$ rpki-client -vvf repo-rpki.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/C2759C8490CBC757371078D2CA604D6FF8EE4C19.mft File: C2759C8490CBC757371078D2CA604D6FF8EE4C19.mft (raw, json) Hash identifier: qdI4t/w7t8QaLtoCOucYx638TyzIGY0t0h5JWG3hu8o= Subject key identifier: 80:4E:BB:28:53:61:30:5F:3F:E2:F9:C3:A2:5B:B3:E9:14:A7:9F:95 Authority key identifier: C2:75:9C:84:90:CB:C7:57:37:10:78:D2:CA:60:4D:6F:F8:EE:4C:19 Certificate issuer: /CN=C2759C8490CBC757371078D2CA604D6FF8EE4C19 Certificate serial: 2BEBB4A7201C766AE980BB74E09344AEFBDC56FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2759C8490CBC757371078D2CA604D6FF8EE4C19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/C2759C8490CBC757371078D2CA604D6FF8EE4C19.mft Manifest number: 05 Signing time: Sat 05 Apr 2025 05:50:33 +0000 Manifest this update: Sat 05 Apr 2025 05:45:33 +0000 Manifest next update: Tue 08 Apr 2025 13:36:33 +0000 Files and hashes: 1: C2759C8490CBC757371078D2CA604D6FF8EE4C19.crl (hash: gp91gsv6gz+zVbo5/lVYi55DTcDbdk3nj+iWBTff2eY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/C2759C8490CBC757371078D2CA604D6FF8EE4C19.crl rsync://repo-rpki.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/C2759C8490CBC757371078D2CA604D6FF8EE4C19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2759C8490CBC757371078D2CA604D6FF8EE4C19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Apr 2025 13:36:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:eb:b4:a7:20:1c:76:6a:e9:80:bb:74:e0:93:44:ae:fb:dc:56:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2759C8490CBC757371078D2CA604D6FF8EE4C19 Validity Not Before: Apr 5 05:45:33 2025 GMT Not After : Apr 8 13:36:33 2025 GMT Subject: CN=804EBB285361305F3FE2F9C3A25BB3E914A79F95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:49:1f:20:62:8c:fe:3b:96:03:b9:ed:79:66: 33:65:3c:c2:0a:73:93:37:62:f4:9b:c4:b2:b6:d5: 7d:b5:94:65:a5:b2:5a:b5:29:b8:63:d3:e6:e9:98: 16:9a:b1:8c:4b:b6:ae:db:ea:bb:b1:ed:de:d1:73: 0d:cd:88:40:c3:40:ff:94:e3:aa:7e:89:64:4a:f1: e7:70:51:53:26:13:be:ff:32:34:a5:7a:76:a6:ed: 45:81:5f:5c:08:98:19:52:c3:4f:96:96:fa:a6:a1: 86:ca:21:f1:ba:30:71:fe:bd:31:4c:0e:d8:36:85: 26:61:de:10:5c:31:c3:79:c0:bc:01:82:e6:4b:1d: bc:25:ce:d9:ae:79:c9:01:aa:87:8f:63:5a:c4:24: 73:5d:4f:27:64:c5:0d:66:db:ba:c1:68:26:bc:7d: ab:5e:27:5d:a0:ca:1b:e6:06:5c:b0:5a:b3:5e:34: 8a:67:2a:45:0c:b5:60:1a:69:a2:d2:98:95:99:12: e4:14:be:bc:42:81:5f:3d:e9:c4:bc:0d:83:17:9a: 0c:dc:45:12:6b:9d:38:aa:c0:68:08:f8:76:49:c2: 3b:33:c1:be:67:a6:2c:b6:09:9c:26:71:9b:27:7c: ec:34:f5:48:0a:4d:67:6e:4a:34:7e:94:bc:bd:9f: 48:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:4E:BB:28:53:61:30:5F:3F:E2:F9:C3:A2:5B:B3:E9:14:A7:9F:95 X509v3 Authority Key Identifier: keyid:C2:75:9C:84:90:CB:C7:57:37:10:78:D2:CA:60:4D:6F:F8:EE:4C:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/C2759C8490CBC757371078D2CA604D6FF8EE4C19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2759C8490CBC757371078D2CA604D6FF8EE4C19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/C2759C8490CBC757371078D2CA604D6FF8EE4C19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:d1:a8:23:d2:2e:8c:6b:8d:08:bd:fa:11:61:ca:bf:53:4b: 65:ff:1d:51:1e:22:64:3a:18:0a:97:c0:05:32:c3:27:fd:d9: 18:42:7f:40:91:2b:0b:ee:66:f0:27:9d:a7:a2:a4:2f:c4:c4: 18:35:30:b0:a0:cf:97:d5:fe:4f:de:e0:e7:55:ae:69:7c:98: b3:0d:7d:ca:6c:55:93:19:8a:76:52:33:d2:dc:12:3f:dc:07: 54:96:6e:85:43:8d:cc:bf:ea:fa:d3:7f:54:96:0a:b7:a0:75: a5:02:20:7c:e3:64:ae:27:d2:6e:b5:27:e4:7d:3a:f1:7d:0e: 20:7e:91:97:e3:08:b7:85:f9:f8:96:26:9c:d3:c6:47:1f:d4: 92:05:76:2a:9e:51:0f:d7:10:2b:37:81:fb:41:55:e0:2b:1f: 81:a2:31:80:e0:d0:ed:fc:ab:78:37:b5:51:95:fe:a6:34:81: d5:76:8c:be:49:e8:58:4f:a5:83:19:d6:e9:50:d0:e3:2e:76: 8a:9c:8f:fd:b0:be:1b:38:5c:44:d7:c8:bc:fe:92:0c:94:cb: 50:7d:38:df:ba:b7:33:eb:38:12:67:4f:6a:0e:1c:1d:5b:f6: b0:f3:98:23:11:5d:6d:69:1d:ba:7f:ac:38:e9:37:60:1f:6e: 63:1f:d9:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK+u0pyAcdmrpgLt04JNErvvcVv0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI3NTlDODQ5MENCQzc1NzM3MTA3OEQyQ0E2MDRENkZG OEVFNEMxOTAeFw0yNTA0MDUwNTQ1MzNaFw0yNTA0MDgxMzM2MzNaMDMxMTAvBgNV BAMTKDgwNEVCQjI4NTM2MTMwNUYzRkUyRjlDM0EyNUJCM0U5MTRBNzlGOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPSR8gYoz+O5YDue15ZjNlPMIK c5M3YvSbxLK21X21lGWlslq1Kbhj0+bpmBaasYxLtq7b6rux7d7Rcw3NiEDDQP+U 46p+iWRK8edwUVMmE77/MjSlenam7UWBX1wImBlSw0+WlvqmoYbKIfG6MHH+vTFM Dtg2hSZh3hBcMcN5wLwBguZLHbwlztmueckBqoePY1rEJHNdTydkxQ1m27rBaCa8 fateJ12gyhvmBlywWrNeNIpnKkUMtWAaaaLSmJWZEuQUvrxCgV896cS8DYMXmgzc RRJrnTiqwGgI+HZJwjszwb5npiy2CZwmcZsnfOw09UgKTWduSjR+lLy9n0gDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgE67KFNhMF8/4vnDoluz6RSnn5UwHwYDVR0j BBgwFoAUwnWchJDLx1c3EHjSymBNb/juTBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZTcxNmRlYS02NTM2LTRkNmUtYjU0Yi1iZjdmNzNjZjZiOTQvMC9DMjc1OUM4NDkw Q0JDNzU3MzcxMDc4RDJDQTYwNEQ2RkY4RUU0QzE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzI3NTlDODQ5MENCQzc1NzM3MTA3OEQyQ0E2MDRENkZGOEVF NEMxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmU3MTZkZWEtNjUzNi00ZDZlLWI1 NGItYmY3ZjczY2Y2Yjk0LzAvQzI3NTlDODQ5MENCQzc1NzM3MTA3OEQyQ0E2MDRE NkZGOEVFNEMxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAADRqCPSLoxrjQi9+hFhyr9TS2X/HVEeImQ6 GAqXwAUywyf92RhCf0CRKwvuZvAnnaeipC/ExBg1MLCgz5fV/k/e4OdVrml8mLMN fcpsVZMZinZSM9LcEj/cB1SWboVDjcy/6vrTf1SWCregdaUCIHzjZK4n0m61J+R9 OvF9DiB+kZfjCLeF+fiWJpzTxkcf1JIFdiqeUQ/XECs3gftBVeArH4GiMYDg0O38 q3g3tVGV/qY0gdV2jL5J6FhPpYMZ1ulQ0OMudoqcj/2wvhs4XETXyLz+kgyUy1B9 ON+6tzPrOBJnT2oOHB1b9rDzmCMRXW1pHbp/rDjpN2AfbmMf2aM= -----END CERTIFICATE-----Generated at Mon Apr 7 13:02:38 2025 by rpki-client