$ rpki-client -vvf repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft File: 988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft (raw, json) Hash identifier: cY8AAj9oRO3CES9cZ/lF9CWrpTPXbFaA0NSAbXlvC44= Subject key identifier: 9A:F4:63:34:36:42:7B:28:3E:BE:04:48:25:89:D9:01:97:CE:2D:49 Authority key identifier: 98:8E:03:77:88:2A:47:82:CA:DF:C6:65:BE:A7:5B:F6:4B:FB:AF:8E Certificate issuer: /CN=988E0377882A4782CADFC665BEA75BF64BFBAF8E Certificate serial: 40B120992A796BC5E16129BC557E48E0263D5309 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/988E0377882A4782CADFC665BEA75BF64BFBAF8E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft Manifest number: 0295 Signing time: Mon 02 Jun 2025 05:10:37 +0000 Manifest this update: Mon 02 Jun 2025 05:05:37 +0000 Manifest next update: Thu 05 Jun 2025 10:44:37 +0000 Files and hashes: 1: 988E0377882A4782CADFC665BEA75BF64BFBAF8E.crl (hash: J0oVxJJlm0kmd+r3UsvTbrqJ4dyhSBE9UTM8IkUTZ9k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.crl rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/988E0377882A4782CADFC665BEA75BF64BFBAF8E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 10:44:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:b1:20:99:2a:79:6b:c5:e1:61:29:bc:55:7e:48:e0:26:3d:53:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=988E0377882A4782CADFC665BEA75BF64BFBAF8E Validity Not Before: Jun 2 05:05:37 2025 GMT Not After : Jun 5 10:44:37 2025 GMT Subject: CN=9AF4633436427B283EBE04482589D90197CE2D49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:7a:29:55:dc:92:68:40:df:04:61:93:fa:10: 74:16:04:33:ff:34:57:c3:8a:a3:55:27:38:74:ab: 40:8d:69:ef:e7:c6:27:d5:b6:6a:5c:91:4c:25:2e: 3b:33:06:7f:b2:85:1b:12:b8:92:1b:f3:b7:cc:7f: 6f:11:22:f9:da:22:0a:27:97:25:05:93:8f:55:69: d5:ee:fa:7d:64:27:f1:cb:d5:f9:dc:59:58:47:80: 6c:3a:38:e7:c7:a1:01:2e:8b:cf:cd:27:f5:71:22: a2:13:51:ee:11:2e:e3:90:63:00:fd:09:fc:c7:09: 4a:37:d7:96:f9:48:66:f1:18:ec:12:30:a5:79:4d: 82:f5:9b:87:8f:c2:52:0a:4a:b2:23:66:ed:20:4b: 99:f2:e4:a9:49:85:9a:c3:8f:32:b6:71:88:b2:e5: 02:2b:91:76:4d:f9:f8:a8:5a:ab:d5:a9:c5:3f:20: 42:20:31:6c:de:b5:84:a6:98:54:ef:98:33:d2:1a: d6:fa:e7:98:8a:a8:56:35:9d:ed:d9:73:dd:52:6c: bf:73:9a:e0:fb:2b:bf:8c:67:c1:85:4e:55:15:3a: 19:9c:97:42:34:e5:d1:46:e9:75:14:d4:a6:1b:49: 49:94:a2:61:c4:08:19:7f:85:49:a3:b6:47:b2:24: 27:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:F4:63:34:36:42:7B:28:3E:BE:04:48:25:89:D9:01:97:CE:2D:49 X509v3 Authority Key Identifier: keyid:98:8E:03:77:88:2A:47:82:CA:DF:C6:65:BE:A7:5B:F6:4B:FB:AF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/988E0377882A4782CADFC665BEA75BF64BFBAF8E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:67:05:8f:3d:4c:46:13:c6:7c:2f:a7:16:21:9c:ea:9d:eb: 46:e4:c8:63:a3:e4:12:41:8d:b7:3d:c5:8e:91:41:30:87:7d: bc:89:89:40:90:0e:fc:13:39:2f:54:10:f7:99:c9:a7:7a:d3: c5:65:ca:0c:4e:df:e0:1f:e4:88:f7:f2:70:fd:20:9f:54:7a: 93:e7:6a:c3:c3:d2:28:c0:7e:64:83:2a:75:73:00:42:7b:d0: 0f:a1:5c:52:1b:bb:4d:a3:24:1c:3d:ce:de:01:3e:e2:1f:79: a5:99:8b:76:4c:d3:16:04:9b:0f:03:e9:b0:7c:fd:e9:db:76: 60:47:9d:d6:e2:01:7f:29:e0:02:f5:af:b1:96:9c:36:e4:ab: 14:05:1d:25:e2:af:77:f4:d9:b0:c6:24:df:39:4c:4a:7d:4e: db:66:e8:87:a2:cb:98:54:e0:07:c3:cb:b1:ac:2f:0c:7f:72: 31:f2:2b:1f:ef:df:83:34:d8:9d:bc:62:ec:4b:8b:74:93:4c: e0:de:76:e2:08:84:aa:c0:cd:f5:c3:43:20:82:74:38:14:12: 37:f7:26:35:4b:42:43:3d:ec:bd:01:e2:ae:5d:a6:e1:b9:07: d6:61:de:b7:44:bb:7d:c6:2e:5b:44:cc:e8:31:0d:f0:7a:5f: 80:ee:26:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQLEgmSp5a8XhYSm8VX5I4CY9UwkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg4RTAzNzc4ODJBNDc4MkNBREZDNjY1QkVBNzVCRjY0 QkZCQUY4RTAeFw0yNTA2MDIwNTA1MzdaFw0yNTA2MDUxMDQ0MzdaMDMxMTAvBgNV BAMTKDlBRjQ2MzM0MzY0MjdCMjgzRUJFMDQ0ODI1ODlEOTAxOTdDRTJENDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCeilV3JJoQN8EYZP6EHQWBDP/ NFfDiqNVJzh0q0CNae/nxifVtmpckUwlLjszBn+yhRsSuJIb87fMf28RIvnaIgon lyUFk49VadXu+n1kJ/HL1fncWVhHgGw6OOfHoQEui8/NJ/VxIqITUe4RLuOQYwD9 CfzHCUo315b5SGbxGOwSMKV5TYL1m4ePwlIKSrIjZu0gS5ny5KlJhZrDjzK2cYiy 5QIrkXZN+fioWqvVqcU/IEIgMWzetYSmmFTvmDPSGtb655iKqFY1ne3Zc91SbL9z muD7K7+MZ8GFTlUVOhmcl0I05dFG6XUU1KYbSUmUomHECBl/hUmjtkeyJCcxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmvRjNDZCeyg+vgRIJYnZAZfOLUkwHwYDVR0j BBgwFoAUmI4Dd4gqR4LK38Zlvqdb9kv7r44wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MmYzOWMxNy02NzI1LTQyYmUtYmVkNC1mMGViYmJhMmQ0ZmQvMC85ODhFMDM3Nzg4 MkE0NzgyQ0FERkM2NjVCRUE3NUJGNjRCRkJBRjhFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg4RTAzNzc4ODJBNDc4MkNBREZDNjY1QkVBNzVCRjY0QkZC QUY4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDJmMzljMTctNjcyNS00MmJlLWJl ZDQtZjBlYmJiYTJkNGZkLzAvOTg4RTAzNzc4ODJBNDc4MkNBREZDNjY1QkVBNzVC RjY0QkZCQUY4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIhnBY89TEYTxnwvpxYhnOqd60bkyGOj5BJB jbc9xY6RQTCHfbyJiUCQDvwTOS9UEPeZyad608VlygxO3+Af5Ij38nD9IJ9UepPn asPD0ijAfmSDKnVzAEJ70A+hXFIbu02jJBw9zt4BPuIfeaWZi3ZM0xYEmw8D6bB8 /enbdmBHndbiAX8p4AL1r7GWnDbkqxQFHSXir3f02bDGJN85TEp9Tttm6Ieiy5hU 4AfDy7GsLwx/cjHyKx/v34M02J28YuxLi3STTODeduIIhKrAzfXDQyCCdDgUEjf3 JjVLQkM97L0B4q5dpuG5B9Zh3rdEu33GLltEzOgxDfB6X4DuJjc= -----END CERTIFICATE-----Generated at Tue Jun 3 23:53:18 2025 by rpki-client