$ rpki-client -vvf repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.mft File: A349D07CAB13BF067B13D95E99981C2BA84B9A6B.mft (raw, json) Hash identifier: MrX8Je4l8LHwDREGQOqKRX/v8wiH0zTXlQu6qOUqrrw= Subject key identifier: EE:98:C0:20:BC:AE:02:6D:66:1B:C2:03:47:5C:DE:4D:40:7D:9C:6B Authority key identifier: A3:49:D0:7C:AB:13:BF:06:7B:13:D9:5E:99:98:1C:2B:A8:4B:9A:6B Certificate issuer: /CN=A349D07CAB13BF067B13D95E99981C2BA84B9A6B Certificate serial: 437F4309301CBFA62D5A1BF581152C3962BC99B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.mft Manifest number: 047B Signing time: Mon 28 Apr 2025 17:20:36 +0000 Manifest this update: Mon 28 Apr 2025 17:15:36 +0000 Manifest next update: Thu 01 May 2025 18:43:36 +0000 Files and hashes: 1: A349D07CAB13BF067B13D95E99981C2BA84B9A6B.crl (hash: bfC2Qr5MZ7X7Z8xffKA4DZVQi+a+xIg1thRJ45groKo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.crl rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:43:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:7f:43:09:30:1c:bf:a6:2d:5a:1b:f5:81:15:2c:39:62:bc:99:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A349D07CAB13BF067B13D95E99981C2BA84B9A6B Validity Not Before: Apr 28 17:15:36 2025 GMT Not After : May 1 18:43:36 2025 GMT Subject: CN=EE98C020BCAE026D661BC203475CDE4D407D9C6B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cf:49:d9:4f:35:18:68:71:c8:3a:35:9b:4d: 7e:c4:75:fd:bd:20:02:bb:a0:d6:de:60:22:22:16: c5:13:81:43:9e:79:b0:ac:4b:b2:12:41:3d:60:6c: 19:63:f9:8c:7f:f5:b1:19:53:5b:fe:f6:e0:f4:26: 7e:d5:7d:05:29:02:6c:0b:fc:af:a0:91:9e:6f:d8: 69:1f:91:49:58:06:eb:94:dc:29:d4:65:d9:e9:78: 56:d0:0a:08:dd:56:5f:e7:af:51:5d:91:9d:e9:15: a5:39:b4:30:7c:f9:10:8c:69:ee:f3:36:0e:e0:2d: 4d:ec:ec:71:e3:de:43:a4:29:b3:51:a5:61:b4:5f: 43:7b:e4:a4:1a:d3:2f:6c:e8:cd:40:99:51:82:36: 77:c1:fa:c3:39:5c:a4:77:77:0f:46:70:53:af:f1: 4f:65:51:72:e3:4e:7f:4e:02:2b:54:77:a1:33:ec: 99:97:47:97:af:96:9b:71:38:dd:a4:46:1b:6e:7f: 27:ac:17:bd:88:87:68:a1:1c:10:cc:3d:2e:c6:3c: 6f:f3:29:ff:6f:2e:9b:1f:89:d4:eb:1d:c3:4b:47: 43:e8:d7:c8:a1:a2:84:5d:75:b4:43:91:34:ae:30: 45:42:d6:35:5a:62:a9:a6:92:8a:c1:b3:c0:bd:29: 30:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:98:C0:20:BC:AE:02:6D:66:1B:C2:03:47:5C:DE:4D:40:7D:9C:6B X509v3 Authority Key Identifier: keyid:A3:49:D0:7C:AB:13:BF:06:7B:13:D9:5E:99:98:1C:2B:A8:4B:9A:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:a2:84:5d:a5:44:0a:5a:60:16:5d:22:e5:7e:9b:7d:76:8d: b6:e5:9a:4b:36:79:9a:2f:f8:fc:c4:00:9f:05:dc:4d:a4:e6: 0c:71:39:a9:c6:69:db:99:c1:fd:17:5c:52:f9:d9:79:52:0e: be:07:e5:9e:aa:98:70:af:db:2c:0e:d8:03:ee:d4:6d:d7:79: e4:ce:ab:6a:30:b2:6c:1c:2c:0d:58:ac:f9:f8:cf:71:f0:df: 9c:2c:b0:f3:a5:28:ca:5f:d9:38:53:b9:79:ed:a9:ad:4c:c2: c8:41:ea:2f:4d:23:7e:6e:2a:e9:aa:77:27:b9:1c:93:a5:21: f5:3c:f1:a4:a5:d0:2f:a0:4e:2c:a0:36:98:ec:c9:be:98:30: 92:41:13:6c:45:49:cd:15:dd:02:62:16:a8:d2:cd:0e:92:eb: 9b:1a:40:a8:8d:7a:a9:c9:c0:54:a6:8b:4d:01:b1:9c:df:af: c9:db:9e:d6:a2:92:46:b8:04:e7:ea:3c:23:3b:cf:7d:80:95: bf:5c:3d:88:3a:98:ad:0d:8a:32:9e:18:c6:44:4f:d5:ba:d6: e5:9f:29:2c:f7:c8:78:b5:6e:54:2d:af:47:fe:19:9d:46:ab: 2b:a2:85:ec:dc:09:86:20:f8:7b:4c:49:7b:d9:c3:be:16:a1: c9:33:22:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ39DCTAcv6YtWhv1gRUsOWK8mbMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM0OUQwN0NBQjEzQkYwNjdCMTNEOTVFOTk5ODFDMkJB ODRCOUE2QjAeFw0yNTA0MjgxNzE1MzZaFw0yNTA1MDExODQzMzZaMDMxMTAvBgNV BAMTKEVFOThDMDIwQkNBRTAyNkQ2NjFCQzIwMzQ3NUNERTRENDA3RDlDNkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnz0nZTzUYaHHIOjWbTX7Edf29 IAK7oNbeYCIiFsUTgUOeebCsS7ISQT1gbBlj+Yx/9bEZU1v+9uD0Jn7VfQUpAmwL /K+gkZ5v2GkfkUlYBuuU3CnUZdnpeFbQCgjdVl/nr1FdkZ3pFaU5tDB8+RCMae7z Ng7gLU3s7HHj3kOkKbNRpWG0X0N75KQa0y9s6M1AmVGCNnfB+sM5XKR3dw9GcFOv 8U9lUXLjTn9OAitUd6Ez7JmXR5evlptxON2kRhtufyesF72Ih2ihHBDMPS7GPG/z Kf9vLpsfidTrHcNLR0Po18ihooRddbRDkTSuMEVC1jVaYqmmkorBs8C9KTClAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7pjAILyuAm1mG8IDR1zeTUB9nGswHwYDVR0j BBgwFoAUo0nQfKsTvwZ7E9lemZgcK6hLmmswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YWRmY2I0NC1hZTdhLTQ0MjMtYWU3ZC0wODY0OGJmMWRlYjEvMC9BMzQ5RDA3Q0FC MTNCRjA2N0IxM0Q5NUU5OTk4MUMyQkE4NEI5QTZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTM0OUQwN0NBQjEzQkYwNjdCMTNEOTVFOTk5ODFDMkJBODRC OUE2Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmFkZmNiNDQtYWU3YS00NDIzLWFl N2QtMDg2NDhiZjFkZWIxLzAvQTM0OUQwN0NBQjEzQkYwNjdCMTNEOTVFOTk5ODFD MkJBODRCOUE2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIGihF2lRApaYBZdIuV+m312jbblmks2eZov +PzEAJ8F3E2k5gxxOanGaduZwf0XXFL52XlSDr4H5Z6qmHCv2ywO2APu1G3XeeTO q2owsmwcLA1YrPn4z3Hw35wssPOlKMpf2ThTuXntqa1MwshB6i9NI35uKumqdye5 HJOlIfU88aSl0C+gTiygNpjsyb6YMJJBE2xFSc0V3QJiFqjSzQ6S65saQKiNeqnJ wFSmi00BsZzfr8nbntaikka4BOfqPCM7z32Alb9cPYg6mK0NijKeGMZET9W61uWf KSz3yHi1blQtr0f+GZ1GqyuihezcCYYg+HtMSXvZw74WockzItE= -----END CERTIFICATE-----Generated at Wed Apr 30 08:27:08 2025 by rpki-client