$ rpki-client -vvf repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.mft File: D4D0F3E6E684847D602FC73758893CE2BB05D399.mft (raw, json) Hash identifier: f+UY6/DB8GbLpB4aPD2gFkebhrcfre9mhbJV2tr8shM= Subject key identifier: 59:9D:2F:3B:B4:87:C9:4D:5F:6F:DB:64:FA:76:27:00:21:80:1F:60 Authority key identifier: D4:D0:F3:E6:E6:84:84:7D:60:2F:C7:37:58:89:3C:E2:BB:05:D3:99 Certificate issuer: /CN=D4D0F3E6E684847D602FC73758893CE2BB05D399 Certificate serial: 5D53063D55264F591FB996C3EA8AD85723928A7F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4D0F3E6E684847D602FC73758893CE2BB05D399.cer Subject info access: rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.mft Manifest number: 017F Signing time: Wed 04 Jun 2025 13:00:43 +0000 Manifest this update: Wed 04 Jun 2025 12:55:43 +0000 Manifest next update: Sat 07 Jun 2025 17:38:43 +0000 Files and hashes: 1: D4D0F3E6E684847D602FC73758893CE2BB05D399.crl (hash: D3J+qrnc0Ipz9MihVZlwXRWaf6FZz9TXlmI6T70Te2o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.crl rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4D0F3E6E684847D602FC73758893CE2BB05D399.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 17:38:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:53:06:3d:55:26:4f:59:1f:b9:96:c3:ea:8a:d8:57:23:92:8a:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4D0F3E6E684847D602FC73758893CE2BB05D399 Validity Not Before: Jun 4 12:55:43 2025 GMT Not After : Jun 7 17:38:43 2025 GMT Subject: CN=599D2F3BB487C94D5F6FDB64FA76270021801F60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:eb:10:01:d5:2c:e3:3b:74:2c:4f:2d:2f:b2: 9f:e7:ec:28:42:aa:d1:b8:9b:33:e8:1d:42:9d:77: 78:df:74:b3:b7:32:d4:7f:23:c1:1d:9f:73:0a:e7: 97:fa:8f:da:d2:64:79:68:80:70:25:d9:42:9f:05: 61:10:f5:95:5d:4c:73:0a:1e:aa:c6:77:16:0b:96: 44:39:4d:bf:7e:21:f2:42:51:b4:8e:16:a6:fd:f8: 87:6a:d0:9e:7b:9e:a9:0e:09:44:e7:2d:52:f8:d4: d3:2a:4c:2b:9d:d0:47:31:fe:74:5d:ad:af:f0:af: bb:df:dc:bb:05:2d:bb:cf:93:f6:11:7b:cb:58:25: c6:49:e8:c3:0f:c4:60:22:ab:f9:eb:61:c1:4d:02: 53:e6:16:4c:a3:8e:0c:22:7c:0c:99:b8:a0:0e:8e: 8d:59:a8:46:38:83:a3:62:4a:74:e3:73:59:f1:b9: 18:df:47:af:90:01:9a:b8:ba:c6:8d:fa:f5:c2:26: 42:59:5e:9e:14:c1:12:99:08:a2:14:23:85:1e:b7: 65:f5:05:db:d2:02:d0:ab:2f:29:a4:ce:6c:3e:79: 42:68:5a:95:54:5d:97:66:8e:bd:72:7f:37:cf:b2: fa:ca:e4:21:4d:51:3b:42:a3:ab:64:92:95:b7:cc: 62:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:9D:2F:3B:B4:87:C9:4D:5F:6F:DB:64:FA:76:27:00:21:80:1F:60 X509v3 Authority Key Identifier: keyid:D4:D0:F3:E6:E6:84:84:7D:60:2F:C7:37:58:89:3C:E2:BB:05:D3:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4D0F3E6E684847D602FC73758893CE2BB05D399.