$ rpki-client -vvf repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft File: F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft (raw, json) Hash identifier: GcqMTMvlf69rhqhPX+a5sK8vzatxzsrT8Yx1ecLA6dA= Subject key identifier: 0E:01:3D:91:8D:06:2F:5F:FC:ED:E7:CC:47:A2:DE:72:6A:CC:FD:6C Authority key identifier: F2:B4:D5:C9:8B:07:24:CE:76:E2:12:DF:B6:55:B4:92:8B:4A:C3:25 Certificate issuer: /CN=F2B4D5C98B0724CE76E212DFB655B4928B4AC325 Certificate serial: 7E55E0E07F6103FF0BB8152C886D56CA1B4D72CE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft Manifest number: 32 Signing time: Mon 28 Apr 2025 12:31:55 +0000 Manifest this update: Mon 28 Apr 2025 12:26:55 +0000 Manifest next update: Thu 01 May 2025 23:03:55 +0000 Files and hashes: 1: F2B4D5C98B0724CE76E212DFB655B4928B4AC325.crl (hash: MivfvgEI9AsrD9Oy7YKK08CeCMLp3SNKvXocfEb5ymY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.crl rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:03:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:55:e0:e0:7f:61:03:ff:0b:b8:15:2c:88:6d:56:ca:1b:4d:72:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F2B4D5C98B0724CE76E212DFB655B4928B4AC325 Validity Not Before: Apr 28 12:26:55 2025 GMT Not After : May 1 23:03:55 2025 GMT Subject: CN=0E013D918D062F5FFCEDE7CC47A2DE726ACCFD6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:45:b0:cc:61:b7:83:2a:a7:58:0f:77:e6:02: 6a:02:35:08:09:f2:b9:47:6a:ca:2a:25:03:a0:f4: 79:d4:61:cc:9d:a4:b0:b1:23:9a:d3:cc:69:cc:d8: 19:1b:c1:e2:04:87:bb:1d:6a:7a:3c:91:04:c7:b2: 7a:d6:6f:87:11:09:29:06:bf:a3:1f:19:57:2e:0f: 60:f6:90:9c:6d:6d:18:ac:ab:7e:95:18:19:96:5b: 96:1f:ad:70:56:82:3f:56:34:d2:49:52:c4:d5:9f: 0d:ae:88:50:24:32:3c:ba:e2:d3:b2:02:9e:ec:00: 2a:57:65:49:8a:10:7b:73:42:62:72:8e:9d:e6:d6: c7:fa:08:a9:c3:5b:be:29:51:99:c3:35:3f:b7:f9: 86:4d:9f:75:54:86:e4:7a:4b:ad:e4:3d:52:3b:d4: 85:f9:65:26:39:ec:d5:c2:e1:81:07:a4:2b:32:a1: e0:af:64:56:fd:d2:1a:5d:6e:19:ec:3e:e0:6e:16: 3d:f2:76:48:76:1d:38:5e:6a:e6:7e:d7:b9:e5:33: 9a:70:f5:cf:55:71:32:a6:b7:86:66:a4:20:10:e6: 4b:88:95:bb:35:bb:70:01:56:b3:ae:a0:7d:2b:1a: 7e:f1:ba:e5:59:a5:49:81:c0:55:df:24:22:09:a6: 36:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:01:3D:91:8D:06:2F:5F:FC:ED:E7:CC:47:A2:DE:72:6A:CC:FD:6C X509v3 Authority Key Identifier: keyid:F2:B4:D5:C9:8B:07:24:CE:76:E2:12:DF:B6:55:B4:92:8B:4A:C3:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/F2B4D5C98B0724CE76E212DFB655B4928B4AC325.