$ rpki-client -vvf repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft File: C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft (raw, json) Hash identifier: xLP4U5OArUr0fceBXfQJptFi8QdJBeawMBvyTkhS78I= Subject key identifier: 27:26:61:D4:89:0D:EC:44:E1:43:72:8A:6D:7B:AF:0B:28:87:22:3F Authority key identifier: C9:BA:44:08:64:54:B8:8A:BD:ED:EF:D6:01:08:86:1D:DD:AA:37:86 Certificate issuer: /CN=C9BA44086454B88ABDEDEFD60108861DDDAA3786 Certificate serial: 48710CDA12F6FDD32E3C802CA3A9995C5D0ADC98 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9BA44086454B88ABDEDEFD60108861DDDAA3786.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft Manifest number: DA Signing time: Mon 02 Jun 2025 14:10:35 +0000 Manifest this update: Mon 02 Jun 2025 14:05:35 +0000 Manifest next update: Thu 05 Jun 2025 18:57:35 +0000 Files and hashes: 1: C9BA44086454B88ABDEDEFD60108861DDDAA3786.crl (hash: URgX9zBqvAd8hMyCwkXG5FGbZyGbgEhpknBf8lQmZ6o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.crl rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9BA44086454B88ABDEDEFD60108861DDDAA3786.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 18:57:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:71:0c:da:12:f6:fd:d3:2e:3c:80:2c:a3:a9:99:5c:5d:0a:dc:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9BA44086454B88ABDEDEFD60108861DDDAA3786 Validity Not Before: Jun 2 14:05:35 2025 GMT Not After : Jun 5 18:57:35 2025 GMT Subject: CN=272661D4890DEC44E143728A6D7BAF0B2887223F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:0a:84:c8:47:fc:44:39:d4:31:fc:9f:4a:18: 7e:3b:33:e3:3d:75:6e:16:ae:d0:1f:cc:53:5e:68: 08:4a:98:4d:09:29:a7:65:79:c4:25:06:6c:d6:7d: e1:c2:c1:2b:4b:e6:ed:da:69:b2:ca:d4:95:7c:05: ef:62:56:4d:ad:31:f4:25:f5:fc:ce:3a:b3:8e:35: 26:5e:10:e5:de:5d:8b:7d:f4:ea:00:d1:8b:79:3d: 80:3a:ba:f0:a0:a2:b1:41:2d:8a:2f:58:39:95:0e: 62:4f:4b:a6:8e:5b:be:8b:96:d8:fe:f0:c8:bd:ba: da:d1:36:21:ac:f1:f9:75:99:3c:81:ee:f6:0b:30: a2:fa:02:f0:55:21:63:9d:b4:dc:54:f0:91:c7:61: 8c:f7:73:d0:2f:2f:10:25:cd:1f:6c:79:7d:ba:bb: d1:83:82:5e:ee:23:82:7e:83:e6:8e:af:14:54:c1: 81:66:2f:1a:a9:4f:86:13:61:77:8e:48:4e:1d:db: f0:07:d3:29:91:0a:20:17:75:07:fc:f0:61:6f:2a: bf:c7:a9:0c:11:72:41:b0:99:0f:90:19:83:01:4c: 07:26:71:7a:a3:45:33:35:78:98:b3:b6:5e:13:54: 7a:ce:0d:b9:da:c3:23:7e:7c:3b:c5:ab:a7:37:b7: 32:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:26:61:D4:89:0D:EC:44:E1:43:72:8A:6D:7B:AF:0B:28:87:22:3F X509v3 Authority Key Identifier: keyid:C9:BA:44:08:64:54:B8:8A:BD:ED:EF:D6:01:08:86:1D:DD:AA:37:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9BA44086454B88ABDEDEFD60108861DDDAA3786.