$ rpki-client -vvf repo-rpki.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.mft File: B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.mft (raw, json) Hash identifier: wF+2xFtW22e++UlXvnZRvQhBMA5UxJ2jp50mRyuNN2E= Subject key identifier: 93:9C:98:89:EC:88:8C:74:69:89:7B:C4:77:A1:AB:7C:30:6C:10:9E Authority key identifier: B4:41:54:61:B6:EF:70:D3:D4:A8:1E:D6:88:F2:49:7D:53:A7:FB:7A Certificate issuer: /CN=B4415461B6EF70D3D4A81ED688F2497D53A7FB7A Certificate serial: 327450800975169E21F7840A444463CD274C2652 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.mft Manifest number: 25 Signing time: Fri 06 Jun 2025 13:21:33 +0000 Manifest this update: Fri 06 Jun 2025 13:16:33 +0000 Manifest next update: Mon 09 Jun 2025 20:06:33 +0000 Files and hashes: 1: B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.crl (hash: VR8YrFVgvDUj541uWs3HpK4h6KKvqPK+qRQyPNZAOQ4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.crl rsync://repo-rpki.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 20:06:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:74:50:80:09:75:16:9e:21:f7:84:0a:44:44:63:cd:27:4c:26:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4415461B6EF70D3D4A81ED688F2497D53A7FB7A Validity Not Before: Jun 6 13:16:33 2025 GMT Not After : Jun 9 20:06:33 2025 GMT Subject: CN=939C9889EC888C7469897BC477A1AB7C306C109E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:68:38:50:41:04:fa:bd:b8:a6:b8:10:0b:4e: 1c:02:4c:d0:31:f7:58:27:22:72:5f:1e:7b:16:8d: c7:b9:57:76:9f:c4:83:e6:f4:33:ce:7b:27:42:93: 6a:21:62:4c:7d:84:92:ab:af:ad:73:3a:49:75:42: 8f:45:8f:98:89:2d:31:d1:68:bd:30:d6:42:a8:89: 8c:ff:40:20:3d:de:5d:7b:44:57:66:7f:52:52:9b: 67:30:42:03:1d:f2:79:b0:4d:ca:46:c4:c4:48:f0: f0:5d:36:f8:00:49:3b:f2:c1:41:9c:7f:2e:c3:71: 9c:a6:e7:ee:f7:5c:fb:a4:be:a9:8b:6c:6a:21:fc: 08:af:6d:77:03:ce:59:da:fd:d8:fe:aa:e8:dc:a6: b1:95:05:a9:1a:db:c8:89:58:d4:dd:21:6e:e0:3d: 70:75:df:f3:c3:8f:7d:41:68:27:9d:fc:c4:54:31: a5:ca:34:43:b5:9f:fb:da:6f:70:52:35:e8:03:16: 09:09:d4:49:cc:2f:2c:a3:3a:e6:60:c0:f2:3f:49: f8:d8:6b:d2:6e:93:04:20:ae:e7:da:52:22:c0:25: 2e:dd:c9:14:21:58:e6:7c:ca:b6:d9:9b:89:e8:6e: 43:34:32:b0:54:7d:05:61:18:d1:63:6f:0e:f7:b7: a7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:9C:98:89:EC:88:8C:74:69:89:7B:C4:77:A1:AB:7C:30:6C:10:9E X509v3 Authority Key Identifier: keyid:B4:41:54:61:B6:EF:70:D3:D4:A8:1E:D6:88:F2:49:7D:53:A7:FB:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f330d06-f92d-495b-9ba0-acdd817b1483/0/B4415461B6EF70D3D4A81ED688F2497D53A7FB7A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:17:3a:bf:f3:2b:6c:b5:78:5c:e0:84:d2:82:35:60:7f:65: 