$ rpki-client -vvf repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft File: D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft (raw, json) Hash identifier: eB5uCk4hhvCWl15P1ncTUMBGql9K4LH4oaszb95HmhY= Subject key identifier: 40:87:BD:55:E8:44:4A:5E:66:68:5C:F6:44:14:0B:9E:11:C8:5F:99 Authority key identifier: D7:C7:61:22:42:64:91:B8:1F:84:E5:A8:24:E4:AB:EB:85:82:BA:C4 Certificate issuer: /CN=D7C76122426491B81F84E5A824E4ABEB8582BAC4 Certificate serial: 351DA3884E71C72248A5C5632694A267D16E9DC0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C76122426491B81F84E5A824E4ABEB8582BAC4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft Manifest number: 01DB Signing time: Tue 29 Apr 2025 15:00:43 +0000 Manifest this update: Tue 29 Apr 2025 14:55:43 +0000 Manifest next update: Fri 02 May 2025 19:04:43 +0000 Files and hashes: 1: D7C76122426491B81F84E5A824E4ABEB8582BAC4.crl (hash: ua1Pwx0Ztf7zNzkEoMDUD+HtpvbOdIjFCtTcg6aj3lY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.crl rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C76122426491B81F84E5A824E4ABEB8582BAC4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 18:52:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:1d:a3:88:4e:71:c7:22:48:a5:c5:63:26:94:a2:67:d1:6e:9d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7C76122426491B81F84E5A824E4ABEB8582BAC4 Validity Not Before: Apr 29 14:55:43 2025 GMT Not After : May 2 19:04:43 2025 GMT Subject: CN=4087BD55E8444A5E66685CF644140B9E11C85F99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8f:bf:a0:cb:46:7e:c0:f3:04:6d:b3:51:9b: 1e:6d:c0:85:3c:7f:08:b8:19:6d:5c:d5:a6:74:7d: 05:e3:36:f1:74:89:a8:03:dc:a6:02:16:0d:17:2e: da:dd:ee:10:96:74:be:36:b1:9e:54:f1:78:03:15: 92:05:12:79:4d:35:12:7c:d4:99:71:b8:ee:73:04: 1a:4d:42:9f:8d:14:56:c5:d2:94:d9:2b:3c:f7:0e: 8f:7d:55:d8:d2:78:38:f8:f1:4c:b9:e8:47:81:89: bd:1c:e7:a1:87:b9:91:7a:c7:64:e4:55:65:a7:7a: c2:7d:60:50:9f:06:3f:45:9b:6c:a4:bc:6f:80:33: 8d:f8:ad:33:96:08:ab:49:6f:a9:4b:73:18:eb:1f: 65:54:d5:42:ac:dc:49:0b:85:4e:09:6a:3b:eb:27: bc:97:dd:43:c9:f6:90:2a:63:7e:2f:43:4a:4a:cd: 51:49:18:00:33:3c:f2:c5:34:65:d8:c5:32:1d:6a: b4:6c:d2:bd:d8:b6:cc:b7:03:8d:3d:35:3a:12:8b: f2:02:ca:b2:b9:32:b6:ea:8d:5e:5d:56:53:20:b6: 27:d8:a0:1e:d7:a2:f9:2e:4e:88:90:f1:d7:f8:be: 38:04:35:a9:7e:95:99:e6:3d:c1:f0:52:74:c1:d3: 13:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:87:BD:55:E8:44:4A:5E:66:68:5C:F6:44:14:0B:9E:11:C8:5F:99 X509v3 Authority Key Identifier: