$ rpki-client -vvf repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft File: 9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft (raw, json) Hash identifier: hBdSpfcYvMoRGXohliOjvpfZXDnStQa1/6mhAPSdJ+Y= Subject key identifier: E2:03:13:1E:D3:35:66:9C:98:51:6D:AB:BA:FA:B8:66:47:61:37:01 Authority key identifier: 95:64:13:4E:E3:E4:CE:65:FB:9D:07:7E:90:B1:BE:B5:25:D6:99:EB Certificate issuer: /CN=9564134EE3E4CE65FB9D077E90B1BEB525D699EB Certificate serial: 5879F1D941083F9014E06A6D70AF04842AF7CDC6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft Manifest number: B1 Signing time: Sat 26 Apr 2025 18:22:13 +0000 Manifest this update: Sat 26 Apr 2025 18:17:13 +0000 Manifest next update: Wed 30 Apr 2025 00:47:13 +0000 Files and hashes: 1: 9564134EE3E4CE65FB9D077E90B1BEB525D699EB.crl (hash: eI4SFqr3rLelWR3X6J7/SGZWQKHIcRcZwKu5ioAkRmo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.crl rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 00:47:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:79:f1:d9:41:08:3f:90:14:e0:6a:6d:70:af:04:84:2a:f7:cd:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9564134EE3E4CE65FB9D077E90B1BEB525D699EB Validity Not Before: Apr 26 18:17:13 2025 GMT Not After : Apr 30 00:47:13 2025 GMT Subject: CN=E203131ED335669C98516DABBAFAB86647613701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b8:cd:f0:9c:b4:21:0e:81:a5:75:d8:40:e8: ec:15:8c:c2:f0:68:55:97:a8:ad:15:83:6e:02:e7: a3:47:c9:af:01:77:22:90:fc:6c:54:16:4e:84:02: 55:d1:e7:c8:af:64:a0:ce:7e:0a:6e:48:b9:fa:5b: 3e:b6:a2:bc:04:8c:d1:37:91:0a:89:6b:2a:c3:cd: f7:aa:04:4e:c3:29:9d:fc:f5:1a:09:55:c2:6e:f9: e3:09:80:17:eb:d5:08:f5:d3:5c:39:84:6a:af:b5: 02:21:8e:3c:64:54:5e:fc:32:f4:a2:d3:90:49:9b: a2:3f:b9:90:e5:7a:e8:d2:4f:8f:a7:29:30:2d:7a: 00:95:4e:d4:cc:e7:a3:46:e2:42:6b:e7:6a:28:69: b2:3c:b7:75:f8:2c:e2:92:d3:a7:8f:15:99:9a:32: af:83:5d:89:bb:e1:0c:81:eb:61:cd:91:5b:a9:dc: ec:b6:40:53:85:cf:02:51:96:d6:95:49:9b:d0:06: 72:46:d3:8e:e6:3e:81:66:17:ec:b4:f0:28:d2:07: 0b:56:b4:d9:4b:99:23:91:36:33:f2:ff:5c:49:7f: f1:46:b7:0d:c2:ee:60:c9:5f:94:09:8d:38:f5:e0: 12:0d:60:9c:01:0e:79:28:1d:17:f2:8a:31:e8:45: 03:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:03:13:1E:D3:35:66:9C:98:51:6D:AB:BA:FA:B8:66:47:61:37:01 X509v3 Authority Key Identifier: keyid:95:64:13:4E:E3:E4:CE:65:FB:9D:07:7E:90:B1:BE:B5:25:D6:99:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:2b:b9:c5:ad:54:b7:28:d9:83:ad:a6:09:df:0c:12:9f:33: 