$ rpki-client -vvf repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft File: 96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft (raw, json) Hash identifier: JdBNxVu8MyzNX7Ete8zNQxVwXhnR6Shzv7YWT97Y7sM= Subject key identifier: D8:A7:52:D9:E4:7A:40:22:14:C9:E9:BF:8E:E9:F8:B0:B3:35:08:DA Authority key identifier: 96:FB:31:74:E7:1D:4C:E9:BB:1C:57:29:5C:2F:55:E7:46:41:F8:EE Certificate issuer: /CN=96FB3174E71D4CE9BB1C57295C2F55E74641F8EE Certificate serial: 716A3FBECFF0BD1FBED1647DF18AC8618DEAD10A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft Manifest number: 32 Signing time: Mon 07 Apr 2025 19:02:14 +0000 Manifest this update: Mon 07 Apr 2025 18:57:14 +0000 Manifest next update: Thu 10 Apr 2025 23:47:14 +0000 Files and hashes: 1: 96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.crl (hash: wMBr/rUbwCOYee8m26N2yJvh3cf58zapj+QREIpbWF4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.crl rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 23:47:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:6a:3f:be:cf:f0:bd:1f:be:d1:64:7d:f1:8a:c8:61:8d:ea:d1:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96FB3174E71D4CE9BB1C57295C2F55E74641F8EE Validity Not Before: Apr 7 18:57:14 2025 GMT Not After : Apr 10 23:47:14 2025 GMT Subject: CN=D8A752D9E47A402214C9E9BF8EE9F8B0B33508DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3e:80:90:6a:44:ee:1d:bc:45:21:27:1e:9e: 14:cf:9f:ba:9a:05:c1:79:39:5b:52:74:c6:77:ca: 55:e2:91:f3:22:8f:55:e1:6b:69:23:51:75:22:c1: 79:91:e6:9d:dd:83:9e:f9:ee:85:a9:1b:be:a2:69: 54:da:ab:dc:59:0d:80:f4:fa:1d:47:7c:9b:87:e2: 6f:9f:74:fe:12:2a:f6:06:08:a9:c9:fb:7a:35:12: 88:55:6e:d5:d5:75:43:ce:d6:3d:85:e0:35:a7:4d: 6a:65:ec:8b:4b:91:a7:eb:72:c5:7e:da:3c:9f:ea: a2:94:1e:06:0d:34:1b:72:89:23:5f:e2:db:3b:21: 35:7f:5a:26:d4:4b:58:83:6e:99:48:c2:fa:05:5a: 4d:ba:ee:74:38:78:b2:e7:05:20:09:61:dd:77:60: 0d:02:8d:91:46:1f:b6:42:bb:50:e2:fb:b2:15:f9: bf:86:2a:df:33:bb:81:ad:25:ca:05:9b:89:7a:f4: 7f:df:86:b3:89:05:7a:43:56:ca:45:dc:dc:59:74: 2e:82:22:28:af:e3:07:b2:14:5e:1c:d0:da:d8:5b: e1:29:bd:17:ed:a4:a5:1c:33:a4:ab:53:90:10:5b: 8c:5f:9e:03:16:94:73:fd:a8:6d:50:3f:fe:24:6f: 88:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:A7:52:D9:E4:7A:40:22:14:C9:E9:BF:8E:E9:F8:B0:B3:35:08:DA X509v3 Authority Key Identifier: keyid:96:FB:31:74:E7:1D:4C:E9:BB:1C:57:29:5C:2F:55:E7:46:41:F8:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:0b:2c:69:c2:8d:2e:56:c4:ce:5e:1e:d7:83:c7:5d:b6:61: 