$ rpki-client -vvf repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft File: 114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft (raw, json) Hash identifier: t3L48x1MNAZMDRIdgXztiq5kCJMoy2Dp1k/0G37eDhQ= Subject key identifier: AC:CB:50:9C:66:7C:8F:48:80:C8:B8:EB:69:09:40:11:11:90:76:B2 Authority key identifier: 11:4C:9E:7E:A9:1F:63:87:C2:CB:F1:D1:6E:A8:24:58:0C:D6:85:87 Certificate issuer: /CN=114C9E7EA91F6387C2CBF1D16EA824580CD68587 Certificate serial: 283FB2BCA835ED2989243A168010994A907B3C95 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/114C9E7EA91F6387C2CBF1D16EA824580CD68587.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft Manifest number: 04D9 Signing time: Thu 05 Jun 2025 01:01:59 +0000 Manifest this update: Thu 05 Jun 2025 00:56:59 +0000 Manifest next update: Sun 08 Jun 2025 10:47:59 +0000 Files and hashes: 1: 114C9E7EA91F6387C2CBF1D16EA824580CD68587.crl (hash: 9ItkaqwCWgILShgQWcoS9Qv+wcbtsKWMf/0ZA6Ht5hM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.crl rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/114C9E7EA91F6387C2CBF1D16EA824580CD68587.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 10:47:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:3f:b2:bc:a8:35:ed:29:89:24:3a:16:80:10:99:4a:90:7b:3c:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=114C9E7EA91F6387C2CBF1D16EA824580CD68587 Validity Not Before: Jun 5 00:56:59 2025 GMT Not After : Jun 8 10:47:59 2025 GMT Subject: CN=ACCB509C667C8F4880C8B8EB69094011119076B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7c:fc:08:75:7f:c7:f5:ab:2f:07:57:fd:e8: 07:30:59:03:21:ba:68:93:5f:95:ad:e1:27:cc:fa: 2e:e3:cf:41:4e:b2:9e:7b:06:3f:a5:e9:af:c5:52: 74:1e:d0:55:9f:c9:3a:3e:51:41:ae:0b:e9:06:44: 98:9b:b1:e8:1e:16:b2:1b:1e:1a:33:fe:84:43:b6: 9e:ba:fc:70:09:44:92:53:82:f4:5b:bf:d6:16:d0: 06:c9:4c:a7:86:70:c9:33:db:16:1c:0b:79:67:82: 8c:8d:7a:c2:3f:cd:33:54:00:a8:3e:be:d7:b3:81: d5:19:f1:08:5f:98:fa:52:05:e6:1a:a1:63:fa:63: d8:86:0d:6b:2a:3d:e0:a1:59:a6:40:d7:3d:1b:d1: 86:fb:be:f7:68:60:9e:76:4b:1c:8a:38:c9:aa:31: 07:cb:94:c9:0b:5c:bc:76:b9:b5:92:76:e4:c9:89: df:5e:fb:20:a9:f5:17:9f:74:48:5b:fe:7b:d6:bf: 7f:01:81:36:0f:20:0d:79:a0:b4:85:a8:f3:8d:b2: 2a:e0:b2:35:b7:d6:e7:0f:d1:6f:70:81:71:7a:3f: de:b4:0f:40:10:aa:af:78:56:6e:69:0e:55:e2:86: 20:cd:61:17:90:76:8c:3a:1d:da:e9:95:93:f8:b3: 64:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:CB:50:9C:66:7C:8F:48:80:C8:B8:EB:69:09:40:11:11:90:76:B2 X509v3 Authority Key Identifier: keyid:11:4C:9E:7E:A9:1F:63:87:C2:CB:F1:D1:6E:A8:24:58:0C:D6:85:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/114C9E7EA91F6387C2CBF1D16EA824580CD68587.