$ rpki-client -vvf repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft File: 2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft (raw, json) Hash identifier: ErzV/SKM6rTjuT8gmQQT8d+UMge59AnCF9gDP7i4xRA= Subject key identifier: EC:D9:26:3C:9B:64:0D:1A:7F:76:13:82:D4:61:6F:23:F5:A3:D3:7E Authority key identifier: 2A:57:5A:DD:64:4E:97:D6:1D:2E:BF:FF:2A:23:05:6B:78:EF:AE:6C Certificate issuer: /CN=2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C Certificate serial: 394853AA3692EE74E0DF15026CE1757B362D181D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft Manifest number: 83 Signing time: Sat 03 May 2025 04:11:39 +0000 Manifest this update: Sat 03 May 2025 04:06:39 +0000 Manifest next update: Tue 06 May 2025 11:18:39 +0000 Files and hashes: 1: 2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.crl (hash: 7j941/GkEMRM2pyWlFOKL8yxRewZ59fiw4OSqcJIlCc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.crl rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 05:13:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:48:53:aa:36:92:ee:74:e0:df:15:02:6c:e1:75:7b:36:2d:18:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C Validity Not Before: May 3 04:06:39 2025 GMT Not After : May 6 11:18:39 2025 GMT Subject: CN=ECD9263C9B640D1A7F761382D4616F23F5A3D37E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:df:cb:89:87:32:e9:02:8b:86:e4:a8:6f:b1: 2d:4e:c9:99:de:9f:a8:34:31:a1:fb:a8:a5:56:85: b1:7d:42:62:79:68:33:04:d3:7d:c7:06:39:56:99: 75:ae:b2:2e:03:3c:d1:6e:67:be:ce:7f:67:9f:37: 80:7e:51:f0:e8:73:ae:b8:fb:ab:98:4e:3c:c0:4b: af:19:66:1f:0d:c4:57:98:ff:d9:d5:a7:1b:a4:e9: 6b:39:98:44:66:9d:d6:70:3b:5b:f0:43:40:ac:df: af:09:b9:69:4f:50:da:89:e6:78:62:e5:b6:0c:17: 17:8f:02:ac:68:59:e7:1e:63:04:6f:65:49:2e:b9: 05:23:f7:39:4d:61:93:c9:67:24:ba:00:b9:52:87: 8e:c5:25:67:98:79:48:de:2e:38:09:24:7f:db:dc: 21:a0:be:18:0e:63:21:18:27:fe:7d:ff:69:27:1b: 01:91:65:ce:31:17:98:17:8a:d0:22:47:e9:ed:f4: aa:93:b1:a0:73:f5:38:15:54:9b:a5:f4:dd:e1:99: 57:de:d7:ee:5e:42:40:d0:0e:2c:ed:48:1d:9e:f2: 5e:dc:d9:d1:97:53:bd:47:a1:3d:32:f0:9a:cb:61: 41:5b:1f:77:e2:7f:f6:b7:f3:10:c5:76:e5:36:07: 1e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:D9:26:3C:9B:64:0D:1A:7F:76:13:82:D4:61:6F:23:F5:A3:D3:7E X509v3 Authority Key Identifier: keyid:2A:57:5A:DD:64:4E:97:D6:1D:2E:BF:FF:2A:23:05:6B:78:EF:AE:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:78:b1:b9:36:2d:85:4f:aa:6a:56:6b:f5:07:d6:c2:f3:29: 