$ rpki-client -vvf repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft File: 0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft (raw, json) Hash identifier: BLzdJU4M+MKYpKMibfZOSwyMuOm41PYrRwc9hsXg+YY= Subject key identifier: 92:4F:E8:4E:41:C7:DF:05:5F:E7:40:B7:63:57:47:9D:EC:D8:97:B9 Authority key identifier: 0A:FD:8F:6B:02:40:5F:4D:E9:A9:46:84:0C:C5:AE:2E:6A:C8:E4:0C Certificate issuer: /CN=0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C Certificate serial: 12432224FD46F4E9F4E2B6CC39B23080DBEA81EB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft Manifest number: 0427 Signing time: Tue 29 Apr 2025 00:50:02 +0000 Manifest this update: Tue 29 Apr 2025 00:45:02 +0000 Manifest next update: Fri 02 May 2025 12:31:02 +0000 Files and hashes: 1: 0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.crl (hash: zoib0Kz7T6wj/Qvnb5EufF7EtjZu4RKGLstQrNr87T4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.crl rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 12:31:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:43:22:24:fd:46:f4:e9:f4:e2:b6:cc:39:b2:30:80:db:ea:81:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C Validity Not Before: Apr 29 00:45:02 2025 GMT Not After : May 2 12:31:02 2025 GMT Subject: CN=924FE84E41C7DF055FE740B76357479DECD897B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:81:38:11:e2:73:c5:39:ed:04:db:f9:c7:6f: f3:b0:64:da:83:9a:4d:10:2b:52:ee:82:0a:34:ec: a0:d7:cb:78:a1:5f:5f:1f:93:62:93:88:c0:fd:f8: 66:db:79:34:7f:1c:e1:11:3c:f2:64:e0:96:c0:2a: cd:1c:7e:a8:63:3b:2e:40:16:36:c3:e7:af:da:fd: 33:8a:8c:0d:32:a1:1d:1d:72:65:29:99:8b:2f:d1: fc:fb:7e:58:e7:e8:de:9e:2e:37:b2:04:6b:8c:e8: 7f:1f:14:c8:b1:d5:7f:d1:09:2c:f9:35:a9:f7:56: 8d:af:84:71:4c:4a:41:ce:db:f4:05:8a:2f:8f:af: 1c:02:71:e9:4d:61:ad:36:f4:41:57:9b:fd:03:74: a4:de:67:69:98:80:88:8b:ad:ba:73:c2:7c:f4:58: 0a:10:df:20:f8:f3:03:aa:93:3b:1e:1c:41:ea:31: 8f:c4:85:49:34:15:d9:18:5a:c3:dc:38:7b:72:c9: 48:9f:69:f2:f4:99:03:5c:3b:d1:52:49:78:42:57: 39:0c:8b:1f:6d:b7:ce:9d:f7:b8:a7:0c:4c:c9:72: e5:8f:a2:3f:7b:f5:af:4c:78:aa:b9:34:86:c4:77: bb:7c:c2:d9:34:c8:0f:29:45:b2:66:3c:c0:5c:78: 04:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:4F:E8:4E:41:C7:DF:05:5F:E7:40:B7:63:57:47:9D:EC:D8:97:B9 X509v3 Authority Key Identifier: keyid:0A:FD:8F:6B:02:40:5F:4D:E9:A9:46:84:0C:C5:AE:2E:6A:C8:E4:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/947c6ecb-0bae-45c3-aada-43a6a171c046/0/0AFD8F6B02405F4DE9A946840CC5AE2E6AC8E40C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:0a:9f:2c:cb:0d:cf:7d:5f:cb:81:17:97:23:c0:af:52:1f: 