$ rpki-client -vvf repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft File: DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft (raw, json) Hash identifier: 4fjePPaYHqanmMXSa7j3npP+OmimfDdicijZiAbA+kI= Subject key identifier: 71:D5:91:9D:E8:E5:FF:FC:E1:CA:46:77:D6:B6:5A:78:50:62:7A:32 Authority key identifier: DE:5F:8F:89:EA:28:57:71:91:25:EA:66:66:F5:93:A8:27:9B:3C:D9 Certificate issuer: /CN=DE5F8F89EA2857719125EA6666F593A8279B3CD9 Certificate serial: 472DACB25690009ADA7BE4DCB24D3EE3B470C2E5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE5F8F89EA2857719125EA6666F593A8279B3CD9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft Manifest number: 90 Signing time: Tue 03 Jun 2025 23:01:17 +0000 Manifest this update: Tue 03 Jun 2025 22:56:17 +0000 Manifest next update: Sat 07 Jun 2025 10:20:17 +0000 Files and hashes: 1: DE5F8F89EA2857719125EA6666F593A8279B3CD9.crl (hash: PLfSIhHGy2Y65vFY669U87fJwZi8BWIDKWLTQIttWcI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.crl rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE5F8F89EA2857719125EA6666F593A8279B3CD9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 10:20:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:2d:ac:b2:56:90:00:9a:da:7b:e4:dc:b2:4d:3e:e3:b4:70:c2:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE5F8F89EA2857719125EA6666F593A8279B3CD9 Validity Not Before: Jun 3 22:56:17 2025 GMT Not After : Jun 7 10:20:17 2025 GMT Subject: CN=71D5919DE8E5FFFCE1CA4677D6B65A7850627A32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3b:b5:8d:8f:3e:ae:e6:54:28:7e:b9:3c:50: 6e:e9:63:ad:0a:c1:39:bb:92:2e:d9:61:23:86:1e: ad:f4:71:63:a8:8a:6d:b0:4e:14:3c:c1:d1:fd:d4: a5:12:42:ce:e7:d5:ec:ad:61:a7:6e:9c:58:2c:ba: 5b:f5:ba:3c:02:fd:84:33:04:cb:7b:9d:8f:e9:07: 75:14:27:69:62:29:7c:33:27:18:b5:fd:b9:d6:2f: 1d:06:f6:27:8d:9c:7f:52:88:88:8a:88:d1:59:8b: 91:26:47:14:8e:0a:e7:b7:d9:54:6a:bd:05:e4:fb: 28:f4:7a:d7:32:5a:87:8c:c8:72:73:f1:42:98:e1: d2:5b:67:f9:22:8d:07:90:6b:e7:fc:98:83:5f:e2: db:dd:0b:3f:37:bb:d6:30:64:8c:ea:76:7f:4d:54: d8:08:df:8b:88:d9:1d:24:6f:39:09:c1:49:c9:b4: c1:db:db:23:3b:6f:dc:fd:0f:cc:d1:e7:5b:e3:f8: 77:a0:a6:40:90:0d:ab:19:cd:9d:86:6b:5e:8e:21: 7e:97:c0:c4:60:7c:9e:e7:fa:b3:c7:89:da:d5:8c: ae:c1:d3:a4:ac:be:8b:aa:15:51:2e:f6:69:db:91: cc:f8:fe:f7:f3:eb:e4:71:71:ef:8d:28:73:49:97: 24:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D5:91:9D:E8:E5:FF:FC:E1:CA:46:77:D6:B6:5A:78:50:62:7A:32 