$ rpki-client -vvf repo-rpki.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/A45C7486216530EA5E88FE961534FA7EAE72A79C.mft File: A45C7486216530EA5E88FE961534FA7EAE72A79C.mft (raw, json) Hash identifier: kIj8pYfdCG1jQaJsWKOpCY7DqqY+GEvKYv/FIHH9u94= Subject key identifier: 95:D2:C7:2D:18:D3:25:A2:2B:3B:8A:FC:73:14:AD:C6:45:60:0C:57 Authority key identifier: A4:5C:74:86:21:65:30:EA:5E:88:FE:96:15:34:FA:7E:AE:72:A7:9C Certificate issuer: /CN=A45C7486216530EA5E88FE961534FA7EAE72A79C Certificate serial: 559635A5F2BF517F378A99B607967F85762CE585 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A45C7486216530EA5E88FE961534FA7EAE72A79C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/A45C7486216530EA5E88FE961534FA7EAE72A79C.mft Manifest number: CB Signing time: Mon 28 Apr 2025 19:51:27 +0000 Manifest this update: Mon 28 Apr 2025 19:46:27 +0000 Manifest next update: Thu 01 May 2025 23:32:27 +0000 Files and hashes: 1: A45C7486216530EA5E88FE961534FA7EAE72A79C.crl (hash: /abAFd1r8flBVxqo0+Yyaj6dm7W4BnIezhsjfe/bHLw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/A45C7486216530EA5E88FE961534FA7EAE72A79C.crl rsync://repo-rpki.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/A45C7486216530EA5E88FE961534FA7EAE72A79C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A45C7486216530EA5E88FE961534FA7EAE72A79C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:32:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:96:35:a5:f2:bf:51:7f:37:8a:99:b6:07:96:7f:85:76:2c:e5:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A45C7486216530EA5E88FE961534FA7EAE72A79C Validity Not Before: Apr 28 19:46:27 2025 GMT Not After : May 1 23:32:27 2025 GMT Subject: CN=95D2C72D18D325A22B3B8AFC7314ADC645600C57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4a:38:a8:c7:03:51:7f:e5:05:03:7b:0c:98: bd:1c:c5:ef:7f:8a:55:82:ec:dd:bc:e6:ec:30:d3: 4d:d5:92:17:29:45:6c:74:da:cb:39:2d:98:54:0b: 16:d7:09:c3:88:73:f2:ba:ad:3e:a5:6f:f5:9f:4b: f6:6a:36:4c:e5:c0:c7:6e:8d:c1:b9:e1:77:ca:91: a6:8f:b9:76:8f:21:f7:45:07:d8:a9:97:40:2d:e2: 77:2c:7d:72:99:a2:0b:d2:c9:fd:6b:64:ed:ff:82: 5b:c7:b7:db:72:fb:28:e6:4a:eb:b1:a5:98:e1:43: 06:f9:55:4d:f9:ec:0c:a8:5e:36:49:14:c1:d1:c8: b0:f8:d9:dd:a4:a1:83:b4:b5:b2:0b:17:fc:3c:c7: bd:ed:d9:71:1a:df:e2:c6:c7:33:92:e9:79:d7:e7: 74:37:2a:07:98:24:10:f3:7f:8a:40:99:99:62:b8: 96:50:b6:c6:08:e0:c1:38:51:ed:d7:55:bd:93:e6: e4:42:79:be:d8:1a:02:67:58:67:52:52:3b:c3:ff: 58:dc:76:46:06:09:51:db:7e:5b:ff:bb:d8:44:c7: 6a:b5:9c:c2:49:6c:f8:04:9d:2b:1d:d4:bf:21:c8: b6:ef:d7:ac:9f:fa:12:d8:49:20:d9:10:d0:6e:56: 2f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:D2:C7:2D:18:D3:25:A2:2B:3B:8A:FC:73:14:AD:C6:45:60:0C:57 X509v3 Authority Key Identifier: keyid:A4:5C:74:86:21:65:30:EA:5E:88:FE:96:15:34:FA:7E:AE:72:A7:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/A45C7486216530EA5E88FE961534FA7EAE72A79C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A45C7486216530EA5E88FE961534FA7EAE72A79C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/A45C7486216530EA5E88FE961534FA7EAE72A79C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:3c:7b:ed:58:f5:84:b2:dd:e8:9c:c3:af:71:82:64:c5:dc: 6b:5f:80:62:ca:40:75:94:61:b4:b5:7f:98:13:18:ae:3e:37: 18:51:ea:74:1a:a3:3a:4f:ee:1f:38:52:6c:a0:bc:6c:3d:e9: 14:d2:ed:af:3c:97:7c:de:a9:ed:1d:1c:87:bf:62:68:b0:2a: c4:a8:b0:07:fc:38:79:48:b8:ad:0f:f3:1d:7f:0f:c4:8b:22: 13:cf:69:2d:d6:a5:ab:6d:4a:48:b1:48:aa:8e:91:ed:50:4e: 95:14:8e:96:c4:87:32:5d:9b:83:cb:f5:f4:3d:e0:7e:a4:c3: 35:3d:a5:ca:09:bd:f8:5d:26:30:d8:e0:52:ae:4b:50:2b:cf: 60:ec:11:51:b8:7b:1f:5f:7d:d2:0a:3c:c2:ff:01:76:87:b8: 86:f0:d3:b9:94:47:e8:b8:90:1b:44:a8:d0:cc:0c:cf:9d:f4: e5:b5:77:c7:a4:f0:38:41:34:e9:8f:93:f9:27:77:cc:72:40: e9:e0:ed:d1:23:0a:ce:0e:6b:7e:aa:49:4a:cb:10:32:cc:99: d4:11:2b:d2:43:04:c3:41:05:95:ff:d8:5b:e2:40:e0:59:ed: ac:63:cc:50:58:21:c8:71:5d:e5:17:6b:e7:b0:63:72:d6:28: 62:51:d2:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVZY1pfK/UX83ipm2B5Z/hXYs5YUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQ1Qzc0ODYyMTY1MzBFQTVFODhGRTk2MTUzNEZBN0VB RTcyQTc5QzAeFw0yNTA0MjgxOTQ2MjdaFw0yNTA1MDEyMzMyMjdaMDMxMTAvBgNV BAMTKDk1RDJDNzJEMThEMzI1QTIyQjNCOEFGQzczMTRBREM2NDU2MDBDNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdSjioxwNRf+UFA3sMmL0cxe9/ ilWC7N285uww003VkhcpRWx02ss5LZhUCxbXCcOIc/K6rT6lb/WfS/ZqNkzlwMdu jcG54XfKkaaPuXaPIfdFB9ipl0At4ncsfXKZogvSyf1rZO3/glvHt9ty+yjmSuux pZjhQwb5VU357AyoXjZJFMHRyLD42d2koYO0tbILF/w8x73t2XEa3+LGxzOS6XnX 53Q3KgeYJBDzf4pAmZliuJZQtsYI4ME4Ue3XVb2T5uRCeb7YGgJnWGdSUjvD/1jc dkYGCVHbflv/u9hEx2q1nMJJbPgEnSsd1L8hyLbv16yf+hLYSSDZENBuVi9/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUldLHLRjTJaIrO4r8cxStxkVgDFcwHwYDVR0j BBgwFoAUpFx0hiFlMOpeiP6WFTT6fq5yp5wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MWU0NjM2NS03NGQzLTRlNjAtOTUyYS1mOTQyODA5NjAwMWQvMC9BNDVDNzQ4NjIx NjUzMEVBNUU4OEZFOTYxNTM0RkE3RUFFNzJBNzlDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTQ1Qzc0ODYyMTY1MzBFQTVFODhGRTk2MTUzNEZBN0VBRTcy QTc5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjFlNDYzNjUtNzRkMy00ZTYwLTk1 MmEtZjk0MjgwOTYwMDFkLzAvQTQ1Qzc0ODYyMTY1MzBFQTVFODhGRTk2MTUzNEZB N0VBRTcyQTc5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI88e+1Y9YSy3eicw69xgmTF3GtfgGLKQHWU YbS1f5gTGK4+NxhR6nQaozpP7h84UmygvGw96RTS7a88l3zeqe0dHIe/YmiwKsSo sAf8OHlIuK0P8x1/D8SLIhPPaS3WpattSkixSKqOke1QTpUUjpbEhzJdm4PL9fQ9 4H6kwzU9pcoJvfhdJjDY4FKuS1Arz2DsEVG4ex9ffdIKPML/AXaHuIbw07mUR+i4 kBtEqNDMDM+d9OW1d8ek8DhBNOmPk/knd8xyQOng7dEjCs4Oa36qSUrLEDLMmdQR K9JDBMNBBZX/2FviQOBZ7axjzFBYIchxXeUXa+ewY3LWKGJR0gU= -----END CERTIFICATE-----Generated at Tue Apr 29 23:06:39 2025 by rpki-client