$ rpki-client -vvf repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft File: C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft (raw, json) Hash identifier: Me069MIpMQL9pAGhRnBVixCic07011n+lelZFKAatEo= Subject key identifier: BF:1E:AB:EE:3D:A0:99:BF:8A:6B:B5:42:B8:0E:40:80:D7:A2:03:A1 Authority key identifier: C1:93:44:D0:F4:EF:3C:AD:E2:A7:71:14:81:E3:D1:45:2C:62:1D:62 Certificate issuer: /CN=C19344D0F4EF3CADE2A7711481E3D1452C621D62 Certificate serial: 33AA4132875B42131193F5BC0C52092D680A283A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19344D0F4EF3CADE2A7711481E3D1452C621D62.cer Subject info access: rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft Manifest number: 01C8 Signing time: Fri 06 Jun 2025 17:31:55 +0000 Manifest this update: Fri 06 Jun 2025 17:26:55 +0000 Manifest next update: Mon 09 Jun 2025 21:48:55 +0000 Files and hashes: 1: C19344D0F4EF3CADE2A7711481E3D1452C621D62.crl (hash: dfvmQvVEv6nk21jqkC04GL0jUMAfcFgLldmSNWQpVSM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.crl rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19344D0F4EF3CADE2A7711481E3D1452C621D62.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 21:48:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:aa:41:32:87:5b:42:13:11:93:f5:bc:0c:52:09:2d:68:0a:28:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C19344D0F4EF3CADE2A7711481E3D1452C621D62 Validity Not Before: Jun 6 17:26:55 2025 GMT Not After : Jun 9 21:48:55 2025 GMT Subject: CN=BF1EABEE3DA099BF8A6BB542B80E4080D7A203A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:09:3b:1f:81:3a:85:4b:ff:1d:0f:74:bb:ce: b2:0d:24:dd:d6:34:52:ba:13:be:37:86:8b:cc:7e: b2:41:88:a7:fb:6e:19:6e:2b:88:48:22:ad:2c:f9: c1:7a:3d:96:12:37:62:5c:0b:3a:ed:78:bc:66:6c: 83:75:d1:d5:c5:9a:96:f0:7a:5f:39:ee:93:0a:f3: 5c:4a:8f:92:40:bf:96:d7:81:58:f2:87:b2:58:36: e3:0c:e1:21:0c:8e:4b:e0:9f:1e:a1:fa:f8:71:3b: 46:3f:26:92:da:d2:5b:b6:1e:83:94:8b:81:1d:fc: e3:3e:ad:88:b1:f8:3b:73:09:2d:1f:f2:68:ed:48: c7:ea:76:83:e1:be:9a:77:5d:82:ef:bb:e3:71:b4: 37:4c:33:0b:6f:e9:d2:2a:cb:bd:b2:22:21:bc:a5: 80:6f:54:48:a4:2b:7a:13:5e:b5:e1:56:d8:53:e1: 50:77:df:d0:14:b8:85:a5:09:f4:56:47:87:61:48: e0:c3:6d:19:bb:41:88:76:a7:8b:30:fa:3a:8a:b2: f4:e6:ac:e3:a8:06:5d:55:e4:9b:2a:5f:49:33:16: 3a:aa:b5:39:ab:0f:f3:50:09:04:75:67:ff:dd:46: 2c:c6:6f:f5:88:e0:0b:fb:74:b3:86:1b:ba:6b:83: 83:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:1E:AB:EE:3D:A0:99:BF:8A:6B:B5:42:B8:0E:40:80:D7:A2:03:A1 X509v3 Authority Key Identifier: keyid:C1:93:44:D0:F4:EF:3C:AD:E2:A7:71:14:81:E3:D1:45:2C:62:1D:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19344D0F4EF3CADE2A7711481E3D1452C621D62.