$ rpki-client -vvf repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft File: 901FA7FD9132963972C91517CDC7E5EE9077E078.mft (raw, json) Hash identifier: hZribHh3LEm2g/FvgDW4wcjkNNlgYvIyeCg7cjR3Hqk= Subject key identifier: A6:0C:34:F0:05:EF:C6:22:DD:92:7A:36:B9:2A:F8:94:51:5F:57:5F Authority key identifier: 90:1F:A7:FD:91:32:96:39:72:C9:15:17:CD:C7:E5:EE:90:77:E0:78 Certificate issuer: /CN=901FA7FD9132963972C91517CDC7E5EE9077E078 Certificate serial: 2D31559F4E9973DAF32A4F4D97EFAA78C33547B4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/901FA7FD9132963972C91517CDC7E5EE9077E078.cer Subject info access: rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft Manifest number: FF Signing time: Mon 02 Jun 2025 20:10:50 +0000 Manifest this update: Mon 02 Jun 2025 20:05:50 +0000 Manifest next update: Fri 06 Jun 2025 03:04:50 +0000 Files and hashes: 1: 901FA7FD9132963972C91517CDC7E5EE9077E078.crl (hash: IQAO43eZtEmZ9fOSdpRSO0qyFcuXPYkNsjBB7mi9iTc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.crl rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/901FA7FD9132963972C91517CDC7E5EE9077E078.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 03:04:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:31:55:9f:4e:99:73:da:f3:2a:4f:4d:97:ef:aa:78:c3:35:47:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=901FA7FD9132963972C91517CDC7E5EE9077E078 Validity Not Before: Jun 2 20:05:50 2025 GMT Not After : Jun 6 03:04:50 2025 GMT Subject: CN=A60C34F005EFC622DD927A36B92AF894515F575F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:eb:a0:65:e7:84:ba:80:bc:4e:f8:15:85:70: 34:04:c7:2c:22:48:c9:b5:15:13:b2:e9:2a:f0:70: d6:3e:ac:2d:18:32:37:08:9b:1b:1c:cf:9c:16:36: 95:78:d4:3a:a6:cf:05:82:50:43:2e:db:94:e7:ee: fd:da:52:2d:72:e0:ff:5a:94:8b:78:76:06:2b:94: 07:96:2f:e1:b2:a1:f9:b7:4c:f8:43:71:1d:98:ec: 95:68:fd:d0:cb:65:5e:4c:ee:89:00:df:3e:e3:59: 9f:19:c4:88:28:ae:e6:45:1d:40:05:5b:1c:2c:f1: 0d:5d:3f:f8:9c:93:dd:ce:f1:e8:ff:69:e0:fe:10: 48:36:10:15:94:e3:94:48:fb:4d:58:a9:30:ef:f2: e2:15:ce:46:c3:82:48:8b:d5:f7:66:13:c6:ba:dc: 00:56:39:be:85:3e:bd:0f:68:cb:d6:01:a3:40:6e: 1f:10:39:97:de:26:bf:45:20:a3:ae:0d:66:c6:a2: 82:a5:d8:b5:6b:3f:55:94:e6:65:1e:63:e8:02:2e: c0:c8:4a:1e:a7:ad:a6:bc:06:62:b1:48:b7:73:86: 1f:fe:d5:c3:07:84:57:e3:10:52:24:2a:45:c6:4d: 03:c7:cf:e7:f8:a6:57:62:3f:27:fe:ab:a1:84:de: a9:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:0C:34:F0:05:EF:C6:22:DD:92:7A:36:B9:2A:F8:94:51:5F:57:5F X509v3 Authority Key Identifier: keyid:90:1F:A7:FD:91:32:96:39:72:C9:15:17:CD:C7:E5:EE:90:77:E0:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/901FA7FD9132963972C91517CDC7E5EE9077E078.