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:90:26:40:71:60:c2:a2:df:ca:d0:a4:eb:1a:d7:01:bb:6c: 13:65:49:28:c5:58:2b:99:fb:ab:0e:3f:bb:b6:ca:b5:51:cb: e5:3e:ef:05:ca:93:78:be:c9:f2:5d:74:8c:2d:43:c8:15:59: b4:89:d5:6f:d0:fd:2f:43:04:19:0f:d4:a6:7f:0f:89:91:8c: 64:6e:73:b5:53:96:24:69:15:b2:96:42:4c:ec:63:5f:d6:53: 32:06:80:e0:48:14:45:12:14:ee:00:02:12:71:a2:af:14:b4: df:16:38:59:b2:1e:bd:c6:a2:cb:b4:7d:c1:31:df:06:13:cd: 82:b9:ef:a4:be:de:69:b0:65:58:9e:48:3a:54:9a:ce:e2:25: d2:ec:5a:0b:82:b9:28:bf:9a:13:52:7f:e1:a4:df:f2:39:60: 1f:e7:75:39:15:df:44:3b:93:cf:f9:27:18:4d:db:d8:bc:ae: 8a:5b:ba:09:0c:85:9a:c4:8a:6b:5e:66:9c:5f:23:3e:4b:78: ea:bd:f1:e1:fd:dc:95:e2:18:03:f2:cf:75:d8:4a:64:e0:94: 67:b0:dd:33:12:bd:cb:d8:43:a0:aa:01:8f:92:4c:5a:3d:e3: 71:cb:11:02:c7:7b:42:65:a5:8d:28:61:c6:78:fd:26:29:6f: 3f:b4:ee:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKD+yvKg17SmJJDoWgBCZSpB7PJUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE0QzlFN0VBOTFGNjM4N0MyQ0JGMUQxNkVBODI0NTgw Q0Q2ODU4NzAeFw0yNTA2MDUwMDU2NTlaFw0yNTA2MDgxMDQ3NTlaMDMxMTAvBgNV BAMTKEFDQ0I1MDlDNjY3QzhGNDg4MEM4QjhFQjY5MDk0MDExMTE5MDc2QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3fPwIdX/H9asvB1f96AcwWQMh umiTX5Wt4SfM+i7jz0FOsp57Bj+l6a/FUnQe0FWfyTo+UUGuC+kGRJibsegeFrIb Hhoz/oRDtp66/HAJRJJTgvRbv9YW0AbJTKeGcMkz2xYcC3lngoyNesI/zTNUAKg+ vtezgdUZ8QhfmPpSBeYaoWP6Y9iGDWsqPeChWaZA1z0b0Yb7vvdoYJ52SxyKOMmq MQfLlMkLXLx2ubWSduTJid9e+yCp9RefdEhb/nvWv38BgTYPIA15oLSFqPONsirg sjW31ucP0W9wgXF6P960D0AQqq94Vm5pDlXihiDNYReQdow6HdrplZP4s2QNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrMtQnGZ8j0iAyLjraQlAERGQdrIwHwYDVR0j BBgwFoAUEUyefqkfY4fCy/HRbqgkWAzWhYcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDNlYzg0ZS02MGVmLTQ0ZDQtOWY0My04NWI2Zjk2YjI2Y2YvMC8xMTRDOUU3RUE5 MUY2Mzg3QzJDQkYxRDE2RUE4MjQ1ODBDRDY4NTg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE0QzlFN0VBOTFGNjM4N0MyQ0JGMUQxNkVBODI0NTgwQ0Q2 ODU4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQzZWM4NGUtNjBlZi00NGQ0LTlm NDMtODViNmY5NmIyNmNmLzAvMTE0QzlFN0VBOTFGNjM4N0MyQ0JGMUQxNkVBODI0 NTgwQ0Q2ODU4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEqQJkBxYMKi38rQpOsa1wG7bBNlSSjFWCuZ +6sOP7u2yrVRy+U+7wXKk3i+yfJddIwtQ8gVWbSJ1W/Q/S9DBBkP1KZ/D4mRjGRu c7VTliRpFbKWQkzsY1/WUzIGgOBIFEUSFO4AAhJxoq8UtN8WOFmyHr3Gosu0fcEx 3wYTzYK576S+3mmwZVieSDpUms7iJdLsWguCuSi/mhNSf+Gk3/I5YB/ndTkV30Q7 k8/5JxhN29i8ropbugkMhZrEimteZpxfIz5LeOq98eH93JXiGAPyz3XYSmTglGew 3TMSvcvYQ6CqAY+STFo943HLEQLHe0JlpY0oYcZ4/SYpbz+07gA= -----END CERTIFICATE-----Generated at Thu Jun 5 18:31:28 2025 by rpki-client