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:3b:09:4f:7c:67:e3:2a:92:fc:c7:60:bc:4f:8e:8e:0c:8d: 04:e2:49:ce:1c:ea:a8:24:be:3f:69:35:7b:96:b6:da:88:d5: ac:e0:44:6f:f1:88:78:d9:ae:d8:de:2c:ea:01:4f:89:6b:83: 4f:47:81:1f:10:ae:91:d9:ca:b3:79:d7:2d:26:88:d8:a9:3c: a8:85:f3:3d:ef:29:87:85:9e:cf:d1:9d:ed:51:a2:75:f9:78: e5:31:81:85:0a:72:34:84:98:8b:71:64:02:d2:fc:79:d9:3c: cf:ed:a5:da:31:7e:5f:d6:90:e0:fd:f8:74:a9:86:a3:fd:fb: 5a:05:f8:f3:10:82:ad:c9:cd:7e:b8:f2:78:cd:38:57:05:0a: 01:d8:35:c0:47:b2:54:e8:50:80:a8:cc:57:0e:48:71:21:6b: 5f:11:c9:73:03:fd:73:8c:9a:a5:ab:11:ec:bb:c0:a7:24:eb: 14:4b:27:46:36:b9:5f:f3:f4:1f:6b:54:ce:ad:42:e1:8a:f8: f7:b9:72:9c:8b:4f:f4:36:78:bb:0d:12:2c:da:ca:c5:20:f8: 73:2e:61:6d:20:15:b3:da:56:39:29:7f:1e:81:bb:43:6d:a7: 6f:78:95:01:18:4c:9f:ec:42:36:e6:11:59:8f:3c:cb:ce:7b: 18:68:55:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSHEM2hL2/dMuPIAso6mZXF0K3JgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlCQTQ0MDg2NDU0Qjg4QUJERURFRkQ2MDEwODg2MURE REFBMzc4NjAeFw0yNTA2MDIxNDA1MzVaFw0yNTA2MDUxODU3MzVaMDMxMTAvBgNV BAMTKDI3MjY2MUQ0ODkwREVDNDRFMTQzNzI4QTZEN0JBRjBCMjg4NzIyM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0CoTIR/xEOdQx/J9KGH47M+M9 dW4WrtAfzFNeaAhKmE0JKadlecQlBmzWfeHCwStL5u3aabLK1JV8Be9iVk2tMfQl 9fzOOrOONSZeEOXeXYt99OoA0Yt5PYA6uvCgorFBLYovWDmVDmJPS6aOW76Lltj+ 8Mi9utrRNiGs8fl1mTyB7vYLMKL6AvBVIWOdtNxU8JHHYYz3c9AvLxAlzR9seX26 u9GDgl7uI4J+g+aOrxRUwYFmLxqpT4YTYXeOSE4d2/AH0ymRCiAXdQf88GFvKr/H qQwRckGwmQ+QGYMBTAcmcXqjRTM1eJiztl4TVHrODbnawyN+fDvFq6c3tzI9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJyZh1IkN7EThQ3KKbXuvCyiHIj8wHwYDVR0j BBgwFoAUybpECGRUuIq97e/WAQiGHd2qN4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTFlNmFjNC1hMmM0LTQxYTctYjBkYi02ZmE3OGIwY2E4YjAvMC9DOUJBNDQwODY0 NTRCODhBQkRFREVGRDYwMTA4ODYxREREQUEzNzg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzlCQTQ0MDg2NDU0Qjg4QUJERURFRkQ2MDEwODg2MUREREFB Mzc4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWExZTZhYzQtYTJjNC00MWE3LWIw ZGItNmZhNzhiMGNhOGIwLzAvQzlCQTQ0MDg2NDU0Qjg4QUJERURFRkQ2MDEwODg2 MUREREFBMzc4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKc7CU98Z+MqkvzHYLxPjo4MjQTiSc4c6qgk vj9pNXuWttqI1azgRG/xiHjZrtjeLOoBT4lrg09HgR8QrpHZyrN51y0miNipPKiF 8z3vKYeFns/Rne1RonX5eOUxgYUKcjSEmItxZALS/HnZPM/tpdoxfl/WkOD9+HSp hqP9+1oF+PMQgq3JzX648njNOFcFCgHYNcBHslToUICozFcOSHEha18RyXMD/XOM mqWrEey7wKck6xRLJ0Y2uV/z9B9rVM6tQuGK+Pe5cpyLT/Q2eLsNEizaysUg+HMu YW0gFbPaVjkpfx6Bu0Ntp294lQEYTJ/sQjbmEVmPPMvOexhoVZ4= -----END CERTIFICATE-----Generated at Tue Jun 3 23:08:52 2025 by rpki-client