$ rpki-client -vvf repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft File: 9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft (raw, json) Hash identifier: RyhubZgbZN6jqG2PrBClUu7DfRG33/waEuIu2hUzBHM= Subject key identifier: C4:21:BF:1F:99:23:39:63:FF:04:D9:4D:CD:C2:24:32:4D:16:7C:C1 Authority key identifier: 95:64:13:4E:E3:E4:CE:65:FB:9D:07:7E:90:B1:BE:B5:25:D6:99:EB Certificate issuer: /CN=9564134EE3E4CE65FB9D077E90B1BEB525D699EB Certificate serial: 485651B82235B694CE619525CEAC1B4B6A1B47A8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft Manifest number: C3 Signing time: Fri 06 Jun 2025 00:02:16 +0000 Manifest this update: Thu 05 Jun 2025 23:57:16 +0000 Manifest next update: Mon 09 Jun 2025 06:15:16 +0000 Files and hashes: 1: 9564134EE3E4CE65FB9D077E90B1BEB525D699EB.crl (hash: Qpq9NVDHq1QtTdaKidS0wlb7eVkvATO7Vt6rAYKaAOU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.crl rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 06:15:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:56:51:b8:22:35:b6:94:ce:61:95:25:ce:ac:1b:4b:6a:1b:47:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9564134EE3E4CE65FB9D077E90B1BEB525D699EB Validity Not Before: Jun 5 23:57:16 2025 GMT Not After : Jun 9 06:15:16 2025 GMT Subject: CN=C421BF1F99233963FF04D94DCDC224324D167CC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:33:32:85:b7:cc:eb:b5:d6:e0:7c:e2:27:30: fa:3a:86:94:02:01:79:1e:be:b8:72:c6:6e:61:08: 03:8e:74:a2:4a:ea:55:d3:59:c1:41:7f:2d:42:ea: 51:b1:de:11:17:59:98:f7:98:a5:9a:4c:a7:fe:8d: 22:fc:d6:d3:bb:9d:35:59:41:f2:93:33:dc:0c:5b: 55:81:4f:86:bd:65:50:37:fc:6a:c8:dd:28:c3:01: 82:29:26:8e:70:91:f4:49:fe:4c:5f:bb:f7:b5:ac: 36:c1:d9:7c:1b:bb:95:21:01:67:89:05:c6:b6:c0: 60:ed:c6:27:ed:54:95:06:93:08:28:f3:7c:b6:c8: 61:f9:e8:74:ca:3a:15:6a:96:0c:8c:35:92:ef:dc: ce:16:40:46:e6:bf:55:39:a9:e4:34:d1:4a:9b:be: ad:dd:ae:0e:75:41:75:d5:85:05:9e:90:48:21:ec: 72:26:be:6b:55:79:0e:52:58:1e:5e:d3:57:1b:b4: 0c:82:84:0c:e0:e8:16:f7:dd:b0:a7:d9:cd:15:dc: 79:a8:28:9e:bd:0c:12:1c:4a:de:c9:a3:66:da:30: 92:51:d3:f5:91:4a:c6:b0:26:e8:b5:85:7a:23:c5: 2f:5b:15:f2:ce:09:20:47:8c:85:59:ea:36:99:9d: 89:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:21:BF:1F:99:23:39:63:FF:04:D9:4D:CD:C2:24:32:4D:16:7C:C1 X509v3 Authority Key Identifier: keyid:95:64:13:4E:E3:E4:CE:65:FB:9D:07:7E:90:B1:BE:B5:25:D6:99:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:3d:6c:97:0c:fc:ce:7a:8f:ef:48:09:9b:36:fe:c1:bd:14: b9:b2:86:0d:02:59:33:bd:90:f8:db:82:8f:fe:8e:61:14:ae: 55:62:b5:96:40:e6:8b:da:9f:79:4f:94:fd:46:93:28:25:a6: ed:3b:d0:ae:81:b2:47:8f:ac:6e:90:c4:19:65:b7:50:d3:fa: c2:83:87:7c:b6:f4:84:65:46:d1:50:d6:e7:1d:6a:a0:a0:b2: 25:cc:3f:01:cd:c9:99:bb:42:1d:8c:1a:33:6c:b3:5b:d0:bd: 07:ac:e3:8a:e0:9c:f6:c0:cb:99:12:0e:d0:5f:05:6e:8a:78: 32:6a:fe:ba:4b:9f:1b:a1:06:33:54:94:9b:80:b5:78:d3:b5: a1:3b:16:26:c1:49:2c:0b:9d:cb:26:60:7b:80:ed:14:5c:93: 74:ff:44:e1:9a:49:cf:17:c1:ae:66:e4:f1:58:b5:e2:79:7f: 34:b9:29:63:58:1d:88:61:75:06:6e:c2:9a:43:19:fa:65:81: 2a:01:d8:6b:8a:71:9d:94:b9:aa:35:34:c7:00:09:92:26:80: c5:eb:44:69:9a:11:04:a7:b9:f0:73:bd:86:00:3c:7d:1b:b2: 3e:69:bc:3a:22:fa:e9:9a:ff:75:e6:73:2e:21:69:d6:2c:a4: 86:ab:e2:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSFZRuCI1tpTOYZUlzqwbS2obR6gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU2NDEzNEVFM0U0Q0U2NUZCOUQwNzdFOTBCMUJFQjUy NUQ2OTlFQjAeFw0yNTA2MDUyMzU3MTZaFw0yNTA2MDkwNjE1MTZaMDMxMTAvBgNV BAMTKEM0MjFCRjFGOTkyMzM5NjNGRjA0RDk0RENEQzIyNDMyNEQxNjdDQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFMzKFt8zrtdbgfOInMPo6hpQC AXkevrhyxm5hCAOOdKJK6lXTWcFBfy1C6lGx3hEXWZj3mKWaTKf+jSL81tO7nTVZ QfKTM9wMW1WBT4a9ZVA3/GrI3SjDAYIpJo5wkfRJ/kxfu/e1rDbB2Xwbu5UhAWeJ Bca2wGDtxiftVJUGkwgo83y2yGH56HTKOhVqlgyMNZLv3M4WQEbmv1U5qeQ00Uqb vq3drg51QXXVhQWekEgh7HImvmtVeQ5SWB5e01cbtAyChAzg6Bb33bCn2c0V3Hmo KJ69DBIcSt7Jo2baMJJR0/WRSsawJui1hXojxS9bFfLOCSBHjIVZ6jaZnYmVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxCG/H5kjOWP/BNlNzcIkMk0WfMEwHwYDVR0j BBgwFoAUlWQTTuPkzmX7nQd+kLG+tSXWmeswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDg4NjQ4Zi01ZTBiLTQzMzgtOTExYy05ZDY0NjdiMDBhM2UvMC85NTY0MTM0RUUz RTRDRTY1RkI5RDA3N0U5MEIxQkVCNTI1RDY5OUVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTU2NDEzNEVFM0U0Q0U2NUZCOUQwNzdFOTBCMUJFQjUyNUQ2 OTlFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODA4ODY0OGYtNWUwYi00MzM4LTkx MWMtOWQ2NDY3YjAwYTNlLzAvOTU2NDEzNEVFM0U0Q0U2NUZCOUQwNzdFOTBCMUJF QjUyNUQ2OTlFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJY9bJcM/M56j+9ICZs2/sG9FLmyhg0CWTO9 kPjbgo/+jmEUrlVitZZA5ovan3lPlP1Gkyglpu070K6BskePrG6QxBllt1DT+sKD h3y29IRlRtFQ1ucdaqCgsiXMPwHNyZm7Qh2MGjNss1vQvQes44rgnPbAy5kSDtBf BW6KeDJq/rpLnxuhBjNUlJuAtXjTtaE7FibBSSwLncsmYHuA7RRck3T/ROGaSc8X wa5m5PFYteJ5fzS5KWNYHYhhdQZuwppDGfplgSoB2GuKcZ2Uuao1NMcACZImgMXr RGmaEQSnufBzvYYAPH0bsj5pvDoi+uma/3Xmcy4hadYspIar4q4= -----END CERTIFICATE-----Generated at Sun Jun 8 07:34:25 2025 by rpki-client