$ rpki-client -vvf repo-rpki.idnic.net/repo/e5426124-059c-43ad-a150-822b9d5fb3f3/0/83C7CB5B51B0D2341C906429DBCB81393F473E08.mft File: 83C7CB5B51B0D2341C906429DBCB81393F473E08.mft (raw, json) Hash identifier: iFPhUlprL2WkIzhUHXezHiEqP4s044Rp+cf0a40o6KE= Subject key identifier: CE:24:72:59:2F:D9:F7:DC:4E:46:9E:BA:F5:FB:A7:B7:F0:B0:A5:FB Authority key identifier: 83:C7:CB:5B:51:B0:D2:34:1C:90:64:29:DB:CB:81:39:3F:47:3E:08 Certificate issuer: /CN=83C7CB5B51B0D2341C906429DBCB81393F473E08 Certificate serial: 5A56FF5A601CA2C8A37BC6DC9126B09B553F8314 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83C7CB5B51B0D2341C906429DBCB81393F473E08.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e5426124-059c-43ad-a150-822b9d5fb3f3/0/83C7CB5B51B0D2341C906429DBCB81393F473E08.mft Manifest number: C4 Signing time: Wed 19 Feb 2025 05:12:12 +0000 Manifest this update: Wed 19 Feb 2025 05:07:12 +0000 Manifest next update: Sat 22 Feb 2025 12:42:12 +0000 Files and hashes: 1: 83C7CB5B51B0D2341C906429DBCB81393F473E08.crl (hash: Bx9T/S8ZkEYb0/Lin/YG3w3z5ughh0JseG6aKJVuSgc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e5426124-059c-43ad-a150-822b9d5fb3f3/0/83C7CB5B51B0D2341C906429DBCB81393F473E08.crl rsync://repo-rpki.idnic.net/repo/e5426124-059c-43ad-a150-822b9d5fb3f3/0/83C7CB5B51B0D2341C906429DBCB81393F473E08.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83C7CB5B51B0D2341C906429DBCB81393F473E08.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Feb 2025 12:42:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:56:ff:5a:60:1c:a2:c8:a3:7b:c6:dc:91:26:b0:9b:55:3f:83:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83C7CB5B51B0D2341C906429DBCB81393F473E08 Validity Not Before: Feb 19 05:07:12 2025 GMT Not After : Feb 22 12:42:12 2025 GMT Subject: CN=CE2472592FD9F7DC4E469EBAF5FBA7B7F0B0A5FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:26:7c:6a:79:74:c2:80:30:e8:44:de:5e:8f: 83:ad:3b:f9:55:7d:5b:a1:d7:d3:c4:ad:3c:15:c6: 51:2d:f6:0c:54:35:59:c6:61:b0:70:82:b3:33:c0: 16:fc:50:32:b9:23:af:b6:f0:a8:21:59:58:50:c1: 24:21:58:16:d0:ba:43:7b:d0:6e:e2:dd:18:00:13: 7e:6a:5f:48:d8:72:b5:5a:02:66:06:80:b7:43:1c: 67:f0:bd:75:fa:72:00:30:0d:1d:55:d3:7b:ff:a4: 6d:56:70:b1:51:b0:0f:31:6e:1e:57:05:ad:d2:7e: dd:94:be:dc:58:51:85:bb:a2:e3:c0:51:9c:e0:9d: 0e:d9:75:23:30:e1:7b:fe:12:0f:1c:45:b1:c7:9d: dc:47:30:13:98:60:0d:b5:f6:f1:e4:04:e3:3b:c3: 93:54:fe:bc:ca:6c:54:98:b5:09:8a:44:3c:12:a2: cd:3e:c3:84:5d:c6:63:d4:9c:4a:07:39:5e:0d:7f: e0:68:c2:ab:92:50:58:36:a5:62:cf:2b:19:89:3c: 2b:df:fb:36:f8:f6:19:24:1e:b4:34:e7:a4:8a:28: 92:58:00:8d:cb:56:67:15:8f:c9:8d:af:3f:52:6d: e3:b5:77:11:69:3e:17:bb:86:c9:29:e1:f6:b0:e5: a1:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:24:72:59:2F:D9:F7:DC:4E:46:9E:BA:F5:FB:A7:B7:F0:B0:A5:FB X509v3 Authority Key Identifier: keyid:83:C7:CB:5B:51:B0:D2:34:1C:90:64:29:DB:CB:81:39:3F:47:3E:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e5426124-059c-43ad-a150-822b9d5fb3f3/0/83C7CB5B51B0D2341C906429DBCB81393F473E08.