15:fa:83:87:7a:f7:51:3f:f2:58:8c:8a:51:fb:ad:5a:77:71: 6b:6d:2c:87:50:0e:de:05:31:e5:5e:3b:95:60:98:b8:68:68: a2:fb:65:36:3f:59:92:c1:22:16:59:80:12:ee:87:aa:ee:d7: b7:ea:b7:66:ae:e4:a6:4e:21:53:b2:5a:fc:8d:f4:28:33:62: c0:24:1b:01:60:84:69:fb:46:76:2f:25:9d:4b:46:6e:f9:1c: a0:31:19:53:7d:ed:65:1f:cf:e6:c6:dc:4f:7a:3f:ff:df:0c: 67:d1:1d:a1:81:c8:dc:c4:ed:39:d5:7e:e4:d6:dd:d7:30:62: 8d:64:83:e4:af:3d:fd:ba:83:44:91:9d:c9:80:19:4c:a3:e4: 57:ad:c5:73:69:33:c4:a5:ba:27:b7:18:d9:48:a8:1c:ec:50: b3:6c:74:48:95:4a:12:da:9a:0e:37:27:46:81:f7:95:c2:10: ea:f5:9c:22:dd:09:3d:b6:5a:29:7e:76:46:eb:28:55:08:64: 19:15:15:31:c3:77:29:5e:7e:de:ce:56:3a:ec:d8:f7:72:67: c6:6f:83:5f:29:db:b3:cf:89:53:6b:81:de:37:18:e7:a0:24: 38:30:d3:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWHnx2UEIP5AU4GptcK8EhCr3zcYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU2NDEzNEVFM0U0Q0U2NUZCOUQwNzdFOTBCMUJFQjUy NUQ2OTlFQjAeFw0yNTA0MjYxODE3MTNaFw0yNTA0MzAwMDQ3MTNaMDMxMTAvBgNV BAMTKEUyMDMxMzFFRDMzNTY2OUM5ODUxNkRBQkJBRkFCODY2NDc2MTM3MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDauM3wnLQhDoGlddhA6OwVjMLw aFWXqK0Vg24C56NHya8BdyKQ/GxUFk6EAlXR58ivZKDOfgpuSLn6Wz62orwEjNE3 kQqJayrDzfeqBE7DKZ389RoJVcJu+eMJgBfr1Qj101w5hGqvtQIhjjxkVF78MvSi 05BJm6I/uZDleujST4+nKTAtegCVTtTM56NG4kJr52ooabI8t3X4LOKS06ePFZma Mq+DXYm74QyB62HNkVup3Oy2QFOFzwJRltaVSZvQBnJG047mPoFmF+y08CjSBwtW tNlLmSORNjPy/1xJf/FGtw3C7mDJX5QJjTj14BINYJwBDnkoHRfyijHoRQO7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4gMTHtM1ZpyYUW2ruvq4ZkdhNwEwHwYDVR0j BBgwFoAUlWQTTuPkzmX7nQd+kLG+tSXWmeswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDg4NjQ4Zi01ZTBiLTQzMzgtOTExYy05ZDY0NjdiMDBhM2UvMC85NTY0MTM0RUUz RTRDRTY1RkI5RDA3N0U5MEIxQkVCNTI1RDY5OUVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTU2NDEzNEVFM0U0Q0U2NUZCOUQwNzdFOTBCMUJFQjUyNUQ2 OTlFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODA4ODY0OGYtNWUwYi00MzM4LTkx MWMtOWQ2NDY3YjAwYTNlLzAvOTU2NDEzNEVFM0U0Q0U2NUZCOUQwNzdFOTBCMUJF QjUyNUQ2OTlFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJorucWtVLco2YOtpgnfDBKfMxX6g4d691E/ 8liMilH7rVp3cWttLIdQDt4FMeVeO5VgmLhoaKL7ZTY/WZLBIhZZgBLuh6ru17fq t2au5KZOIVOyWvyN9CgzYsAkGwFghGn7RnYvJZ1LRm75HKAxGVN97WUfz+bG3E96 P//fDGfRHaGByNzE7TnVfuTW3dcwYo1kg+SvPf26g0SRncmAGUyj5FetxXNpM8Sl uie3GNlIqBzsULNsdEiVShLamg43J0aB95XCEOr1nCLdCT22Wil+dkbrKFUIZBkV FTHDdyleft7OVjrs2PdyZ8Zvg18p27PPiVNrgd43GOegJDgw0yU= -----END CERTIFICATE-----Generated at Sun Apr 27 16:33:19 2025 by rpki-client