$ rpki-client -vvf repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.mft File: A349D07CAB13BF067B13D95E99981C2BA84B9A6B.mft (raw, json) Hash identifier: GToKXvp2/VRzpHMVgGqYnkHjF+qdptwjtkg2aQl2VsM= Subject key identifier: D9:72:C8:66:35:87:5D:11:BA:88:AB:86:A3:FA:33:74:CF:F5:91:9D Authority key identifier: A3:49:D0:7C:AB:13:BF:06:7B:13:D9:5E:99:98:1C:2B:A8:4B:9A:6B Certificate issuer: /CN=A349D07CAB13BF067B13D95E99981C2BA84B9A6B Certificate serial: 3698D19A02F874A098054C2C598CF02B35A7F739 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.mft Manifest number: 048B Signing time: Wed 04 Jun 2025 15:10:36 +0000 Manifest this update: Wed 04 Jun 2025 15:05:36 +0000 Manifest next update: Sat 07 Jun 2025 21:12:36 +0000 Files and hashes: 1: A349D07CAB13BF067B13D95E99981C2BA84B9A6B.crl (hash: /55q/P6sJpsejyrKW9aW1MXl+DSKb3v9y80nd9z+Nmk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.crl rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 21:12:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:98:d1:9a:02:f8:74:a0:98:05:4c:2c:59:8c:f0:2b:35:a7:f7:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A349D07CAB13BF067B13D95E99981C2BA84B9A6B Validity Not Before: Jun 4 15:05:36 2025 GMT Not After : Jun 7 21:12:36 2025 GMT Subject: CN=D972C86635875D11BA88AB86A3FA3374CFF5919D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:fd:48:98:b2:a5:51:e4:1f:94:3f:87:66:77: ed:61:ac:d3:3d:24:8f:46:48:b0:7a:57:ea:85:b3: 09:41:66:5a:93:59:e7:e5:e0:6e:75:4b:fd:9e:18: 58:d1:81:3d:a8:f4:94:f1:52:b2:ec:d0:80:1b:51: fa:00:3a:2f:96:47:bc:1c:e0:e9:cc:dd:a3:85:3e: a2:f9:0e:46:c3:8c:6f:4e:07:a4:ef:12:98:6c:37: ea:ba:d2:2d:aa:53:71:b2:f5:53:4f:84:7d:f4:53: 50:cc:29:66:16:61:c5:50:90:19:46:49:37:3f:ce: 90:51:18:5c:8d:82:c1:ed:7f:82:5e:9a:59:15:88: 5e:82:1f:be:b0:0a:70:8a:e9:df:f0:27:c8:6f:89: d4:34:d6:3e:46:cb:6f:23:85:99:4c:eb:1c:ad:4a: c6:f0:3c:5f:61:c0:a1:54:01:7a:ae:82:db:2a:da: 4c:a7:b4:eb:d8:d0:b3:63:db:3b:ad:9d:9f:9b:54: 8c:02:57:3e:75:45:28:cc:7a:3e:3f:98:05:e7:be: 90:ab:74:21:ff:2d:5b:4e:48:62:0d:06:8d:d0:5d: 5a:06:d7:67:40:df:f6:59:1e:94:76:85:86:9c:c2: 04:ac:c8:f7:d1:40:ec:ea:51:1c:f3:39:0c:8f:b5: a8:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:72:C8:66:35:87:5D:11:BA:88:AB:86:A3:FA:33:74:CF:F5:91:9D X509v3 Authority Key Identifier: keyid:A3:49:D0:7C:AB:13:BF:06:7B:13:D9:5E:99:98:1C:2B:A8:4B:9A:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:d1:77:71:ae:e3:68:32:f1:ae:ec:b5:d9:2a:8f:b9:8d:3d: eb:d7:6a:0b:92:4c:e7:2d:1f:81:0b:33:66:fd:6a:47:64:5b: 7d:3a:80:80:16:23:2b:e6:36:d6:f7:93:31:b3:e7:30:67:44: 96:f4:05:e0:92:bf:f3:04:fb:eb:07:07:d1:5b:f9:4e:1f:9f: ec:81:4c:f2:ea:a6:2f:91:5c:40:06:0e:13:3c:d4:80:75:9c: 4f:33:5a:e0:0a:22:bb:4e:72:67:80:24:b2:b9:9a:68:68:25: b3:0e:41:f8:fc:3c:a2:b5:3b:a9:e8:fc:ef:f9:20:01:70:40: 75:16:00:70:e2:ef:a7:cb:87:bc:71:50:c8:b4:bd:ce:a9:57: 7d:4b:51:f9:e1:71:30:69:79:40:3b:bf:fa:4b:79:d7:58:36: 79:ac:cb:a2:bf:8c:72:b7:a3:42:0c:14:95:c4:81:66:24:4c: 04:6f:06:36:18:d9:05:7b:d9:72:5b:6c:09:58:a7:91:90:dd: f0:de:e6:18:fd:1b:ed:e3:ab:25:2e:cc:ea:88:19:d0:4a:35: 1e:3c:44:a3:df:9b:bc:1c:24:fb:9c:25:5b:54:4b:ba:54:32: 86:2a:c4:c7:a8:f5:85:39:3d:66:60:0a:c8:5c:cf:7e:6c:2d: d0:4e:bc:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNpjRmgL4dKCYBUwsWYzwKzWn9zkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM0OUQwN0NBQjEzQkYwNjdCMTNEOTVFOTk5ODFDMkJB ODRCOUE2QjAeFw0yNTA2MDQxNTA1MzZaFw0yNTA2MDcyMTEyMzZaMDMxMTAvBgNV BAMTKEQ5NzJDODY2MzU4NzVEMTFCQTg4QUI4NkEzRkEzMzc0Q0ZGNTkxOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP/UiYsqVR5B+UP4dmd+1hrNM9 JI9GSLB6V+qFswlBZlqTWefl4G51S/2eGFjRgT2o9JTxUrLs0IAbUfoAOi+WR7wc 4OnM3aOFPqL5DkbDjG9OB6TvEphsN+q60i2qU3Gy9VNPhH30U1DMKWYWYcVQkBlG STc/zpBRGFyNgsHtf4JemlkViF6CH76wCnCK6d/wJ8hvidQ01j5Gy28jhZlM6xyt SsbwPF9hwKFUAXqugtsq2kyntOvY0LNj2zutnZ+bVIwCVz51RSjMej4/mAXnvpCr dCH/LVtOSGINBo3QXVoG12dA3/ZZHpR2hYacwgSsyPfRQOzqURzzOQyPtaj9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2XLIZjWHXRG6iKuGo/ozdM/1kZ0wHwYDVR0j BBgwFoAUo0nQfKsTvwZ7E9lemZgcK6hLmmswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YWRmY2I0NC1hZTdhLTQ0MjMtYWU3ZC0wODY0OGJmMWRlYjEvMC9BMzQ5RDA3Q0FC MTNCRjA2N0IxM0Q5NUU5OTk4MUMyQkE4NEI5QTZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTM0OUQwN0NBQjEzQkYwNjdCMTNEOTVFOTk5ODFDMkJBODRC OUE2Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmFkZmNiNDQtYWU3YS00NDIzLWFl N2QtMDg2NDhiZjFkZWIxLzAvQTM0OUQwN0NBQjEzQkYwNjdCMTNEOTVFOTk5ODFD MkJBODRCOUE2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHXRd3Gu42gy8a7stdkqj7mNPevXaguSTOct H4ELM2b9akdkW306gIAWIyvmNtb3kzGz5zBnRJb0BeCSv/ME++sHB9Fb+U4fn+yB TPLqpi+RXEAGDhM81IB1nE8zWuAKIrtOcmeAJLK5mmhoJbMOQfj8PKK1O6no/O/5 IAFwQHUWAHDi76fLh7xxUMi0vc6pV31LUfnhcTBpeUA7v/pLeddYNnmsy6K/jHK3 o0IMFJXEgWYkTARvBjYY2QV72XJbbAlYp5GQ3fDe5hj9G+3jqyUuzOqIGdBKNR48 RKPfm7wcJPucJVtUS7pUMoYqxMeo9YU5PWZgCshcz35sLdBOvKQ= -----END CERTIFICATE-----Generated at Thu Jun 5 18:42:16 2025 by rpki-client