$ rpki-client -vvf repo-rpki.idnic.net/repo/e7b1f14f-4d90-46c5-9fbc-9c9aa6b9dfa5/0/164D60A5876A6B9B50D1CB09453536273A893898.mft File: 164D60A5876A6B9B50D1CB09453536273A893898.mft (raw, json) Hash identifier: Zz8jbgc8owiiq8Nwr569tuhv6FbR3nwRQfk0gs+Hra4= Subject key identifier: 95:A9:00:02:94:79:C1:7B:48:0A:2A:2A:2C:8C:65:C6:E2:30:86:22 Authority key identifier: 16:4D:60:A5:87:6A:6B:9B:50:D1:CB:09:45:35:36:27:3A:89:38:98 Certificate issuer: /CN=164D60A5876A6B9B50D1CB09453536273A893898 Certificate serial: 39314289473F42FED9D53ADC7A8BD29DFE273347 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/164D60A5876A6B9B50D1CB09453536273A893898.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e7b1f14f-4d90-46c5-9fbc-9c9aa6b9dfa5/0/164D60A5876A6B9B50D1CB09453536273A893898.mft Manifest number: 82 Signing time: Wed 30 Apr 2025 01:11:52 +0000 Manifest this update: Wed 30 Apr 2025 01:06:51 +0000 Manifest next update: Sat 03 May 2025 08:14:51 +0000 Files and hashes: 1: 164D60A5876A6B9B50D1CB09453536273A893898.crl (hash: NkiQ9WSIYkiMVhDOs3+j7mc2Atxsmukow1OVRrYJhBg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e7b1f14f-4d90-46c5-9fbc-9c9aa6b9dfa5/0/164D60A5876A6B9B50D1CB09453536273A893898.crl rsync://repo-rpki.idnic.net/repo/e7b1f14f-4d90-46c5-9fbc-9c9aa6b9dfa5/0/164D60A5876A6B9B50D1CB09453536273A893898.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/164D60A5876A6B9B50D1CB09453536273A893898.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 08:14:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:31:42:89:47:3f:42:fe:d9:d5:3a:dc:7a:8b:d2:9d:fe:27:33:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=164D60A5876A6B9B50D1CB09453536273A893898 Validity Not Before: Apr 30 01:06:51 2025 GMT Not After : May 3 08:14:51 2025 GMT Subject: CN=95A900029479C17B480A2A2A2C8C65C6E2308622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c0:3a:19:40:07:03:5a:1b:26:fa:54:66:06: ed:b3:8f:28:d0:11:3d:54:0d:9c:09:ad:8e:1d:10: b5:74:50:9a:43:86:e6:36:ce:8d:63:b0:52:ed:1c: 4d:90:00:0d:17:59:22:29:7b:01:d7:7f:c7:93:1b: fe:95:bb:37:07:43:95:72:dd:42:25:6b:c6:e6:28: 88:9d:83:9b:df:c1:bb:4a:55:16:a8:41:f2:6c:4d: 64:2e:8c:68:d5:70:1e:b6:9d:2f:93:5c:36:4f:27: 8f:5c:4b:84:fd:f0:58:ce:d8:17:71:04:7c:d3:f0: e9:c5:56:6c:16:c2:3e:f2:c5:2c:8a:af:ad:e0:3a: 8f:d3:b8:95:f0:ca:d6:e0:d3:f7:ee:76:93:df:76: 39:93:08:97:a5:04:fb:9f:91:17:b7:0d:8c:b5:3e: c0:f2:53:c7:bd:41:77:13:33:66:b4:91:5c:96:fb: ce:25:c2:81:98:a2:a1:d5:66:10:23:34:ba:61:94: 4c:6b:0c:a9:19:ad:87:7c:3a:8c:f0:ac:28:ed:6e: aa:32:4a:00:f7:2f:ee:5d:e3:2c:ee:22:a1:41:48: a5:10:c2:a9:3d:70:87:07:4e:de:30:e3:b7:c6:fa: 74:f0:67:bd:0f:b1:b6:d7:9c:4b:c2:ae:fe:50:fe: f3:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:A9:00:02:94:79:C1:7B:48:0A:2A:2A:2C:8C:65:C6:E2:30:86:22 X509v3 Authority Key Identifier: keyid:16:4D:60:A5:87:6A:6B:9B:50:D1:CB:09:45:35:36:27:3A:89:38:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e7b1f14f-4d90-46c5-9fbc-9c9aa6b9dfa5/0/164D60A5876A6B9B50D1CB09453536273A893898.