$ rpki-client -vvf repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft File: 4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft (raw, json) Hash identifier: 8G+vwndjNb5LzY8HxG6+5fT2QKFzKBAK3uTjzyzqQ3E= Subject key identifier: E9:24:4A:B0:96:C2:B2:B6:E5:BA:40:73:72:08:E1:17:FC:39:A8:B1 Authority key identifier: 4A:8B:6A:33:95:61:2C:D3:3D:A8:B3:C3:81:D6:ED:CF:A4:A4:5A:1F Certificate issuer: /CN=4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F Certificate serial: 75D854043AA209DE2E3D05F2F37FE846ACE1C729 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft Manifest number: 01DE Signing time: Sat 07 Jun 2025 06:51:07 +0000 Manifest this update: Sat 07 Jun 2025 06:46:07 +0000 Manifest next update: Tue 10 Jun 2025 10:34:07 +0000 Files and hashes: 1: 4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.crl (hash: 9Auq2MCWAnwHOff7FXaWyUz06irlxdnqsa4espNdLT8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.crl rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 10:34:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:d8:54:04:3a:a2:09:de:2e:3d:05:f2:f3:7f:e8:46:ac:e1:c7:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F Validity Not Before: Jun 7 06:46:07 2025 GMT Not After : Jun 10 10:34:07 2025 GMT Subject: CN=E9244AB096C2B2B6E5BA40737208E117FC39A8B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:23:45:80:ae:c0:98:6c:ae:de:85:93:18:92: 47:70:ff:16:07:92:d3:76:f8:99:95:c4:7f:a1:f8: 69:fd:21:7a:14:60:b1:3b:84:48:42:0f:d5:d7:71: 20:0c:2f:fa:7e:e8:96:52:15:2c:8b:ba:27:a9:b1: ce:94:da:4a:a6:0f:ac:bf:d2:ef:12:7c:e7:30:ab: c3:b2:d2:7c:dc:b4:fa:33:b9:85:51:0c:9d:e2:67: f5:bc:99:9f:16:88:40:e6:66:c8:c8:d7:02:dd:90: 6e:20:0b:47:a4:2d:4d:38:23:12:b4:4a:9e:d2:bc: 24:e5:9d:f1:70:eb:47:40:cb:89:e3:b1:d7:f4:53: fa:28:53:0a:1d:dd:2d:d9:a2:59:0e:34:4e:48:46: ef:85:ba:91:eb:16:65:69:59:9a:b1:c6:f2:7d:44: eb:6c:73:85:c4:83:15:e6:78:1c:59:e5:10:fb:8b: 8a:b8:55:1a:45:01:01:1f:53:05:97:7a:6c:67:09: 3c:34:eb:5f:c5:9c:c1:9c:55:1a:79:b3:c5:47:30: 2b:33:68:8d:73:fc:af:a2:7c:47:d5:66:3b:c4:e6: 26:56:fd:0b:0d:df:30:45:46:71:41:d1:5a:ab:a4: 47:22:4c:76:e8:1f:0d:6d:5b:d4:d0:a8:34:1e:25: bb:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:24:4A:B0:96:C2:B2:B6:E5:BA:40:73:72:08:E1:17:FC:39:A8:B1 X509v3 Authority Key Identifier: keyid:4A:8B:6A:33:95:61:2C:D3:3D:A8:B3:C3:81:D6:ED:CF:A4:A4:5A:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:8a:6d:02:32:ea:f2:92:2d:c7:7a:7a:c9:21:f3:73:b9:3a: 