$ rpki-client -vvf repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.mft File: D018BF43793F56145B87233DD668DE3BDEEFFE13.mft (raw, json) Hash identifier: o8RRHTZVY1wj19jj16ULDyT+ArMcPsz5we2FdKadHkQ= Subject key identifier: 72:A7:E7:A4:ED:D2:85:C3:1F:96:6C:C4:CB:59:9B:12:48:42:38:6D Authority key identifier: D0:18:BF:43:79:3F:56:14:5B:87:23:3D:D6:68:DE:3B:DE:EF:FE:13 Certificate issuer: /CN=D018BF43793F56145B87233DD668DE3BDEEFFE13 Certificate serial: 510E1B98CE2A30E4FFAB903101EA659C3484C58E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D018BF43793F56145B87233DD668DE3BDEEFFE13.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.mft Manifest number: 2F Signing time: Thu 05 Jun 2025 04:21:13 +0000 Manifest this update: Thu 05 Jun 2025 04:16:13 +0000 Manifest next update: Sun 08 Jun 2025 07:35:13 +0000 Files and hashes: 1: D018BF43793F56145B87233DD668DE3BDEEFFE13.crl (hash: wvV72PxeJP99OwO0i/VAJHlw97R5FRmP/FXWSyjv6P4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.crl rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D018BF43793F56145B87233DD668DE3BDEEFFE13.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 07:35:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:0e:1b:98:ce:2a:30:e4:ff:ab:90:31:01:ea:65:9c:34:84:c5:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D018BF43793F56145B87233DD668DE3BDEEFFE13 Validity Not Before: Jun 5 04:16:13 2025 GMT Not After : Jun 8 07:35:13 2025 GMT Subject: CN=72A7E7A4EDD285C31F966CC4CB599B124842386D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:44:22:92:4a:62:e0:20:27:60:c3:26:a4:f0: 1a:73:c1:58:2d:7a:1a:67:d2:e2:a9:e1:f4:92:7f: fc:23:03:7f:04:d0:1b:ee:f0:4d:47:50:12:04:1a: ea:b6:75:ed:fa:1d:72:a9:e0:9e:75:51:b9:2f:e5: a0:d5:ec:47:b5:ce:05:33:16:98:2d:34:59:04:e2: ec:39:3e:f6:fa:99:8f:72:13:71:4b:d6:70:83:4f: 11:5f:01:c1:13:a4:a8:a3:fc:dd:3e:06:9f:41:49: 45:ce:e5:a2:5c:1b:3f:fd:31:07:15:75:7c:f2:0f: b7:3f:7e:0d:f5:1b:35:1c:00:2d:33:98:e3:09:5d: c9:b3:74:31:ed:95:ad:fd:bb:ec:bc:b0:2d:cd:ad: 16:37:a2:2a:02:5d:69:29:b0:58:b8:73:ba:bf:85: 6c:07:61:7a:76:51:a3:a8:5e:44:c1:db:62:b8:41: 19:5d:1c:72:1c:1d:94:c0:a5:cf:63:07:00:81:f6: 0c:20:aa:d2:a1:c0:d5:f3:71:ec:24:32:77:b7:39: ae:7b:9f:1b:b8:e7:06:da:8f:48:10:82:fd:26:b4: d2:1c:2a:95:dd:67:bc:03:18:ad:d1:f3:fb:36:20: e2:c8:32:f8:7e:a8:4a:f8:b9:4f:09:d0:78:a5:97: 97:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:A7:E7:A4:ED:D2:85:C3:1F:96:6C:C4:CB:59:9B:12:48:42:38:6D X509v3 Authority Key Identifier: keyid:D0:18:BF:43:79:3F:56:14:5B:87:23:3D:D6:68:DE:3B:DE:EF:FE:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D018BF43793F56145B87233DD668DE3BDEEFFE13.