$ rpki-client -vvf repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft File: 0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft (raw, json) Hash identifier: ed8M1PS6Oo76uKA92Mzwm2r43o2v/WZV1gQr7xSBI5o= Subject key identifier: 50:BA:1A:2B:36:F0:18:39:90:A0:56:5A:DD:8D:2B:41:CD:BB:08:1B Authority key identifier: 0F:44:BF:25:8D:75:F2:D1:C4:45:D5:29:C3:01:5F:9F:E5:1B:28:0F Certificate issuer: /CN=0F44BF258D75F2D1C445D529C3015F9FE51B280F Certificate serial: 7E7B4B11581D6BB386E8C24B6873EB13482DEE3F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0F44BF258D75F2D1C445D529C3015F9FE51B280F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft Manifest number: 42 Signing time: Tue 29 Apr 2025 21:31:41 +0000 Manifest this update: Tue 29 Apr 2025 21:26:41 +0000 Manifest next update: Sat 03 May 2025 08:19:41 +0000 Files and hashes: 1: 0F44BF258D75F2D1C445D529C3015F9FE51B280F.crl (hash: 29pRv5MGWrJkYP/ClRcS/dLnS0iDNKZ3xYOlNtK6h+o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.crl rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0F44BF258D75F2D1C445D529C3015F9FE51B280F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 08:19:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:7b:4b:11:58:1d:6b:b3:86:e8:c2:4b:68:73:eb:13:48:2d:ee:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F44BF258D75F2D1C445D529C3015F9FE51B280F Validity Not Before: Apr 29 21:26:41 2025 GMT Not After : May 3 08:19:41 2025 GMT Subject: CN=50BA1A2B36F0183990A0565ADD8D2B41CDBB081B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:23:f6:5e:7a:f4:ab:a0:60:eb:bc:97:8d:88: 67:fc:3c:f9:e8:38:98:cd:37:97:bc:44:16:f4:e4: d0:f3:37:56:a2:f8:55:7e:a0:7e:0a:92:7c:70:d4: b5:6d:e7:9a:b5:0a:7f:31:df:f2:21:9d:6e:b6:1b: 35:44:2e:72:94:ff:18:3d:37:66:c4:4a:d3:00:d4: 11:e0:77:1f:5b:f3:f7:02:16:ad:8e:57:6e:9b:68: 8e:d3:13:51:fe:3f:be:2b:33:67:62:2e:20:df:7b: 37:fb:f0:4f:3b:54:04:1d:83:0a:57:a4:c2:be:03: 0e:04:b6:0c:a9:c2:fe:bb:19:75:73:25:fa:20:83: a0:10:24:a2:ce:c7:e8:b6:48:79:17:21:bf:49:7e: 9b:6e:5b:0d:6b:9b:97:ed:d9:51:6d:6c:56:66:ec: 74:01:f5:bd:ba:72:7c:05:c9:e4:cd:e6:77:f5:0b: 60:e9:b4:5b:3a:d4:54:d1:48:66:d5:19:89:27:f3: ed:6c:90:c0:71:e6:c3:fd:51:71:2f:4d:d7:c3:dc: 27:d3:6d:9c:4e:87:63:5c:e9:b5:f3:23:d0:e2:55: 4b:7a:58:4f:ac:0b:17:7b:66:1a:1e:74:d7:c2:55: 65:23:52:d8:79:52:94:77:b2:20:79:3f:eb:39:68: f4:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:BA:1A:2B:36:F0:18:39:90:A0:56:5A:DD:8D:2B:41:CD:BB:08:1B X509v3 Authority Key Identifier: keyid:0F:44:BF:25:8D:75:F2:D1:C4:45:D5:29:C3:01:5F:9F:E5:1B:28:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0F44BF258D75F2D1C445D529C3015F9FE51B280F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:ee:bf:c2:ec:3a:b3:91:53:57:b3:d6:f4:12:f0:f7:f7:81: 11:cf:53:93:6b:ac:ca:e1:c0:1a:28:b1:08:ea:c2:4f:e5:8c: 9a:a0:ba:68:01:99:04:88:ac:f0:1c:db:82:2f:2b:cb:6c:2b: d8:ea:75:74:6c:c6:3f:85:05:08:ac:a1:fb:87:03:fe:66:26: 81:c5:ed:1d:59:04:b6:69:aa:e4:51:27:97:db:86:aa:3b:08: c6:16:15:90:6c:90:81:3e:c2:c0:66:21:84:6a:58:63:7d:96: 77:20:e1:b5:40:3d:c4:e0:97:e4:77:0d:15:de:59:9a:09:71: eb:db:c8:87:59:ea:33:f8:7c:2b:e5:bf:98:94:22:01:2c:a8: 1c:6b:62:03:ef:42:ad:1b:48:45:38:5d:e6:4a:d0:fa:16:e1: 67:69:60:3f:15:a6:43:e1:99:dd:44:83:37:26:3d:7d:49:f3: 30:9d:02:56:bd:0d:4f:f3:4d:aa:15:a4:90:da:d9:ad:86:30: c9:5e:38:30:39:3a:e8:7f:3c:23:c4:7e:e5:47:2f:b4:e6:fa: 3a:1f:ac:8c:57:31:91:b4:f6:7b:73:c0:89:d1:07:dc:b3:f4: c3:75:6e:a8:47:58:16:54:37:ae:ed:68:48:40:65:ca:d1:3b: cb:66:c9:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfntLEVgda7OG6MJLaHPrE0gt7j8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEY0NEJGMjU4RDc1RjJEMUM0NDVENTI5QzMwMTVGOUZF NTFCMjgwRjAeFw0yNTA0MjkyMTI2NDFaFw0yNTA1MDMwODE5NDFaMDMxMTAvBgNV BAMTKDUwQkExQTJCMzZGMDE4Mzk5MEEwNTY1QUREOEQyQjQxQ0RCQjA4MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtI/ZeevSroGDrvJeNiGf8PPno OJjNN5e8RBb05NDzN1ai+FV+oH4Kknxw1LVt55q1Cn8x3/IhnW62GzVELnKU/xg9 N2bEStMA1BHgdx9b8/cCFq2OV26baI7TE1H+P74rM2diLiDfezf78E87VAQdgwpX pMK+Aw4Etgypwv67GXVzJfogg6AQJKLOx+i2SHkXIb9JfptuWw1rm5ft2VFtbFZm 7HQB9b26cnwFyeTN5nf1C2DptFs61FTRSGbVGYkn8+1skMBx5sP9UXEvTdfD3CfT bZxOh2Nc6bXzI9DiVUt6WE+sCxd7ZhoedNfCVWUjUth5UpR3siB5P+s5aPSzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUULoaKzbwGDmQoFZa3Y0rQc27CBswHwYDVR0j BBgwFoAUD0S/JY118tHERdUpwwFfn+UbKA8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTNkZTNlYy00ZDNjLTQ0MDItYTdiOC04YTFiOTYyMjZlNzUvMC8wRjQ0QkYyNThE NzVGMkQxQzQ0NUQ1MjlDMzAxNUY5RkU1MUIyODBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMEY0NEJGMjU4RDc1RjJEMUM0NDVENTI5QzMwMTVGOUZFNTFC MjgwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTEzZGUzZWMtNGQzYy00NDAyLWE3 YjgtOGExYjk2MjI2ZTc1LzAvMEY0NEJGMjU4RDc1RjJEMUM0NDVENTI5QzMwMTVG OUZFNTFCMjgwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM7uv8LsOrORU1ez1vQS8Pf3gRHPU5NrrMrh wBoosQjqwk/ljJqgumgBmQSIrPAc24IvK8tsK9jqdXRsxj+FBQisofuHA/5mJoHF 7R1ZBLZpquRRJ5fbhqo7CMYWFZBskIE+wsBmIYRqWGN9lncg4bVAPcTgl+R3DRXe WZoJcevbyIdZ6jP4fCvlv5iUIgEsqBxrYgPvQq0bSEU4XeZK0PoW4WdpYD8VpkPh md1EgzcmPX1J8zCdAla9DU/zTaoVpJDa2a2GMMleODA5Ouh/PCPEfuVHL7Tm+jof rIxXMZG09ntzwInRB9yz9MN1bqhHWBZUN67taEhAZcrRO8tmyZo= -----END CERTIFICATE-----Generated at Fri May 2 09:31:10 2025 by rpki-client