2d:bd:93:f2:f3:21:ae:95:8f:38:71:fa:9a:a7:63:04:fc:b4: ec:cb:c8:bd:71:8f:23:2b:7a:3d:cd:3f:6e:cc:21:61:a7:bf: b9:b2:0d:8f:54:f8:75:37:d7:df:5b:c9:7b:1c:c0:94:35:80: 04:2f:45:b5:3f:a8:93:73:41:e5:d5:37:d3:82:9b:7f:00:c0: 49:7d:0a:ce:47:69:f6:76:48:52:ac:ad:20:bc:48:95:c2:25: 5e:af:9c:a7:f7:75:76:62:2a:fd:03:17:c9:47:32:6a:4d:44: d3:36:fd:31:19:2b:f7:55:03:ee:3a:c2:f9:15:2f:0c:14:bd: 68:6c:5c:fa:64:90:59:10:b6:68:d3:7e:38:e6:60:70:07:1a: e6:db:63:15:dc:22:08:ac:94:46:21:ca:c0:5b:04:0e:14:06: 94:0b:b9:ef:4e:c9:eb:37:9d:51:aa:02:03:7d:3d:72:37:e0: 0c:38:48:74:d2:6c:0f:78:3b:20:df:9c:d8:a2:0a:f2:5c:6e: 6b:53:83:e0:a5:c5:08:0a:c1:77:ad:d4:79:66:a1:5e:4a:02: 55:11:80:7b:10:f3:8b:e6:bc:69:de:fd:3e:a2:b3:63:a0:92: c4:bc:36:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcWo/vs/wvR++0WR98YrIYY3q0QowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZGQjMxNzRFNzFENENFOUJCMUM1NzI5NUMyRjU1RTc0 NjQxRjhFRTAeFw0yNTA0MDcxODU3MTRaFw0yNTA0MTAyMzQ3MTRaMDMxMTAvBgNV BAMTKEQ4QTc1MkQ5RTQ3QTQwMjIxNEM5RTlCRjhFRTlGOEIwQjMzNTA4REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMPoCQakTuHbxFIScenhTPn7qa BcF5OVtSdMZ3ylXikfMij1Xha2kjUXUiwXmR5p3dg5757oWpG76iaVTaq9xZDYD0 +h1HfJuH4m+fdP4SKvYGCKnJ+3o1EohVbtXVdUPO1j2F4DWnTWpl7ItLkafrcsV+ 2jyf6qKUHgYNNBtyiSNf4ts7ITV/WibUS1iDbplIwvoFWk267nQ4eLLnBSAJYd13 YA0CjZFGH7ZCu1Di+7IV+b+GKt8zu4GtJcoFm4l69H/fhrOJBXpDVspF3NxZdC6C Iiiv4weyFF4c0NrYW+EpvRftpKUcM6SrU5AQW4xfngMWlHP9qG1QP/4kb4h/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2KdS2eR6QCIUyem/jun4sLM1CNowHwYDVR0j BBgwFoAUlvsxdOcdTOm7HFcpXC9V50ZB+O4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzhmOWI2Yi0wMjdhLTRiZTYtYWIwMi0yOGQ1NTFjMzk4MTkvMC85NkZCMzE3NEU3 MUQ0Q0U5QkIxQzU3Mjk1QzJGNTVFNzQ2NDFGOEVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTZGQjMxNzRFNzFENENFOUJCMUM1NzI5NUMyRjU1RTc0NjQx RjhFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTM4ZjliNmItMDI3YS00YmU2LWFi MDItMjhkNTUxYzM5ODE5LzAvOTZGQjMxNzRFNzFENENFOUJCMUM1NzI5NUMyRjU1 RTc0NjQxRjhFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ8LLGnCjS5WxM5eHteDx122YS29k/LzIa6V jzhx+pqnYwT8tOzLyL1xjyMrej3NP27MIWGnv7myDY9U+HU3199byXscwJQ1gAQv RbU/qJNzQeXVN9OCm38AwEl9Cs5HafZ2SFKsrSC8SJXCJV6vnKf3dXZiKv0DF8lH MmpNRNM2/TEZK/dVA+46wvkVLwwUvWhsXPpkkFkQtmjTfjjmYHAHGubbYxXcIgis lEYhysBbBA4UBpQLue9Oyes3nVGqAgN9PXI34Aw4SHTSbA94OyDfnNiiCvJcbmtT g+ClxQgKwXet1HlmoV5KAlURgHsQ84vmvGne/T6is2OgksS8NiY= -----END CERTIFICATE-----Generated at Wed Apr 9 16:48:15 2025 by rpki-client