$ rpki-client -vvf repo-rpki.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.mft File: 2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.mft (raw, json) Hash identifier: F7QP+nJuijyaorYaIU5Bg3is7w86nYcWxr4Nwz4kQL0= Subject key identifier: 54:B1:11:B3:72:7A:C4:6C:1F:9D:B5:D2:26:DD:16:5F:B5:40:88:64 Authority key identifier: 26:64:CB:E1:0F:2B:9F:F1:BE:C5:0A:6A:85:DC:7A:A5:2B:9F:17:FA Certificate issuer: /CN=2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA Certificate serial: 024EDFD3BCC86C89D4457E557BFB90A1FE74BF4C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.mft Manifest number: 038B Signing time: Wed 04 Jun 2025 10:22:08 +0000 Manifest this update: Wed 04 Jun 2025 10:17:08 +0000 Manifest next update: Sat 07 Jun 2025 21:35:08 +0000 Files and hashes: 1: 2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.crl (hash: H1KV5anxJCeuvPTn18o0iYjleBYSLJUAqCO1/j/Y/oY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.crl rsync://repo-rpki.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 21:35:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:4e:df:d3:bc:c8:6c:89:d4:45:7e:55:7b:fb:90:a1:fe:74:bf:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA Validity Not Before: Jun 4 10:17:08 2025 GMT Not After : Jun 7 21:35:08 2025 GMT Subject: CN=54B111B3727AC46C1F9DB5D226DD165FB5408864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6d:b7:98:71:f7:b8:eb:07:8b:2e:72:d4:95: 49:41:47:50:89:0c:57:46:a4:fc:65:41:12:14:ec: 02:68:73:03:7b:ff:bb:8a:aa:65:03:89:8f:dd:a0: 87:73:f9:d9:16:ab:68:f8:02:3a:0a:48:42:c3:ab: b2:80:7a:bb:c6:9f:da:79:b1:ba:6e:e9:6d:8d:75: 1f:86:f8:d7:f1:e2:5f:ed:b9:f0:bc:0e:19:00:e3: 9c:7e:83:92:8e:9e:69:3e:28:07:12:c4:75:c4:b3: 87:2c:fa:6e:7e:9a:95:a6:bb:66:90:44:ee:d5:77: 08:e9:37:3c:38:f7:6e:33:4f:cc:2c:76:55:a2:f5: 4a:2b:f0:c5:f6:ab:50:89:bc:63:7c:d7:b2:bc:57: 3a:15:29:d1:9f:54:e6:95:a5:cb:8a:53:e5:94:b8: 0a:06:d7:20:7f:22:32:2f:15:0c:e1:a7:5a:8e:e5: a4:34:af:45:08:d7:2f:d5:3a:c4:e5:c3:11:59:4e: 35:fc:46:ef:c1:fa:30:5f:c9:5a:11:33:2f:7a:0e: 9b:0c:75:a4:c1:82:aa:5f:bb:23:67:c2:bd:60:60: db:42:e2:8e:57:08:4f:a0:9c:bf:12:c5:d7:13:8c: b4:68:03:7e:7b:15:2a:74:83:fd:11:d8:08:7e:75: 16:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:B1:11:B3:72:7A:C4:6C:1F:9D:B5:D2:26:DD:16:5F:B5:40:88:64 X509v3 Authority Key Identifier: keyid:26:64:CB:E1:0F:2B:9F:F1:BE:C5:0A:6A:85:DC:7A:A5:2B:9F:17:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:b8:7f:ae:a2:81:28:1b:78:9f:6f:b5:61:bd:75:3e:01:90: 