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:f7:ba:ba:76:24:51:1b:27:7d:69:04:4f:10:82:42:43:6e: b5:9a:0f:7f:22:98:1f:72:a8:3c:3b:7f:66:a2:9c:19:4e:40: 60:32:dd:3b:d6:e5:ae:c7:05:f6:54:6a:25:2f:46:a6:42:43: 17:68:09:2e:1c:f2:98:a1:5a:19:54:1d:f5:54:4d:7c:79:6a: 84:51:08:29:de:ab:7a:83:9e:e8:7b:5d:4f:54:43:3a:f3:b0: 87:18:2e:33:0d:90:22:61:8f:03:4d:eb:89:34:18:16:8e:2d: 2e:b7:81:94:fb:04:e0:23:1d:ec:00:d9:98:13:0d:d3:87:42: c8:3a:01:37:b6:e1:5a:13:cb:4c:e5:81:9e:79:a3:79:1e:4e: c2:43:f7:c7:74:71:1c:dc:57:c2:69:35:18:59:89:1d:c9:9c: 08:70:19:18:99:cb:69:4b:28:ff:ef:0f:f3:b2:b6:bb:7e:fe: 4f:61:4b:1f:e2:26:1e:82:6d:9a:f3:1e:73:4a:2d:27:da:ea: 16:8e:87:33:5d:7a:43:c3:0e:4e:9b:81:1e:f4:72:24:44:c5: e5:86:b5:c4:69:e8:7b:d1:64:cd:e7:43:4d:64:aa:2d:ad:f0: f3:85:99:fe:83:30:65:81:b2:cf:27:3c:f9:48:cd:bc:97:6b: 25:64:ba:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUflXg4H9hA/8LuBUsiG1WyhtNcs4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjJCNEQ1Qzk4QjA3MjRDRTc2RTIxMkRGQjY1NUI0OTI4 QjRBQzMyNTAeFw0yNTA0MjgxMjI2NTVaFw0yNTA1MDEyMzAzNTVaMDMxMTAvBgNV BAMTKDBFMDEzRDkxOEQwNjJGNUZGQ0VERTdDQzQ3QTJERTcyNkFDQ0ZENkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDURbDMYbeDKqdYD3fmAmoCNQgJ 8rlHasoqJQOg9HnUYcydpLCxI5rTzGnM2BkbweIEh7sdano8kQTHsnrWb4cRCSkG v6MfGVcuD2D2kJxtbRisq36VGBmWW5YfrXBWgj9WNNJJUsTVnw2uiFAkMjy64tOy Ap7sACpXZUmKEHtzQmJyjp3m1sf6CKnDW74pUZnDNT+3+YZNn3VUhuR6S63kPVI7 1IX5ZSY57NXC4YEHpCsyoeCvZFb90hpdbhnsPuBuFj3ydkh2HTheauZ+17nlM5pw 9c9VcTKmt4ZmpCAQ5kuIlbs1u3ABVrOuoH0rGn7xuuVZpUmBwFXfJCIJpjatAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDgE9kY0GL1/87efMR6LecmrM/WwwHwYDVR0j BBgwFoAU8rTVyYsHJM524hLftlW0kotKwyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDhlZjExOS03ZGRmLTQ1ZTUtODYzNC0zOGI3NzI1OGNiY2MvMS9GMkI0RDVDOThC MDcyNENFNzZFMjEyREZCNjU1QjQ5MjhCNEFDMzI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjJCNEQ1Qzk4QjA3MjRDRTc2RTIxMkRGQjY1NUI0OTI4QjRB QzMyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ4ZWYxMTktN2RkZi00NWU1LTg2 MzQtMzhiNzcyNThjYmNjLzEvRjJCNEQ1Qzk4QjA3MjRDRTc2RTIxMkRGQjY1NUI0 OTI4QjRBQzMyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEX3urp2JFEbJ31pBE8QgkJDbrWaD38imB9y qDw7f2ainBlOQGAy3TvW5a7HBfZUaiUvRqZCQxdoCS4c8pihWhlUHfVUTXx5aoRR CCneq3qDnuh7XU9UQzrzsIcYLjMNkCJhjwNN64k0GBaOLS63gZT7BOAjHewA2ZgT DdOHQsg6ATe24VoTy0zlgZ55o3keTsJD98d0cRzcV8JpNRhZiR3JnAhwGRiZy2lL KP/vD/Oytrt+/k9hSx/iJh6CbZrzHnNKLSfa6haOhzNdekPDDk6bgR70ciRExeWG tcRp6HvRZM3nQ01kqi2t8POFmf6DMGWBss8nPPlIzbyXayVkusI= -----END CERTIFICATE-----Generated at Tue Apr 29 12:12:06 2025 by rpki-client