$ rpki-client -vvf repo-rpki.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/461B039429CF609C76235D70C58DE1D0AB6EA915.mft File: 461B039429CF609C76235D70C58DE1D0AB6EA915.mft (raw, json) Hash identifier: LDogeASTnsawCcehsHBU+2ku9AVAO6XTu51RLhd19Cg= Subject key identifier: 5B:1E:01:AE:16:6D:37:DA:F4:98:11:15:35:1B:45:8B:B4:B3:33:40 Authority key identifier: 46:1B:03:94:29:CF:60:9C:76:23:5D:70:C5:8D:E1:D0:AB:6E:A9:15 Certificate issuer: /CN=461B039429CF609C76235D70C58DE1D0AB6EA915 Certificate serial: 07CA6502532766D09C5916084E475208DF87E597 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/461B039429CF609C76235D70C58DE1D0AB6EA915.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/461B039429CF609C76235D70C58DE1D0AB6EA915.mft Manifest number: B7 Signing time: Mon 28 Apr 2025 13:21:30 +0000 Manifest this update: Mon 28 Apr 2025 13:16:30 +0000 Manifest next update: Thu 01 May 2025 20:02:30 +0000 Files and hashes: 1: 461B039429CF609C76235D70C58DE1D0AB6EA915.crl (hash: +Qng0JZkrfpLUo/hyByZcKd5wLymDsqUqBGwyoVsAUc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/461B039429CF609C76235D70C58DE1D0AB6EA915.crl rsync://repo-rpki.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/461B039429CF609C76235D70C58DE1D0AB6EA915.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/461B039429CF609C76235D70C58DE1D0AB6EA915.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:ca:65:02:53:27:66:d0:9c:59:16:08:4e:47:52:08:df:87:e5:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=461B039429CF609C76235D70C58DE1D0AB6EA915 Validity Not Before: Apr 28 13:16:30 2025 GMT Not After : May 1 20:02:30 2025 GMT Subject: CN=5B1E01AE166D37DAF4981115351B458BB4B33340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:31:eb:98:f5:c3:68:1c:44:1e:60:e8:b4:a4: 6b:43:59:57:56:0b:80:6d:ad:a8:fb:f3:8d:49:fa: 98:82:06:f6:df:56:e4:8c:19:b2:a2:89:a7:bf:87: 71:d2:01:17:b9:01:6e:b8:25:78:c6:8a:d3:73:b8: f4:a4:d7:1d:f6:44:d0:f4:3f:84:44:de:c3:1c:06: ca:07:c6:53:b3:c8:cf:70:19:71:b3:90:ea:f7:02: 45:f2:47:bb:f6:88:4f:2e:24:64:40:d8:09:7d:41: 7f:01:00:8d:7f:12:f0:c1:bf:b5:f0:5d:d1:ee:86: 16:45:d6:ff:e6:ed:2f:b7:f2:aa:d8:18:b8:fd:3e: 0d:9f:bb:40:b2:ac:0d:b0:da:b8:42:2a:9a:23:8f: 46:f7:d6:5f:a1:52:7d:60:2a:80:5c:4a:ac:63:f8: a1:90:25:7c:8a:20:e4:4a:25:47:52:bc:44:b6:b2: 2f:98:19:05:81:92:2a:42:45:80:a0:78:9e:33:fd: df:ba:ff:f2:49:f0:ad:2e:5b:6d:0f:0e:65:10:7c: 7b:52:95:b0:7c:40:24:cb:e0:f6:ce:d4:1f:59:69: 67:27:df:39:ba:20:5a:ea:5c:af:85:e7:52:34:65: 69:35:68:4c:64:64:d5:f3:ab:49:6e:b3:c8:76:06: 6d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:1E:01:AE:16:6D:37:DA:F4:98:11:15:35:1B:45:8B:B4:B3:33:40 X509v3 Authority Key Identifier: keyid:46:1B:03:94:29:CF:60:9C:76:23:5D:70:C5:8D:E1:D0:AB:6E:A9:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/461B039429CF609C76235D70C58DE1D0AB6EA915.