkJXvZMvUd7XJK50SgaGpO2wrsnZw6nW +CdtDHu91COGsDHt0XkTxCCMKXMJGCNilHdgE6OjfMQdYIMODwjiCYKNudjBjElH scHNausZ6SR84Szhn/+mhaO4zM//YpEFqHmyszYIJGK9rdh0NpHfpZlXoSOpzc4b Z/g39VyK41XUF57F4FAZpbTjGHFzmL0HKU63WjJ1Jr6yIeXAzxLp/0BEUArrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSdP9YZCCOPauQ9zug+u5mr7Kt10wHwYDVR0j BBgwFoAU4UHtC48bg6usmLjbdYwlGIxuZaUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzFlNjkzYy0yZmQ3LTRmNGMtYWY2My1mZWU2OTA3NmUwZDEvMC9FMTQxRUQwQjhG MUI4M0FCQUM5OEI4REI3NThDMjUxODhDNkU2NUE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTE0MUVEMEI4RjFCODNBQkFDOThCOERCNzU4QzI1MTg4QzZF NjVBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTMxZTY5M2MtMmZkNy00ZjRjLWFm NjMtZmVlNjkwNzZlMGQxLzAvRTE0MUVEMEI4RjFCODNBQkFDOThCOERCNzU4QzI1 MTg4QzZFNjVBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJbg3Cc+R1pf0DO6bKsu3K6Ujz2Ysa7h7wrI 4JHJ0czD1CGERiJbtYxCys2C2GFIFh3akavcbchZF312rRRIqZ2T5CMhs5NNEGWr yfSPPkyZ7TNcCe8nn0RsDBsZ6HvQ9UXgxbu8z+DSdrA+gMTA0JdsCsco8sbuCdWT 2mbD6/o+mtbq8ojXR/34J5j7HZsJppPOvpbUc9pswv9kEr10XYwMXJj3Rn0+WYqJ +lqcNB+hk1MOjTynKG82m+cupdTtps1lCtF95QYKOWNRoSHJsSgbBItEfpvD6JBp CmPs+wHn3weI8h6ZqsZR0ZMXxG82ZtbBOaLaecwyZ2VMFUoFv/Q= -----END CERTIFICATE-----Generated at Wed Feb 19 22:23:02 2025 by rpki-client