$ rpki-client -vvf repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft File: 9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft (raw, json) Hash identifier: ub/tjGyTl8bswtIoeb6MJ9mXeMK/6zdIb8DblF6z010= Subject key identifier: D1:8E:36:DC:33:1D:3C:05:78:2C:EF:9F:BB:F0:F5:AD:C6:36:42:4A Authority key identifier: 9A:4F:69:E8:B4:60:63:63:8E:82:F1:FB:06:0A:B3:D7:25:FA:48:21 Certificate issuer: /CN=9A4F69E8B46063638E82F1FB060AB3D725FA4821 Certificate serial: 620DFF2C2893A13BF143CCE4C166FF6133146D2A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A4F69E8B46063638E82F1FB060AB3D725FA4821.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft Manifest number: 029D Signing time: Tue 29 Apr 2025 20:02:20 +0000 Manifest this update: Tue 29 Apr 2025 19:57:20 +0000 Manifest next update: Fri 02 May 2025 21:34:20 +0000 Files and hashes: 1: 9A4F69E8B46063638E82F1FB060AB3D725FA4821.crl (hash: e9Dzv/ZX8e2ivZ5ZTvf1Bg3Cvzcmxwflj2axkpqeS5E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.crl rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A4F69E8B46063638E82F1FB060AB3D725FA4821.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 21:34:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:0d:ff:2c:28:93:a1:3b:f1:43:cc:e4:c1:66:ff:61:33:14:6d:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A4F69E8B46063638E82F1FB060AB3D725FA4821 Validity Not Before: Apr 29 19:57:20 2025 GMT Not After : May 2 21:34:20 2025 GMT Subject: CN=D18E36DC331D3C05782CEF9FBBF0F5ADC636424A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a4:6f:72:cb:51:06:af:f2:58:2d:57:f5:3a: 11:0d:34:8d:e8:e3:3b:c8:a9:4e:9b:cb:b9:aa:3d: 39:92:a6:e8:00:bf:b0:41:ec:1a:f1:04:5b:4d:80: 2e:51:14:c1:e1:e2:74:03:8a:5a:5f:ec:b1:fb:6a: 9b:9a:82:66:30:c6:5e:05:fa:5e:22:b9:26:b5:1f: 37:b8:45:b4:1e:e0:21:a7:9b:76:ee:99:4c:d2:25: 4b:3f:ec:b2:87:a1:b0:30:3e:bd:1f:67:ce:94:b1: ad:6d:b0:4a:8b:37:37:c0:63:4b:f9:52:94:a0:3b: 3c:d0:07:89:a2:df:05:c5:8c:f3:f7:39:f8:dd:22: c0:a1:61:97:ed:68:f2:22:ef:94:99:2f:91:7d:11: 03:2a:a0:64:90:eb:40:65:d4:4b:19:d9:13:8e:68: a5:88:c3:72:01:7d:b3:9e:28:73:57:53:dd:2e:26: d2:c5:17:e7:5c:40:43:2e:00:26:8d:20:b2:5b:31: 2a:f7:2e:08:5a:c9:8b:62:97:fa:d3:26:b1:3c:3b: 0e:42:d1:d8:4a:63:56:88:4e:2f:0e:b6:37:7d:54: 37:40:b1:4d:43:43:9e:be:df:34:d7:56:07:c4:ab: 2c:eb:ff:4c:eb:9d:f7:71:8c:82:92:03:df:60:7b: 7b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:8E:36:DC:33:1D:3C:05:78:2C:EF:9F:BB:F0:F5:AD:C6:36:42:4A X509v3 Authority Key Identifier: keyid:9A:4F:69:E8:B4:60:63:63:8E:82:F1:FB:06:0A:B3:D7:25:FA:48:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A4F69E8B46063638E82F1FB060AB3D725FA4821.