$ rpki-client -vvf repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft File: C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft (raw, json) Hash identifier: 1KbJWip7zETLN1osvac7m+bO9HVqBxrPTLu2WXBgjwE= Subject key identifier: 4A:06:EC:A9:54:63:FE:9D:91:61:6D:11:6E:F5:00:FE:4D:71:72:37 Authority key identifier: C3:0D:E7:1F:7C:AE:16:CA:2D:8D:AB:6D:01:CA:43:D7:2F:B4:FE:6E Certificate issuer: /CN=C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E Certificate serial: 62ECBC8A6239E6D3786D2ECE2B5433BCB505BAF6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft Manifest number: 03B6 Signing time: Wed 23 Apr 2025 13:50:52 +0000 Manifest this update: Wed 23 Apr 2025 13:45:52 +0000 Manifest next update: Sat 26 Apr 2025 14:31:52 +0000 Files and hashes: 1: C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.crl (hash: Cm0k3+mkug8JVxRpZ1rcyOpRmuAPysJEs3B+h1ifZQY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.crl rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 12:29:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:ec:bc:8a:62:39:e6:d3:78:6d:2e:ce:2b:54:33:bc:b5:05:ba:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E Validity Not Before: Apr 23 13:45:52 2025 GMT Not After : Apr 26 14:31:52 2025 GMT Subject: CN=4A06ECA95463FE9D91616D116EF500FE4D717237 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:cc:73:92:b0:f1:33:77:c0:e1:47:c2:86:a8: 79:c0:87:1b:3b:84:f6:d1:b3:56:1b:e0:60:70:69: 8a:6b:bb:77:02:76:f8:55:a6:4c:8c:1d:09:63:bb: 0a:16:79:04:f7:14:ba:f6:0a:af:4d:fe:0a:54:06: f0:b8:69:00:1d:ca:51:49:ee:7a:a2:e7:8f:09:75: 7a:e8:8e:4e:a1:f2:04:fd:a7:92:6e:02:39:44:b0: bd:c0:81:25:e4:f8:ca:ff:68:d5:85:41:67:f0:a0: ec:59:40:db:b8:43:c1:cf:00:f3:49:7e:69:6b:7c: 5f:46:94:06:ca:41:ed:f8:9b:5f:71:02:cb:5d:6d: 80:68:6e:30:53:c2:55:bd:b5:3f:34:c6:2e:16:83: 5c:60:2f:c9:83:29:d9:d8:43:ce:f6:65:2f:a1:b5: b0:5d:17:d6:f4:ba:b7:c2:f3:b3:0f:bf:bf:c8:b3: 5c:df:6c:db:7e:ea:5c:1c:4d:16:9a:29:68:93:bd: 42:cd:39:0f:4f:95:4a:d4:0f:48:55:5f:98:0d:76: d1:c1:87:d7:f6:9a:94:ad:9e:10:56:62:bd:42:ae: f2:0a:a5:e9:d3:c2:10:8e:06:71:3b:d5:e6:1f:f3: 7e:27:80:c6:b8:53:9b:75:a8:7a:9b:1a:a9:92:40: ee:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:06:EC:A9:54:63:FE:9D:91:61:6D:11:6E:F5:00:FE:4D:71:72:37 X509v3 Authority Key Identifier: keyid:C3:0D:E7:1F:7C:AE:16:CA:2D:8D:AB:6D:01:CA:43:D7:2F:B4:FE:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:b8:1a:67:59:85:98:ec:20:e2:ab:86:11:76:37:06:4b:33: cb:a1:21:ae:cd:89:31:80:29:76:4e:b1:fa:4b:a9:cc:9d:ca: e0:07:a6:4d:a6:86:47:7c:a8:4b:d6:2e:fe:22:87:9a:11:6a: b9:b3:96:ae:6d:e9:56:f7:ad:1d:ed:d1:9d:17:2f:62:c5:c2: 80:b7:76:5c:0b:fa:9c:a1:2b:1e:86:35:a8:7e:21:c5:33:46: b2:ec:85:f8:d1:51:ce:c0:52:1c:a4:aa:80:1e:4f:9a:7a:c0: 4f:11:58:e8:29:5b:30:27:4e:e6:53:2e:d4:8f:71:0e:1f:6e: 91:56:4c:e2:59:e3:ec:b2:2a:06:a0:8f:0d:d7:7c:f7:d5:b9: ea:5d:24:f6:9f:55:f1:29:74:58:be:48:e6:a4:c0:86:5f:3c: 6e:10:69:74:61:4c:d6:21:0e:78:a5:37:9e:17:ed:f7:c9:98: 89:8f:c7:02:ca:3c:84:45:87:1e:4a:76:e3:9e:b4:7c:df:94: d1:8c:c1:39:90:23:6c:ff:87:f3:30:1a:7a:61:0b:1b:9e:79: 4d:fe:b1:27:5f:56:c7:33:84:a1:86:62:30:39:f1:5f:cd:cb: ea:a6:e8:da:37:59:bf:5c:8f:86:43:69:61:ad:0f:73:80:54: 4a:97:82:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYuy8imI55tN4bS7OK1QzvLUFuvYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMwREU3MUY3Q0FFMTZDQTJEOERBQjZEMDFDQTQzRDcy RkI0RkU2RTAeFw0yNTA0MjMxMzQ1NTJaFw0yNTA0MjYxNDMxNTJaMDMxMTAvBgNV BAMTKDRBMDZFQ0E5NTQ2M0ZFOUQ5MTYxNkQxMTZFRjUwMEZFNEQ3MTcyMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/zHOSsPEzd8DhR8KGqHnAhxs7 hPbRs1Yb4GBwaYpru3cCdvhVpkyMHQljuwoWeQT3FLr2Cq9N/gpUBvC4aQAdylFJ 7nqi548JdXrojk6h8gT9p5JuAjlEsL3AgSXk+Mr/aNWFQWfwoOxZQNu4Q8HPAPNJ fmlrfF9GlAbKQe34m19xAstdbYBobjBTwlW9tT80xi4Wg1xgL8mDKdnYQ872ZS+h tbBdF9b0urfC87MPv7/Is1zfbNt+6lwcTRaaKWiTvULNOQ9PlUrUD0hVX5gNdtHB h9f2mpStnhBWYr1CrvIKpenTwhCOBnE71eYf834ngMa4U5t1qHqbGqmSQO7FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSgbsqVRj/p2RYW0RbvUA/k1xcjcwHwYDVR0j BBgwFoAUww3nH3yuFsotjattAcpD1y+0/m4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w M2I1OWNlNC02NmEyLTRmNGQtYjNkNi05Mjk5NDg0YmE1NmIvMC9DMzBERTcxRjdD QUUxNkNBMkQ4REFCNkQwMUNBNDNENzJGQjRGRTZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMwREU3MUY3Q0FFMTZDQTJEOERBQjZEMDFDQTQzRDcyRkI0 RkU2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDNiNTljZTQtNjZhMi00ZjRkLWIz ZDYtOTI5OTQ4NGJhNTZiLzAvQzMwREU3MUY3Q0FFMTZDQTJEOERBQjZEMDFDQTQz RDcyRkI0RkU2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACu4GmdZhZjsIOKrhhF2NwZLM8uhIa7NiTGA KXZOsfpLqcydyuAHpk2mhkd8qEvWLv4ih5oRarmzlq5t6Vb3rR3t0Z0XL2LFwoC3 dlwL+pyhKx6GNah+IcUzRrLshfjRUc7AUhykqoAeT5p6wE8RWOgpWzAnTuZTLtSP cQ4fbpFWTOJZ4+yyKgagjw3XfPfVuepdJPafVfEpdFi+SOakwIZfPG4QaXRhTNYh DnilN54X7ffJmImPxwLKPIRFhx5KduOetHzflNGMwTmQI2z/h/MwGnphCxueeU3+ sSdfVsczhKGGYjA58V/Ny+qm6No3Wb9cj4ZDaWGtD3OAVEqXgsE= -----END CERTIFICATE-----Generated at Wed Apr 23 15:33:57 2025 by rpki-client on console.sobornost.net