$ rpki-client -vvf repo-rpki.idnic.net/repo/dd5008a0-0ac3-498e-8cbf-f3112b91bdf4/0/760EC4C41122D8FD3B28CD4BB92AC6C462B70460.mft File: 760EC4C41122D8FD3B28CD4BB92AC6C462B70460.mft (raw, json) Hash identifier: 7mtv3SHWW1vjvoah//gbjeothr4BZl2jU0zTcZw+yUs= Subject key identifier: C9:CC:D6:7D:28:98:40:AE:B8:E1:AB:D4:4B:4A:DA:17:FE:DE:38:9A Authority key identifier: 76:0E:C4:C4:11:22:D8:FD:3B:28:CD:4B:B9:2A:C6:C4:62:B7:04:60 Certificate issuer: /CN=760EC4C41122D8FD3B28CD4BB92AC6C462B70460 Certificate serial: 29378CD9B9208BA8059BB099DE2F4D15DDE25289 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/760EC4C41122D8FD3B28CD4BB92AC6C462B70460.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd5008a0-0ac3-498e-8cbf-f3112b91bdf4/0/760EC4C41122D8FD3B28CD4BB92AC6C462B70460.mft Manifest number: 018C Signing time: Tue 29 Apr 2025 03:50:40 +0000 Manifest this update: Tue 29 Apr 2025 03:45:40 +0000 Manifest next update: Fri 02 May 2025 06:24:40 +0000 Files and hashes: 1: 760EC4C41122D8FD3B28CD4BB92AC6C462B70460.crl (hash: 3Erk+TXzsRjRe3aifnvRuUaFPPeR0lAkNl4U6nXlc4E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd5008a0-0ac3-498e-8cbf-f3112b91bdf4/0/760EC4C41122D8FD3B28CD4BB92AC6C462B70460.crl rsync://repo-rpki.idnic.net/repo/dd5008a0-0ac3-498e-8cbf-f3112b91bdf4/0/760EC4C41122D8FD3B28CD4BB92AC6C462B70460.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/760EC4C41122D8FD3B28CD4BB92AC6C462B70460.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:24:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:37:8c:d9:b9:20:8b:a8:05:9b:b0:99:de:2f:4d:15:dd:e2:52:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=760EC4C41122D8FD3B28CD4BB92AC6C462B70460 Validity Not Before: Apr 29 03:45:40 2025 GMT Not After : May 2 06:24:40 2025 GMT Subject: CN=C9CCD67D289840AEB8E1ABD44B4ADA17FEDE389A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5a:b3:bb:44:7e:d3:b4:07:ee:69:78:94:bd: 03:a0:be:9a:be:44:3e:10:e3:f1:b1:2b:1d:a7:bf: 8e:4e:ef:a0:a2:22:9f:8d:86:68:7b:7a:ff:62:7a: 2e:07:33:eb:ae:2b:13:f9:d6:10:96:98:7f:f5:94: 13:95:ac:27:70:13:bf:4e:23:66:c4:e9:f8:d0:af: 35:af:75:ee:01:63:cf:f9:58:10:16:0e:45:29:d7: fa:62:5d:7a:8f:e2:9a:e0:96:de:9f:3d:a3:75:9c: 1d:1d:4a:74:e5:f0:b5:9b:47:9e:87:8e:e9:6f:cc: 66:ef:62:e1:3f:90:f0:66:9b:ba:99:bc:76:6b:7e: 37:e3:7f:cb:5a:02:55:3b:90:75:a7:7a:30:99:be: aa:0c:99:4f:7c:47:f0:d1:d4:4e:7b:05:d4:08:6b: cb:50:b3:10:7c:f9:7c:d1:59:7e:78:73:9a:fc:73: c5:72:be:f1:01:58:e7:2c:b0:3f:f2:9d:fa:0f:b7: 11:69:f0:21:50:47:dd:17:54:5d:7d:37:e2:24:0b: f7:2a:a8:ee:bc:87:fb:d9:ce:20:e6:01:f4:94:bc: 35:f3:24:93:dc:bc:4c:ec:8b:f3:c7:a5:cd:d5:a7: 1f:c5:19:76:04:d7:33:23:67:5e:8d:5f:a7:b0:46: 30:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:CC:D6:7D:28:98:40:AE:B8:E1:AB:D4:4B:4A:DA:17:FE:DE:38:9A X509v3 Authority Key Identifier: keyid:76:0E:C4:C4:11:22:D8:FD:3B:28:CD:4B:B9:2A:C6:C4:62:B7:04:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd5008a0-0ac3-498e-8cbf-f3112b91bdf4/0/760EC4C41122D8FD3B28CD4BB92AC6C462B70460.