$ rpki-client -vvf repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft File: 02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft (raw, json) Hash identifier: 8ptRtyXXLcPpPQLXgBN+1EynOt9n/wVA6fxQxZHI94o= Subject key identifier: 53:05:4F:18:B3:33:C8:C9:04:46:C5:87:AF:6D:BC:A7:54:5C:C2:FD Authority key identifier: 02:23:69:13:B4:6A:90:03:C0:64:5E:6C:C8:58:EA:54:D6:D7:F4:AC Certificate issuer: /CN=02236913B46A9003C0645E6CC858EA54D6D7F4AC Certificate serial: 44BDB146DED127D39AB095262FA7E19315445044 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02236913B46A9003C0645E6CC858EA54D6D7F4AC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft Manifest number: BF Signing time: Mon 28 Apr 2025 04:20:58 +0000 Manifest this update: Mon 28 Apr 2025 04:15:58 +0000 Manifest next update: Thu 01 May 2025 15:14:58 +0000 Files and hashes: 1: 02236913B46A9003C0645E6CC858EA54D6D7F4AC.crl (hash: PKWq/CtVzBy7xOQIDMQo40nXIi0IROozMNpUtrc7Mdk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.crl rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02236913B46A9003C0645E6CC858EA54D6D7F4AC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:14:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:bd:b1:46:de:d1:27:d3:9a:b0:95:26:2f:a7:e1:93:15:44:50:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02236913B46A9003C0645E6CC858EA54D6D7F4AC Validity Not Before: Apr 28 04:15:58 2025 GMT Not After : May 1 15:14:58 2025 GMT Subject: CN=53054F18B333C8C90446C587AF6DBCA7545CC2FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:1e:f3:24:c9:a0:d0:bf:ac:59:f8:5a:ff:61: 87:72:20:33:4a:a1:83:16:a5:75:5a:80:41:2b:e5: 49:f8:84:66:9e:3f:04:ea:a3:f5:83:8c:05:5b:f8: 04:90:66:80:2d:cd:49:7c:70:31:2b:05:a7:65:8d: 12:98:9c:7d:35:bd:8c:b1:41:94:a4:22:2c:50:84: 0f:74:61:89:45:d3:9b:36:d5:7b:82:71:be:5b:a2: 9b:40:09:43:99:ba:16:1a:c5:08:b1:6a:7f:1e:d7: 89:00:8a:bc:88:5b:c9:da:8c:f5:54:3d:95:68:6d: 30:b9:fe:1d:1e:71:f1:57:1c:a0:eb:63:9e:94:43: 3d:58:0b:1f:8b:fe:dd:07:f9:7a:c1:0e:28:3a:f5: e0:64:7f:f5:6d:7c:7d:7e:a0:2e:2b:3d:40:e3:1a: 8c:af:a2:c9:f7:cc:cb:9d:23:ab:5e:be:6c:68:fe: 6a:88:83:ca:63:20:93:f9:95:d8:cb:91:f6:52:2b: 02:dd:4d:5f:df:6a:13:63:f0:f3:7e:ad:e5:c0:2d: 27:7e:39:6e:1a:7e:e9:fe:37:40:35:2b:1a:e1:3a: 23:5e:b4:7b:b9:06:e1:62:32:d0:b9:fb:1e:a9:2e: 15:b0:6e:55:7c:01:80:1e:e1:e8:c2:fb:a2:95:01: 85:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:05:4F:18:B3:33:C8:C9:04:46:C5:87:AF:6D:BC:A7:54:5C:C2:FD X509v3 Authority Key Identifier: keyid:02:23:69:13:B4:6A:90:03:C0:64:5E:6C:C8:58:EA:54:D6:D7:F4:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02236913B46A9003C0645E6CC858EA54D6D7F4AC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:eb:3c:98:f0:a3:24:21:73:bc:39:92:e1:f2:4e:aa:26:50: 90:ca:72:ca:1f:3d:30:4d:25:ab:73:1f:19:8f:df:98:52:52: 42:12:ca:fc:c5:71:be:a6:a1:0b:6b:94:f3:a8:67:0a:71:2f: a1:11:33:8e:2a:d2:40:a9:8d:ac:54:d9:25:48:a6:09:82:3e: e0:f3:2f:6b:50:44:6f:cf:67:6d:6b:f7:b8:d3:fd:81:cf:2d: 69:28:a4:22:be:be:b3:c9:35:f2:d7:d4:b3:da:51:cc:fe:36: f2:24:74:1e:10:54:0f:b0:e1:2e:9a:a5:6d:98:13:f5:f0:94: 1f:82:1b:7f:8b:27:52:e6:27:ea:e0:98:9d:0c:97:98:76:20: 8e:9d:0e:b9:fd:26:f7:0a:ff:25:7d:7b:af:9d:de:d8:54:55: a4:3e:95:8b:76:2e:f1:14:61:ed:25:14:b4:4f:a7:61:ca:0d: f1:d9:57:3a:2a:d6:41:a5:ec:9f:48:2c:d5:a9:ba:b0:06:21: 62:31:0c:06:b6:e9:2a:41:b1:43:bc:7d:7d:fe:83:52:60:fa: 0f:2e:e9:59:d5:02:9b:c3:c1:54:7c:fe:9d:46:60:25:c6:aa: 80:6c:b9:f6:a0:17:0d:4d:c0:f5:2b:ce:a6:ad:d7:48:4d:e1: 5c:68:d8:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURL2xRt7RJ9OasJUmL6fhkxVEUEQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIyMzY5MTNCNDZBOTAwM0MwNjQ1RTZDQzg1OEVBNTRE NkQ3RjRBQzAeFw0yNTA0MjgwNDE1NThaFw0yNTA1MDExNTE0NThaMDMxMTAvBgNV BAMTKDUzMDU0RjE4QjMzM0M4QzkwNDQ2QzU4N0FGNkRCQ0E3NTQ1Q0MyRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsHvMkyaDQv6xZ+Fr/YYdyIDNK oYMWpXVagEEr5Un4hGaePwTqo/WDjAVb+ASQZoAtzUl8cDErBadljRKYnH01vYyx QZSkIixQhA90YYlF05s21XuCcb5boptACUOZuhYaxQixan8e14kAiryIW8najPVU PZVobTC5/h0ecfFXHKDrY56UQz1YCx+L/t0H+XrBDig69eBkf/VtfH1+oC4rPUDj Goyvosn3zMudI6tevmxo/mqIg8pjIJP5ldjLkfZSKwLdTV/fahNj8PN+reXALSd+ OW4afun+N0A1KxrhOiNetHu5BuFiMtC5+x6pLhWwblV8AYAe4ejC+6KVAYU7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUwVPGLMzyMkERsWHr228p1Rcwv0wHwYDVR0j BBgwFoAUAiNpE7RqkAPAZF5syFjqVNbX9KwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YjcyZjcxYS1iOWMyLTQwMzMtOTY3NS1kNzcwNzYwM2E4MmMvMC8wMjIzNjkxM0I0 NkE5MDAzQzA2NDVFNkNDODU4RUE1NEQ2RDdGNEFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDIyMzY5MTNCNDZBOTAwM0MwNjQ1RTZDQzg1OEVBNTRENkQ3 RjRBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI3MmY3MWEtYjljMi00MDMzLTk2 NzUtZDc3MDc2MDNhODJjLzAvMDIyMzY5MTNCNDZBOTAwM0MwNjQ1RTZDQzg1OEVB NTRENkQ3RjRBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI7rPJjwoyQhc7w5kuHyTqomUJDKcsofPTBN JatzHxmP35hSUkISyvzFcb6moQtrlPOoZwpxL6ERM44q0kCpjaxU2SVIpgmCPuDz L2tQRG/PZ21r97jT/YHPLWkopCK+vrPJNfLX1LPaUcz+NvIkdB4QVA+w4S6apW2Y E/XwlB+CG3+LJ1LmJ+rgmJ0Ml5h2II6dDrn9JvcK/yV9e6+d3thUVaQ+lYt2LvEU Ye0lFLRPp2HKDfHZVzoq1kGl7J9ILNWpurAGIWIxDAa26SpBsUO8fX3+g1Jg+g8u 6VnVApvDwVR8/p1GYCXGqoBsufagFw1NwPUrzqat10hN4Vxo2Gg= -----END CERTIFICATE-----Generated at Wed Apr 30 11:14:04 2025 by rpki-client