$ rpki-client -vvf repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.mft File: AD2137BA5758D926364E9E038F19A65DC3F1846E.mft (raw, json) Hash identifier: NG6TlHzTs0DVe1HELr6O6+7Z+tL/xbKHMwefW/xJdFY= Subject key identifier: 43:9D:69:8B:C4:F0:B4:D6:DC:9C:A0:C7:B4:81:25:08:B5:F2:C0:6F Authority key identifier: AD:21:37:BA:57:58:D9:26:36:4E:9E:03:8F:19:A6:5D:C3:F1:84:6E Certificate issuer: /CN=AD2137BA5758D926364E9E038F19A65DC3F1846E Certificate serial: 09E2D2731F02AA340984A00A962EF73F620A10A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2137BA5758D926364E9E038F19A65DC3F1846E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.mft Manifest number: 020E Signing time: Tue 29 Apr 2025 21:42:04 +0000 Manifest this update: Tue 29 Apr 2025 21:37:04 +0000 Manifest next update: Sat 03 May 2025 09:03:04 +0000 Files and hashes: 1: AD2137BA5758D926364E9E038F19A65DC3F1846E.crl (hash: 6qrS97a/jN/4+VG9CvspBVHtnK47zXvorskTDZyuVV0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.crl rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2137BA5758D926364E9E038F19A65DC3F1846E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 18:52:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:e2:d2:73:1f:02:aa:34:09:84:a0:0a:96:2e:f7:3f:62:0a:10:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD2137BA5758D926364E9E038F19A65DC3F1846E Validity Not Before: Apr 29 21:37:04 2025 GMT Not After : May 3 09:03:04 2025 GMT Subject: CN=439D698BC4F0B4D6DC9CA0C7B4812508B5F2C06F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c9:55:6c:10:ed:41:f6:09:ec:a6:95:44:c6: ef:60:cc:e7:9e:26:e8:e5:3b:df:a3:56:37:20:d8: f1:fa:a5:a7:52:cb:4e:cf:37:af:09:2e:fa:81:28: 4e:2c:f8:66:86:15:a8:cd:0b:6f:b3:d5:d3:eb:de: f9:a2:9b:f1:b0:00:79:5e:0c:dc:00:c7:9b:6d:f5: 6d:e7:35:16:88:ca:fe:95:36:c2:cb:6d:4f:4e:1d: 03:84:a9:94:fe:98:18:4d:f5:d9:2c:c7:c5:c6:55: ae:79:40:f2:23:31:e0:9b:06:54:9e:cb:4f:01:f6: 03:cc:0c:02:e8:05:3a:80:1c:64:61:21:09:6f:98: b3:07:f7:83:a0:3f:eb:38:65:44:7b:b7:1a:b7:b2: ec:0c:6e:f7:48:5c:e6:ad:81:77:dc:73:e7:32:9f: 6a:ba:34:c0:d7:7c:09:39:59:86:60:bb:8a:da:e9: 33:47:89:b7:87:b4:48:46:29:81:6f:fa:58:90:02: 58:af:b2:28:de:dd:99:4e:c5:80:e0:dc:36:d7:bc: a5:cc:24:2d:ba:fd:57:88:b5:00:65:6e:8b:e8:19: 08:05:d8:83:c4:11:4f:89:6d:d0:ab:aa:66:29:8a: 51:98:3b:55:a9:68:86:d3:3f:25:38:c0:c6:54:df: 08:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:9D:69:8B:C4:F0:B4:D6:DC:9C:A0:C7:B4:81:25:08:B5:F2:C0:6F X509v3 Authority Key Identifier: keyid:AD:21:37:BA:57:58:D9:26:36:4E:9E:03:8F:19:A6:5D:C3:F1:84:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2137BA5758D926364E9E038F19A65DC3F1846E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:6a:6f:b4:7b:62:2b:a5:ef:76:65:23:65:09:ef:b8:fd:34: 5e:66:38:67:8d:ed:ba:82:d3:cf:ca:63:7e:e5:81:a9:42:70: 2f:59:40:fd:66:32:70:d7:1b:55:33:71:b3:c7:4c:05:f3:11: 4a:dd:ea:8d:87:a3:99:07:85:c8:a4:4a:4b:2d:f5:dd:57:f2: c5:83:bd:0a:07:7d:1a:77:f7:5b:de:17:8c:98:4b:37:91:e1: b0:9d:5c:fd:58:cc:24:4c:5a:5f:04:b1:6c:18:78:aa:db:8e: 6f:d6:e8:95:e5:9f:ce:92:2a:e2:0f:13:5e:e9:f3:ff:46:77: 8b:18:d8:9e:8e:12:59:fe:3b:6d:c2:07:f5:db:14:6f:92:95: 04:63:19:b2:63:82:1a:4e:95:40:2d:18:a0:9b:c4:b2:75:53: 67:4d:d4:0d:0d:99:0c:a8:6f:2d:75:97:7c:60:b6:a0:be:2e: 78:af:7e:19:d7:b1:9b:bf:73:87:c2:51:dc:23:04:9c:16:f9: a7:01:04:2e:00:47:f1:cd:0d:bd:4a:e3:30:f2:f7:86:19:59: 66:c1:ce:95:91:bd:8a:bb:3d:f3:f7:0c:e4:58:d5:0b:ef:76: fa:e1:70:22:1f:d0:09:86:07:4f:b7:f3:e2:b9:10:f8:e3:8d: be:d5:35:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCeLScx8CqjQJhKAKli73P2IKEKkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQyMTM3QkE1NzU4RDkyNjM2NEU5RTAzOEYxOUE2NURD M0YxODQ2RTAeFw0yNTA0MjkyMTM3MDRaFw0yNTA1MDMwOTAzMDRaMDMxMTAvBgNV BAMTKDQzOUQ2OThCQzRGMEI0RDZEQzlDQTBDN0I0ODEyNTA4QjVGMkMwNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDyVVsEO1B9gnsppVExu9gzOee JujlO9+jVjcg2PH6padSy07PN68JLvqBKE4s+GaGFajNC2+z1dPr3vmim/GwAHle DNwAx5tt9W3nNRaIyv6VNsLLbU9OHQOEqZT+mBhN9dksx8XGVa55QPIjMeCbBlSe y08B9gPMDALoBTqAHGRhIQlvmLMH94OgP+s4ZUR7txq3suwMbvdIXOatgXfcc+cy n2q6NMDXfAk5WYZgu4ra6TNHibeHtEhGKYFv+liQAlivsije3ZlOxYDg3DbXvKXM JC26/VeItQBlbovoGQgF2IPEEU+JbdCrqmYpilGYO1WpaIbTPyU4wMZU3wghAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ51pi8TwtNbcnKDHtIElCLXywG8wHwYDVR0j BBgwFoAUrSE3uldY2SY2Tp4DjxmmXcPxhG4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzRkMjBhMy0zZDgzLTRjNGYtOTEzOC03NmJjN2M1MTBlYjkvMC9BRDIxMzdCQTU3 NThEOTI2MzY0RTlFMDM4RjE5QTY1REMzRjE4NDZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQyMTM3QkE1NzU4RDkyNjM2NEU5RTAzOEYxOUE2NURDM0Yx ODQ2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTc0ZDIwYTMtM2Q4My00YzRmLTkx MzgtNzZiYzdjNTEwZWI5LzAvQUQyMTM3QkE1NzU4RDkyNjM2NEU5RTAzOEYxOUE2 NURDM0YxODQ2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGFqb7R7Yiul73ZlI2UJ77j9NF5mOGeN7bqC 08/KY37lgalCcC9ZQP1mMnDXG1UzcbPHTAXzEUrd6o2Ho5kHhcikSkst9d1X8sWD vQoHfRp391veF4yYSzeR4bCdXP1YzCRMWl8EsWwYeKrbjm/W6JXln86SKuIPE17p 8/9Gd4sY2J6OEln+O23CB/XbFG+SlQRjGbJjghpOlUAtGKCbxLJ1U2dN1A0NmQyo by11l3xgtqC+LnivfhnXsZu/c4fCUdwjBJwW+acBBC4AR/HNDb1K4zDy94YZWWbB zpWRvYq7PfP3DORY1QvvdvrhcCIf0AmGB0+38+K5EPjjjb7VNQU= -----END CERTIFICATE-----Generated at Wed Apr 30 03:46:39 2025 by rpki-client