$ rpki-client -vvf repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.mft File: 309FFE30695E76BA4952E2965B4FE24F9B9D6770.mft (raw, json) Hash identifier: qdQcrsfyKjn3EHMuxh0YptA2Ia+cjRD7WzrHKdWLZPU= Subject key identifier: 03:9E:1C:36:B7:D6:FC:00:02:2D:6E:E5:BB:7C:23:78:92:48:B7:DB Authority key identifier: 30:9F:FE:30:69:5E:76:BA:49:52:E2:96:5B:4F:E2:4F:9B:9D:67:70 Certificate issuer: /CN=309FFE30695E76BA4952E2965B4FE24F9B9D6770 Certificate serial: 21D3110D32603F88928370033CB5183AF90A55C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/309FFE30695E76BA4952E2965B4FE24F9B9D6770.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.mft Manifest number: 6C Signing time: Wed 30 Apr 2025 06:10:45 +0000 Manifest this update: Wed 30 Apr 2025 06:05:45 +0000 Manifest next update: Sat 03 May 2025 11:39:45 +0000 Files and hashes: 1: 309FFE30695E76BA4952E2965B4FE24F9B9D6770.crl (hash: s1Ah1kHeSAMFFHuZsamYqVMVZJXqLT5G5+MD1vvWjVc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.crl rsync://repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/309FFE30695E76BA4952E2965B4FE24F9B9D6770.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 11:39:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:d3:11:0d:32:60:3f:88:92:83:70:03:3c:b5:18:3a:f9:0a:55:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=309FFE30695E76BA4952E2965B4FE24F9B9D6770 Validity Not Before: Apr 30 06:05:45 2025 GMT Not After : May 3 11:39:45 2025 GMT Subject: CN=039E1C36B7D6FC00022D6EE5BB7C23789248B7DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:33:45:5c:c0:7f:30:6d:41:3f:87:68:b4:b0: bd:53:5b:9d:08:75:ec:57:a7:40:ce:35:c0:dc:da: 57:17:a9:e6:aa:81:a9:5e:b1:a7:92:fb:02:75:d6: 06:53:ac:3f:f8:8b:78:16:34:1f:dc:c4:91:90:e7: 35:23:52:c3:b9:26:97:26:d3:6f:93:50:df:72:b9: 8a:54:ef:45:6e:fa:d5:73:ff:de:b0:e9:e1:c8:db: 69:4d:22:4d:61:4e:aa:93:2b:c6:6f:db:c2:03:b0: da:08:01:7d:9d:a0:3c:b7:6f:bf:30:ea:6f:37:3b: 03:91:a0:dc:b3:04:91:79:9e:07:9b:c0:f9:a7:e8: 3d:c3:ac:78:c7:c1:f9:8b:98:e8:02:a4:82:b9:28: 78:97:20:dc:9b:bd:3e:d5:06:2d:d5:f5:a1:00:10: 3e:eb:2c:1b:2d:7b:64:67:27:62:ed:48:60:50:db: a0:68:1d:c8:8b:65:a6:20:9e:09:f4:20:53:59:09: ca:c5:8f:c2:f5:6c:e1:2d:5e:9a:94:79:c7:34:bd: 96:e6:77:48:ce:47:cc:a4:ce:41:66:e5:0f:e1:de: 87:27:af:9c:17:f8:fd:02:a5:51:0f:30:18:eb:9b: df:84:5d:3d:9b:15:f0:2e:54:ca:99:fe:1e:55:9e: bc:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:9E:1C:36:B7:D6:FC:00:02:2D:6E:E5:BB:7C:23:78:92:48:B7:DB X509v3 Authority Key Identifier: keyid:30:9F:FE:30:69:5E:76:BA:49:52:E2:96:5B:4F:E2:4F:9B:9D:67:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/309FFE30695E76BA4952E2965B4FE24F9B9D6770.