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/164D60A5876A6B9B50D1CB09453536273A893898.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e7b1f14f-4d90-46c5-9fbc-9c9aa6b9dfa5/0/164D60A5876A6B9B50D1CB09453536273A893898.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:3b:58:ac:5c:6a:a9:35:d4:c1:0e:db:9d:78:8e:ba:30:b7: 87:47:f2:82:37:4e:4b:68:d8:08:23:6a:d8:f2:28:d0:5c:24: 85:59:ca:02:57:40:79:9b:bf:a5:c5:69:7d:06:2d:6b:ce:07: e4:a1:c8:87:c8:f5:9d:02:77:38:d9:df:29:0c:d1:6d:81:61: 3b:05:00:46:30:0b:c8:c9:9c:91:eb:d9:5b:cb:d4:64:70:a9: f6:82:fe:61:07:e9:31:f6:79:2e:dd:8d:b6:fa:aa:88:e6:40: 26:f7:92:30:f2:aa:a6:ac:97:58:05:38:6f:e8:00:af:e6:79: 57:1b:bc:73:8f:87:67:37:58:7a:32:d7:78:f6:8b:c5:fa:4e: e7:13:96:ee:84:6d:12:73:58:9a:5c:b3:3d:ff:b5:b7:76:b8: 6c:56:f0:01:24:52:29:86:d8:4a:43:6d:2a:45:28:79:92:66: 00:58:8f:7e:e4:0b:cb:de:f3:76:02:0f:1a:bf:ef:74:d6:97: 3b:86:3f:b0:a2:c1:04:e4:6b:e0:dc:a1:a1:b9:9e:48:64:22: dd:37:c0:40:d7:c2:0a:a0:b4:a7:bf:2d:f6:ad:a0:1f:4d:c7: ed:7d:70:78:9f:8a:33:6b:4c:98:22:d5:0d:30:85:2b:de:a0: de:5a:2c:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOTFCiUc/Qv7Z1TrceovSnf4nM0cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY0RDYwQTU4NzZBNkI5QjUwRDFDQjA5NDUzNTM2Mjcz QTg5Mzg5ODAeFw0yNTA0MzAwMTA2NTFaFw0yNTA1MDMwODE0NTFaMDMxMTAvBgNV BAMTKDk1QTkwMDAyOTQ3OUMxN0I0ODBBMkEyQTJDOEM2NUM2RTIzMDg2MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmwDoZQAcDWhsm+lRmBu2zjyjQ ET1UDZwJrY4dELV0UJpDhuY2zo1jsFLtHE2QAA0XWSIpewHXf8eTG/6VuzcHQ5Vy 3UIla8bmKIidg5vfwbtKVRaoQfJsTWQujGjVcB62nS+TXDZPJ49cS4T98FjO2Bdx BHzT8OnFVmwWwj7yxSyKr63gOo/TuJXwytbg0/fudpPfdjmTCJelBPufkRe3DYy1 PsDyU8e9QXcTM2a0kVyW+84lwoGYoqHVZhAjNLphlExrDKkZrYd8OozwrCjtbqoy SgD3L+5d4yzuIqFBSKUQwqk9cIcHTt4w47fG+nTwZ70PsbbXnEvCrv5Q/vMTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlakAApR5wXtICioqLIxlxuIwhiIwHwYDVR0j BBgwFoAUFk1gpYdqa5tQ0csJRTU2JzqJOJgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l N2IxZjE0Zi00ZDkwLTQ2YzUtOWZiYy05YzlhYTZiOWRmYTUvMC8xNjRENjBBNTg3 NkE2QjlCNTBEMUNCMDk0NTM1MzYyNzNBODkzODk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY0RDYwQTU4NzZBNkI5QjUwRDFDQjA5NDUzNTM2MjczQTg5 Mzg5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTdiMWYxNGYtNGQ5MC00NmM1LTlm YmMtOWM5YWE2YjlkZmE1LzAvMTY0RDYwQTU4NzZBNkI5QjUwRDFDQjA5NDUzNTM2 MjczQTg5Mzg5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACU7WKxcaqk11MEO2514jrowt4dH8oI3Tkto 2AgjatjyKNBcJIVZygJXQHmbv6XFaX0GLWvOB+ShyIfI9Z0CdzjZ3ykM0W2BYTsF AEYwC8jJnJHr2VvL1GRwqfaC/mEH6TH2eS7djbb6qojmQCb3kjDyqqasl1gFOG/o AK/meVcbvHOPh2c3WHoy13j2i8X6TucTlu6EbRJzWJpcsz3/tbd2uGxW8AEkUimG 2EpDbSpFKHmSZgBYj37kC8ve83YCDxq/73TWlzuGP7CiwQTka+DcoaG5nkhkIt03 wEDXwgqgtKe/LfatoB9Nx+19cHifijNrTJgi1Q0whSveoN5aLP8= -----END CERTIFICATE-----Generated at Wed Apr 30 21:26:02 2025 by rpki-client