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83C7CB5B51B0D2341C906429DBCB81393F473E08.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5426124-059c-43ad-a150-822b9d5fb3f3/0/83C7CB5B51B0D2341C906429DBCB81393F473E08.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:92:80:79:98:38:f8:ef:f5:84:8c:f3:eb:52:04:48:5f:5e: 9f:5b:c5:f9:ba:c6:a9:0e:7c:95:5a:08:a9:60:a9:4e:46:88: cc:0f:dc:66:dd:35:1a:98:95:45:47:6d:0a:84:1b:a6:2e:7c: 75:f9:91:b7:75:5b:d4:d4:a8:4c:16:47:37:86:b2:6c:b6:04: 1d:56:13:7e:ef:8c:16:2c:98:5c:ae:7a:db:51:8c:61:9c:95: 8b:9c:ec:df:53:2b:b5:28:47:03:2c:c9:0f:f4:bc:24:3e:73: 28:6a:71:7b:81:36:7f:db:73:a5:b7:5a:b3:c8:65:54:e0:dd: 6e:74:fa:a8:6a:d6:9f:75:12:e5:83:bb:ed:a2:d9:78:3d:7c: 45:28:0c:15:44:bf:f3:02:1c:b0:46:09:41:97:a7:33:72:db: e7:75:1a:e8:19:b7:91:cd:b5:e2:92:96:6d:21:e3:fe:d8:7f: 1f:d4:35:ea:df:e2:13:7b:12:20:e1:c6:c7:49:69:43:67:85: 53:14:e8:32:ba:cd:c6:3e:35:e5:77:c4:e4:d6:a6:89:8d:40: 48:dd:00:15:92:2a:84:56:fe:b8:ca:0c:a4:be:91:e9:62:66: b1:c8:f3:62:1e:ad:cb:d1:00:36:9a:a0:df:a7:66:40:1e:30: f3:e9:cb:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWlb/WmAcosije8bckSawm1U/gxQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODNDN0NCNUI1MUIwRDIzNDFDOTA2NDI5REJDQjgxMzkz RjQ3M0UwODAeFw0yNTAyMTkwNTA3MTJaFw0yNTAyMjIxMjQyMTJaMDMxMTAvBgNV BAMTKENFMjQ3MjU5MkZEOUY3REM0RTQ2OUVCQUY1RkJBN0I3RjBCMEE1RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8JnxqeXTCgDDoRN5ej4OtO/lV fVuh19PErTwVxlEt9gxUNVnGYbBwgrMzwBb8UDK5I6+28KghWVhQwSQhWBbQukN7 0G7i3RgAE35qX0jYcrVaAmYGgLdDHGfwvXX6cgAwDR1V03v/pG1WcLFRsA8xbh5X Ba3Sft2UvtxYUYW7ouPAUZzgnQ7ZdSMw4Xv+Eg8cRbHHndxHMBOYYA219vHkBOM7 w5NU/rzKbFSYtQmKRDwSos0+w4RdxmPUnEoHOV4Nf+BowquSUFg2pWLPKxmJPCvf +zb49hkkHrQ056SKKJJYAI3LVmcVj8mNrz9SbeO1dxFpPhe7hskp4faw5aHPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUziRyWS/Z99xORp669funt/CwpfswHwYDVR0j BBgwFoAUg8fLW1Gw0jQckGQp28uBOT9HPggwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTQyNjEyNC0wNTljLTQzYWQtYTE1MC04MjJiOWQ1ZmIzZjMvMC84M0M3Q0I1QjUx QjBEMjM0MUM5MDY0MjlEQkNCODEzOTNGNDczRTA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODNDN0NCNUI1MUIwRDIzNDFDOTA2NDI5REJDQjgxMzkzRjQ3 M0UwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTU0MjYxMjQtMDU5Yy00M2FkLWEx NTAtODIyYjlkNWZiM2YzLzAvODNDN0NCNUI1MUIwRDIzNDFDOTA2NDI5REJDQjgx MzkzRjQ3M0UwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJqSgHmYOPjv9YSM8+tSBEhfXp9bxfm6xqkO fJVaCKlgqU5GiMwP3GbdNRqYlUVHbQqEG6YufHX5kbd1W9TUqEwWRzeGsmy2BB1W E37vjBYsmFyuettRjGGclYuc7N9TK7UoRwMsyQ/0vCQ+cyhqcXuBNn/bc6W3WrPI ZVTg3W50+qhq1p91EuWDu+2i2Xg9fEUoDBVEv/MCHLBGCUGXpzNy2+d1GugZt5HN teKSlm0h4/7Yfx/UNerf4hN7EiDhxsdJaUNnhVMU6DK6zcY+NeV3xOTWpomNQEjd ABWSKoRW/rjKDKS+keliZrHI82IercvRADaaoN+nZkAeMPPpy2U= -----END CERTIFICATE-----Generated at Wed Feb 19 22:20:42 2025 by rpki-client