$ rpki-client -vvf repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft File: 9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft (raw, json) Hash identifier: yOy1kEqW2+/AbPxpKnvJrneo3/yhnh26mqAD/UrnQo4= Subject key identifier: EC:BB:57:CB:97:B4:21:BF:07:08:2E:C8:52:96:CC:1E:B3:1C:29:28 Authority key identifier: 9A:4F:69:E8:B4:60:63:63:8E:82:F1:FB:06:0A:B3:D7:25:FA:48:21 Certificate issuer: /CN=9A4F69E8B46063638E82F1FB060AB3D725FA4821 Certificate serial: 474C2319D56879C1BF29BABFA4D669E09E39E788 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A4F69E8B46063638E82F1FB060AB3D725FA4821.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft Manifest number: 02AD Signing time: Thu 05 Jun 2025 01:52:20 +0000 Manifest this update: Thu 05 Jun 2025 01:47:20 +0000 Manifest next update: Sun 08 Jun 2025 07:34:20 +0000 Files and hashes: 1: 9A4F69E8B46063638E82F1FB060AB3D725FA4821.crl (hash: K5vAIhRjMIYI+g9p+gdMT8x9mFdtDotzEtUpgncLM+I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.crl rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A4F69E8B46063638E82F1FB060AB3D725FA4821.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 07:34:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:4c:23:19:d5:68:79:c1:bf:29:ba:bf:a4:d6:69:e0:9e:39:e7:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A4F69E8B46063638E82F1FB060AB3D725FA4821 Validity Not Before: Jun 5 01:47:20 2025 GMT Not After : Jun 8 07:34:20 2025 GMT Subject: CN=ECBB57CB97B421BF07082EC85296CC1EB31C2928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:5e:56:5e:af:57:61:a2:9b:41:aa:28:0b:b5: 2d:bd:94:11:ff:ce:af:57:dd:aa:5d:58:51:64:2e: 56:d6:7a:42:08:61:0e:5c:08:8a:13:f8:03:c3:f5: 33:e1:ee:80:10:81:8f:0f:91:58:2a:15:3c:c4:57: d5:5e:08:b4:ab:17:25:64:4a:a5:2b:bc:87:7c:9b: e6:a4:93:04:40:71:60:a8:42:51:3e:15:87:8d:08: b1:ed:d7:34:60:44:86:f1:11:9c:6c:5e:0d:0c:c3: 8e:2b:69:2f:25:8e:3b:a8:a7:5f:a6:06:f7:83:59: 81:eb:e5:bc:71:59:c4:5f:a5:f8:a5:a6:1a:a4:6a: 30:5f:b1:1f:ea:9f:bc:9a:68:15:33:a9:33:15:44: ed:07:a5:d5:23:65:72:59:4a:d8:2a:97:97:8a:6c: 94:7c:fe:08:c8:b9:e9:2e:41:29:9f:02:9b:6e:07: 05:21:8c:cb:31:31:d4:d4:2e:9a:5f:a3:92:ed:ec: 70:a2:e5:75:ca:ff:e5:af:3c:a7:86:4f:c0:e5:4b: 83:06:c1:49:16:eb:25:88:60:c7:57:71:41:e1:13: c1:72:25:1d:64:f7:b0:9d:8f:d7:8f:4b:83:71:56: 2c:1c:c9:72:bd:ca:52:aa:ec:dd:c1:4a:8b:37:e7: d8:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:BB:57:CB:97:B4:21:BF:07:08:2E:C8:52:96:CC:1E:B3:1C:29:28 X509v3 Authority Key Identifier: keyid:9A:4F:69:E8:B4:60:63:63:8E:82:F1:FB:06:0A:B3:D7:25:FA:48:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A4F69E8B46063638E82F1FB060AB3D725FA4821.