$ rpki-client -vvf repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.mft File: 4CC71073C4D5095D162AA86A1727D924EB83598A.mft (raw, json) Hash identifier: KRVZuNWeAuSZCfdKl7alXDqJ4QWvyjkNb7Tv6cXHIrg= Subject key identifier: 4C:F9:FA:BD:FA:E2:7F:3A:6A:15:E2:4F:DC:10:7B:87:89:5F:91:22 Authority key identifier: 4C:C7:10:73:C4:D5:09:5D:16:2A:A8:6A:17:27:D9:24:EB:83:59:8A Certificate issuer: /CN=4CC71073C4D5095D162AA86A1727D924EB83598A Certificate serial: 48339EB7F7C4F563BEF3A6B939EE86087760AC08 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CC71073C4D5095D162AA86A1727D924EB83598A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.mft Manifest number: 01B1 Signing time: Sat 05 Apr 2025 12:51:29 +0000 Manifest this update: Sat 05 Apr 2025 12:46:29 +0000 Manifest next update: Tue 08 Apr 2025 22:43:29 +0000 Files and hashes: 1: 4CC71073C4D5095D162AA86A1727D924EB83598A.crl (hash: MtfV5A5f+kQNvgFU8CJ28FlIn33JQYNocixQgGV4fNA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.crl rsync://repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CC71073C4D5095D162AA86A1727D924EB83598A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:33:9e:b7:f7:c4:f5:63:be:f3:a6:b9:39:ee:86:08:77:60:ac:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CC71073C4D5095D162AA86A1727D924EB83598A Validity Not Before: Apr 5 12:46:29 2025 GMT Not After : Apr 8 22:43:29 2025 GMT Subject: CN=4CF9FABDFAE27F3A6A15E24FDC107B87895F9122 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c4:89:98:9d:15:59:48:21:87:ae:65:0d:7a: 8e:19:6f:32:fd:91:00:76:b1:ad:78:2a:bf:ed:aa: 4c:64:dd:da:e9:7a:7b:1c:35:ce:b7:15:c2:87:ea: ba:9b:02:ff:05:27:90:30:3f:b4:f1:50:f6:6b:ce: f7:cf:37:ee:8b:4d:8a:36:8e:dc:0f:e5:18:2a:11: db:63:d7:13:eb:39:2e:10:f1:6c:bc:6a:48:bf:76: 77:de:e7:07:31:c8:23:5d:79:4f:7b:5c:c2:f7:bf: 0c:72:e1:40:25:19:bc:86:b2:ab:6a:3b:f3:f9:74: 73:a8:9b:66:31:25:5a:15:d4:37:e9:2b:d8:b5:91: d7:af:f7:c2:91:77:45:2c:5e:39:66:be:84:8c:a4: a0:d5:c0:b5:f2:46:c6:6a:46:b8:70:55:9c:3a:5f: 3f:f7:a9:9f:21:5c:70:09:59:e5:26:7c:fe:02:11: b6:e8:79:17:1c:25:95:15:18:3b:28:1f:81:b8:ee: 2c:64:e6:c4:7c:de:26:c6:33:2d:a0:a9:19:44:c5: 1e:f7:28:28:ee:5f:e3:0f:ce:ed:9a:bb:76:ab:5a: 66:67:1f:32:64:84:29:1c:b0:9a:95:9b:32:cf:13: 7c:e5:41:03:ec:d5:d1:2b:3d:ad:3c:1c:cf:d4:65: e4:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:F9:FA:BD:FA:E2:7F:3A:6A:15:E2:4F:DC:10:7B:87:89:5F:91:22 X509v3 Authority Key Identifier: keyid:4C:C7:10:73:C4:D5:09:5D:16:2A:A8:6A:17:27:D9:24:EB:83:59:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CC71073C4D5095D162AA86A1727D924EB83598A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:ce:ef:e3:b7:91:98:df:1c:3d:a0:ff:a5:a5:7b:09:44:2b: 