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/461B039429CF609C76235D70C58DE1D0AB6EA915.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/461B039429CF609C76235D70C58DE1D0AB6EA915.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:b0:07:d1:26:e6:38:4f:30:41:08:65:c8:43:74:84:f1:5d: 72:38:f0:33:9b:cd:16:9e:5a:6a:23:bb:c4:5a:41:d6:d5:a9: bf:c9:97:c4:3c:ba:45:11:ee:be:2f:13:3b:9f:f1:7d:20:ce: ca:73:1a:d1:61:fa:f6:53:e1:4d:e8:30:de:01:6c:df:52:a4: c4:c1:5f:96:68:15:6a:99:56:17:dd:86:8c:72:09:e2:89:1b: 95:2d:77:95:4f:01:9b:4b:bb:4e:91:ab:df:df:5a:33:ea:19: 05:80:73:6c:6c:f9:ba:4c:b9:3e:14:ca:34:b4:7b:07:ef:d4: 6b:50:18:24:02:2b:7a:9f:93:f9:79:78:17:5b:b9:73:06:a3: b5:b1:0b:ef:4f:4f:39:56:25:76:85:f4:96:90:ec:e4:58:70: 77:40:d4:f9:39:80:13:05:be:bf:e6:e2:f9:a7:c9:cb:d3:39: 2c:f5:df:09:ef:b1:88:c6:19:6d:41:90:aa:79:74:d6:63:9a: 0e:01:db:be:05:81:24:bd:2c:ef:5d:32:ba:cc:3c:8f:2c:ad: fe:b0:dd:34:95:26:d2:21:37:12:e7:be:93:e5:60:0e:6f:72: 39:31:e3:98:50:72:e8:58:a9:8f:60:ee:01:00:56:56:f4:b5: 09:bc:29:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB8plAlMnZtCcWRYITkdSCN+H5ZcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDYxQjAzOTQyOUNGNjA5Qzc2MjM1RDcwQzU4REUxRDBB QjZFQTkxNTAeFw0yNTA0MjgxMzE2MzBaFw0yNTA1MDEyMDAyMzBaMDMxMTAvBgNV BAMTKDVCMUUwMUFFMTY2RDM3REFGNDk4MTExNTM1MUI0NThCQjRCMzMzNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWMeuY9cNoHEQeYOi0pGtDWVdW C4Btraj7841J+piCBvbfVuSMGbKiiae/h3HSARe5AW64JXjGitNzuPSk1x32RND0 P4RE3sMcBsoHxlOzyM9wGXGzkOr3AkXyR7v2iE8uJGRA2Al9QX8BAI1/EvDBv7Xw XdHuhhZF1v/m7S+38qrYGLj9Pg2fu0CyrA2w2rhCKpojj0b31l+hUn1gKoBcSqxj +KGQJXyKIORKJUdSvES2si+YGQWBkipCRYCgeJ4z/d+6//JJ8K0uW20PDmUQfHtS lbB8QCTL4PbO1B9ZaWcn3zm6IFrqXK+F51I0ZWk1aExkZNXzq0lus8h2Bm2jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWx4BrhZtN9r0mBEVNRtFi7SzM0AwHwYDVR0j BBgwFoAURhsDlCnPYJx2I11wxY3h0KtuqRUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDI3ZmEwMi1lNDlmLTQyMTUtODYyYi03ZmFhZWZkOGFiM2UvMC80NjFCMDM5NDI5 Q0Y2MDlDNzYyMzVENzBDNThERTFEMEFCNkVBOTE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDYxQjAzOTQyOUNGNjA5Qzc2MjM1RDcwQzU4REUxRDBBQjZF QTkxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDAyN2ZhMDItZTQ5Zi00MjE1LTg2 MmItN2ZhYWVmZDhhYjNlLzAvNDYxQjAzOTQyOUNGNjA5Qzc2MjM1RDcwQzU4REUx RDBBQjZFQTkxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMmwB9Em5jhPMEEIZchDdITxXXI48DObzRae Wmoju8RaQdbVqb/Jl8Q8ukUR7r4vEzuf8X0gzspzGtFh+vZT4U3oMN4BbN9SpMTB X5ZoFWqZVhfdhoxyCeKJG5Utd5VPAZtLu06Rq9/fWjPqGQWAc2xs+bpMuT4UyjS0 ewfv1GtQGCQCK3qfk/l5eBdbuXMGo7WxC+9PTzlWJXaF9JaQ7ORYcHdA1Pk5gBMF vr/m4vmnycvTOSz13wnvsYjGGW1BkKp5dNZjmg4B274FgSS9LO9dMrrMPI8srf6w 3TSVJtIhNxLnvpPlYA5vcjkx45hQcuhYqY9g7gEAVlb0tQm8KQo= -----END CERTIFICATE-----Generated at Tue Apr 29 01:54:16 2025 by rpki-client