$ rpki-client -vvf repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft File: 98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft (raw, json) Hash identifier: aoNZL2Q5wCmMBM5Tt/uS6/r2zCxMxYRKUh4KLHTSYXI= Subject key identifier: 69:91:84:69:29:5D:B1:85:44:4F:8F:7A:89:71:C1:FB:5E:50:56:AF Authority key identifier: 98:70:7B:7E:B6:5D:38:E2:ED:DB:57:46:D7:CF:77:C8:1B:FC:67:43 Certificate issuer: /CN=98707B7EB65D38E2EDDB5746D7CF77C81BFC6743 Certificate serial: 785BE6B92B2442A2772525558C34CEFA55607998 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft Manifest number: 01FB Signing time: Wed 04 Jun 2025 01:00:50 +0000 Manifest this update: Wed 04 Jun 2025 00:55:50 +0000 Manifest next update: Sat 07 Jun 2025 12:55:50 +0000 Files and hashes: 1: 98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.crl (hash: LUje/qo7uzohkt7ACfVEVc5pMpJdMMFLMOLdX2dAbdY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.crl rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 12:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:5b:e6:b9:2b:24:42:a2:77:25:25:55:8c:34:ce:fa:55:60:79:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98707B7EB65D38E2EDDB5746D7CF77C81BFC6743 Validity Not Before: Jun 4 00:55:50 2025 GMT Not After : Jun 7 12:55:50 2025 GMT Subject: CN=69918469295DB185444F8F7A8971C1FB5E5056AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:d9:2b:41:9c:15:fb:df:64:c5:6e:40:ed:ca: 83:e4:83:27:f7:12:07:e0:45:fa:8e:c5:28:6f:e5: a6:bd:82:01:1f:4e:6b:7e:a0:e3:66:8c:ff:2f:3e: c8:f7:7e:0a:b4:32:5f:97:f2:2e:9a:6a:6f:56:12: 6c:e8:4f:08:28:2f:db:8f:d2:3f:53:61:77:fd:3d: 42:43:c2:a4:47:07:58:27:1b:3a:66:da:2e:0a:16: 59:ce:e5:19:60:24:94:83:53:09:d4:d8:6f:96:08: d4:a3:63:e5:71:50:23:0a:d3:b4:49:67:bb:92:49: 8e:84:95:21:b1:1e:40:55:47:f9:cb:cb:92:c5:a8: 81:6d:1b:6a:ea:d4:b8:f3:ba:34:8c:7b:15:76:7b: b2:c7:39:76:9b:de:1e:f4:7f:c4:46:a9:74:e0:32: 9f:fb:d5:89:8d:37:11:f7:2e:f0:ef:3a:b4:77:dc: c5:b2:ad:52:6b:6f:32:d6:69:26:ac:ed:77:b6:3e: 77:fd:f6:b0:e0:c7:fd:ec:2a:97:58:2a:de:2f:0d: 80:92:b7:c4:e8:01:d6:b7:1f:a3:84:6a:d7:75:65: 9d:39:b7:2e:8f:32:52:dd:d0:ef:14:80:58:e3:ff: 86:27:0b:46:5d:5a:3d:02:d8:08:a5:a2:5b:c2:7f: 19:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:91:84:69:29:5D:B1:85:44:4F:8F:7A:89:71:C1:FB:5E:50:56:AF X509v3 Authority Key Identifier: keyid:98:70:7B:7E:B6:5D:38:E2:ED:DB:57:46:D7:CF:77:C8:1B:FC:67:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5679cbf6-0913-4821-8ae1-bb511eaf088f/0/98707B7EB65D38E2EDDB5746D7CF77C81BFC6743.