keyid:D7:C7:61:22:42:64:91:B8:1F:84:E5:A8:24:E4:AB:EB:85:82:BA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C76122426491B81F84E5A824E4ABEB8582BAC4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:8c:d1:68:62:6b:26:63:df:32:91:de:08:2d:53:b0:59:c4: 28:8f:b9:19:25:ff:b6:78:b3:23:b6:26:c4:2c:d7:35:b5:15: 0f:97:dc:55:37:42:ea:bc:f0:79:fd:95:0e:e1:99:d6:3d:18: 3c:e3:d3:4b:71:af:49:c7:85:63:15:44:a0:31:65:3d:66:ec: 81:a5:44:13:a3:3c:cf:bd:da:70:01:f0:6f:c6:07:e1:12:12: 23:cf:f8:f0:95:bd:fd:a8:3e:39:54:d4:4a:c3:cd:76:83:65: d7:7b:0b:eb:87:d2:05:50:58:cd:58:4d:b2:3c:21:e3:2e:ed: b9:7d:1e:09:c0:58:eb:dd:dd:ea:5e:a7:af:9a:d1:89:30:9c: 33:0f:36:95:c3:1c:83:c9:38:61:ba:79:0e:a6:31:0f:56:89: 65:ae:4c:1c:30:30:ed:af:c3:f7:c5:06:c3:d5:97:74:d7:6b: 11:56:9b:0d:38:d2:f7:c2:3a:74:57:39:96:90:7b:84:ba:9b: fc:76:d5:0d:b7:fa:a9:07:3e:a9:10:e9:4c:b3:c8:77:6d:94: 45:94:37:25:73:74:08:f5:d7:e9:07:60:cd:e8:3a:d7:e4:7b: bd:8a:d9:c8:c0:f7:9d:59:34:1e:f2:a4:2d:27:4f:8a:c0:f3: 88:e1:26:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNR2jiE5xxyJIpcVjJpSiZ9FuncAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdDNzYxMjI0MjY0OTFCODFGODRFNUE4MjRFNEFCRUI4 NTgyQkFDNDAeFw0yNTA0MjkxNDU1NDNaFw0yNTA1MDIxOTA0NDNaMDMxMTAvBgNV BAMTKDQwODdCRDU1RTg0NDRBNUU2NjY4NUNGNjQ0MTQwQjlFMTFDODVGOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9j7+gy0Z+wPMEbbNRmx5twIU8 fwi4GW1c1aZ0fQXjNvF0iagD3KYCFg0XLtrd7hCWdL42sZ5U8XgDFZIFEnlNNRJ8 1JlxuO5zBBpNQp+NFFbF0pTZKzz3Do99VdjSeDj48Uy56EeBib0c56GHuZF6x2Tk VWWnesJ9YFCfBj9Fm2ykvG+AM434rTOWCKtJb6lLcxjrH2VU1UKs3EkLhU4Jajvr J7yX3UPJ9pAqY34vQ0pKzVFJGAAzPPLFNGXYxTIdarRs0r3Ytsy3A409NToSi/IC yrK5MrbqjV5dVlMgtifYoB7XovkuToiQ8df4vjgENal+lZnmPcHwUnTB0xOzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQIe9VehESl5maFz2RBQLnhHIX5kwHwYDVR0j BBgwFoAU18dhIkJkkbgfhOWoJOSr64WCusQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDUwZGNjMy04NGRkLTQ1OTUtYmEyYy1iYzY5OTg5NjkyZjEvMC9EN0M3NjEyMjQy NjQ5MUI4MUY4NEU1QTgyNEU0QUJFQjg1ODJCQUM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDdDNzYxMjI0MjY0OTFCODFGODRFNUE4MjRFNEFCRUI4NTgy QkFDNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjA1MGRjYzMtODRkZC00NTk1LWJh MmMtYmM2OTk4OTY5MmYxLzAvRDdDNzYxMjI0MjY0OTFCODFGODRFNUE4MjRFNEFC RUI4NTgyQkFDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADyM0WhiayZj3zKR3ggtU7BZxCiPuRkl/7Z4 syO2JsQs1zW1FQ+X3FU3Quq88Hn9lQ7hmdY9GDzj00txr0nHhWMVRKAxZT1m7IGl RBOjPM+92nAB8G/GB+ESEiPP+PCVvf2oPjlU1ErDzXaDZdd7C+uH0gVQWM1YTbI8 IeMu7bl9HgnAWOvd3epep6+a0YkwnDMPNpXDHIPJOGG6eQ6mMQ9WiWWuTBwwMO2v w/fFBsPVl3TXaxFWmw040vfCOnRXOZaQe4S6m/x21Q23+qkHPqkQ6UyzyHdtlEWU NyVzdAj11+kHYM3oOtfke72K2cjA951ZNB7ypC0nT4rA84jhJl4= -----END CERTIFICATE-----Generated at Wed Apr 30 03:39:10 2025 by rpki-client