$ rpki-client -vvf repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft File: 98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft (raw, json) Hash identifier: GcgaZu7wj1zmy8cChHcEILLGiVh4/ogb2zUcIVEYj9M= Subject key identifier: 39:EF:F1:FD:95:19:AE:BB:33:71:37:15:B8:8F:A8:D9:01:B5:CB:00 Authority key identifier: 98:70:7B:7E:B6:5D:38:E2:ED:DB:57:46:D7:CF:77:C8:1B:FC:67:43 Certificate issuer: /CN=98707B7EB65D38E2EDDB5746D7CF77C81BFC6743 Certificate serial: 748B3DFC738350CAD8A62D65CEECC640DE92CBE4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft Manifest number: 01EB Signing time: Mon 28 Apr 2025 20:30:49 +0000 Manifest this update: Mon 28 Apr 2025 20:25:49 +0000 Manifest next update: Thu 01 May 2025 23:27:49 +0000 Files and hashes: 1: 98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.crl (hash: J8xm1djy0gIexCefw0+VapaIvULCM4jF7ZSwDoHlMcc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.crl rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:27:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:8b:3d:fc:73:83:50:ca:d8:a6:2d:65:ce:ec:c6:40:de:92:cb:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98707B7EB65D38E2EDDB5746D7CF77C81BFC6743 Validity Not Before: Apr 28 20:25:49 2025 GMT Not After : May 1 23:27:49 2025 GMT Subject: CN=39EFF1FD9519AEBB33713715B88FA8D901B5CB00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:37:99:9d:92:66:3b:90:5f:e0:c9:ab:0b:de: 05:36:4d:66:8d:bf:bf:d9:5a:44:3e:59:67:7c:c9: e1:9c:9a:f3:c0:8d:5f:e4:88:35:5e:6f:90:d2:68: e5:72:3d:60:fa:83:68:ae:2e:4a:a8:6e:f3:b6:6b: 38:27:49:8c:02:31:3c:cf:e4:7f:0d:ac:be:c6:eb: 74:b3:34:a5:f1:00:39:7c:dd:b6:ad:1a:70:a6:1e: ee:43:f1:9a:31:c1:8f:ff:9a:83:e8:ae:09:41:1e: e4:d5:eb:1f:89:50:8f:25:0b:dc:dc:16:26:45:39: c8:34:03:0a:db:06:9f:ae:29:37:f6:88:ce:b3:13: 8e:98:cc:5c:9d:83:3a:11:3d:f8:fc:44:b8:6a:d4: 8a:b6:87:cd:b5:11:c3:96:e3:49:e9:4d:9a:6c:c3: 3f:3b:0c:cb:21:c3:4f:f3:20:b4:cf:f2:d0:98:d7: e2:31:56:99:95:11:c6:03:ab:ce:95:dd:1d:d8:cd: f0:8b:d8:e4:ae:9c:60:74:26:b8:58:0c:cb:74:a2: bc:2b:fa:9e:92:75:dc:81:71:be:bf:f3:06:a2:f5: 64:2a:4a:c7:f5:79:f1:12:70:db:07:42:6e:67:5a: 57:3c:41:34:ff:28:6b:62:28:e1:e5:ce:db:22:0a: 2c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:EF:F1:FD:95:19:AE:BB:33:71:37:15:B8:8F:A8:D9:01:B5:CB:00 X509v3 Authority Key Identifier: keyid:98:70:7B:7E:B6:5D:38:E2:ED:DB:57:46:D7:CF:77:C8:1B:FC:67:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:35:fb:41:c1:ff:dd:24:2b:ce:e0:ba:33:2e:8b:bf:2d:3f: 