$ rpki-client -vvf repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.mft File: D9622F68C539A365B6FA78463F3CD3D3EC231214.mft (raw, json) Hash identifier: LO0ZgJ/xxJQ0nbe9+7j18aZrQHmzDXsQm/28X5XLuuM= Subject key identifier: AE:EF:74:38:B9:A8:0A:0D:D2:F3:D5:8C:82:C6:D9:B4:48:42:64:7E Authority key identifier: D9:62:2F:68:C5:39:A3:65:B6:FA:78:46:3F:3C:D3:D3:EC:23:12:14 Certificate issuer: /CN=D9622F68C539A365B6FA78463F3CD3D3EC231214 Certificate serial: 1369930CA419E8C225408A6DBCE38B9ED311835C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9622F68C539A365B6FA78463F3CD3D3EC231214.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.mft Manifest number: 8E Signing time: Tue 03 Jun 2025 11:25:07 +0000 Manifest this update: Tue 03 Jun 2025 11:20:07 +0000 Manifest next update: Fri 06 Jun 2025 14:49:07 +0000 Files and hashes: 1: D9622F68C539A365B6FA78463F3CD3D3EC231214.crl (hash: qprK1EsTKEbLtMUHUlI1GB+/mhhoC8XOdzdbwksFMcY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.crl rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9622F68C539A365B6FA78463F3CD3D3EC231214.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 14:49:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:69:93:0c:a4:19:e8:c2:25:40:8a:6d:bc:e3:8b:9e:d3:11:83:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9622F68C539A365B6FA78463F3CD3D3EC231214 Validity Not Before: Jun 3 11:20:07 2025 GMT Not After : Jun 6 14:49:07 2025 GMT Subject: CN=AEEF7438B9A80A0DD2F3D58C82C6D9B44842647E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a5:48:fb:f8:b5:6c:0c:39:1c:7b:75:af:39: 8d:62:8d:8a:64:ae:a4:29:2c:99:14:f6:d2:7f:66: d5:81:59:9c:fa:2e:f7:9c:67:c0:8d:a5:98:e1:3c: d7:99:c2:24:f4:8b:17:72:ab:0d:08:c4:31:61:51: 90:0e:eb:18:97:62:6f:b3:7c:d4:83:8a:b9:2f:3b: ca:10:85:28:12:15:17:e0:03:f7:5d:6a:78:f0:63: e8:73:13:b4:8f:08:01:a2:63:0f:1a:95:ff:4c:4d: a6:f3:7d:f8:63:65:c9:2c:9b:7a:29:82:d1:a2:8f: 4f:d8:69:7c:ac:3d:c1:37:e5:81:81:ea:c0:72:11: a9:82:ac:60:3c:bc:fc:9a:01:78:71:b1:2b:a9:a0: 20:7b:4c:b7:46:cb:22:2d:9d:83:9c:1d:c8:d6:23: 6d:37:25:25:04:d7:98:d3:81:68:38:14:76:69:91: c7:a8:c2:fd:3f:be:f6:ac:ab:9c:fc:d4:e3:a0:dc: c3:16:ec:32:39:cb:d5:6f:4c:fb:30:19:2c:4e:32: 51:63:c5:dd:c3:c9:79:3b:92:e7:99:cd:e7:fd:3f: 29:b6:38:5a:84:ec:44:0e:0d:2b:d1:7c:54:24:4c: b8:5d:f9:55:4f:b5:b5:68:05:39:d0:81:7a:e3:d7: 30:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:EF:74:38:B9:A8:0A:0D:D2:F3:D5:8C:82:C6:D9:B4:48:42:64:7E X509v3 Authority Key Identifier: keyid:D9:62:2F:68:C5:39:A3:65:B6:FA:78:46:3F:3C:D3:D3:EC:23:12:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9622F68C539A365B6FA78463F3CD3D3EC231214.