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:b2:36:07:71:26:a5:e9:77:33:a1:48:41:51:79:e6:10:f6: 3a:a3:7d:39:2d:75:d4:bb:a1:4e:a6:b9:74:d2:47:cb:de:cb: a9:04:26:3b:6e:cb:b9:80:be:79:1c:2d:47:27:3c:2d:a3:17: e4:bf:5b:59:78:fa:51:11:4e:d6:20:4b:3b:91:d9:80:b2:bc: e2:92:99:d1:4e:39:0e:19:61:54:63:9d:67:47:dc:52:1d:28: bd:11:c2:da:89:59:64:fb:97:fb:9f:dc:92:42:58:12:18:d0: f2:00:b2:9e:6f:fe:6d:8d:31:09:9c:16:04:79:04:19:4b:f2: aa:60:30:52:f4:e5:5f:c5:2c:cb:27:5d:33:fc:dc:8d:88:a9: b7:fb:0b:75:aa:b1:81:a1:42:90:6c:ba:d4:51:fc:56:7d:2e: 43:63:1a:a1:d2:56:22:d1:a6:5e:12:3e:38:49:75:dd:40:13: b5:5c:68:e8:6d:59:46:0e:f6:46:35:57:e9:ec:a7:e9:87:35: 02:32:42:42:3d:ed:62:63:86:2b:7f:06:dd:20:43:6d:9b:a0: d3:2e:ef:99:a0:b7:7a:02:e0:bc:44:e5:3c:c7:7f:ca:59:d6: 54:bd:36:c5:4f:01:9d:bf:9a:e6:9b:27:23:fe:7b:31:bb:8e: 45:7d:68:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM6pBModbQhMRk/W8DFIJLWgKKDowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE5MzQ0RDBGNEVGM0NBREUyQTc3MTE0ODFFM0QxNDUy QzYyMUQ2MjAeFw0yNTA2MDYxNzI2NTVaFw0yNTA2MDkyMTQ4NTVaMDMxMTAvBgNV BAMTKEJGMUVBQkVFM0RBMDk5QkY4QTZCQjU0MkI4MEU0MDgwRDdBMjAzQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmCTsfgTqFS/8dD3S7zrINJN3W NFK6E743hovMfrJBiKf7bhluK4hIIq0s+cF6PZYSN2JcCzrteLxmbIN10dXFmpbw el857pMK81xKj5JAv5bXgVjyh7JYNuMM4SEMjkvgnx6h+vhxO0Y/JpLa0lu2HoOU i4Ed/OM+rYix+DtzCS0f8mjtSMfqdoPhvpp3XYLvu+NxtDdMMwtv6dIqy72yIiG8 pYBvVEikK3oTXrXhVthT4VB339AUuIWlCfRWR4dhSODDbRm7QYh2p4sw+jqKsvTm rOOoBl1V5JsqX0kzFjqqtTmrD/NQCQR1Z//dRizGb/WI4Av7dLOGG7prg4MxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvx6r7j2gmb+Ka7VCuA5AgNeiA6EwHwYDVR0j BBgwFoAUwZNE0PTvPK3ip3EUgePRRSxiHWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MWI2ZGQ5Yi1kMTUyLTRjOGYtODdiNy02MjllYjgwOGY5MTEvMC9DMTkzNDREMEY0 RUYzQ0FERTJBNzcxMTQ4MUUzRDE0NTJDNjIxRDYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE5MzQ0RDBGNEVGM0NBREUyQTc3MTE0ODFFM0QxNDUyQzYy MUQ2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDFiNmRkOWItZDE1Mi00YzhmLTg3 YjctNjI5ZWI4MDhmOTExLzAvQzE5MzQ0RDBGNEVGM0NBREUyQTc3MTE0ODFFM0Qx NDUyQzYyMUQ2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACCyNgdxJqXpdzOhSEFReeYQ9jqjfTktddS7 oU6muXTSR8vey6kEJjtuy7mAvnkcLUcnPC2jF+S/W1l4+lERTtYgSzuR2YCyvOKS mdFOOQ4ZYVRjnWdH3FIdKL0RwtqJWWT7l/uf3JJCWBIY0PIAsp5v/m2NMQmcFgR5 BBlL8qpgMFL05V/FLMsnXTP83I2Iqbf7C3WqsYGhQpBsutRR/FZ9LkNjGqHSViLR pl4SPjhJdd1AE7VcaOhtWUYO9kY1V+nsp+mHNQIyQkI97WJjhit/Bt0gQ22boNMu 75mgt3oC4LxE5TzHf8pZ1lS9NsVPAZ2/muabJyP+ezG7jkV9aB8= -----END CERTIFICATE-----Generated at Sun Jun 8 08:45:27 2025 by rpki-client