$ rpki-client -vvf repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.mft File: B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.mft (raw, json) Hash identifier: h3wrpHYMAaHcEf2hLvLzZaPm56BpmiZ1HmsVBbWkVe0= Subject key identifier: CE:FD:47:7E:FA:6B:4B:59:89:2E:E5:BE:E2:D2:E4:B5:B0:85:EC:19 Authority key identifier: B2:A7:61:D6:1C:BF:02:4F:24:CD:3A:18:BE:96:E5:8F:7E:D6:C9:09 Certificate issuer: /CN=B2A761D61CBF024F24CD3A18BE96E58F7ED6C909 Certificate serial: 6C2422B29A9AA8C752F01EF7855F7F43FED497BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.mft Manifest number: 0494 Signing time: Tue 29 Apr 2025 09:11:09 +0000 Manifest this update: Tue 29 Apr 2025 09:06:09 +0000 Manifest next update: Fri 02 May 2025 10:23:09 +0000 Files and hashes: 1: B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.crl (hash: JltX5BvIQ1p32f0sxH4VmFy07ApAPxDagU0ZREa7QGE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.crl rsync://repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 10:23:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:24:22:b2:9a:9a:a8:c7:52:f0:1e:f7:85:5f:7f:43:fe:d4:97:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2A761D61CBF024F24CD3A18BE96E58F7ED6C909 Validity Not Before: Apr 29 09:06:09 2025 GMT Not After : May 2 10:23:09 2025 GMT Subject: CN=CEFD477EFA6B4B59892EE5BEE2D2E4B5B085EC19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1d:b4:87:42:39:34:65:1b:e4:6c:c0:e5:d4: 24:64:2b:a4:31:94:91:9a:ad:73:3b:26:88:2b:30: fb:34:fb:35:d4:d6:a3:df:98:37:27:e2:0f:78:85: 07:5b:fe:33:cd:99:5d:b9:de:3f:98:c3:44:73:31: 95:d2:05:52:93:74:a8:75:9c:cb:cb:90:99:77:f3: 1a:a3:81:f1:1c:01:43:a7:93:bd:4e:de:f4:e2:37: 9d:30:92:aa:81:16:53:64:8f:cb:71:0b:b9:fa:a1: 58:91:26:1e:76:19:14:0f:b8:c7:99:7f:1d:0e:b0: 9f:7a:6b:ca:7e:76:d3:df:cb:60:02:d1:e5:c9:92: d3:d8:76:c3:42:07:01:bf:90:8b:8c:60:d8:ee:23: 22:d8:94:c2:88:b6:99:dd:1a:5f:1f:a7:04:b1:0c: 74:e8:c3:23:a6:24:70:57:7e:ff:05:20:ee:71:bb: 49:6f:9a:db:67:d6:87:2a:a6:4a:9b:cc:cd:25:f6: 2f:81:03:1e:45:d6:dc:4a:52:46:32:dd:58:32:c2: 00:d8:6f:18:56:eb:71:74:60:6e:a5:96:a5:ff:db: af:ff:d7:0c:5d:9a:72:20:d6:af:d2:61:39:f4:aa: 93:38:6c:9b:f5:92:98:97:43:76:ca:eb:a5:12:68: 89:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:FD:47:7E:FA:6B:4B:59:89:2E:E5:BE:E2:D2:E4:B5:B0:85:EC:19 X509v3 Authority Key Identifier: keyid:B2:A7:61:D6:1C:BF:02:4F:24:CD:3A:18:BE:96:E5:8F:7E:D6:C9:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bba97b0b-39ae-4c2c-b13b-01e395b7a24b/0/B2A761D61CBF024F24CD3A18BE96E58F7ED6C909.