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:e3:b0:18:a5:57:73:ee:5b:51:12:09:b0:5e:9b:b5:57:f8: 99:30:1c:55:e6:40:a7:43:08:17:56:9f:db:d4:33:12:3c:52: 16:1e:b7:6b:aa:5a:58:2c:ce:de:08:53:ec:40:ed:1a:99:29: 4d:13:a1:6b:e1:34:06:da:fc:5e:8a:2a:0f:d2:82:c3:66:4f: 74:dc:5b:3d:df:ea:d0:96:20:b2:30:1d:7c:aa:de:c5:fc:ca: e4:5b:e2:bf:00:f3:9d:fa:26:c2:2f:d0:dd:14:0b:38:37:09: 75:16:5f:10:34:8e:6c:fe:2f:0f:04:62:a9:fa:8d:9e:f9:ec: 24:7d:ed:8c:62:79:d6:c7:0d:a1:90:f1:5a:64:ff:e1:43:6f: da:97:c6:16:78:19:69:e1:bf:ee:d7:fa:5f:c4:fc:8c:a3:cc: 24:81:47:8f:4b:48:82:c5:14:0b:23:48:56:74:a2:a7:24:8b: b8:6e:dc:0e:bc:61:53:99:c8:41:1a:c1:90:bf:b1:89:6d:7d: b9:89:13:2b:e6:fa:09:06:17:de:29:70:32:b7:8c:6d:1f:e2: 06:0d:02:89:ba:b8:b5:fb:6b:22:5e:ac:5a:44:f8:6f:58:8b: a2:ed:25:2b:0d:19:55:37:38:04:e8:16:b7:72:a6:1f:ed:51: 74:f4:3d:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR0wjGdVoecG/Kbq/pNZp4J4554gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE0RjY5RThCNDYwNjM2MzhFODJGMUZCMDYwQUIzRDcy NUZBNDgyMTAeFw0yNTA2MDUwMTQ3MjBaFw0yNTA2MDgwNzM0MjBaMDMxMTAvBgNV BAMTKEVDQkI1N0NCOTdCNDIxQkYwNzA4MkVDODUyOTZDQzFFQjMxQzI5MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmXlZer1dhoptBqigLtS29lBH/ zq9X3apdWFFkLlbWekIIYQ5cCIoT+APD9TPh7oAQgY8PkVgqFTzEV9VeCLSrFyVk SqUrvId8m+akkwRAcWCoQlE+FYeNCLHt1zRgRIbxEZxsXg0Mw44raS8ljjuop1+m BveDWYHr5bxxWcRfpfilphqkajBfsR/qn7yaaBUzqTMVRO0HpdUjZXJZStgql5eK bJR8/gjIuekuQSmfAptuBwUhjMsxMdTULppfo5Lt7HCi5XXK/+WvPKeGT8DlS4MG wUkW6yWIYMdXcUHhE8FyJR1k97Cdj9ePS4NxViwcyXK9ylKq7N3BSos359jxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7LtXy5e0Ib8HCC7IUpbMHrMcKSgwHwYDVR0j BBgwFoAUmk9p6LRgY2OOgvH7Bgqz1yX6SCEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NjM4YmQyMS1iZTU2LTQyYjQtODI3OC0wNTQwNWRjZTVlODgvMC85QTRGNjlFOEI0 NjA2MzYzOEU4MkYxRkIwNjBBQjNENzI1RkE0ODIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE0RjY5RThCNDYwNjM2MzhFODJGMUZCMDYwQUIzRDcyNUZB NDgyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDYzOGJkMjEtYmU1Ni00MmI0LTgy NzgtMDU0MDVkY2U1ZTg4LzAvOUE0RjY5RThCNDYwNjM2MzhFODJGMUZCMDYwQUIz RDcyNUZBNDgyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFjjsBilV3PuW1ESCbBem7VX+JkwHFXmQKdD CBdWn9vUMxI8UhYet2uqWlgszt4IU+xA7RqZKU0ToWvhNAba/F6KKg/SgsNmT3Tc Wz3f6tCWILIwHXyq3sX8yuRb4r8A8536JsIv0N0UCzg3CXUWXxA0jmz+Lw8EYqn6 jZ757CR97YxiedbHDaGQ8Vpk/+FDb9qXxhZ4GWnhv+7X+l/E/IyjzCSBR49LSILF FAsjSFZ0oqcki7hu3A68YVOZyEEawZC/sYltfbmJEyvm+gkGF94pcDK3jG0f4gYN Aom6uLX7ayJerFpE+G9Yi6LtJSsNGVU3OAToFrdyph/tUXT0PXA= -----END CERTIFICATE-----Generated at Thu Jun 5 19:17:58 2025 by rpki-client