$ rpki-client -vvf repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.mft File: B0AAB728B88975526C1741CCA8673CBC88F7697C.mft (raw, json) Hash identifier: 8lcxx6/s8yYWnbIBReDWukth7B3Oua7lh2Gx9rbKgF0= Subject key identifier: 55:B5:17:F9:F2:5B:8F:90:8A:B9:EA:05:AA:D6:49:96:E3:0B:E2:02 Authority key identifier: B0:AA:B7:28:B8:89:75:52:6C:17:41:CC:A8:67:3C:BC:88:F7:69:7C Certificate issuer: /CN=B0AAB728B88975526C1741CCA8673CBC88F7697C Certificate serial: 3034903D1506F7728821D1835D68D9D02C7147D2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0AAB728B88975526C1741CCA8673CBC88F7697C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.mft Manifest number: 034D Signing time: Mon 28 Apr 2025 05:21:09 +0000 Manifest this update: Mon 28 Apr 2025 05:16:09 +0000 Manifest next update: Thu 01 May 2025 17:16:09 +0000 Files and hashes: 1: B0AAB728B88975526C1741CCA8673CBC88F7697C.crl (hash: NKCwWhUTagixCm4pfP32SDcjg/z91sEXa07JWVLtM7A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.crl rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0AAB728B88975526C1741CCA8673CBC88F7697C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:16:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:34:90:3d:15:06:f7:72:88:21:d1:83:5d:68:d9:d0:2c:71:47:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0AAB728B88975526C1741CCA8673CBC88F7697C Validity Not Before: Apr 28 05:16:09 2025 GMT Not After : May 1 17:16:09 2025 GMT Subject: CN=55B517F9F25B8F908AB9EA05AAD64996E30BE202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:25:02:37:3d:d3:a3:a5:dd:01:56:e4:f7:81: de:9f:45:71:19:2f:23:d4:c7:d7:db:d3:06:46:d3: 52:72:f7:5a:31:5b:b8:c3:4b:ef:c0:20:ef:79:a3: 6b:d9:c1:ef:27:ab:3b:fe:ee:ab:cc:6e:2d:08:eb: 8e:e5:54:08:55:16:dd:a1:4e:ea:29:22:34:dd:25: c0:61:37:02:c5:55:64:6e:a0:80:66:15:61:44:fe: 7d:d8:40:65:dd:3d:6d:75:61:39:50:d8:a1:d6:ac: 1b:0a:39:69:42:1a:8d:48:de:46:0d:f8:f2:2a:68: b3:02:a5:79:59:e8:ad:6d:94:1a:7d:3e:bd:af:7d: 30:ed:19:01:2c:9c:02:48:9a:b4:87:eb:40:a9:1f: 79:81:22:af:52:80:e3:a9:3c:a4:09:8b:f9:fc:b4: 24:16:79:14:16:01:f2:c9:96:12:80:e6:e5:71:f3: b0:d4:34:2a:00:ca:f6:01:a1:ad:c3:ea:dd:ed:ae: 86:85:c5:44:9f:06:8b:99:6c:c0:86:ce:da:7b:bd: bd:a3:7e:10:7b:e4:91:b4:5c:bc:ac:56:19:32:1f: f2:e5:0d:5c:6d:94:e2:72:dc:9b:49:b7:22:72:c2: a2:f1:6c:a8:90:81:5d:a9:ef:61:1f:ac:ee:38:26: ee:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:B5:17:F9:F2:5B:8F:90:8A:B9:EA:05:AA:D6:49:96:E3:0B:E2:02 X509v3 Authority Key Identifier: keyid:B0:AA:B7:28:B8:89:75:52:6C:17:41:CC:A8:67:3C:BC:88:F7:69:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0AAB728B88975526C1741CCA8673CBC88F7697C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:f6:f7:2e:7e:18:a0:e0:0f:6a:9a:dd:07:3b:ef:8d:ba:51: 23:0e:84:ad:79:a4:62:30:f2:af:10:e8:fb:74:a2:88:a7:b6: 07:b4:33:65:e3:2d:6d:d1:d3:52:61:79:17:bc:79:cd:0f:48: 41:40:9c:cf:bb:5f:1f:cc:c1:9f:3a:a5:69:fe:29:74:0f:01: 54:9d:f4:69:fd:59:89:ba:b2:39:ca:fb:16:2f:e5:de:28:c6: 1b:bc:de:77:85:c4:fd:ca:06:be:47:63:4c:b4:89:d7:08:6c: 68:a1:93:9e:79:89:bb:d1:a5:f2:29:80:bb:d4:e3:62:63:0b: f8:4f:13:49:2b:32:ed:f3:0d:b4:07:42:2f:5a:9a:12:c1:f4: 4c:1f:fe:45:2e:81:10:c2:b4:70:75:2c:c6:57:b7:b9:7d:b9: fa:8f:80:59:b7:f8:63:e5:a9:25:0f:e8:a4:ec:20:f1:84:cc: 45:88:e2:32:db:e2:04:3a:f7:d6:96:7a:c4:f3:8d:c1:b9:d8: fe:9c:b4:17:dc:08:4e:ef:cf:54:67:11:a4:14:75:a1:7f:66: 4f:b8:95:7d:6c:41:b4:76:18:18:e3:71:9e:82:96:2c:c1:fd: e2:22:51:ee:a8:18:37:b9:b9:b4:64:83:90:ad:94:ac:fc:f3: 2f:43:2e:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMDSQPRUG93KIIdGDXWjZ0CxxR9IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBBQUI3MjhCODg5NzU1MjZDMTc0MUNDQTg2NzNDQkM4 OEY3Njk3QzAeFw0yNTA0MjgwNTE2MDlaFw0yNTA1MDExNzE2MDlaMDMxMTAvBgNV BAMTKDU1QjUxN0Y5RjI1QjhGOTA4QUI5RUEwNUFBRDY0OTk2RTMwQkUyMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9JQI3PdOjpd0BVuT3gd6fRXEZ LyPUx9fb0wZG01Jy91oxW7jDS+/AIO95o2vZwe8nqzv+7qvMbi0I647lVAhVFt2h TuopIjTdJcBhNwLFVWRuoIBmFWFE/n3YQGXdPW11YTlQ2KHWrBsKOWlCGo1I3kYN +PIqaLMCpXlZ6K1tlBp9Pr2vfTDtGQEsnAJImrSH60CpH3mBIq9SgOOpPKQJi/n8 tCQWeRQWAfLJlhKA5uVx87DUNCoAyvYBoa3D6t3troaFxUSfBouZbMCGztp7vb2j fhB75JG0XLysVhkyH/LlDVxtlOJy3JtJtyJywqLxbKiQgV2p72EfrO44Ju5ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVbUX+fJbj5CKueoFqtZJluML4gIwHwYDVR0j BBgwFoAUsKq3KLiJdVJsF0HMqGc8vIj3aXwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZTA1YTFjZS04NDlmLTQxN2MtYjY3My1mZGQzM2YwZDc0NDcvMC9CMEFBQjcyOEI4 ODk3NTUyNkMxNzQxQ0NBODY3M0NCQzg4Rjc2OTdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjBBQUI3MjhCODg5NzU1MjZDMTc0MUNDQTg2NzNDQkM4OEY3 Njk3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGUwNWExY2UtODQ5Zi00MTdjLWI2 NzMtZmRkMzNmMGQ3NDQ3LzAvQjBBQUI3MjhCODg5NzU1MjZDMTc0MUNDQTg2NzND QkM4OEY3Njk3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAET29y5+GKDgD2qa3Qc77426USMOhK15pGIw 8q8Q6Pt0oointge0M2XjLW3R01JheRe8ec0PSEFAnM+7Xx/MwZ86pWn+KXQPAVSd 9Gn9WYm6sjnK+xYv5d4oxhu83neFxP3KBr5HY0y0idcIbGihk555ibvRpfIpgLvU 42JjC/hPE0krMu3zDbQHQi9amhLB9Ewf/kUugRDCtHB1LMZXt7l9ufqPgFm3+GPl qSUP6KTsIPGEzEWI4jLb4gQ699aWesTzjcG52P6ctBfcCE7vz1RnEaQUdaF/Zk+4 lX1sQbR2GBjjcZ6ClizB/eIiUe6oGDe5ubRkg5CtlKz88y9DLto= -----END CERTIFICATE-----Generated at Wed Apr 30 03:28:16 2025 by rpki-client