$ rpki-client -vvf repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft File: C00606846C7D0E540F5703EC90A0C331460D7ECA.mft (raw, json) Hash identifier: KaKdHNPk9dnLusqg//u6mC7jrRCHUk0snwIjDb8BrAo= Subject key identifier: D0:27:F9:BC:21:12:24:BC:E5:30:0A:82:1A:9F:D9:01:3A:7D:5D:EE Authority key identifier: C0:06:06:84:6C:7D:0E:54:0F:57:03:EC:90:A0:C3:31:46:0D:7E:CA Certificate issuer: /CN=C00606846C7D0E540F5703EC90A0C331460D7ECA Certificate serial: 168F19D1B28188CF483F6CBEE45F2050514BC8E2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00606846C7D0E540F5703EC90A0C331460D7ECA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft Manifest number: 95 Signing time: Tue 03 Jun 2025 18:44:34 +0000 Manifest this update: Tue 03 Jun 2025 18:39:34 +0000 Manifest next update: Fri 06 Jun 2025 22:10:34 +0000 Files and hashes: 1: C00606846C7D0E540F5703EC90A0C331460D7ECA.crl (hash: VbrMhHblXESKSkCbPZod/Fs4Xkn3b5oQSrbVItEJxBI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.crl rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00606846C7D0E540F5703EC90A0C331460D7ECA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:10:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:8f:19:d1:b2:81:88:cf:48:3f:6c:be:e4:5f:20:50:51:4b:c8:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C00606846C7D0E540F5703EC90A0C331460D7ECA Validity Not Before: Jun 3 18:39:34 2025 GMT Not After : Jun 6 22:10:34 2025 GMT Subject: CN=D027F9BC211224BCE5300A821A9FD9013A7D5DEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ca:94:fd:5f:be:21:00:0e:33:3a:12:f2:d2: 54:92:01:1b:6e:08:16:88:7e:67:3d:58:10:9b:09: bd:69:81:3f:db:d8:e1:92:11:b4:5a:69:aa:04:a0: 80:e8:30:ab:7f:aa:e6:1a:5d:99:43:d3:3a:97:65: a5:5f:d0:4c:5d:30:16:58:42:80:67:82:31:e8:2d: c0:10:48:a3:a0:56:1c:1f:c6:b2:3a:a1:43:f4:23: 2b:5c:53:9f:90:a2:cb:91:67:e3:14:35:46:33:6d: 93:b4:b8:3f:96:b2:6a:9d:ce:5a:2a:b8:d8:c6:9b: 05:32:26:24:86:52:37:33:73:32:c5:b4:d4:5d:09: 48:86:b0:5f:66:d4:a5:44:72:b7:ff:0d:fa:10:f7: 98:f3:4a:94:4a:12:61:48:78:43:31:34:f2:b3:ff: c0:97:01:e7:13:29:f2:03:c8:f8:ec:27:5e:c3:79: 71:99:be:93:a5:36:ae:73:29:36:d6:87:99:bc:7b: 56:09:a7:00:d0:e7:71:38:3c:78:7b:d2:b0:80:1d: 63:c7:e1:4d:47:dc:d1:d2:13:eb:5d:29:3f:88:66: f0:82:df:57:f4:9b:07:31:1c:48:60:12:46:cf:1c: be:07:56:bf:42:d3:3c:8a:3f:b2:7d:3d:44:f3:98: 63:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:27:F9:BC:21:12:24:BC:E5:30:0A:82:1A:9F:D9:01:3A:7D:5D:EE X509v3 Authority Key Identifier: keyid:C0:06:06:84:6C:7D:0E:54:0F:57:03:EC:90:A0:C3:31:46:0D:7E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00606846C7D0E540F5703EC90A0C331460D7ECA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e2:a1:09:60:b2:47:aa:e5:e8:35:03:0d:87:5a:47:8a:df:97: 2f:bd:e7:7d:ec:62:2a:39:db:32:8d:bf:3b:be:f4:8b:57:cf: a9:5e:4d:bf:66:7d:0c:51:af:8a:1e:59:e1:ea:32:7c:23:9a: 3f:74:8d:70:55:22:36:83:73:ab:69:ac:3b:3f:c1:28:99:3b: 58:8d:9f:2f:45:42:49:1f:f0:01:e2:43:2b:23:8a:b2:24:70: 09:5d:69:ad:c9:ac:8e:fe:ae:04:a6:1d:1b:96:7d:5c:79:9d: 95:ac:cc:6a:ff:b7:83:2c:3b:6e:b5:1d:e7:67:3d:4b:c8:3d: a1:aa:d8:86:21:f2:e5:60:57:db:c8:8b:c8:28:04:21:4f:a3: e1:e2:fe:d9:3e:19:d1:28:1d:4d:97:b2:e5:5f:b7:b4:6c:14: 88:fa:8c:91:82:dd:47:5c:30:d5:59:0c:97:f2:4c:40:e4:be: 87:49:18:81:fa:1a:b8:d2:14:49:18:e0:26:bf:c2:01:c4:3f: dc:81:90:cf:ef:f2:04:d7:b2:bb:35:57:ae:e4:18:b8:8c:5a: 90:23:de:ea:db:d4:63:5d:01:13:4d:8c:1a:86:13:34:49:e9: 16:92:4b:1c:31:1c:d6:91:01:13:ba:26:cd:e9:8b:84:87:00: c2:1d:ae:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFo8Z0bKBiM9IP2y+5F8gUFFLyOIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzAwNjA2ODQ2QzdEMEU1NDBGNTcwM0VDOTBBMEMzMzE0 NjBEN0VDQTAeFw0yNTA2MDMxODM5MzRaFw0yNTA2MDYyMjEwMzRaMDMxMTAvBgNV BAMTKEQwMjdGOUJDMjExMjI0QkNFNTMwMEE4MjFBOUZEOTAxM0E3RDVERUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIypT9X74hAA4zOhLy0lSSARtu CBaIfmc9WBCbCb1pgT/b2OGSEbRaaaoEoIDoMKt/quYaXZlD0zqXZaVf0ExdMBZY QoBngjHoLcAQSKOgVhwfxrI6oUP0IytcU5+QosuRZ+MUNUYzbZO0uD+Wsmqdzloq uNjGmwUyJiSGUjczczLFtNRdCUiGsF9m1KVEcrf/DfoQ95jzSpRKEmFIeEMxNPKz /8CXAecTKfIDyPjsJ17DeXGZvpOlNq5zKTbWh5m8e1YJpwDQ53E4PHh70rCAHWPH 4U1H3NHSE+tdKT+IZvCC31f0mwcxHEhgEkbPHL4HVr9C0zyKP7J9PUTzmGNPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0Cf5vCESJLzlMAqCGp/ZATp9Xe4wHwYDVR0j BBgwFoAUwAYGhGx9DlQPVwPskKDDMUYNfsowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MTMzNGQwMy1lYWU0LTRkMjAtYmE1NC1iMTg4OWQ5MjQ3YWMvMC9DMDA2MDY4NDZD N0QwRTU0MEY1NzAzRUM5MEEwQzMzMTQ2MEQ3RUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzAwNjA2ODQ2QzdEMEU1NDBGNTcwM0VDOTBBMEMzMzE0NjBE N0VDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjEzMzRkMDMtZWFlNC00ZDIwLWJh NTQtYjE4ODlkOTI0N2FjLzAvQzAwNjA2ODQ2QzdEMEU1NDBGNTcwM0VDOTBBMEMz MzE0NjBEN0VDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOKhCWCyR6rl6DUDDYdaR4rfly+9533sYio5 2zKNvzu+9ItXz6leTb9mfQxRr4oeWeHqMnwjmj90jXBVIjaDc6tprDs/wSiZO1iN ny9FQkkf8AHiQysjirIkcAldaa3JrI7+rgSmHRuWfVx5nZWszGr/t4MsO261Hedn PUvIPaGq2IYh8uVgV9vIi8goBCFPo+Hi/tk+GdEoHU2XsuVft7RsFIj6jJGC3Udc MNVZDJfyTEDkvodJGIH6GrjSFEkY4Ca/wgHEP9yBkM/v8gTXsrs1V67kGLiMWpAj 3urb1GNdARNNjBqGEzRJ6RaSSxwxHNaRARO6Js3pi4SHAMIdru8= -----END CERTIFICATE-----Generated at Tue Jun 3 23:38:23 2025 by rpki-client