23:d4:d8:a0:9b:5f:be:01:4b:06:29:19:c3:90:77:ae:ff:0a: 0b:cb:d9:65:6f:32:b8:c5:0a:ff:3d:a9:18:bf:8f:79:a1:97: 47:ef:4f:06:8a:5c:f0:85:38:c1:b5:21:01:03:d4:c5:b5:37: dd:3d:53:cf:f0:59:0e:5c:33:59:06:b1:6f:75:a3:59:01:5c: 11:b0:58:09:22:cd:1f:bd:b0:07:dc:2d:1e:9c:81:31:29:58: 18:d6:37:dd:2f:e6:e2:e6:b4:f9:40:b7:60:df:6c:31:75:ff: c3:a7:95:1a:bd:d5:da:42:49:90:72:f5:d9:fe:8a:ad:62:3c: 16:2e:74:45:c6:63:7d:e7:66:f6:e6:56:47:c1:b3:e2:53:8b: a5:af:cf:d1:ba:da:05:97:67:c5:b1:bf:c5:45:cc:86:4b:7d: 1f:57:13:3c:88:b6:9e:36:6b:7f:90:8b:9e:f7:d3:27:e6:2b: 7d:a6:95:27:01:61:32:dd:6b:f9:a0:d5:62:04:a2:45:9d:72: 8d:6c:47:de:08:6e:b4:94:c0:6f:63:eb:81:ae:f6:b7:9a:d9: bf:db:0e:c7:4c:cc:04:74:76:a7:10:45:ad:33:4c:9b:c4:6b: f5:c1:48:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdIs9/HODUMrYpi1lzuzGQN6Sy+QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg3MDdCN0VCNjVEMzhFMkVEREI1NzQ2RDdDRjc3Qzgx QkZDNjc0MzAeFw0yNTA0MjgyMDI1NDlaFw0yNTA1MDEyMzI3NDlaMDMxMTAvBgNV BAMTKDM5RUZGMUZEOTUxOUFFQkIzMzcxMzcxNUI4OEZBOEQ5MDFCNUNCMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmN5mdkmY7kF/gyasL3gU2TWaN v7/ZWkQ+WWd8yeGcmvPAjV/kiDVeb5DSaOVyPWD6g2iuLkqobvO2azgnSYwCMTzP 5H8NrL7G63SzNKXxADl83batGnCmHu5D8ZoxwY//moPorglBHuTV6x+JUI8lC9zc FiZFOcg0AwrbBp+uKTf2iM6zE46YzFydgzoRPfj8RLhq1Iq2h821EcOW40npTZps wz87DMshw0/zILTP8tCY1+IxVpmVEcYDq86V3R3YzfCL2OSunGB0JrhYDMt0orwr +p6SddyBcb6/8wai9WQqSsf1efEScNsHQm5nWlc8QTT/KGtiKOHlztsiCizhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOe/x/ZUZrrszcTcVuI+o2QG1ywAwHwYDVR0j BBgwFoAUmHB7frZdOOLt21dG1893yBv8Z0MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Njc5Y2JmNi0wOTEzLTQ4MjEtOGFlMS1iYjUxMWVhZjA4OGYvMC85ODcwN0I3RUI2 NUQzOEUyRUREQjU3NDZEN0NGNzdDODFCRkM2NzQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg3MDdCN0VCNjVEMzhFMkVEREI1NzQ2RDdDRjc3QzgxQkZD Njc0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTY3OWNiZjYtMDkxMy00ODIxLThh ZTEtYmI1MTFlYWYwODhmLzAvOTg3MDdCN0VCNjVEMzhFMkVEREI1NzQ2RDdDRjc3 QzgxQkZDNjc0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAA1+0HB/90kK87gujMui78tPyPU2KCbX74B SwYpGcOQd67/CgvL2WVvMrjFCv89qRi/j3mhl0fvTwaKXPCFOMG1IQED1MW1N909 U8/wWQ5cM1kGsW91o1kBXBGwWAkizR+9sAfcLR6cgTEpWBjWN90v5uLmtPlAt2Df bDF1/8OnlRq91dpCSZBy9dn+iq1iPBYudEXGY33nZvbmVkfBs+JTi6Wvz9G62gWX Z8Wxv8VFzIZLfR9XEzyItp42a3+Qi5730yfmK32mlScBYTLda/mg1WIEokWdco1s R94IbrSUwG9j64Gu9rea2b/bDsdMzAR0dqcQRa0zTJvEa/XBSDw= -----END CERTIFICATE-----Generated at Wed Apr 30 08:22:11 2025 by rpki-client