$ rpki-client -vvf repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft File: 02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft (raw, json) Hash identifier: e/i1K5WJMjxWptuaHvt0joFwkQsnTpWzvcTh1kntr9g= Subject key identifier: 13:3E:7C:CE:AE:CD:96:CC:7D:45:6B:6F:7D:C1:95:21:BC:AD:CF:23 Authority key identifier: 02:23:69:13:B4:6A:90:03:C0:64:5E:6C:C8:58:EA:54:D6:D7:F4:AC Certificate issuer: /CN=02236913B46A9003C0645E6CC858EA54D6D7F4AC Certificate serial: 2024A4D08F2C86E5E1C26B7AB469B91D3363C8B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02236913B46A9003C0645E6CC858EA54D6D7F4AC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft Manifest number: D1 Signing time: Sun 08 Jun 2025 14:11:00 +0000 Manifest this update: Sun 08 Jun 2025 14:06:00 +0000 Manifest next update: Wed 11 Jun 2025 20:06:00 +0000 Files and hashes: 1: 02236913B46A9003C0645E6CC858EA54D6D7F4AC.crl (hash: RT4x0cJfbhV9rJBYEtaDwprQMLFZJkbpuZNw6npxijE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.crl rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02236913B46A9003C0645E6CC858EA54D6D7F4AC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 02:27:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:24:a4:d0:8f:2c:86:e5:e1:c2:6b:7a:b4:69:b9:1d:33:63:c8:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02236913B46A9003C0645E6CC858EA54D6D7F4AC Validity Not Before: Jun 8 14:06:00 2025 GMT Not After : Jun 11 20:06:00 2025 GMT Subject: CN=133E7CCEAECD96CC7D456B6F7DC19521BCADCF23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:18:df:a7:79:fb:6b:26:55:92:1e:ac:f6:6e: f0:52:a4:37:96:5d:99:77:d7:da:aa:8c:4f:cf:3c: a0:3f:b8:4d:2c:b1:91:e2:5d:d0:30:ef:8d:b4:63: 36:cc:25:1c:d7:cf:ae:d7:e0:a0:f0:c8:8c:ea:85: 15:b8:ad:49:54:1b:f2:fb:6b:e1:0e:7c:c7:d7:f5: c9:64:32:7c:03:b8:c6:c9:c0:f9:7f:19:de:b5:86: 8d:b8:93:67:47:a6:f4:14:69:3a:bb:4b:cc:fa:05: a2:41:bf:b7:85:18:de:32:19:04:8a:6f:38:96:19: 90:6a:86:f2:c8:7f:d3:e3:f8:08:cd:2a:e3:70:3f: d4:8a:07:d1:69:32:89:a2:06:b7:b2:7e:9d:60:16: 89:1e:cd:2d:9b:e8:11:af:dd:6e:1e:aa:50:14:3d: 3a:97:05:da:5a:81:b5:27:03:f3:a3:72:e7:ac:80: d5:03:7c:7c:d1:a7:9f:2e:90:89:9c:65:07:cb:db: 92:e9:87:5d:ab:6a:d4:a7:2a:5b:b0:a9:ee:1c:f2: f9:7e:c3:16:76:a3:c2:c2:a0:e8:dd:46:14:f4:9e: e5:3a:97:c7:48:c2:49:34:f3:2e:07:d3:d4:5b:1a: 16:d8:0c:a3:7f:31:6e:f2:4f:82:f9:89:ba:82:fa: 4f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:3E:7C:CE:AE:CD:96:CC:7D:45:6B:6F:7D:C1:95:21:BC:AD:CF:23 X509v3 Authority Key Identifier: keyid:02:23:69:13:B4:6A:90:03:C0:64:5E:6C:C8:58:EA:54:D6:D7:F4:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02236913B46A9003C0645E6CC858EA54D6D7F4AC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:59:db:bd:cd:e1:01:b5:a0:6a:84:8d:a6:a0:61:2e:8a:4e: 36:2c:ec:36:df:93:0a:f3:5c:c6:72:c7:46:c6:cd:95:5b:af: 7b:98:24:4b:fe:d5:d0:14:43:9a:d8:3f:da:4f:4e:8f:7e:ed: d2:fc:ad:0a:11:cc:e1:df:43:a7:69:73:82:54:37:f4:69:c4: c8:43:5d:76:7e:85:de:1b:10:d6:8b:11:96:04:4e:ad:cb:75: 16:28:24:7b:10:cd:3b:f4:c2:ec:5f:61:e1:76:b1:be:28:53: 61:01:8f:e5:35:14:90:33:b5:7c:6e:13:c5:da:38:81:e2:57: 7c:59:20:dc:51:73:08:4f:aa:c3:d2:5d:ff:0a:0c:ba:02:50: 81:3a:10:66:32:75:94:8e:45:a7:fa:78:bd:47:84:d8:ee:a9: 04:cb:32:bf:aa:51:9c:28:ef:c4:d2:5a:ec:f0:85:82:9d:82: fb:97:6a:9c:5a:4a:22:0f:e8:2c:fd:4d:ab:a9:fb:c2:8e:dc: 19:f8:8a:f1:5a:f4:ee:0d:78:32:60:fe:d7:45:04:1d:a0:5b: 86:b1:48:9b:c2:89:81:96:c6:c4:28:c0:9f:e5:75:74:18:ea: 1e:3a:2e:07:ff:ff:f3:a0:86:eb:28:16:88:a8:ca:67:89:27: 0a:a7:5e:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUICSk0I8shuXhwmt6tGm5HTNjyLEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIyMzY5MTNCNDZBOTAwM0MwNjQ1RTZDQzg1OEVBNTRE NkQ3RjRBQzAeFw0yNTA2MDgxNDA2MDBaFw0yNTA2MTEyMDA2MDBaMDMxMTAvBgNV BAMTKDEzM0U3Q0NFQUVDRDk2Q0M3RDQ1NkI2RjdEQzE5NTIxQkNBRENGMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYGN+neftrJlWSHqz2bvBSpDeW XZl319qqjE/PPKA/uE0ssZHiXdAw7420YzbMJRzXz67X4KDwyIzqhRW4rUlUG/L7 a+EOfMfX9clkMnwDuMbJwPl/Gd61ho24k2dHpvQUaTq7S8z6BaJBv7eFGN4yGQSK bziWGZBqhvLIf9Pj+AjNKuNwP9SKB9FpMomiBreyfp1gFokezS2b6BGv3W4eqlAU PTqXBdpagbUnA/OjcuesgNUDfHzRp58ukImcZQfL25Lph12ratSnKluwqe4c8vl+ wxZ2o8LCoOjdRhT0nuU6l8dIwkk08y4H09RbGhbYDKN/MW7yT4L5ibqC+k8/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEz58zq7Nlsx9RWtvfcGVIbytzyMwHwYDVR0j BBgwFoAUAiNpE7RqkAPAZF5syFjqVNbX9KwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YjcyZjcxYS1iOWMyLTQwMzMtOTY3NS1kNzcwNzYwM2E4MmMvMC8wMjIzNjkxM0I0 NkE5MDAzQzA2NDVFNkNDODU4RUE1NEQ2RDdGNEFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDIyMzY5MTNCNDZBOTAwM0MwNjQ1RTZDQzg1OEVBNTRENkQ3 RjRBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI3MmY3MWEtYjljMi00MDMzLTk2 NzUtZDc3MDc2MDNhODJjLzAvMDIyMzY5MTNCNDZBOTAwM0MwNjQ1RTZDQzg1OEVB NTRENkQ3RjRBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMBZ273N4QG1oGqEjaagYS6KTjYs7Dbfkwrz XMZyx0bGzZVbr3uYJEv+1dAUQ5rYP9pPTo9+7dL8rQoRzOHfQ6dpc4JUN/RpxMhD XXZ+hd4bENaLEZYETq3LdRYoJHsQzTv0wuxfYeF2sb4oU2EBj+U1FJAztXxuE8Xa OIHiV3xZINxRcwhPqsPSXf8KDLoCUIE6EGYydZSORaf6eL1HhNjuqQTLMr+qUZwo 78TSWuzwhYKdgvuXapxaSiIP6Cz9Taup+8KO3Bn4ivFa9O4NeDJg/tdFBB2gW4ax SJvCiYGWxsQowJ/ldXQY6h46Lgf///OghusoFoioymeJJwqnXrg= -----END CERTIFICATE-----Generated at Sun Jun 8 23:26:10 2025 by rpki-client