76:12:37:fa:95:73:bc:31:04:d8:52:bb:50:d3:b0:d6:68:2e: 64:bf:f0:0a:8e:6b:16:3c:e3:14:d3:71:18:40:88:4c:ea:a8: e9:16:56:b9:94:06:8c:b3:be:1c:b7:a6:6d:c8:46:f5:b2:5c: bd:3f:b8:71:8c:c8:b1:1c:3c:cf:cb:8d:c5:cb:54:2e:52:f4: c8:2f:c4:3a:d5:17:7f:b5:0c:47:bc:27:2e:54:90:8e:3e:1d: d9:e7:36:c1:39:f5:86:60:2d:09:2c:90:53:ab:01:55:22:5d: 0b:8e:66:f6:df:60:a1:03:66:e4:80:62:b1:b3:7e:6c:95:2a: 47:4d:90:ee:0c:41:7d:3c:bf:38:b5:08:2d:4d:35:f4:0f:11: 75:25:a3:5d:eb:d3:07:5b:82:9b:e4:9a:ba:37:87:29:bb:70: 82:96:7f:03:e8:3c:69:62:32:63:4e:de:ae:dc:f8:34:77:3e: 49:44:f0:63:2f:04:bb:39:fa:75:6f:3f:89:dd:ed:76:c1:18: e9:1d:78:21:dc:0b:ce:bb:22:c1:d2:5b:b9:ec:e0:35:2a:b6: b5:13:45:8e:8d:d2:f8:20:31:8c:c0:f9:68:fd:58:c3:30:df: aa:96:0e:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMnRQgAl1Fp4h94QKRERjzSdMJlIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ0MTU0NjFCNkVGNzBEM0Q0QTgxRUQ2ODhGMjQ5N0Q1 M0E3RkI3QTAeFw0yNTA2MDYxMzE2MzNaFw0yNTA2MDkyMDA2MzNaMDMxMTAvBgNV BAMTKDkzOUM5ODg5RUM4ODhDNzQ2OTg5N0JDNDc3QTFBQjdDMzA2QzEwOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGaDhQQQT6vbimuBALThwCTNAx 91gnInJfHnsWjce5V3afxIPm9DPOeydCk2ohYkx9hJKrr61zOkl1Qo9Fj5iJLTHR aL0w1kKoiYz/QCA93l17RFdmf1JSm2cwQgMd8nmwTcpGxMRI8PBdNvgASTvywUGc fy7DcZym5+73XPukvqmLbGoh/AivbXcDzlna/dj+qujcprGVBaka28iJWNTdIW7g PXB13/PDj31BaCed/MRUMaXKNEO1n/vab3BSNegDFgkJ1EnMLyyjOuZgwPI/SfjY a9JukwQgrufaUiLAJS7dyRQhWOZ8yrbZm4nobkM0MrBUfQVhGNFjbw73t6cZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk5yYieyIjHRpiXvEd6GrfDBsEJ4wHwYDVR0j BBgwFoAUtEFUYbbvcNPUqB7WiPJJfVOn+3owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZjMzMGQwNi1mOTJkLTQ5NWItOWJhMC1hY2RkODE3YjE0ODMvMC9CNDQxNTQ2MUI2 RUY3MEQzRDRBODFFRDY4OEYyNDk3RDUzQTdGQjdBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQ0MTU0NjFCNkVGNzBEM0Q0QTgxRUQ2ODhGMjQ5N0Q1M0E3 RkI3QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGYzMzBkMDYtZjkyZC00OTViLTli YTAtYWNkZDgxN2IxNDgzLzAvQjQ0MTU0NjFCNkVGNzBEM0Q0QTgxRUQ2ODhGMjQ5 N0Q1M0E3RkI3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJcXOr/zK2y1eFzghNKCNWB/ZXYSN/qVc7wx BNhSu1DTsNZoLmS/8AqOaxY84xTTcRhAiEzqqOkWVrmUBoyzvhy3pm3IRvWyXL0/ uHGMyLEcPM/LjcXLVC5S9MgvxDrVF3+1DEe8Jy5UkI4+HdnnNsE59YZgLQkskFOr AVUiXQuOZvbfYKEDZuSAYrGzfmyVKkdNkO4MQX08vzi1CC1NNfQPEXUlo13r0wdb gpvkmro3hym7cIKWfwPoPGliMmNO3q7c+DR3PklE8GMvBLs5+nVvP4nd7XbBGOkd eCHcC867IsHSW7ns4DUqtrUTRY6N0vggMYzA+Wj9WMMw36qWDpU= -----END CERTIFICATE-----Generated at Fri Jun 6 16:55:46 2025 by rpki-client