$ rpki-client -vvf repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.mft File: 6886844AB176920850E0984917E9713667D0A025.mft (raw, json) Hash identifier: Vgxrd849vgt63wj23ohyAtHqYaMSXEYO/4u0Tnpr+ZI= Subject key identifier: ED:8B:9A:21:32:7B:6B:18:38:8A:43:FA:08:01:01:BE:EF:14:E6:56 Authority key identifier: 68:86:84:4A:B1:76:92:08:50:E0:98:49:17:E9:71:36:67:D0:A0:25 Certificate issuer: /CN=6886844AB176920850E0984917E9713667D0A025 Certificate serial: 2AF542279D7F5F5BDADFB421A4F66579DF9BEB36 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6886844AB176920850E0984917E9713667D0A025.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.mft Manifest number: 017F Signing time: Thu 01 May 2025 09:22:13 +0000 Manifest this update: Thu 01 May 2025 09:17:13 +0000 Manifest next update: Sun 04 May 2025 10:40:13 +0000 Files and hashes: 1: 6886844AB176920850E0984917E9713667D0A025.crl (hash: 09+kh8NnaoPOb1IATZM1DAXHlAPDnTXPoI+20ODaNXQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.crl rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6886844AB176920850E0984917E9713667D0A025.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 10:40:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:f5:42:27:9d:7f:5f:5b:da:df:b4:21:a4:f6:65:79:df:9b:eb:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6886844AB176920850E0984917E9713667D0A025 Validity Not Before: May 1 09:17:13 2025 GMT Not After : May 4 10:40:13 2025 GMT Subject: CN=ED8B9A21327B6B18388A43FA080101BEEF14E656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a6:40:73:df:33:48:99:78:c7:63:c3:79:0f: 0e:4c:4e:35:04:34:10:ab:c2:47:35:e1:29:8d:30: 9c:3e:42:ad:3b:b3:ac:25:91:ac:79:b1:d6:81:e3: 3f:82:ad:1a:33:4c:ec:23:6c:1e:ee:28:b1:06:33: 30:d8:99:22:56:5c:73:ca:c8:8e:cb:21:43:1e:30: b1:15:42:6c:08:04:a4:75:ed:0c:10:08:1f:84:12: 6e:02:88:a2:f8:8f:07:a8:52:15:fe:d8:e5:09:76: c5:84:5f:15:14:ff:e9:81:cc:d8:51:07:07:46:8e: de:b2:35:80:62:ca:c7:a7:b4:29:a8:fe:09:01:e4: 0f:80:7c:c8:1f:b4:15:f6:bb:25:f0:3f:40:55:dd: 2f:c2:7b:e1:79:c0:41:7a:e3:3c:89:08:09:4d:1e: 58:20:ef:e8:14:33:06:bb:fd:7c:71:94:23:95:58: c6:8a:c5:e4:cd:ad:2c:7d:f2:bb:68:19:1d:64:ef: 6e:6c:74:a1:17:f8:86:08:09:3e:a1:23:42:1b:e4: 56:3c:47:4f:24:f4:b5:e6:46:81:89:8e:02:ce:6b: 11:aa:ba:21:6a:f2:5e:57:8a:2b:fc:5e:7d:d2:5b: 2c:3d:3d:b5:a2:0a:06:4e:18:8c:04:d3:b4:f1:3d: b1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:8B:9A:21:32:7B:6B:18:38:8A:43:FA:08:01:01:BE:EF:14:E6:56 X509v3 Authority Key Identifier: keyid:68:86:84:4A:B1:76:92:08:50:E0:98:49:17:E9:71:36:67:D0:A0:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6886844AB176920850E0984917E9713667D0A025.