5f:e0:90:4d:45:ba:86:46:a1:f9:2e:9d:d3:41:52:9c:26:67: 62:ad:25:ac:1a:da:62:8c:ef:1d:ba:fd:1d:78:a1:ea:43:11: 4f:b8:bb:05:e0:68:cd:0a:46:2a:ef:97:54:16:a9:01:91:d8: b6:42:02:a1:cc:8d:84:bb:f0:1b:cc:96:eb:46:80:ca:a9:be: ae:4f:0c:81:b8:71:98:3f:b2:e9:63:84:67:9c:16:ca:96:d1: db:47:ba:2e:f1:19:85:d8:e5:cf:8a:d8:9f:21:a6:33:6b:2c: 50:5e:3c:f1:24:b3:02:ed:9d:27:67:97:e5:0e:75:d1:1a:bc: 93:90:03:6c:8c:b0:80:dc:c5:ff:86:47:82:ba:be:b8:22:8e: 47:b6:6d:d6:51:65:58:80:ca:48:54:87:27:1c:36:ef:05:dc: 8f:c5:05:c4:1c:46:81:d3:02:8f:bb:bb:7d:15:ec:50:4b:a3: 6a:70:69:6a:c9:16:e0:c7:1a:97:86:54:5d:1c:b7:1c:08:4d: e1:e9:78:cd:31:5e:04:59:f0:ef:7d:20:72:ae:26:8f:f6:a7: a9:de:07:77:9f:61:0a:13:1d:ec:44:49:94:2b:91:1d:88:d7: e0:de:7a:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEkMiJP1G9On04rbMObIwgNvqgeswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEFGRDhGNkIwMjQwNUY0REU5QTk0Njg0MENDNUFFMkU2 QUM4RTQwQzAeFw0yNTA0MjkwMDQ1MDJaFw0yNTA1MDIxMjMxMDJaMDMxMTAvBgNV BAMTKDkyNEZFODRFNDFDN0RGMDU1RkU3NDBCNzYzNTc0NzlERUNEODk3QjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJgTgR4nPFOe0E2/nHb/OwZNqD mk0QK1Luggo07KDXy3ihX18fk2KTiMD9+GbbeTR/HOERPPJk4JbAKs0cfqhjOy5A FjbD56/a/TOKjA0yoR0dcmUpmYsv0fz7fljn6N6eLjeyBGuM6H8fFMix1X/RCSz5 Nan3Vo2vhHFMSkHO2/QFii+PrxwCcelNYa029EFXm/0DdKTeZ2mYgIiLrbpzwnz0 WAoQ3yD48wOqkzseHEHqMY/EhUk0FdkYWsPcOHtyyUifafL0mQNcO9FSSXhCVzkM ix9tt86d97inDEzJcuWPoj979a9MeKq5NIbEd7t8wtk0yA8pRbJmPMBceARlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkk/oTkHH3wVf50C3Y1dHnezYl7kwHwYDVR0j BBgwFoAUCv2PawJAX03pqUaEDMWuLmrI5AwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NDdjNmVjYi0wYmFlLTQ1YzMtYWFkYS00M2E2YTE3MWMwNDYvMC8wQUZEOEY2QjAy NDA1RjRERTlBOTQ2ODQwQ0M1QUUyRTZBQzhFNDBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEFGRDhGNkIwMjQwNUY0REU5QTk0Njg0MENDNUFFMkU2QUM4 RTQwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTQ3YzZlY2ItMGJhZS00NWMzLWFh ZGEtNDNhNmExNzFjMDQ2LzAvMEFGRDhGNkIwMjQwNUY0REU5QTk0Njg0MENDNUFF MkU2QUM4RTQwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALAKnyzLDc99X8uBF5cjwK9SH1/gkE1FuoZG ofkundNBUpwmZ2KtJawa2mKM7x26/R14oepDEU+4uwXgaM0KRirvl1QWqQGR2LZC AqHMjYS78BvMlutGgMqpvq5PDIG4cZg/suljhGecFsqW0dtHui7xGYXY5c+K2J8h pjNrLFBePPEkswLtnSdnl+UOddEavJOQA2yMsIDcxf+GR4K6vrgijke2bdZRZViA ykhUhyccNu8F3I/FBcQcRoHTAo+7u30V7FBLo2pwaWrJFuDHGpeGVF0ctxwITeHp eM0xXgRZ8O99IHKuJo/2p6neB3efYQoTHexESZQrkR2I1+Deelk= -----END CERTIFICATE-----Generated at Tue Apr 29 16:23:50 2025 by rpki-client