$ rpki-client -vvf repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.mft File: 7188210EAEFBA7947009E19B6219830752F542A9.mft (raw, json) Hash identifier: 5NmBpA+mdjyLz3mf/zZx9l9vSpAS2l9/EWhPhfS5mYI= Subject key identifier: 2B:F7:E1:7F:2F:8B:1D:4F:6A:60:F6:17:DA:3A:0A:0A:C1:DF:29:7B Authority key identifier: 71:88:21:0E:AE:FB:A7:94:70:09:E1:9B:62:19:83:07:52:F5:42:A9 Certificate issuer: /CN=7188210EAEFBA7947009E19B6219830752F542A9 Certificate serial: 12D8509C67A882D32AC6D311B36203D55A2F9D51 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7188210EAEFBA7947009E19B6219830752F542A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.mft Manifest number: 015C Signing time: Fri 04 Apr 2025 18:21:07 +0000 Manifest this update: Fri 04 Apr 2025 18:16:07 +0000 Manifest next update: Mon 07 Apr 2025 23:53:07 +0000 Files and hashes: 1: 7188210EAEFBA7947009E19B6219830752F542A9.crl (hash: GdT24b3qSYkrxDy/nte5bmq37Ws6sHs5yCOQDRSjnKY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.crl rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7188210EAEFBA7947009E19B6219830752F542A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:d8:50:9c:67:a8:82:d3:2a:c6:d3:11:b3:62:03:d5:5a:2f:9d:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7188210EAEFBA7947009E19B6219830752F542A9 Validity Not Before: Apr 4 18:16:07 2025 GMT Not After : Apr 7 23:53:07 2025 GMT Subject: CN=2BF7E17F2F8B1D4F6A60F617DA3A0A0AC1DF297B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:59:93:32:03:f8:de:36:38:bf:02:48:1f:a3: e7:d3:78:39:0c:62:81:47:17:7d:a0:7f:68:03:e7: 5c:4a:6a:c4:90:29:b8:37:3c:e9:7e:b2:dd:89:9d: 6b:cc:89:54:92:53:a7:57:56:77:aa:44:d0:f4:84: cf:45:07:29:32:2f:7a:3a:dc:dd:6c:05:3c:67:b3: 1d:9d:4a:78:0b:07:1d:4a:4d:1a:a4:54:e0:e9:1c: d2:ba:53:10:05:f0:79:92:43:71:1f:2f:bb:27:5f: 97:87:da:19:fd:a6:58:30:ed:53:fd:8f:77:3b:39: 5f:58:4b:d5:9b:f5:a2:4c:dc:e4:91:bc:36:44:05: 47:6e:82:1e:99:fc:3e:5d:51:0c:da:4f:ee:e7:88: 5e:5f:ff:1f:5e:a2:93:21:3d:97:36:4e:ac:f4:91: 86:6c:f8:2e:6a:a3:fe:b0:02:d8:49:11:09:e6:71: 62:70:95:62:7d:97:18:d2:2d:06:62:79:a4:e1:12: c7:39:eb:2f:13:e3:ea:45:e0:0e:58:c4:fd:4a:cd: 1a:b9:67:fc:ae:4c:f9:71:32:56:dc:fa:45:d5:90: 2d:19:6f:c7:9b:83:9d:c8:7a:7e:1b:f7:16:02:43: 98:68:55:43:57:5f:2e:3c:a2:f5:57:a4:fe:a7:03: f6:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:F7:E1:7F:2F:8B:1D:4F:6A:60:F6:17:DA:3A:0A:0A:C1:DF:29:7B X509v3 Authority Key Identifier: keyid:71:88:21:0E:AE:FB:A7:94:70:09:E1:9B:62:19:83:07:52:F5:42:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7188210EAEFBA7947009E19B6219830752F542A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:c9:d2:5e:db:c7:7d:0b:db:1a:74:50:01:72:1a:31:56:38: b8:78:d8:78:40:42:b8:a8:a3:8e:80:79:4c:b8:c4:49:e9:87: 78:0b:53:16:e2:b0:79:de:c4:ee:bd:4c:9d:f3:ce:4d:ad:1d: a8:2f:a0:31:30:21:32:50:84:a3:0a:2f:b9:6b:2c:d5:a0:86: 83:cc:f6:1d:20:a6:14:81:16:3c:b9:8c:0c:9b:69:f1:b3:29: 90:15:c6:a0:d8:fc:47:4e:aa:1d:c6:56:3b:5f:91:b9:fe:f9: 33:e5:b1:da:60:6e:80:40:4d:f9:30:53:0e:58:bd:a3:91:a8: 69:57:86:e2:28:bf:64:a2:e2:4f:46:10:05:4b:38:98:54:cd: dd:c1:55:d5:90:8e:76:fc:37:00:4c:84:be:2a:bc:9b:ca:7f: 33:aa:23:69:45:fc:91:ba:ce:84:7b:f5:a4:c0:7c:96:29:8c: 35:dc:3a:d8:e5:ca:4b:44:2d:cc:bd:e5:45:eb:d4:f4:f2:dd: c0:ff:a1:bc:8c:5f:9b:8f:3a:8f:f1:d6:c0:4b:71:03:c4:7f: a3:f0:ac:df:2a:71:fb:74:84:63:0f:cc:22:5d:34:c2:82:21: 95:0c:56:3e:08:6d:22:61:53:9f:ce:37:b5:0c:43:9f:23:e4: 56:2a:04:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEthQnGeogtMqxtMRs2ID1VovnVEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE4ODIxMEVBRUZCQTc5NDcwMDlFMTlCNjIxOTgzMDc1 MkY1NDJBOTAeFw0yNTA0MDQxODE2MDdaFw0yNTA0MDcyMzUzMDdaMDMxMTAvBgNV BAMTKDJCRjdFMTdGMkY4QjFENEY2QTYwRjYxN0RBM0EwQTBBQzFERjI5N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/WZMyA/jeNji/Akgfo+fTeDkM YoFHF32gf2gD51xKasSQKbg3POl+st2JnWvMiVSSU6dXVneqRND0hM9FBykyL3o6 3N1sBTxnsx2dSngLBx1KTRqkVODpHNK6UxAF8HmSQ3EfL7snX5eH2hn9plgw7VP9 j3c7OV9YS9Wb9aJM3OSRvDZEBUdugh6Z/D5dUQzaT+7niF5f/x9eopMhPZc2Tqz0 kYZs+C5qo/6wAthJEQnmcWJwlWJ9lxjSLQZieaThEsc56y8T4+pF4A5YxP1KzRq5 Z/yuTPlxMlbc+kXVkC0Zb8ebg53Ien4b9xYCQ5hoVUNXXy48ovVXpP6nA/YLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK/fhfy+LHU9qYPYX2joKCsHfKXswHwYDVR0j BBgwFoAUcYghDq77p5RwCeGbYhmDB1L1QqkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTdkN2IzOC1kNjZiLTQzYjMtOTFmYi00YmI5ZTY2MzdlMmEvMC83MTg4MjEwRUFF RkJBNzk0NzAwOUUxOUI2MjE5ODMwNzUyRjU0MkE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzE4ODIxMEVBRUZCQTc5NDcwMDlFMTlCNjIxOTgzMDc1MkY1 NDJBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE3ZDdiMzgtZDY2Yi00M2IzLTkx ZmItNGJiOWU2NjM3ZTJhLzAvNzE4ODIxMEVBRUZCQTc5NDcwMDlFMTlCNjIxOTgz MDc1MkY1NDJBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ/J0l7bx30L2xp0UAFyGjFWOLh42HhAQrio o46AeUy4xEnph3gLUxbisHnexO69TJ3zzk2tHagvoDEwITJQhKMKL7lrLNWghoPM 9h0gphSBFjy5jAybafGzKZAVxqDY/EdOqh3GVjtfkbn++TPlsdpgboBATfkwUw5Y vaORqGlXhuIov2Si4k9GEAVLOJhUzd3BVdWQjnb8NwBMhL4qvJvKfzOqI2lF/JG6 zoR79aTAfJYpjDXcOtjlyktELcy95UXr1PTy3cD/obyMX5uPOo/x1sBLcQPEf6Pw rN8qcft0hGMPzCJdNMKCIZUMVj4IbSJhU5/ON7UMQ58j5FYqBBc= -----END CERTIFICATE-----Generated at Sat Apr 5 16:39:58 2025 by rpki-client