$ rpki-client -vvf repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft File: C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft (raw, json) Hash identifier: jv5ZDvc6M9/KiW9q9G9AFDG5SLiYd+wEGYUttFFCNpA= Subject key identifier: CC:EB:7D:B1:DB:33:CB:C3:DF:92:79:8D:8D:A6:BE:0B:DD:67:DF:6C Authority key identifier: C3:0D:E7:1F:7C:AE:16:CA:2D:8D:AB:6D:01:CA:43:D7:2F:B4:FE:6E Certificate issuer: /CN=C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E Certificate serial: 03CBC4D72356A4166051E45664E716C43CE7C381 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft Manifest number: 03C9 Signing time: Wed 04 Jun 2025 18:10:52 +0000 Manifest this update: Wed 04 Jun 2025 18:05:52 +0000 Manifest next update: Sun 08 Jun 2025 05:15:52 +0000 Files and hashes: 1: C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.crl (hash: 59hvkrLwrzGZfvcVLEFq5DZ4zaAqIv+voYtvP18MQAQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.crl rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 05:15:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:cb:c4:d7:23:56:a4:16:60:51:e4:56:64:e7:16:c4:3c:e7:c3:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E Validity Not Before: Jun 4 18:05:52 2025 GMT Not After : Jun 8 05:15:52 2025 GMT Subject: CN=CCEB7DB1DB33CBC3DF92798D8DA6BE0BDD67DF6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fd:21:49:40:b0:80:7b:18:a9:98:fa:76:f8: b7:e2:b8:72:d1:46:5b:d3:75:8d:df:81:38:47:23: 5a:38:e1:55:4f:f8:f8:d7:52:ae:c6:f0:d6:05:7e: a6:34:32:02:62:df:5a:5a:5e:33:3a:87:c3:fe:68: 41:3b:e9:16:2e:27:11:a2:68:89:29:75:54:01:12: dc:22:fe:2d:92:21:ea:12:95:78:cc:cf:06:d0:dc: 6f:1a:74:58:56:7d:b5:ee:77:8b:74:7a:5b:82:aa: 59:34:48:da:22:5a:51:87:62:bf:2c:1d:68:da:4d: e6:08:ba:c1:22:97:68:cc:55:90:ad:c7:56:1a:33: ae:58:1a:93:92:3e:7f:8f:fa:fc:a6:06:98:33:51: d7:cb:99:23:73:ed:d0:b9:30:b3:df:c0:86:44:98: 53:08:83:8d:5c:5a:c7:35:a1:18:fa:56:53:2e:7f: 9c:aa:d9:da:39:6d:5a:c7:5b:7f:3e:c2:96:8e:4e: 82:31:4c:18:1f:70:5a:d3:5d:fc:b0:54:d2:1d:fe: 81:4e:7a:c1:1b:24:af:8e:e1:98:f2:ca:fa:58:96: ee:a9:cf:e1:17:fe:1f:ed:91:fb:7b:d7:4b:99:da: d9:f4:27:88:66:00:0d:1e:85:62:a0:e0:17:c7:7d: 7e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:EB:7D:B1:DB:33:CB:C3:DF:92:79:8D:8D:A6:BE:0B:DD:67:DF:6C X509v3 Authority Key Identifier: keyid:C3:0D:E7:1F:7C:AE:16:CA:2D:8D:AB:6D:01:CA:43:D7:2F:B4:FE:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:11:ff:36:c6:cb:19:f2:42:c8:ab:5b:71:c0:97:f5:6c:10: e2:07:c3:14:bc:41:06:d7:4c:ea:83:4d:c2:91:c2:7f:1d:b3: cf:0f:fb:93:1a:c2:9d:00:8f:2d:9d:66:a5:4e:e9:d2:86:3f: 24:6f:51:d7:77:f9:8e:4a:a9:2b:e9:4b:31:70:59:39:62:74: 0f:cf:87:0a:04:56:4e:4e:de:84:70:4b:b2:98:68:7d:6c:4a: 4a:62:c6:10:be:29:2c:e7:27:c4:b7:37:c8:e7:96:d0:32:dc: 89:c2:a2:5c:ca:3a:97:71:a6:53:43:71:da:9d:d0:15:17:a7: 21:b6:06:9f:a8:f4:1a:ba:88:f8:2b:be:06:87:41:a3:6b:22: 87:cb:a3:13:28:1b:ea:0c:ca:40:80:2e:70:60:db:4b:a5:3a: 9d:ef:5f:4d:13:ae:dd:56:82:03:0e:eb:20:19:0c:45:88:25: 1d:ea:2e:27:90:9f:30:f7:f6:fb:6a:62:9f:4a:88:70:6a:3b: 62:5f:6e:e2:ae:5c:97:54:48:8b:08:79:8f:56:34:00:91:53: b7:ff:a6:36:e8:4a:dd:65:84:44:5d:d4:94:07:16:87:0e:96: 9d:a2:7f:2f:d1:04:9f:11:fc:9d:3a:b4:4a:02:97:1f:58:eb: 57:c9:35:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA8vE1yNWpBZgUeRWZOcWxDznw4EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMwREU3MUY3Q0FFMTZDQTJEOERBQjZEMDFDQTQzRDcy RkI0RkU2RTAeFw0yNTA2MDQxODA1NTJaFw0yNTA2MDgwNTE1NTJaMDMxMTAvBgNV BAMTKENDRUI3REIxREIzM0NCQzNERjkyNzk4RDhEQTZCRTBCREQ2N0RGNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3/SFJQLCAexipmPp2+LfiuHLR RlvTdY3fgThHI1o44VVP+PjXUq7G8NYFfqY0MgJi31paXjM6h8P+aEE76RYuJxGi aIkpdVQBEtwi/i2SIeoSlXjMzwbQ3G8adFhWfbXud4t0eluCqlk0SNoiWlGHYr8s HWjaTeYIusEil2jMVZCtx1YaM65YGpOSPn+P+vymBpgzUdfLmSNz7dC5MLPfwIZE mFMIg41cWsc1oRj6VlMuf5yq2do5bVrHW38+wpaOToIxTBgfcFrTXfywVNId/oFO esEbJK+O4ZjyyvpYlu6pz+EX/h/tkft710uZ2tn0J4hmAA0ehWKg4BfHfX4RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzOt9sdszy8PfknmNjaa+C91n32wwHwYDVR0j BBgwFoAUww3nH3yuFsotjattAcpD1y+0/m4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w M2I1OWNlNC02NmEyLTRmNGQtYjNkNi05Mjk5NDg0YmE1NmIvMC9DMzBERTcxRjdD QUUxNkNBMkQ4REFCNkQwMUNBNDNENzJGQjRGRTZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMwREU3MUY3Q0FFMTZDQTJEOERBQjZEMDFDQTQzRDcyRkI0 RkU2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDNiNTljZTQtNjZhMi00ZjRkLWIz ZDYtOTI5OTQ4NGJhNTZiLzAvQzMwREU3MUY3Q0FFMTZDQTJEOERBQjZEMDFDQTQz RDcyRkI0RkU2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMUR/zbGyxnyQsirW3HAl/VsEOIHwxS8QQbX TOqDTcKRwn8ds88P+5Mawp0Ajy2dZqVO6dKGPyRvUdd3+Y5KqSvpSzFwWTlidA/P hwoEVk5O3oRwS7KYaH1sSkpixhC+KSznJ8S3N8jnltAy3InColzKOpdxplNDcdqd 0BUXpyG2Bp+o9Bq6iPgrvgaHQaNrIofLoxMoG+oMykCALnBg20ulOp3vX00Trt1W ggMO6yAZDEWIJR3qLieQnzD39vtqYp9KiHBqO2JfbuKuXJdUSIsIeY9WNACRU7f/ pjboSt1lhERd1JQHFocOlp2ify/RBJ8R/J06tEoClx9Y61fJNZ0= -----END CERTIFICATE-----Generated at Thu Jun 5 18:14:02 2025 by rpki-client