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:87:c8:22:a3:d8:01:bb:74:1f:28:62:89:e0:1e:be:ea:9f: 75:98:d8:be:d6:7f:8d:ab:d2:c9:d1:99:d2:86:a0:78:1e:10: 39:00:15:1a:08:d6:76:71:f5:60:6c:d5:4c:4f:9f:db:b8:36: 0d:69:56:77:8a:44:36:db:9a:b4:9f:8e:1d:8d:19:4f:ab:ce: e6:45:5a:47:2d:04:e0:11:17:ac:f1:fe:4c:25:60:6b:47:8a: 21:52:86:0c:24:a8:02:88:3f:ac:6e:b4:d7:9b:88:b4:54:8e: 0c:e3:76:22:76:05:65:bf:37:0d:80:45:3d:2d:5d:2e:3c:a7: 99:d9:f3:7c:65:ca:fe:48:c1:3f:66:f7:be:fb:f4:7a:23:63: 65:69:0f:b2:12:16:fe:5f:71:71:bc:7e:99:c6:5c:76:4e:5a: f7:c1:70:0c:bd:61:d5:c8:8a:16:6e:39:f3:59:fd:9a:02:51: a5:aa:e3:62:ad:b7:cc:ec:61:02:b6:78:b1:08:c0:e0:f7:2d: 30:e7:e9:d0:f8:89:40:ce:c7:e6:bf:76:3d:6e:6b:16:91:37: 33:a1:3b:83:10:04:c0:72:bd:fd:60:ba:2b:19:9e:49:28:fe: 72:e6:3d:f0:2b:67:a0:86:c8:9a:37:54:c7:f7:d7:41:e7:d2: 5b:9e:4f:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYg3/LCiToTvxQ8zkwWb/YTMUbSowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE0RjY5RThCNDYwNjM2MzhFODJGMUZCMDYwQUIzRDcy NUZBNDgyMTAeFw0yNTA0MjkxOTU3MjBaFw0yNTA1MDIyMTM0MjBaMDMxMTAvBgNV BAMTKEQxOEUzNkRDMzMxRDNDMDU3ODJDRUY5RkJCRjBGNUFEQzYzNjQyNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6pG9yy1EGr/JYLVf1OhENNI3o 4zvIqU6by7mqPTmSpugAv7BB7BrxBFtNgC5RFMHh4nQDilpf7LH7apuagmYwxl4F +l4iuSa1Hze4RbQe4CGnm3bumUzSJUs/7LKHobAwPr0fZ86Usa1tsEqLNzfAY0v5 UpSgOzzQB4mi3wXFjPP3OfjdIsChYZftaPIi75SZL5F9EQMqoGSQ60Bl1EsZ2ROO aKWIw3IBfbOeKHNXU90uJtLFF+dcQEMuACaNILJbMSr3LghayYtil/rTJrE8Ow5C 0dhKY1aITi8Otjd9VDdAsU1DQ56+3zTXVgfEqyzr/0zrnfdxjIKSA99ge3vDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0Y423DMdPAV4LO+fu/D1rcY2QkowHwYDVR0j BBgwFoAUmk9p6LRgY2OOgvH7Bgqz1yX6SCEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NjM4YmQyMS1iZTU2LTQyYjQtODI3OC0wNTQwNWRjZTVlODgvMC85QTRGNjlFOEI0 NjA2MzYzOEU4MkYxRkIwNjBBQjNENzI1RkE0ODIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE0RjY5RThCNDYwNjM2MzhFODJGMUZCMDYwQUIzRDcyNUZB NDgyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDYzOGJkMjEtYmU1Ni00MmI0LTgy NzgtMDU0MDVkY2U1ZTg4LzAvOUE0RjY5RThCNDYwNjM2MzhFODJGMUZCMDYwQUIz RDcyNUZBNDgyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADaHyCKj2AG7dB8oYongHr7qn3WY2L7Wf42r 0snRmdKGoHgeEDkAFRoI1nZx9WBs1UxPn9u4Ng1pVneKRDbbmrSfjh2NGU+rzuZF WkctBOARF6zx/kwlYGtHiiFShgwkqAKIP6xutNebiLRUjgzjdiJ2BWW/Nw2ART0t XS48p5nZ83xlyv5IwT9m97779HojY2VpD7ISFv5fcXG8fpnGXHZOWvfBcAy9YdXI ihZuOfNZ/ZoCUaWq42Ktt8zsYQK2eLEIwOD3LTDn6dD4iUDOx+a/dj1uaxaRNzOh O4MQBMByvf1guisZnkko/nLmPfArZ6CGyJo3VMf310Hn0lueT30= -----END CERTIFICATE-----Generated at Thu May 1 14:54:53 2025 by rpki-client