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:01:dd:a0:c4:0b:2c:2c:b4:68:20:95:b2:b2:69:8a:1f:b4: fc:2d:d1:ee:84:61:08:fd:fc:77:06:81:8e:37:bc:a1:0d:c5: 4c:93:4d:71:1f:2d:71:37:65:a9:02:04:1b:08:6f:67:43:db: f1:62:49:bf:78:e6:f5:86:18:80:1f:a4:4d:4b:12:48:1e:ac: ea:d6:14:08:27:27:48:dc:82:7e:1b:d8:2f:f6:5f:f7:76:18: f4:c9:60:56:e5:77:1c:9a:af:81:e5:6a:16:20:2c:85:b0:39: fa:a3:55:ad:a8:e3:63:ba:07:a3:7f:8c:96:59:95:04:6c:27: d9:1d:8a:11:4e:ec:9c:be:1c:27:c6:fe:eb:72:e5:c6:21:dc: 6f:a2:73:21:2e:ba:9f:ba:93:09:64:ab:90:45:0c:38:f7:ce: c0:9a:41:b3:a0:3e:bb:4e:d8:0d:b6:04:6d:eb:74:42:02:de: 9c:35:69:06:7a:65:95:2e:d7:73:bf:b4:c7:4a:a0:5b:5f:b1: ab:15:83:f1:3e:32:a0:d3:b1:a8:86:b1:98:97:da:5a:4f:7b: 7f:e6:24:cf:29:3d:d9:a2:22:f1:1c:01:d2:53:54:61:85:8f: d4:83:c8:aa:56:ae:7c:da:75:8c:22:34:75:2c:50:94:b8:ec: 0a:cd:ee:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE2mTDKQZ6MIlQIptvOOLntMRg1wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDk2MjJGNjhDNTM5QTM2NUI2RkE3ODQ2M0YzQ0QzRDNF QzIzMTIxNDAeFw0yNTA2MDMxMTIwMDdaFw0yNTA2MDYxNDQ5MDdaMDMxMTAvBgNV BAMTKEFFRUY3NDM4QjlBODBBMEREMkYzRDU4QzgyQzZEOUI0NDg0MjY0N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7pUj7+LVsDDkce3WvOY1ijYpk rqQpLJkU9tJ/ZtWBWZz6LvecZ8CNpZjhPNeZwiT0ixdyqw0IxDFhUZAO6xiXYm+z fNSDirkvO8oQhSgSFRfgA/ddanjwY+hzE7SPCAGiYw8alf9MTabzffhjZcksm3op gtGij0/YaXysPcE35YGB6sByEamCrGA8vPyaAXhxsSupoCB7TLdGyyItnYOcHcjW I203JSUE15jTgWg4FHZpkceowv0/vvasq5z81OOg3MMW7DI5y9VvTPswGSxOMlFj xd3DyXk7kueZzef9Pym2OFqE7EQODSvRfFQkTLhd+VVPtbVoBTnQgXrj1zBtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUru90OLmoCg3S89WMgsbZtEhCZH4wHwYDVR0j BBgwFoAU2WIvaMU5o2W2+nhGPzzT0+wjEhQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YmE2ZDA3Mi04MzYxLTRkZGYtODAwYS0xY2UxNWM0NzU5MmMvMC9EOTYyMkY2OEM1 MzlBMzY1QjZGQTc4NDYzRjNDRDNEM0VDMjMxMjE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDk2MjJGNjhDNTM5QTM2NUI2RkE3ODQ2M0YzQ0QzRDNFQzIz MTIxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGJhNmQwNzItODM2MS00ZGRmLTgw MGEtMWNlMTVjNDc1OTJjLzAvRDk2MjJGNjhDNTM5QTM2NUI2RkE3ODQ2M0YzQ0Qz RDNFQzIzMTIxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHcB3aDECywstGgglbKyaYoftPwt0e6EYQj9 /HcGgY43vKENxUyTTXEfLXE3ZakCBBsIb2dD2/FiSb945vWGGIAfpE1LEkgerOrW FAgnJ0jcgn4b2C/2X/d2GPTJYFbldxyar4HlahYgLIWwOfqjVa2o42O6B6N/jJZZ lQRsJ9kdihFO7Jy+HCfG/uty5cYh3G+icyEuup+6kwlkq5BFDDj3zsCaQbOgPrtO 2A22BG3rdEIC3pw1aQZ6ZZUu13O/tMdKoFtfsasVg/E+MqDTsaiGsZiX2lpPe3/m JM8pPdmiIvEcAdJTVGGFj9SDyKpWrnzadYwiNHUsUJS47ArN7uU= -----END CERTIFICATE-----Generated at Tue Jun 3 23:31:56 2025 by rpki-client