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4455cb29-5276-4a79-b33a-cc51517bdd18/0/6886844AB176920850E0984917E9713667D0A025.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:20:82:75:9c:66:ab:d0:eb:e2:85:6e:f6:95:36:be:69:09: 6a:6f:83:7c:50:71:dc:5b:54:7a:9e:3b:56:b7:a8:0e:80:98: a1:44:b0:c4:ff:0c:77:02:38:36:a6:2f:07:6c:34:a4:66:0a: d3:f5:32:da:47:ad:cb:ae:cc:59:e7:8e:5f:15:8d:a8:9a:a8: 72:ca:8f:e8:4d:56:9c:9e:7d:ad:e0:1b:f4:a5:78:bd:70:46: 46:a6:6a:e2:50:9e:03:f3:c4:3b:17:0b:3a:fa:d5:71:a6:52: ce:f5:cc:4e:35:9b:97:f5:de:ba:bf:31:2d:19:73:98:ca:24: 2f:e8:5b:5a:a3:86:46:4d:c7:f4:26:69:16:e3:3a:d1:73:63: 82:51:a4:dc:16:c4:97:5a:48:43:44:c9:e9:61:77:94:4d:ac: 40:72:3c:86:fc:b8:d9:75:cd:ce:2d:01:e7:e1:e0:5e:d8:a8: 91:6e:2d:63:a3:19:07:a1:5e:79:62:d4:61:89:77:f3:2b:e5: 99:32:7c:2f:f2:3e:49:dc:67:3c:18:62:85:cb:77:cc:e2:a4: 65:64:6a:ec:96:9a:54:5f:6a:3d:c1:60:39:44:93:d8:89:c1: 82:77:19:27:49:10:6a:42:44:99:c1:8c:02:b4:0b:3b:e2:0e: 0f:34:34:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKvVCJ51/X1va37QhpPZled+b6zYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjg4Njg0NEFCMTc2OTIwODUwRTA5ODQ5MTdFOTcxMzY2 N0QwQTAyNTAeFw0yNTA1MDEwOTE3MTNaFw0yNTA1MDQxMDQwMTNaMDMxMTAvBgNV BAMTKEVEOEI5QTIxMzI3QjZCMTgzODhBNDNGQTA4MDEwMUJFRUYxNEU2NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcpkBz3zNImXjHY8N5Dw5MTjUE NBCrwkc14SmNMJw+Qq07s6wlkax5sdaB4z+CrRozTOwjbB7uKLEGMzDYmSJWXHPK yI7LIUMeMLEVQmwIBKR17QwQCB+EEm4CiKL4jweoUhX+2OUJdsWEXxUU/+mBzNhR BwdGjt6yNYBiysentCmo/gkB5A+AfMgftBX2uyXwP0BV3S/Ce+F5wEF64zyJCAlN Hlgg7+gUMwa7/XxxlCOVWMaKxeTNrSx98rtoGR1k725sdKEX+IYICT6hI0Ib5FY8 R08k9LXmRoGJjgLOaxGquiFq8l5Xiiv8Xn3SWyw9PbWiCgZOGIwE07TxPbGNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7YuaITJ7axg4ikP6CAEBvu8U5lYwHwYDVR0j BBgwFoAUaIaESrF2kghQ4JhJF+lxNmfQoCUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDU1Y2IyOS01Mjc2LTRhNzktYjMzYS1jYzUxNTE3YmRkMTgvMC82ODg2ODQ0QUIx NzY5MjA4NTBFMDk4NDkxN0U5NzEzNjY3RDBBMDI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjg4Njg0NEFCMTc2OTIwODUwRTA5ODQ5MTdFOTcxMzY2N0Qw QTAyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQ1NWNiMjktNTI3Ni00YTc5LWIz M2EtY2M1MTUxN2JkZDE4LzAvNjg4Njg0NEFCMTc2OTIwODUwRTA5ODQ5MTdFOTcx MzY2N0QwQTAyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADAggnWcZqvQ6+KFbvaVNr5pCWpvg3xQcdxb VHqeO1a3qA6AmKFEsMT/DHcCODamLwdsNKRmCtP1MtpHrcuuzFnnjl8VjaiaqHLK j+hNVpyefa3gG/SleL1wRkamauJQngPzxDsXCzr61XGmUs71zE41m5f13rq/MS0Z c5jKJC/oW1qjhkZNx/QmaRbjOtFzY4JRpNwWxJdaSENEyelhd5RNrEByPIb8uNl1 zc4tAefh4F7YqJFuLWOjGQehXnli1GGJd/Mr5ZkyfC/yPkncZzwYYoXLd8zipGVk auyWmlRfaj3BYDlEk9iJwYJ3GSdJEGpCRJnBjAK0CzviDg80NI8= -----END CERTIFICATE-----Generated at Thu May 1 11:13:04 2025 by rpki-client