0a:23:01:ea:a1:09:26:c6:a4:57:67:1f:dc:75:00:3b:ee:63: d6:9f:0a:84:69:10:c3:d5:38:b2:d9:c6:91:a7:6d:50:e8:b1: d7:8d:22:b3:e6:7d:ca:fc:d9:b5:b1:93:81:f3:02:a3:6c:ca: 1e:b7:0d:5e:62:9e:34:86:4b:2d:52:99:f0:03:21:d5:4c:05: c3:40:18:e0:11:54:b3:32:d3:57:28:94:f4:79:b4:b9:15:16: b0:17:a2:fb:9d:3b:e0:af:8f:3e:82:30:6c:59:64:c3:6a:fb: 80:3f:60:37:94:ac:2d:7c:8e:c6:fc:d1:ad:96:4e:59:40:9b: 55:70:50:a6:63:80:2a:7b:7d:18:2e:08:c2:ee:a2:69:b0:63: 1a:0a:50:dd:63:1e:df:3b:a7:9e:79:1f:a0:8f:24:eb:03:17: 71:8f:17:0f:62:cb:cf:d6:0b:77:ed:d9:5d:f4:be:62:f0:46: 24:1b:40:cf:1d:f3:69:d0:ca:5e:9a:18:ae:b4:09:ee:4d:02: 3d:92:57:8e:d6:dc:a6:9f:3b:87:2d:60:4a:19:2f:ac:97:0a: 8a:a3:6e:49:5e:8e:d3:4b:2b:a0:a3:8a:81:c6:de:d3:ed:fa: 04:1d:41:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAk7f07zIbInURX5Ve/uQof50v0wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjY2NENCRTEwRjJCOUZGMUJFQzUwQTZBODVEQzdBQTUy QjlGMTdGQTAeFw0yNTA2MDQxMDE3MDhaFw0yNTA2MDcyMTM1MDhaMDMxMTAvBgNV BAMTKDU0QjExMUIzNzI3QUM0NkMxRjlEQjVEMjI2REQxNjVGQjU0MDg4NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqbbeYcfe46weLLnLUlUlBR1CJ DFdGpPxlQRIU7AJocwN7/7uKqmUDiY/doIdz+dkWq2j4AjoKSELDq7KAervGn9p5 sbpu6W2NdR+G+Nfx4l/tufC8DhkA45x+g5KOnmk+KAcSxHXEs4cs+m5+mpWmu2aQ RO7VdwjpNzw4924zT8wsdlWi9Uor8MX2q1CJvGN817K8VzoVKdGfVOaVpcuKU+WU uAoG1yB/IjIvFQzhp1qO5aQ0r0UI1y/VOsTlwxFZTjX8Ru/B+jBfyVoRMy96DpsM daTBgqpfuyNnwr1gYNtC4o5XCE+gnL8SxdcTjLRoA357FSp0g/0R2Ah+dRafAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVLERs3J6xGwfnbXSJt0WX7VAiGQwHwYDVR0j BBgwFoAUJmTL4Q8rn/G+xQpqhdx6pSufF/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Y2YzYzIxMS0wNjQ1LTQ4ODItYTRmMS00NmJlODY3Yjc5ODMvMC8yNjY0Q0JFMTBG MkI5RkYxQkVDNTBBNkE4NURDN0FBNTJCOUYxN0ZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjY2NENCRTEwRjJCOUZGMUJFQzUwQTZBODVEQzdBQTUyQjlG MTdGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGNmM2MyMTEtMDY0NS00ODgyLWE0 ZjEtNDZiZTg2N2I3OTgzLzAvMjY2NENCRTEwRjJCOUZGMUJFQzUwQTZBODVEQzdB QTUyQjlGMTdGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADi4f66igSgbeJ9vtWG9dT4BkAojAeqhCSbG pFdnH9x1ADvuY9afCoRpEMPVOLLZxpGnbVDosdeNIrPmfcr82bWxk4HzAqNsyh63 DV5injSGSy1SmfADIdVMBcNAGOARVLMy01colPR5tLkVFrAXovudO+Cvjz6CMGxZ ZMNq+4A/YDeUrC18jsb80a2WTllAm1VwUKZjgCp7fRguCMLuommwYxoKUN1jHt87 p555H6CPJOsDF3GPFw9iy8/WC3ft2V30vmLwRiQbQM8d82nQyl6aGK60Ce5NAj2S V47W3KafO4ctYEoZL6yXCoqjbklejtNLK6CjioHG3tPt+gQdQeA= -----END CERTIFICATE-----Generated at Thu Jun 5 18:24:06 2025 by rpki-client