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:b2:ab:3f:ed:f0:f0:8c:13:5e:eb:14:c8:ad:a5:8c:46:d4: 61:29:b1:87:46:05:fd:30:3f:54:5c:17:13:b1:8b:c5:35:9c: 80:4f:55:49:5f:0c:2d:4c:36:6e:d0:27:90:7f:61:c6:0c:02: eb:b5:8d:7d:04:2d:4a:2b:e2:48:00:09:de:d7:6e:72:6e:1f: 72:7e:e4:4e:09:72:11:7f:ad:a4:29:55:e4:44:56:20:d2:57: cb:6e:3a:67:cf:fe:0a:21:6c:94:d1:4f:c4:54:21:df:c0:33: 04:5c:6f:4e:65:fb:e9:86:26:6f:a3:c8:2e:28:96:63:10:02: 90:27:c1:e8:b5:3c:1f:d5:b5:7d:ca:f5:86:5c:9b:6b:98:82: 8c:6f:15:ac:4b:82:d8:00:3b:25:37:28:0a:9f:e4:4f:20:8b: a3:7d:b3:32:7a:2b:a1:8e:d8:d8:77:c2:31:2e:b8:9b:9a:d9: d8:26:af:b6:dc:f0:74:59:fa:66:3a:59:09:3d:66:29:a5:94: 7b:1c:d6:b6:22:19:0b:de:8e:dd:37:d9:0b:3b:11:00:28:10: 9e:d0:52:38:b1:02:62:ad:6c:20:cc:ac:1d:96:25:ed:b7:40: a2:34:80:f7:00:7b:cb:a5:a5:92:b6:ab:6d:ed:a8:03:79:5c: 0b:ea:2e:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbCQispqaqMdS8B73hV9/Q/7Ul7swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJBNzYxRDYxQ0JGMDI0RjI0Q0QzQTE4QkU5NkU1OEY3 RUQ2QzkwOTAeFw0yNTA0MjkwOTA2MDlaFw0yNTA1MDIxMDIzMDlaMDMxMTAvBgNV BAMTKENFRkQ0NzdFRkE2QjRCNTk4OTJFRTVCRUUyRDJFNEI1QjA4NUVDMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvHbSHQjk0ZRvkbMDl1CRkK6Qx lJGarXM7JogrMPs0+zXU1qPfmDcn4g94hQdb/jPNmV253j+Yw0RzMZXSBVKTdKh1 nMvLkJl38xqjgfEcAUOnk71O3vTiN50wkqqBFlNkj8txC7n6oViRJh52GRQPuMeZ fx0OsJ96a8p+dtPfy2AC0eXJktPYdsNCBwG/kIuMYNjuIyLYlMKItpndGl8fpwSx DHTowyOmJHBXfv8FIO5xu0lvmttn1ocqpkqbzM0l9i+BAx5F1txKUkYy3VgywgDY bxhW63F0YG6llqX/26//1wxdmnIg1q/SYTn0qpM4bJv1kpiXQ3bK66USaIkHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzv1HfvprS1mJLuW+4tLktbCF7BkwHwYDVR0j BBgwFoAUsqdh1hy/Ak8kzToYvpblj37WyQkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YmE5N2IwYi0zOWFlLTRjMmMtYjEzYi0wMWUzOTViN2EyNGIvMC9CMkE3NjFENjFD QkYwMjRGMjRDRDNBMThCRTk2RTU4RjdFRDZDOTA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjJBNzYxRDYxQ0JGMDI0RjI0Q0QzQTE4QkU5NkU1OEY3RUQ2 QzkwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmJhOTdiMGItMzlhZS00YzJjLWIx M2ItMDFlMzk1YjdhMjRiLzAvQjJBNzYxRDYxQ0JGMDI0RjI0Q0QzQTE4QkU5NkU1 OEY3RUQ2QzkwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHyyqz/t8PCME17rFMitpYxG1GEpsYdGBf0w P1RcFxOxi8U1nIBPVUlfDC1MNm7QJ5B/YcYMAuu1jX0ELUor4kgACd7XbnJuH3J+ 5E4JchF/raQpVeREViDSV8tuOmfP/gohbJTRT8RUId/AMwRcb05l++mGJm+jyC4o lmMQApAnwei1PB/VtX3K9YZcm2uYgoxvFaxLgtgAOyU3KAqf5E8gi6N9szJ6K6GO 2Nh3wjEuuJua2dgmr7bc8HRZ+mY6WQk9ZimllHsc1rYiGQvejt032Qs7EQAoEJ7Q UjixAmKtbCDMrB2WJe23QKI0gPcAe8ulpZK2q23tqAN5XAvqLvE= -----END CERTIFICATE-----Generated at Tue Apr 29 12:47:48 2025 by rpki-client