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:24:0c:4b:d8:cb:ac:cf:0a:1c:54:83:fa:aa:11:84:0a:d7: 2c:0c:57:85:a6:10:b2:ba:b3:d8:e6:2a:98:11:dd:0a:80:f4: 53:51:e1:07:07:6f:02:06:58:e2:3e:3c:79:87:cd:c8:d3:c8: 19:39:5e:35:5b:23:80:06:a7:5a:28:22:41:6d:e1:83:78:b6: 2e:3e:f7:4d:d2:0b:4c:05:bd:6c:65:1d:05:a2:2e:59:d4:eb: b7:aa:df:42:c8:a4:2b:aa:f0:9c:ef:44:70:9d:12:d3:82:01: 9e:b0:a6:68:49:f6:3a:fa:5f:10:9a:a9:2b:ed:91:eb:d7:be: 86:dc:c9:db:fa:2a:4b:ef:cb:63:74:d5:16:85:f3:5c:9d:60: 65:80:16:f9:a6:e0:3a:0a:d6:4b:03:9c:b7:33:d8:c9:00:0d: 17:b7:80:d4:2c:af:96:20:b0:44:24:85:c4:11:7e:5a:02:e0: 3f:de:47:17:60:77:8b:13:c9:52:60:83:c7:b1:16:98:84:f1: f2:a8:a1:1d:14:1f:d1:39:a3:1d:ea:96:8b:c5:e1:e9:ce:f3: 8a:54:1f:7d:04:a1:80:3f:2e:43:c5:a0:45:ab:8c:2a:dd:8d: 9d:25:23:94:53:65:b2:a0:6a:1d:b7:f2:9a:19:4d:bb:37:0b: 9e:2d:42:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULTFVn06Zc9rzKk9Nl++qeMM1R7QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTAxRkE3RkQ5MTMyOTYzOTcyQzkxNTE3Q0RDN0U1RUU5 MDc3RTA3ODAeFw0yNTA2MDIyMDA1NTBaFw0yNTA2MDYwMzA0NTBaMDMxMTAvBgNV BAMTKEE2MEMzNEYwMDVFRkM2MjJERDkyN0EzNkI5MkFGODk0NTE1RjU3NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC066Bl54S6gLxO+BWFcDQExywi SMm1FROy6SrwcNY+rC0YMjcImxscz5wWNpV41DqmzwWCUEMu25Tn7v3aUi1y4P9a lIt4dgYrlAeWL+Gyofm3TPhDcR2Y7JVo/dDLZV5M7okA3z7jWZ8ZxIgoruZFHUAF Wxws8Q1dP/ick93O8ej/aeD+EEg2EBWU45RI+01YqTDv8uIVzkbDgkiL1fdmE8a6 3ABWOb6FPr0PaMvWAaNAbh8QOZfeJr9FIKOuDWbGooKl2LVrP1WU5mUeY+gCLsDI Sh6nraa8BmKxSLdzhh/+1cMHhFfjEFIkKkXGTQPHz+f4pldiPyf+q6GE3qldAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpgw08AXvxiLdkno2uSr4lFFfV18wHwYDVR0j BBgwFoAUkB+n/ZEyljlyyRUXzcfl7pB34HgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODBhOGRmZC1hNjc5LTQ0NGEtYjlhOC02ZTNjYjQ4MWEwNzkvMC85MDFGQTdGRDkx MzI5NjM5NzJDOTE1MTdDREM3RTVFRTkwNzdFMDc4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTAxRkE3RkQ5MTMyOTYzOTcyQzkxNTE3Q0RDN0U1RUU5MDc3 RTA3OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjgwYThkZmQtYTY3OS00NDRhLWI5 YTgtNmUzY2I0ODFhMDc5LzAvOTAxRkE3RkQ5MTMyOTYzOTcyQzkxNTE3Q0RDN0U1 RUU5MDc3RTA3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC0kDEvYy6zPChxUg/qqEYQK1ywMV4WmELK6 s9jmKpgR3QqA9FNR4QcHbwIGWOI+PHmHzcjTyBk5XjVbI4AGp1ooIkFt4YN4ti4+ 903SC0wFvWxlHQWiLlnU67eq30LIpCuq8JzvRHCdEtOCAZ6wpmhJ9jr6XxCaqSvt kevXvobcydv6Kkvvy2N01RaF81ydYGWAFvmm4DoK1ksDnLcz2MkADRe3gNQsr5Yg sEQkhcQRfloC4D/eRxdgd4sTyVJgg8exFpiE8fKooR0UH9E5ox3qlovF4enO84pU H30EoYA/LkPFoEWrjCrdjZ0lI5RTZbKgah238poZTbs3C54tQsE= -----END CERTIFICATE-----Generated at Tue Jun 3 23:30:09 2025 by rpki-client