87:5a:3a:8b:69:e4:7e:77:d7:60:8b:ce:0c:54:ca:51:30:4e: cb:22:91:b9:73:c8:f5:fb:33:66:82:dc:55:bf:f8:53:f5:99: 2b:63:58:85:1b:02:1c:73:67:b0:dd:51:57:5d:0c:c1:10:76: 40:d9:6d:71:5b:1c:ca:c3:19:9e:e2:77:75:c2:ed:45:c9:12: 82:f3:92:5e:10:61:a6:d5:5a:0c:ce:05:a2:40:da:ce:eb:41: e4:55:05:72:17:3b:a5:99:2b:79:85:12:a1:16:95:59:d1:98: 18:7c:36:17:fd:4b:83:d2:52:7b:fb:05:ee:0d:d2:2a:27:9a: 3c:d9:99:a6:d1:fe:d8:c8:1b:a1:4b:fa:b5:53:2b:e8:46:c7: a7:b1:da:29:c9:cb:f4:e9:54:4d:5d:e6:92:d6:cd:e7:1d:5d: b9:65:7f:47:35:48:b8:2d:f2:c4:5c:83:e2:3f:44:99:1a:a9: 29:80:9c:10:83:f8:dc:24:4b:75:6b:52:b1:bf:a6:61:dd:de: 19:3d:1f:c3:7f:bf:31:fb:e4:20:59:63:cb:16:24:23:e3:83: 9e:cd:cd:ce:09:31:31:01:67:60:72:24:25:fd:32:df:6e:74: 4d:03:a9:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOUhTqjaS7nTg3xUCbOF1ezYtGB0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE1NzVBREQ2NDRFOTdENjFEMkVCRkZGMkEyMzA1NkI3 OEVGQUU2QzAeFw0yNTA1MDMwNDA2MzlaFw0yNTA1MDYxMTE4MzlaMDMxMTAvBgNV BAMTKEVDRDkyNjNDOUI2NDBEMUE3Rjc2MTM4MkQ0NjE2RjIzRjVBM0QzN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt38uJhzLpAouG5KhvsS1OyZne n6g0MaH7qKVWhbF9QmJ5aDME033HBjlWmXWusi4DPNFuZ77Of2efN4B+UfDoc664 +6uYTjzAS68ZZh8NxFeY/9nVpxuk6Ws5mERmndZwO1vwQ0Cs368JuWlPUNqJ5nhi 5bYMFxePAqxoWeceYwRvZUkuuQUj9zlNYZPJZyS6ALlSh47FJWeYeUjeLjgJJH/b 3CGgvhgOYyEYJ/59/2knGwGRZc4xF5gXitAiR+nt9KqTsaBz9TgVVJul9N3hmVfe 1+5eQkDQDiztSB2e8l7c2dGXU71HoT0y8JrLYUFbH3fif/a38xDFduU2Bx7BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7NkmPJtkDRp/dhOC1GFvI/Wj034wHwYDVR0j BBgwFoAUKlda3WROl9YdLr//KiMFa3jvrmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDM1NGMxYi02NzdlLTQxZDYtYWIwZi1lOTZlZGZkOTI5NTcvMC8yQTU3NUFERDY0 NEU5N0Q2MUQyRUJGRkYyQTIzMDU2Qjc4RUZBRTZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkE1NzVBREQ2NDRFOTdENjFEMkVCRkZGMkEyMzA1NkI3OEVG QUU2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmQzNTRjMWItNjc3ZS00MWQ2LWFi MGYtZTk2ZWRmZDkyOTU3LzAvMkE1NzVBREQ2NDRFOTdENjFEMkVCRkZGMkEyMzA1 NkI3OEVGQUU2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEp4sbk2LYVPqmpWa/UH1sLzKYdaOotp5H53 12CLzgxUylEwTssikblzyPX7M2aC3FW/+FP1mStjWIUbAhxzZ7DdUVddDMEQdkDZ bXFbHMrDGZ7id3XC7UXJEoLzkl4QYabVWgzOBaJA2s7rQeRVBXIXO6WZK3mFEqEW lVnRmBh8Nhf9S4PSUnv7Be4N0ionmjzZmabR/tjIG6FL+rVTK+hGx6ex2inJy/Tp VE1d5pLWzecdXbllf0c1SLgt8sRcg+I/RJkaqSmAnBCD+NwkS3VrUrG/pmHd3hk9 H8N/vzH75CBZY8sWJCPjg57Nzc4JMTEBZ2ByJCX9Mt9udE0DqWk= -----END CERTIFICATE-----Generated at Sat May 3 08:29:02 2025 by rpki-client