$ rpki-client -vvf repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft File: E74A2346929DE84143E5DF0DD921764C285B01A2.mft (raw, json) Hash identifier: MA0+koiSg3147JQcVt0wDG9zFIFg/G0Ci88+Ey0KzKQ= Subject key identifier: 4B:1E:90:6C:71:C1:09:E1:5C:91:6E:56:6A:AC:60:E0:BF:E0:17:C2 Authority key identifier: E7:4A:23:46:92:9D:E8:41:43:E5:DF:0D:D9:21:76:4C:28:5B:01:A2 Certificate issuer: /CN=E74A2346929DE84143E5DF0DD921764C285B01A2 Certificate serial: 2342481088F5AF26D750668429F842B38450B442 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E74A2346929DE84143E5DF0DD921764C285B01A2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft Manifest number: 77 Signing time: Tue 29 Apr 2025 01:31:13 +0000 Manifest this update: Tue 29 Apr 2025 01:26:13 +0000 Manifest next update: Fri 02 May 2025 08:56:13 +0000 Files and hashes: 1: E74A2346929DE84143E5DF0DD921764C285B01A2.crl (hash: 4pEKXR8dIQnB58oSiExvL+VbOwrG9zZU/3PBoTdY6qE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.crl rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E74A2346929DE84143E5DF0DD921764C285B01A2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 08:56:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:42:48:10:88:f5:af:26:d7:50:66:84:29:f8:42:b3:84:50:b4:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E74A2346929DE84143E5DF0DD921764C285B01A2 Validity Not Before: Apr 29 01:26:13 2025 GMT Not After : May 2 08:56:13 2025 GMT Subject: CN=4B1E906C71C109E15C916E566AAC60E0BFE017C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a8:80:10:ad:4d:cb:9c:25:f5:97:40:ca:8d: f8:1d:1c:b1:45:dc:15:0e:9d:72:07:08:99:fe:aa: 81:e0:ff:24:49:82:a2:08:14:f0:63:51:99:77:ae: 19:47:87:ef:b2:4e:e1:0b:67:c3:fa:b4:00:75:37: ad:68:50:84:1b:26:60:80:83:db:8b:25:04:7e:1a: f6:7e:6d:f6:b8:0b:28:d9:cd:8c:44:f7:5d:59:e2: 7f:50:50:5e:f6:52:8b:a0:e9:d8:f6:c9:81:79:9f: a0:2b:84:9d:b2:30:c3:da:62:d2:2e:6f:d3:cf:45: 4f:2f:cd:3f:6a:a8:78:f7:9c:85:2e:d7:30:42:ae: e1:3c:ef:78:7f:ce:cd:60:8a:d8:25:be:35:6c:db: 42:11:05:b0:c9:de:c9:7c:1c:e0:5b:f8:16:3c:a8: 2e:db:eb:f0:0f:3a:47:2a:f8:88:3f:0a:39:f7:fb: 84:c0:72:e7:db:4a:53:bd:05:e4:85:2a:d8:41:62: e0:e3:75:3f:ff:80:3b:5e:f3:e5:80:3f:a2:a1:12: e5:2e:00:bf:9b:14:eb:e1:ff:4f:ed:5d:0c:d8:5a: cd:61:24:2a:af:25:ba:a6:05:c1:28:0d:2c:c4:45: f8:72:cb:f9:27:cb:c1:e4:5a:03:ea:3d:20:28:67: b8:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:1E:90:6C:71:C1:09:E1:5C:91:6E:56:6A:AC:60:E0:BF:E0:17:C2 X509v3 Authority Key Identifier: keyid:E7:4A:23:46:92:9D:E8:41:43:E5:DF:0D:D9:21:76:4C:28:5B:01:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E74A2346929DE84143E5DF0DD921764C285B01A2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53de5035-84e1-44c6-9cf9-4ea0bbaa093f/0/E74A2346929DE84143E5DF0DD921764C285B01A2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:68:4d:33:36:9e:78:12:44:df:14:6c:8c:84:c6:13:3c:82: 47:5a:9e:91:94:09:60:3c:f2:25:a0:a5:30:85:36:25:c2:6d: 6c:85:dd:f8:b2:ae:b5:4f:7a:bb:d8:c4:71:0b:12:de:85:1e: e1:5c:61:75:76:92:37:8a:71:57:ab:03:ca:44:77:41:b9:14: f6:27:8f:1f:ae:a2:45:86:8f:4f:92:cd:8e:30:cb:29:ca:de: 8f:d8:76:aa:77:60:58:b0:6f:af:48:9e:81:eb:cb:55:94:4d: 2c:d7:fb:a8:b1:b8:40:97:9b:fd:09:e8:96:cd:0c:9c:54:fc: ce:11:61:76:56:7a:31:0e:72:24:ea:a3:29:e6:f6:aa:06:76: fa:fa:69:8e:21:1c:f1:e1:0c:53:9d:6f:0e:fc:5c:b3:52:b3: 43:24:05:1b:cb:69:5b:fc:b4:99:6b:a6:3f:22:55:3b:85:22: 78:b1:c0:b5:00:60:99:06:16:0f:36:d3:67:69:16:07:54:98: 9c:94:d4:f3:12:8e:de:89:c7:2f:e8:52:cf:ed:44:b9:57:c0: 68:a4:62:41:7d:82:a5:2e:3e:79:24:ab:27:7c:5a:f4:28:07: aa:50:bc:49:14:ca:9c:ab:6f:f2:0c:fb:59:4f:64:a6:e4:ca: 62:60:69:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI0JIEIj1rybXUGaEKfhCs4RQtEIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTc0QTIzNDY5MjlERTg0MTQzRTVERjBERDkyMTc2NEMy ODVCMDFBMjAeFw0yNTA0MjkwMTI2MTNaFw0yNTA1MDIwODU2MTNaMDMxMTAvBgNV BAMTKDRCMUU5MDZDNzFDMTA5RTE1QzkxNkU1NjZBQUM2MEUwQkZFMDE3QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVqIAQrU3LnCX1l0DKjfgdHLFF 3BUOnXIHCJn+qoHg/yRJgqIIFPBjUZl3rhlHh++yTuELZ8P6tAB1N61oUIQbJmCA g9uLJQR+GvZ+bfa4CyjZzYxE911Z4n9QUF72Uoug6dj2yYF5n6ArhJ2yMMPaYtIu b9PPRU8vzT9qqHj3nIUu1zBCruE873h/zs1gitglvjVs20IRBbDJ3sl8HOBb+BY8 qC7b6/APOkcq+Ig/Cjn3+4TAcufbSlO9BeSFKthBYuDjdT//gDte8+WAP6KhEuUu AL+bFOvh/0/tXQzYWs1hJCqvJbqmBcEoDSzERfhyy/kny8HkWgPqPSAoZ7gfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSx6QbHHBCeFckW5Waqxg4L/gF8IwHwYDVR0j BBgwFoAU50ojRpKd6EFD5d8N2SF2TChbAaIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 M2RlNTAzNS04NGUxLTQ0YzYtOWNmOS00ZWEwYmJhYTA5M2YvMC9FNzRBMjM0Njky OURFODQxNDNFNURGMEREOTIxNzY0QzI4NUIwMUEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTc0QTIzNDY5MjlERTg0MTQzRTVERjBERDkyMTc2NEMyODVC MDFBMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTNkZTUwMzUtODRlMS00NGM2LTlj ZjktNGVhMGJiYWEwOTNmLzAvRTc0QTIzNDY5MjlERTg0MTQzRTVERjBERDkyMTc2 NEMyODVCMDFBMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACtoTTM2nngSRN8UbIyExhM8gkdanpGUCWA8 8iWgpTCFNiXCbWyF3fiyrrVPervYxHELEt6FHuFcYXV2kjeKcVerA8pEd0G5FPYn jx+uokWGj0+SzY4wyynK3o/Ydqp3YFiwb69InoHry1WUTSzX+6ixuECXm/0J6JbN DJxU/M4RYXZWejEOciTqoynm9qoGdvr6aY4hHPHhDFOdbw78XLNSs0MkBRvLaVv8 tJlrpj8iVTuFInixwLUAYJkGFg8202dpFgdUmJyU1PMSjt6Jxy/oUs/tRLlXwGik YkF9gqUuPnkkqyd8WvQoB6pQvEkUypyrb/IM+1lPZKbkymJgacY= -----END CERTIFICATE-----Generated at Tue Apr 29 22:45:31 2025 by rpki-client