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:74:48:11:57:94:bd:4b:52:42:68:6a:53:2b:f1:66:47:6e: 3b:6b:03:b5:7e:a1:e2:ef:15:d7:67:a8:c6:26:1b:26:ea:b2: 72:17:45:14:03:72:75:8a:3e:57:5b:1d:f6:fd:e2:b0:a0:35: 88:9a:58:87:7e:bf:b4:cc:4e:8c:db:8a:d1:9b:ad:69:96:8e: d8:e4:3e:df:71:c2:d6:c8:cd:e6:53:cc:98:10:60:f1:0f:a2: 75:d7:67:6d:f2:73:a5:cc:ce:d0:ba:b5:76:8d:0b:f4:1a:04: cf:51:9f:07:6c:89:91:6c:20:e6:33:dd:c7:29:9c:35:83:41: 38:64:34:7b:c4:f1:43:c9:ce:37:0f:2b:75:50:71:00:b8:43: 2b:d0:58:a6:05:35:0f:da:fb:05:22:af:9d:25:0a:30:0f:7d: 53:c1:b2:c0:c0:ec:7f:9b:4c:2c:68:37:ff:d9:14:c9:17:a1: ef:64:f3:97:1a:54:f6:d3:dd:5c:78:0f:ba:4c:af:9c:66:ac: 1b:73:ac:1e:d0:6c:f6:a2:36:51:af:78:c0:b8:5d:22:dc:c9: 8e:30:15:cc:e2:a8:b7:02:61:2b:b2:03:d8:e3:65:f5:bd:29: e3:68:89:28:b9:ac:9a:8b:e0:b6:41:fb:c3:2e:cc:a2:27:e3: 47:d6:38:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUQ4bmM4qMOT/q5AxAeplnDSExY4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDAxOEJGNDM3OTNGNTYxNDVCODcyMzNERDY2OERFM0JE RUVGRkUxMzAeFw0yNTA2MDUwNDE2MTNaFw0yNTA2MDgwNzM1MTNaMDMxMTAvBgNV BAMTKDcyQTdFN0E0RUREMjg1QzMxRjk2NkNDNENCNTk5QjEyNDg0MjM4NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaRCKSSmLgICdgwyak8BpzwVgt ehpn0uKp4fSSf/wjA38E0Bvu8E1HUBIEGuq2de36HXKp4J51Ubkv5aDV7Ee1zgUz FpgtNFkE4uw5Pvb6mY9yE3FL1nCDTxFfAcETpKij/N0+Bp9BSUXO5aJcGz/9MQcV dXzyD7c/fg31GzUcAC0zmOMJXcmzdDHtla39u+y8sC3NrRY3oioCXWkpsFi4c7q/ hWwHYXp2UaOoXkTB22K4QRldHHIcHZTApc9jBwCB9gwgqtKhwNXzcewkMne3Oa57 nxu45wbaj0gQgv0mtNIcKpXdZ7wDGK3R8/s2IOLIMvh+qEr4uU8J0Hill5dVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcqfnpO3ShcMflmzEy1mbEkhCOG0wHwYDVR0j BBgwFoAU0Bi/Q3k/VhRbhyM91mjeO97v/hMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWFkMzE0YS03NjU3LTQ5MDEtYjdkZC0zYjlhOWJmYzZlOWMvMC9EMDE4QkY0Mzc5 M0Y1NjE0NUI4NzIzM0RENjY4REUzQkRFRUZGRTEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDAxOEJGNDM3OTNGNTYxNDVCODcyMzNERDY2OERFM0JERUVG RkUxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODlhZDMxNGEtNzY1Ny00OTAxLWI3 ZGQtM2I5YTliZmM2ZTljLzAvRDAxOEJGNDM3OTNGNTYxNDVCODcyMzNERDY2OERF M0JERUVGRkUxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMN0SBFXlL1LUkJoalMr8WZHbjtrA7V+oeLv FddnqMYmGybqsnIXRRQDcnWKPldbHfb94rCgNYiaWId+v7TMTozbitGbrWmWjtjk Pt9xwtbIzeZTzJgQYPEPonXXZ23yc6XMztC6tXaNC/QaBM9RnwdsiZFsIOYz3ccp nDWDQThkNHvE8UPJzjcPK3VQcQC4QyvQWKYFNQ/a+wUir50lCjAPfVPBssDA7H+b TCxoN//ZFMkXoe9k85caVPbT3Vx4D7pMr5xmrBtzrB7QbPaiNlGveMC4XSLcyY4w FcziqLcCYSuyA9jjZfW9KeNoiSi5rJqL4LZB+8MuzKIn40fWON0= -----END CERTIFICATE-----Generated at Thu Jun 5 18:36:54 2025 by rpki-client