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/760EC4C41122D8FD3B28CD4BB92AC6C462B70460.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd5008a0-0ac3-498e-8cbf-f3112b91bdf4/0/760EC4C41122D8FD3B28CD4BB92AC6C462B70460.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:fd:ce:15:dd:2a:b4:f3:70:74:f0:73:df:c4:5f:ba:ea:b8: 73:f9:95:72:85:e4:77:50:eb:71:4f:4b:69:0b:26:08:dd:04: b0:6c:c1:64:cd:ee:57:9f:0f:55:99:37:20:09:53:05:cd:59: 94:a4:97:0f:56:ad:fc:ec:e0:74:64:ea:6b:9c:5e:c1:77:4b: 95:5b:86:78:05:f1:08:99:db:70:d4:6f:8e:f0:8b:0d:e3:b4: 3b:87:02:df:92:00:03:10:b5:c1:aa:e0:67:61:5c:26:f3:0d: 1b:17:83:52:17:db:f6:9f:a9:7b:69:ad:53:76:ab:7e:a6:90: e2:95:0a:59:b6:2d:0b:18:a3:98:88:ae:09:f9:13:3b:35:d4: 12:64:f6:0e:aa:8f:05:a0:84:cc:20:24:57:bb:df:69:f8:70: 9e:0b:9d:06:2c:35:d8:ec:8d:06:ce:d0:42:1b:4e:7f:23:3b: 5b:73:94:e9:ad:58:3e:9f:7c:09:99:02:d3:9c:ba:23:17:0a: d1:e1:bf:f5:1d:ee:66:11:ce:7d:f3:49:24:87:aa:7e:16:91: 21:13:04:87:69:3b:38:a3:e7:a3:9e:d6:13:bf:1f:90:83:df: d7:82:05:5e:8a:8c:da:f2:85:30:31:5d:91:5b:39:32:b2:18: a2:61:70:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKTeM2bkgi6gFm7CZ3i9NFd3iUokwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzYwRUM0QzQxMTIyRDhGRDNCMjhDRDRCQjkyQUM2QzQ2 MkI3MDQ2MDAeFw0yNTA0MjkwMzQ1NDBaFw0yNTA1MDIwNjI0NDBaMDMxMTAvBgNV BAMTKEM5Q0NENjdEMjg5ODQwQUVCOEUxQUJENDRCNEFEQTE3RkVERTM4OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmWrO7RH7TtAfuaXiUvQOgvpq+ RD4Q4/GxKx2nv45O76CiIp+Nhmh7ev9iei4HM+uuKxP51hCWmH/1lBOVrCdwE79O I2bE6fjQrzWvde4BY8/5WBAWDkUp1/piXXqP4prglt6fPaN1nB0dSnTl8LWbR56H julvzGbvYuE/kPBmm7qZvHZrfjfjf8taAlU7kHWnejCZvqoMmU98R/DR1E57BdQI a8tQsxB8+XzRWX54c5r8c8VyvvEBWOcssD/ynfoPtxFp8CFQR90XVF19N+IkC/cq qO68h/vZziDmAfSUvDXzJJPcvEzsi/PHpc3Vpx/FGXYE1zMjZ16NX6ewRjAfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyczWfSiYQK644avUS0raF/7eOJowHwYDVR0j BBgwFoAUdg7ExBEi2P07KM1LuSrGxGK3BGAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDUwMDhhMC0wYWMzLTQ5OGUtOGNiZi1mMzExMmI5MWJkZjQvMC83NjBFQzRDNDEx MjJEOEZEM0IyOENENEJCOTJBQzZDNDYyQjcwNDYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzYwRUM0QzQxMTIyRDhGRDNCMjhDRDRCQjkyQUM2QzQ2MkI3 MDQ2MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQ1MDA4YTAtMGFjMy00OThlLThj YmYtZjMxMTJiOTFiZGY0LzAvNzYwRUM0QzQxMTIyRDhGRDNCMjhDRDRCQjkyQUM2 QzQ2MkI3MDQ2MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM39zhXdKrTzcHTwc9/EX7rquHP5lXKF5HdQ 63FPS2kLJgjdBLBswWTN7lefD1WZNyAJUwXNWZSklw9Wrfzs4HRk6mucXsF3S5Vb hngF8QiZ23DUb47wiw3jtDuHAt+SAAMQtcGq4GdhXCbzDRsXg1IX2/afqXtprVN2 q36mkOKVClm2LQsYo5iIrgn5Ezs11BJk9g6qjwWghMwgJFe732n4cJ4LnQYsNdjs jQbO0EIbTn8jO1tzlOmtWD6ffAmZAtOcuiMXCtHhv/Ud7mYRzn3zSSSHqn4WkSET BIdpOzij56Oe1hO/H5CD39eCBV6KjNryhTAxXZFbOTKyGKJhcDw= -----END CERTIFICATE-----Generated at Tue Apr 29 15:00:24 2025 by rpki-client