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:c1:6a:0a:19:6b:76:f8:7f:f1:0c:82:f7:5e:54:b1:8b:e5: 0c:bf:f5:dc:c6:9f:30:4b:4f:ba:fa:7b:05:3e:24:df:c6:45: 33:6d:ee:38:23:04:ed:64:ea:44:4a:67:73:37:7e:99:8d:91: af:76:d2:cb:78:8e:0e:a2:e9:a6:82:47:a9:65:28:f1:f6:7d: 04:cf:a5:fb:5c:ba:75:57:fd:64:85:25:1d:7a:a2:e0:ae:77: 2d:27:93:ce:71:08:24:73:d9:b0:e4:66:aa:7f:d7:ef:37:cc: 7c:6d:56:69:7e:22:38:35:ef:b1:4f:72:82:d6:33:99:a8:d7: 67:91:59:60:4a:92:db:24:54:71:b4:a1:2c:f7:d8:27:c2:a7: 97:c1:f1:c6:b0:ce:21:0a:35:aa:73:0c:1c:38:4b:12:2c:83: b1:1d:0e:48:a9:d8:d8:5e:47:aa:46:e6:6f:0c:18:7f:0c:53: 81:81:26:a3:44:d0:df:4a:6e:ce:ff:1c:80:96:16:7b:3c:28: 9c:05:2d:d1:e5:13:6c:37:6a:ba:71:b5:1b:2e:34:10:bf:39: 4a:7c:7e:f1:12:ab:77:fc:33:04:b1:60:2d:7f:f5:18:93:72: 5f:6d:90:df:bc:74:11:7d:e1:87:4e:84:87:80:e2:be:85:f5: eb:06:53:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXVMGPVUmT1kfuZbD6orYVyOSin8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDREMEYzRTZFNjg0ODQ3RDYwMkZDNzM3NTg4OTNDRTJC QjA1RDM5OTAeFw0yNTA2MDQxMjU1NDNaFw0yNTA2MDcxNzM4NDNaMDMxMTAvBgNV BAMTKDU5OUQyRjNCQjQ4N0M5NEQ1RjZGREI2NEZBNzYyNzAwMjE4MDFGNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa6xAB1SzjO3QsTy0vsp/n7ChC qtG4mzPoHUKdd3jfdLO3MtR/I8Edn3MK55f6j9rSZHlogHAl2UKfBWEQ9ZVdTHMK HqrGdxYLlkQ5Tb9+IfJCUbSOFqb9+Idq0J57nqkOCUTnLVL41NMqTCud0Ecx/nRd ra/wr7vf3LsFLbvPk/YRe8tYJcZJ6MMPxGAiq/nrYcFNAlPmFkyjjgwifAyZuKAO jo1ZqEY4g6NiSnTjc1nxuRjfR6+QAZq4usaN+vXCJkJZXp4UwRKZCKIUI4Uet2X1 BdvSAtCrLymkzmw+eUJoWpVUXZdmjr1yfzfPsvrK5CFNUTtCo6tkkpW3zGJVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWZ0vO7SHyU1fb9tk+nYnACGAH2AwHwYDVR0j BBgwFoAU1NDz5uaEhH1gL8c3WIk84rsF05kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MjM1MzBlYy05OTBlLTQxZDctOWQ3OC1iNzdlMjBkNzZiY2QvMC9ENEQwRjNFNkU2 ODQ4NDdENjAyRkM3Mzc1ODg5M0NFMkJCMDVEMzk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDREMEYzRTZFNjg0ODQ3RDYwMkZDNzM3NTg4OTNDRTJCQjA1 RDM5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODIzNTMwZWMtOTkwZS00MWQ3LTlk NzgtYjc3ZTIwZDc2YmNkLzAvRDREMEYzRTZFNjg0ODQ3RDYwMkZDNzM3NTg4OTND RTJCQjA1RDM5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHvBagoZa3b4f/EMgvdeVLGL5Qy/9dzGnzBL T7r6ewU+JN/GRTNt7jgjBO1k6kRKZ3M3fpmNka920st4jg6i6aaCR6llKPH2fQTP pftcunVX/WSFJR16ouCudy0nk85xCCRz2bDkZqp/1+83zHxtVml+Ijg177FPcoLW M5mo12eRWWBKktskVHG0oSz32CfCp5fB8cawziEKNapzDBw4SxIsg7EdDkip2Nhe R6pG5m8MGH8MU4GBJqNE0N9Kbs7/HICWFns8KJwFLdHlE2w3arpxtRsuNBC/OUp8 fvESq3f8MwSxYC1/9RiTcl9tkN+8dBF94YdOhIeA4r6F9esGU6c= -----END CERTIFICATE-----Generated at Thu Jun 5 18:10:59 2025 by rpki-client