$ rpki-client -vvf repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft File: D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft (raw, json) Hash identifier: PcZOC+wRzkpr2tnGpHNE9piHHgH0fxANUEnizJNVlnw= Subject key identifier: E1:E8:66:E1:57:31:CB:17:D3:C5:02:20:73:35:0F:6E:D8:AF:52:93 Authority key identifier: D2:89:2B:AB:EE:5F:3B:29:8F:67:4D:48:B1:A6:A8:D6:38:54:6C:DF Certificate issuer: /CN=D2892BABEE5F3B298F674D48B1A6A8D638546CDF Certificate serial: 1BD2ECD4ED964F491421F0BEA2D5EF32FB4412B4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft Manifest number: 04C9 Signing time: Fri 06 Jun 2025 07:52:05 +0000 Manifest this update: Fri 06 Jun 2025 07:47:05 +0000 Manifest next update: Mon 09 Jun 2025 11:08:05 +0000 Files and hashes: 1: D2892BABEE5F3B298F674D48B1A6A8D638546CDF.crl (hash: e9lUFFxyNSXksrLXvIrCcrRLldr4qxZHQPaljr+H/iA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.crl rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 11:08:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:d2:ec:d4:ed:96:4f:49:14:21:f0:be:a2:d5:ef:32:fb:44:12:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2892BABEE5F3B298F674D48B1A6A8D638546CDF Validity Not Before: Jun 6 07:47:05 2025 GMT Not After : Jun 9 11:08:05 2025 GMT Subject: CN=E1E866E15731CB17D3C5022073350F6ED8AF5293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c1:33:18:8d:5c:0d:44:96:9a:47:64:a6:47: 01:f1:da:0d:cd:e0:17:93:2a:5f:70:d9:20:5f:b9: 19:cc:bc:f1:5b:90:af:ab:f8:7f:7a:e4:05:79:65: 53:1b:7d:95:92:ef:2d:e7:56:7a:f2:9e:35:61:83: 5a:90:78:27:ec:e2:70:25:f9:2b:d0:fb:e6:55:9c: 25:c1:16:45:8b:4f:52:f9:f5:3a:ac:41:33:60:46: e4:21:2c:66:e3:2d:ae:9b:47:97:74:fc:02:7e:b0: b2:b4:ec:c9:8a:9b:64:0b:0a:a8:fe:a0:4b:4a:43: f3:27:f3:75:2d:36:0c:55:9c:6e:13:e9:62:28:0f: e8:05:0d:07:dd:f2:56:3c:e6:24:ec:46:1f:f1:0e: 8b:62:73:6b:54:eb:4b:46:df:be:49:21:d1:f3:48: e7:e5:bc:ac:fa:7f:30:f7:6b:8c:5e:c2:0a:9e:78: 76:da:ea:2a:6e:d4:72:23:01:ef:93:29:dd:5a:dd: 49:7a:48:92:f8:54:56:70:16:6f:b2:ac:3f:46:6c: 49:b6:bd:ea:14:5c:cb:4c:93:42:77:a6:6d:2a:55: 7b:d1:00:e0:d0:2b:e2:84:94:7c:af:1f:c2:94:1e: 67:ad:d3:1b:b1:ed:8c:78:c0:53:11:4c:e8:bf:a1: d4:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:E8:66:E1:57:31:CB:17:D3:C5:02:20:73:35:0F:6E:D8:AF:52:93 X509v3 Authority Key Identifier: keyid:D2:89:2B:AB:EE:5F:3B:29:8F:67:4D:48:B1:A6:A8:D6:38:54:6C:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:c2:25:2a:0e:9d:ef:6f:0c:3d:d6:c0:40:b4:18:a9:6b:9e: 