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:1f:6d:18:9d:51:67:2f:2a:f8:3d:23:20:fc:b5:a9:0c:54: 4a:89:c0:7c:df:48:73:87:87:15:2f:ce:18:29:4f:48:ba:6e: 9a:11:96:52:9b:82:fb:53:bf:5a:83:a4:ea:ec:bf:90:3e:d4: 66:04:e1:4b:82:ed:39:2b:62:1e:01:af:40:bd:f9:2f:07:8b: f8:f2:d5:61:87:ae:19:d9:dd:ac:33:07:21:1d:96:0e:47:68: f2:32:f4:0c:79:de:c4:f8:d3:56:0f:df:55:41:47:71:dd:00: 1e:a0:55:de:69:d4:b5:b3:c3:a5:25:94:51:5c:75:ed:2b:6d: 54:6d:11:84:7d:8f:97:82:8b:d1:8c:fb:b3:ec:ca:6c:a1:42: 43:99:48:6e:c9:94:ef:e7:41:d3:57:e2:c5:ec:7f:d3:ba:eb: a2:be:a5:5d:5a:24:22:47:70:03:b2:f7:0a:2c:48:47:7e:16: a4:80:5d:7a:32:37:a1:19:3e:f5:35:b3:f8:02:d8:c9:50:7d: e6:09:da:ce:ad:8e:f5:d9:ce:fe:29:2b:23:54:34:d4:f2:61: 7a:ee:53:97:8c:ec:27:2b:3e:47:84:57:4e:f1:58:02:34:53: ae:18:a3:2b:f4:fc:b3:11:74:89:1c:17:04:4e:22:26:3f:e7: 41:7f:88:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeFvmuSskQqJ3JSVVjDTO+lVgeZgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg3MDdCN0VCNjVEMzhFMkVEREI1NzQ2RDdDRjc3Qzgx QkZDNjc0MzAeFw0yNTA2MDQwMDU1NTBaFw0yNTA2MDcxMjU1NTBaMDMxMTAvBgNV BAMTKDY5OTE4NDY5Mjk1REIxODU0NDRGOEY3QTg5NzFDMUZCNUU1MDU2QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm2StBnBX732TFbkDtyoPkgyf3 EgfgRfqOxShv5aa9ggEfTmt+oONmjP8vPsj3fgq0Ml+X8i6aam9WEmzoTwgoL9uP 0j9TYXf9PUJDwqRHB1gnGzpm2i4KFlnO5RlgJJSDUwnU2G+WCNSjY+VxUCMK07RJ Z7uSSY6ElSGxHkBVR/nLy5LFqIFtG2rq1LjzujSMexV2e7LHOXab3h70f8RGqXTg Mp/71YmNNxH3LvDvOrR33MWyrVJrbzLWaSas7Xe2Pnf99rDgx/3sKpdYKt4vDYCS t8ToAda3H6OEatd1ZZ05ty6PMlLd0O8UgFjj/4YnC0ZdWj0C2AilolvCfxlFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaZGEaSldsYVET496iXHB+15QVq8wHwYDVR0j BBgwFoAUmHB7frZdOOLt21dG1893yBv8Z0MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Njc5Y2JmNi0wOTEzLTQ4MjEtOGFlMS1iYjUxMWVhZjA4OGYvMC85ODcwN0I3RUI2 NUQzOEUyRUREQjU3NDZEN0NGNzdDODFCRkM2NzQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg3MDdCN0VCNjVEMzhFMkVEREI1NzQ2RDdDRjc3QzgxQkZD Njc0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTY3OWNiZjYtMDkxMy00ODIxLThh ZTEtYmI1MTFlYWYwODhmLzAvOTg3MDdCN0VCNjVEMzhFMkVEREI1NzQ2RDdDRjc3 QzgxQkZDNjc0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEcfbRidUWcvKvg9IyD8takMVEqJwHzfSHOH hxUvzhgpT0i6bpoRllKbgvtTv1qDpOrsv5A+1GYE4UuC7TkrYh4Br0C9+S8Hi/jy 1WGHrhnZ3awzByEdlg5HaPIy9Ax53sT401YP31VBR3HdAB6gVd5p1LWzw6UllFFc de0rbVRtEYR9j5eCi9GM+7PsymyhQkOZSG7JlO/nQdNX4sXsf9O666K+pV1aJCJH cAOy9wosSEd+FqSAXXoyN6EZPvU1s/gC2MlQfeYJ2s6tjvXZzv4pKyNUNNTyYXru U5eM7CcrPkeEV07xWAI0U64Yoyv0/LMRdIkcFwROIiY/50F/iGQ= -----END CERTIFICATE-----Generated at Thu Jun 5 18:27:24 2025 by rpki-client