55:c4:f5:5e:26:e1:02:a9:8d:2f:dc:84:de:6f:aa:7b:bc:4f: b1:d7:31:2e:a9:a6:6d:36:3d:a2:88:9d:3f:49:c3:92:52:18: d8:26:f7:ff:1b:c6:0b:54:2f:ea:27:47:a1:12:f8:c4:61:e0: 04:a0:81:66:12:f4:26:d9:05:17:21:05:e4:fc:a2:46:5f:99: 57:2c:63:56:50:c0:04:43:4b:d9:46:a2:27:05:3a:71:f1:b6: 26:9b:13:3e:29:b2:58:e0:91:a6:46:0f:b6:13:52:78:14:1f: 9b:1d:ca:50:81:80:45:95:8c:ed:82:52:82:67:64:41:cc:f8: ae:dc:cf:9c:fe:32:e7:41:90:aa:02:37:f0:1b:1a:2b:8b:2b: 2a:50:f7:55:2f:3a:7e:56:12:22:a0:6b:64:61:71:b5:de:c6: ca:bc:38:3b:b9:f0:30:44:4f:64:e7:79:c6:f9:b4:c8:5e:cd: ce:5d:9d:1d:3c:2f:a6:92:f2:84:51:bd:47:71:56:f8:36:48: 47:5f:a0:70:32:ac:5a:7a:2f:b9:60:dc:1d:5b:e5:1e:4b:a4: b1:55:d2:38:69:4f:24:cd:37:73:34:1e:72:25:20:c7:92:2d: 55:e5:2b:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUddhUBDqiCd4uPQXy83/oRqzhxykwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE4QjZBMzM5NTYxMkNEMzNEQThCM0MzODFENkVEQ0ZB NEE0NUExRjAeFw0yNTA2MDcwNjQ2MDdaFw0yNTA2MTAxMDM0MDdaMDMxMTAvBgNV BAMTKEU5MjQ0QUIwOTZDMkIyQjZFNUJBNDA3MzcyMDhFMTE3RkMzOUE4QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChI0WArsCYbK7ehZMYkkdw/xYH ktN2+JmVxH+h+Gn9IXoUYLE7hEhCD9XXcSAML/p+6JZSFSyLuiepsc6U2kqmD6y/ 0u8SfOcwq8Oy0nzctPozuYVRDJ3iZ/W8mZ8WiEDmZsjI1wLdkG4gC0ekLU04IxK0 Sp7SvCTlnfFw60dAy4njsdf0U/ooUwod3S3ZolkONE5IRu+FupHrFmVpWZqxxvJ9 ROtsc4XEgxXmeBxZ5RD7i4q4VRpFAQEfUwWXemxnCTw061/FnMGcVRp5s8VHMCsz aI1z/K+ifEfVZjvE5iZW/QsN3zBFRnFB0VqrpEciTHboHw1tW9TQqDQeJbsHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6SRKsJbCsrblukBzcgjhF/w5qLEwHwYDVR0j BBgwFoAUSotqM5VhLNM9qLPDgdbtz6SkWh8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWEzN2FlYy02M2MyLTQ1ZDEtOTZhZS1kYTE2ZDEwMThiMGYvMC80QThCNkEzMzk1 NjEyQ0QzM0RBOEIzQzM4MUQ2RURDRkE0QTQ1QTFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE4QjZBMzM5NTYxMkNEMzNEQThCM0MzODFENkVEQ0ZBNEE0 NUExRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTlhMzdhZWMtNjNjMi00NWQxLTk2 YWUtZGExNmQxMDE4YjBmLzAvNEE4QjZBMzM5NTYxMkNEMzNEQThCM0MzODFENkVE Q0ZBNEE0NUExRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK2KbQIy6vKSLcd6eskh83O5OlXE9V4m4QKp jS/chN5vqnu8T7HXMS6ppm02PaKInT9Jw5JSGNgm9/8bxgtUL+onR6ES+MRh4ASg gWYS9CbZBRchBeT8okZfmVcsY1ZQwARDS9lGoicFOnHxtiabEz4psljgkaZGD7YT UngUH5sdylCBgEWVjO2CUoJnZEHM+K7cz5z+MudBkKoCN/AbGiuLKypQ91UvOn5W EiKga2RhcbXexsq8ODu58DBET2Tnecb5tMhezc5dnR08L6aS8oRRvUdxVvg2SEdf oHAyrFp6L7lg3B1b5R5LpLFV0jhpTyTNN3M0HnIlIMeSLVXlKyc= -----END CERTIFICATE-----Generated at Sun Jun 8 00:52:58 2025 by rpki-client