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:59:1e:8b:15:7a:c5:45:8f:6c:1f:7a:f3:47:35:f8:8d:2b: 08:a1:3d:42:d9:9c:04:8a:60:3a:33:06:9a:22:d4:e8:19:26: d0:2a:73:3c:46:61:7a:6c:6d:70:eb:fd:a9:a4:61:ad:ff:a7: 41:1c:09:da:e3:25:87:0a:6a:34:73:d4:c7:51:0b:1a:33:2f: 19:6c:5f:d0:8b:2a:a4:ee:5d:58:b7:e6:c2:2a:3a:65:04:47: e1:1d:5f:35:af:21:06:25:90:70:09:eb:54:e4:e9:75:ce:17: da:7c:9d:d7:92:81:d4:61:5e:f9:f4:b9:dd:e5:41:25:20:83: 1e:90:1d:0d:ed:0c:97:5d:24:e8:cd:0b:67:a0:bf:c0:6e:d2: 28:9c:25:69:f4:15:60:2c:a4:34:cc:88:d6:01:45:a5:0f:51: da:c6:f3:5d:a9:67:2e:44:11:bc:1f:6c:9e:d6:fe:a3:4d:e4: 02:5e:b0:f6:f5:0b:9f:59:48:2e:04:2d:25:5e:69:f6:37:e3: 45:14:66:47:b1:c0:69:f0:02:7f:1d:f7:77:9f:22:ef:14:27: 35:54:28:14:e0:59:b8:52:d3:de:52:10:b9:07:8a:a0:27:f9: 88:35:56:4a:c6:b9:8d:be:01:ee:d9:28:77:61:ea:33:1c:7a: ec:07:70:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIdMRDTJgP4iSg3ADPLUYOvkKVcgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA5RkZFMzA2OTVFNzZCQTQ5NTJFMjk2NUI0RkUyNEY5 QjlENjc3MDAeFw0yNTA0MzAwNjA1NDVaFw0yNTA1MDMxMTM5NDVaMDMxMTAvBgNV BAMTKDAzOUUxQzM2QjdENkZDMDAwMjJENkVFNUJCN0MyMzc4OTI0OEI3REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvM0VcwH8wbUE/h2i0sL1TW50I dexXp0DONcDc2lcXqeaqgalesaeS+wJ11gZTrD/4i3gWNB/cxJGQ5zUjUsO5Jpcm 02+TUN9yuYpU70Vu+tVz/96w6eHI22lNIk1hTqqTK8Zv28IDsNoIAX2doDy3b78w 6m83OwORoNyzBJF5ngebwPmn6D3DrHjHwfmLmOgCpIK5KHiXINybvT7VBi3V9aEA ED7rLBste2RnJ2LtSGBQ26BoHciLZaYgngn0IFNZCcrFj8L1bOEtXpqUecc0vZbm d0jOR8ykzkFm5Q/h3ocnr5wX+P0CpVEPMBjrm9+EXT2bFfAuVMqZ/h5VnrwXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA54cNrfW/AACLW7lu3wjeJJIt9swHwYDVR0j BBgwFoAUMJ/+MGledrpJUuKWW0/iT5udZ3AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2NiNTBiMC00M2NjLTQ4ZDAtOTFmNC0wNWJiZGU3YWMxZDAvMC8zMDlGRkUzMDY5 NUU3NkJBNDk1MkUyOTY1QjRGRTI0RjlCOUQ2NzcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzA5RkZFMzA2OTVFNzZCQTQ5NTJFMjk2NUI0RkUyNEY5QjlE Njc3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjNjYjUwYjAtNDNjYy00OGQwLTkx ZjQtMDViYmRlN2FjMWQwLzAvMzA5RkZFMzA2OTVFNzZCQTQ5NTJFMjk2NUI0RkUy NEY5QjlENjc3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANhZHosVesVFj2wfevNHNfiNKwihPULZnASK YDozBpoi1OgZJtAqczxGYXpsbXDr/amkYa3/p0EcCdrjJYcKajRz1MdRCxozLxls X9CLKqTuXVi35sIqOmUER+EdXzWvIQYlkHAJ61Tk6XXOF9p8ndeSgdRhXvn0ud3l QSUggx6QHQ3tDJddJOjNC2egv8Bu0iicJWn0FWAspDTMiNYBRaUPUdrG812pZy5E EbwfbJ7W/qNN5AJesPb1C59ZSC4ELSVeafY340UUZkexwGnwAn8d93efIu8UJzVU KBTgWbhS095SELkHiqAn+Yg1VkrGuY2+Ae7ZKHdh6jMceuwHcIg= -----END CERTIFICATE-----Generated at Fri May 2 06:19:12 2025 by rpki-client