2b:4f:6f:85:d0:76:9e:bc:2c:82:89:de:e3:3f:7c:02:d3:e2: 8c:e5:9a:70:8b:7f:15:d5:ca:33:75:64:70:c8:42:94:73:2a: 72:54:01:8a:d4:ea:3b:35:74:5c:19:93:da:cc:91:7b:84:f8: f9:39:2d:ce:0b:98:aa:0b:97:d0:a4:e5:d2:91:58:d5:7e:4f: 18:72:c0:20:7a:63:a7:8a:18:d1:03:7b:11:f3:13:f1:30:33: bc:48:c4:c0:58:0a:44:cc:a5:2b:4a:ef:c0:b7:a8:40:19:8b: 92:f9:b4:a0:e8:99:a9:02:eb:5d:bb:1b:06:f9:61:7a:41:c5: c2:d6:50:82:48:fe:74:5a:b1:48:ca:d7:d8:e4:6f:a5:63:54: 35:43:be:69:2d:bc:c0:69:49:25:f0:ee:56:ef:81:e9:23:dd: d9:e3:1d:8f:54:5c:16:2c:45:c5:0c:ae:2c:24:b8:04:f8:bd: f2:b7:5a:ff:86:3e:90:71:1f:c7:de:1f:ad:cb:e9:1f:f3:7e: 73:15:e5:70:3e:70:bf:ab:53:6a:12:49:27:6a:1a:52:f0:9e: 4b:22:5b:ed:64:97:5a:ea:06:be:63:6a:15:8e:cf:c0:8f:63: fd:2b:0d:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG9Ls1O2WT0kUIfC+otXvMvtEErQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI4OTJCQUJFRTVGM0IyOThGNjc0RDQ4QjFBNkE4RDYz ODU0NkNERjAeFw0yNTA2MDYwNzQ3MDVaFw0yNTA2MDkxMTA4MDVaMDMxMTAvBgNV BAMTKEUxRTg2NkUxNTczMUNCMTdEM0M1MDIyMDczMzUwRjZFRDhBRjUyOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNwTMYjVwNRJaaR2SmRwHx2g3N 4BeTKl9w2SBfuRnMvPFbkK+r+H965AV5ZVMbfZWS7y3nVnrynjVhg1qQeCfs4nAl +SvQ++ZVnCXBFkWLT1L59TqsQTNgRuQhLGbjLa6bR5d0/AJ+sLK07MmKm2QLCqj+ oEtKQ/Mn83UtNgxVnG4T6WIoD+gFDQfd8lY85iTsRh/xDotic2tU60tG375JIdHz SOflvKz6fzD3a4xewgqeeHba6ipu1HIjAe+TKd1a3Ul6SJL4VFZwFm+yrD9GbEm2 veoUXMtMk0J3pm0qVXvRAODQK+KElHyvH8KUHmet0xux7Yx4wFMRTOi/odQRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4ehm4VcxyxfTxQIgczUPbtivUpMwHwYDVR0j BBgwFoAU0okrq+5fOymPZ01Isaao1jhUbN8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmJjZjFlYy05MjJkLTRjZDctOGNhNi03MjcyNGY2NmU1ZmIvMC9EMjg5MkJBQkVF NUYzQjI5OEY2NzRENDhCMUE2QThENjM4NTQ2Q0RGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI4OTJCQUJFRTVGM0IyOThGNjc0RDQ4QjFBNkE4RDYzODU0 NkNERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjJiY2YxZWMtOTIyZC00Y2Q3LThj YTYtNzI3MjRmNjZlNWZiLzAvRDI4OTJCQUJFRTVGM0IyOThGNjc0RDQ4QjFBNkE4 RDYzODU0NkNERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGTCJSoOne9vDD3WwEC0GKlrnitPb4XQdp68 LIKJ3uM/fALT4ozlmnCLfxXVyjN1ZHDIQpRzKnJUAYrU6js1dFwZk9rMkXuE+Pk5 Lc4LmKoLl9Ck5dKRWNV+TxhywCB6Y6eKGNEDexHzE/EwM7xIxMBYCkTMpStK78C3 qEAZi5L5tKDomakC6127Gwb5YXpBxcLWUIJI/nRasUjK19jkb6VjVDVDvmktvMBp SSXw7lbvgekj3dnjHY9UXBYsRcUMriwkuAT4vfK3Wv+GPpBxH8feH63L6R/zfnMV 5XA+cL+rU2oSSSdqGlLwnksiW+1kl1rqBr5jahWOz8CPY/0rDTM= -----END CERTIFICATE-----Generated at Sun Jun 8 01:42:35 2025 by rpki-client