6e:e6:3b:1e:b0:dc:40:06:82:fd:69:51:3f:4e:a8:3d:c0:5f: 55:0f:89:aa:c8:e0:57:b8:fe:dc:15:ae:d7:97:7e:e2:67:9f: b6:37:91:33:53:ef:cd:4c:6e:fd:c5:13:2a:17:45:f0:34:70: c3:aa:16:8d:f8:e3:8e:cd:3c:74:3e:f9:00:05:a4:8f:de:81: ad:07:81:d5:67:63:7f:a1:c5:d5:8a:f1:55:da:ff:98:5c:5e: 6f:46:43:c3:83:11:d0:61:d0:c1:cf:9d:d6:38:9d:1f:a5:bb: dd:4b:0c:18:bc:32:c2:05:e6:e8:be:e6:0f:30:dd:24:c7:31: d6:82:11:41:c3:29:16:c8:8d:41:b5:b1:67:3b:dd:5c:ba:3d: ef:95:c7:2c:6b:b6:6d:64:91:b8:a7:b5:2f:92:2a:d2:cc:c4: 6a:d9:be:14:88:77:f9:01:36:dc:0a:2d:05:51:1c:c7:22:82: bf:89:db:a6:9f:32:53:97:2d:0d:c3:5a:53:98:75:3a:2a:e0: 75:2d:a4:fd:fd:7b:56:76:79:e6:0b:2a:61:40:b9:b3:65:bb: 45:dd:ec:6f:ae:de:30:54:64:e3:e1:dd:54:98:17:a4:fc:8b: 9e:11:44:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSDOet/fE9WO+86a5Oe6GCHdgrAgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENDNzEwNzNDNEQ1MDk1RDE2MkFBODZBMTcyN0Q5MjRF QjgzNTk4QTAeFw0yNTA0MDUxMjQ2MjlaFw0yNTA0MDgyMjQzMjlaMDMxMTAvBgNV BAMTKDRDRjlGQUJERkFFMjdGM0E2QTE1RTI0RkRDMTA3Qjg3ODk1RjkxMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDxImYnRVZSCGHrmUNeo4ZbzL9 kQB2sa14Kr/tqkxk3drpenscNc63FcKH6rqbAv8FJ5AwP7TxUPZrzvfPN+6LTYo2 jtwP5RgqEdtj1xPrOS4Q8Wy8aki/dnfe5wcxyCNdeU97XML3vwxy4UAlGbyGsqtq O/P5dHOom2YxJVoV1DfpK9i1kdev98KRd0UsXjlmvoSMpKDVwLXyRsZqRrhwVZw6 Xz/3qZ8hXHAJWeUmfP4CEbboeRccJZUVGDsoH4G47ixk5sR83ibGMy2gqRlExR73 KCjuX+MPzu2au3arWmZnHzJkhCkcsJqVmzLPE3zlQQPs1dErPa08HM/UZeTnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTPn6vfrifzpqFeJP3BB7h4lfkSIwHwYDVR0j BBgwFoAUTMcQc8TVCV0WKqhqFyfZJOuDWYowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MjM2ZjA2MC1lODYyLTRmMWMtYjgxYS0wMWZjYmEzZmY3N2MvMC80Q0M3MTA3M0M0 RDUwOTVEMTYyQUE4NkExNzI3RDkyNEVCODM1OThBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNENDNzEwNzNDNEQ1MDk1RDE2MkFBODZBMTcyN0Q5MjRFQjgz NTk4QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjIzNmYwNjAtZTg2Mi00ZjFjLWI4 MWEtMDFmY2JhM2ZmNzdjLzAvNENDNzEwNzNDNEQ1MDk1RDE2MkFBODZBMTcyN0Q5 MjRFQjgzNTk4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABHO7+O3kZjfHD2g/6WlewlEK27mOx6w3EAG gv1pUT9OqD3AX1UPiarI4Fe4/twVrteXfuJnn7Y3kTNT781Mbv3FEyoXRfA0cMOq Fo34447NPHQ++QAFpI/ega0HgdVnY3+hxdWK8VXa/5hcXm9GQ8ODEdBh0MHPndY4 nR+lu91LDBi8MsIF5ui+5g8w3STHMdaCEUHDKRbIjUG1sWc73Vy6Pe+Vxyxrtm1k kbintS+SKtLMxGrZvhSId/kBNtwKLQVRHMcigr+J26afMlOXLQ3DWlOYdToq4HUt pP39e1Z2eeYLKmFAubNlu0Xd7G+u3jBUZOPh3VSYF6T8i54RRP4= -----END CERTIFICATE-----Generated at Sat Apr 5 16:38:36 2025 by rpki-client