$ rpki-client -vvf repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft File: 96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft (raw, json) Hash identifier: g7xtGcaP4dgMVGWsGyWoxvKsaMBGM4W+OB47ZHMWAbE= Subject key identifier: 8B:92:07:9D:A2:6C:57:D4:FF:06:4F:9F:50:E8:08:2C:7C:AE:E1:5E Authority key identifier: 96:FB:31:74:E7:1D:4C:E9:BB:1C:57:29:5C:2F:55:E7:46:41:F8:EE Certificate issuer: /CN=96FB3174E71D4CE9BB1C57295C2F55E74641F8EE Certificate serial: 3BA7E5D4252BB4FD63CF586986D332CCCD369EA4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft Manifest number: 3A Signing time: Sat 26 Apr 2025 21:12:10 +0000 Manifest this update: Sat 26 Apr 2025 21:07:10 +0000 Manifest next update: Wed 30 Apr 2025 06:06:10 +0000 Files and hashes: 1: 96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.crl (hash: gVd4EqUOsqJ7xN9QW9Nya4oizH+hHUd9Xs1wstrcgCg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.crl rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 06:06:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:a7:e5:d4:25:2b:b4:fd:63:cf:58:69:86:d3:32:cc:cd:36:9e:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96FB3174E71D4CE9BB1C57295C2F55E74641F8EE Validity Not Before: Apr 26 21:07:10 2025 GMT Not After : Apr 30 06:06:10 2025 GMT Subject: CN=8B92079DA26C57D4FF064F9F50E8082C7CAEE15E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ff:0f:53:73:4f:d6:1f:4d:49:fe:8c:3d:9c: 69:3c:7a:14:78:89:a5:88:71:90:b4:04:1d:62:b3: 7c:56:94:f9:56:f4:9d:ef:32:c9:7f:c0:33:95:79: 22:16:7f:e2:00:2d:ec:22:7d:b8:84:90:76:7f:c4: 93:f3:47:71:1d:cc:2d:b5:2d:58:4a:49:81:37:37: f5:28:aa:9c:4b:2b:dc:ec:07:dc:bc:45:d8:93:e9: 8e:d3:7f:19:8b:d1:e3:3c:24:62:b9:9c:df:ab:2e: 09:78:34:9a:50:9f:45:01:b6:33:cc:56:61:3b:ea: 58:28:ac:e1:33:f1:d9:0f:5c:a5:57:e3:cb:6d:f8: 76:2e:5f:9f:8a:b1:0c:47:5b:16:d9:b1:a9:44:03: 92:7e:f9:bf:d6:f1:5b:06:d3:25:e8:8c:49:9b:df: 9f:ce:26:36:ba:03:f0:0a:d9:5e:a2:21:a6:f4:da: fe:4e:15:e7:45:c3:d3:7e:a7:8b:fd:ed:42:0e:1a: 6f:84:d9:3a:43:54:88:f5:2f:0a:56:ab:9e:a7:e6: e5:1c:04:f3:0a:1c:2b:97:31:cf:17:28:96:d8:dc: a6:09:28:0c:7e:23:e7:d6:fa:4c:df:67:11:98:76: a9:e8:89:9f:dc:42:37:b4:e0:bd:74:61:e4:d4:15: 33:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:92:07:9D:A2:6C:57:D4:FF:06:4F:9F:50:E8:08:2C:7C:AE:E1:5E X509v3 Authority Key Identifier: keyid:96:FB:31:74:E7:1D:4C:E9:BB:1C:57:29:5C:2F:55:E7:46:41:F8:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:35:d6:6f:1d:04:56:22:6e:5d:5e:11:2b:9b:f8:27:cd:ab: b2:20:8b:31:8f:8d:41:6d:18:c3:ec:e1:1a:d3:b0:9c:d8:c4: 42:a3:a7:03:44:fe:7c:b8:02:e5:07:b0:cb:e0:1d:97:24:89: 87:a5:03:5b:67:41:ff:49:29:1d:97:62:ed:41:66:e6:67:7a: f6:4a:73:53:69:20:fc:f0:35:cd:46:f0:ee:b0:8a:d0:4a:ca: 5a:58:55:5d:b8:53:a0:61:fc:00:55:54:76:8a:2c:d0:5a:b1: ac:2c:29:b2:f8:66:63:35:1b:f1:02:ef:fd:bb:a0:28:99:7d: 59:ae:fc:68:24:a2:36:ae:47:c0:04:b8:be:c2:19:f9:86:8d: 37:04:3c:db:36:e6:82:60:76:90:f5:e3:6f:c6:f4:f2:ad:5e: bd:1a:f9:f9:28:f6:41:b4:7c:7c:cb:cc:c0:fa:0b:02:9b:72: 77:91:7d:83:86:8a:85:a5:13:37:d2:d7:70:f9:5f:ec:b9:d1: 53:82:32:d6:c4:11:29:18:0a:8e:59:e8:f6:0c:50:fe:a5:1b: 79:fa:a8:57:0f:c2:8d:3d:48:42:a4:62:01:9c:25:57:73:13: d2:6b:d5:9b:33:bd:40:46:1c:a5:3c:e3:34:90:bf:b0:2e:e5: cb:96:d1:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO6fl1CUrtP1jz1hphtMyzM02nqQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZGQjMxNzRFNzFENENFOUJCMUM1NzI5NUMyRjU1RTc0 NjQxRjhFRTAeFw0yNTA0MjYyMTA3MTBaFw0yNTA0MzAwNjA2MTBaMDMxMTAvBgNV BAMTKDhCOTIwNzlEQTI2QzU3RDRGRjA2NEY5RjUwRTgwODJDN0NBRUUxNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD/w9Tc0/WH01J/ow9nGk8ehR4 iaWIcZC0BB1is3xWlPlW9J3vMsl/wDOVeSIWf+IALewifbiEkHZ/xJPzR3EdzC21 LVhKSYE3N/UoqpxLK9zsB9y8RdiT6Y7TfxmL0eM8JGK5nN+rLgl4NJpQn0UBtjPM VmE76lgorOEz8dkPXKVX48tt+HYuX5+KsQxHWxbZsalEA5J++b/W8VsG0yXojEmb 35/OJja6A/AK2V6iIab02v5OFedFw9N+p4v97UIOGm+E2TpDVIj1LwpWq56n5uUc BPMKHCuXMc8XKJbY3KYJKAx+I+fW+kzfZxGYdqnoiZ/cQje04L10YeTUFTN5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi5IHnaJsV9T/Bk+fUOgILHyu4V4wHwYDVR0j BBgwFoAUlvsxdOcdTOm7HFcpXC9V50ZB+O4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzhmOWI2Yi0wMjdhLTRiZTYtYWIwMi0yOGQ1NTFjMzk4MTkvMC85NkZCMzE3NEU3 MUQ0Q0U5QkIxQzU3Mjk1QzJGNTVFNzQ2NDFGOEVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTZGQjMxNzRFNzFENENFOUJCMUM1NzI5NUMyRjU1RTc0NjQx RjhFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTM4ZjliNmItMDI3YS00YmU2LWFi MDItMjhkNTUxYzM5ODE5LzAvOTZGQjMxNzRFNzFENENFOUJCMUM1NzI5NUMyRjU1 RTc0NjQxRjhFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALc11m8dBFYibl1eESub+CfNq7IgizGPjUFt GMPs4RrTsJzYxEKjpwNE/ny4AuUHsMvgHZckiYelA1tnQf9JKR2XYu1BZuZnevZK c1NpIPzwNc1G8O6witBKylpYVV24U6Bh/ABVVHaKLNBasawsKbL4ZmM1G/EC7/27 oCiZfVmu/GgkojauR8AEuL7CGfmGjTcEPNs25oJgdpD142/G9PKtXr0a+fko9kG0 fHzLzMD6CwKbcneRfYOGioWlEzfS13D5X+y50VOCMtbEESkYCo5Z6PYMUP6lG3n6 qFcPwo09SEKkYgGcJVdzE9Jr1ZszvUBGHKU84zSQv7Au5cuW0Qg= -----END CERTIFICATE-----Generated at Mon Apr 28 07:51:27 2025 by rpki-client