X509v3 Authority Key Identifier: keyid:DE:5F:8F:89:EA:28:57:71:91:25:EA:66:66:F5:93:A8:27:9B:3C:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE5F8F89EA2857719125EA6666F593A8279B3CD9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:fa:78:d4:e4:de:8d:5b:70:fe:36:1e:e5:4f:32:f7:7e:5c: cc:26:1d:b7:c4:6b:05:36:f0:19:69:76:d4:ae:d8:14:a1:71: 69:fd:4c:b7:2b:ae:45:67:de:49:47:8b:64:3f:49:87:87:ef: 2f:64:82:17:14:6f:1b:9b:6f:52:4b:33:7e:68:c2:fc:8f:ac: ca:97:d0:17:cb:b9:2a:14:f3:f0:ae:e0:93:0a:c4:7b:bf:ae: 95:68:27:e6:80:76:37:35:5f:60:9e:9e:94:b1:2c:6e:23:9d: 37:56:11:ff:f4:c3:97:c2:08:b7:32:fd:98:fd:be:e8:0f:ae: 73:e2:35:80:04:8b:1b:2a:be:e0:d1:1e:12:4f:cf:fe:1e:16: c0:01:5f:14:4e:af:94:7a:16:4a:e1:73:25:65:ca:c8:07:61: 6f:3b:3d:1f:1f:5e:c9:03:ac:d2:ff:ed:81:0a:01:af:f4:df: 8b:c5:d3:fa:05:0f:a9:b7:3d:27:e4:9e:98:62:bc:d9:bb:ec: e8:9a:a6:0a:65:e1:83:fd:20:bc:4e:ed:dc:81:91:49:b0:07: 72:db:ac:1f:11:e6:07:37:28:6a:d6:b9:79:d7:95:7b:26:8e: 98:ab:17:f1:89:61:10:50:24:81:fd:3d:4a:83:22:88:1f:52: 80:b6:3d:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURy2sslaQAJrae+Tcsk0+47RwwuUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU1RjhGODlFQTI4NTc3MTkxMjVFQTY2NjZGNTkzQTgy NzlCM0NEOTAeFw0yNTA2MDMyMjU2MTdaFw0yNTA2MDcxMDIwMTdaMDMxMTAvBgNV BAMTKDcxRDU5MTlERThFNUZGRkNFMUNBNDY3N0Q2QjY1QTc4NTA2MjdBMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrO7WNjz6u5lQofrk8UG7pY60K wTm7ki7ZYSOGHq30cWOoim2wThQ8wdH91KUSQs7n1eytYadunFgsulv1ujwC/YQz BMt7nY/pB3UUJ2liKXwzJxi1/bnWLx0G9ieNnH9SiIiKiNFZi5EmRxSOCue32VRq vQXk+yj0etcyWoeMyHJz8UKY4dJbZ/kijQeQa+f8mINf4tvdCz83u9YwZIzqdn9N VNgI34uI2R0kbzkJwUnJtMHb2yM7b9z9D8zR51vj+HegpkCQDasZzZ2Ga16OIX6X wMRgfJ7n+rPHidrVjK7B06SsvouqFVEu9mnbkcz4/vfz6+Rxce+NKHNJlyT7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcdWRnejl//zhykZ31rZaeFBiejIwHwYDVR0j BBgwFoAU3l+PieooV3GRJepmZvWTqCebPNkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZmQ2ZWFjYS1mNWZkLTRhY2ItODVhNS1lYjhkMzcwODIzYWYvMC9ERTVGOEY4OUVB Mjg1NzcxOTEyNUVBNjY2NkY1OTNBODI3OUIzQ0Q5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREU1RjhGODlFQTI4NTc3MTkxMjVFQTY2NjZGNTkzQTgyNzlC M0NEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGZkNmVhY2EtZjVmZC00YWNiLTg1 YTUtZWI4ZDM3MDgyM2FmLzAvREU1RjhGODlFQTI4NTc3MTkxMjVFQTY2NjZGNTkz QTgyNzlCM0NEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJb6eNTk3o1bcP42HuVPMvd+XMwmHbfEawU2 8BlpdtSu2BShcWn9TLcrrkVn3klHi2Q/SYeH7y9kghcUbxubb1JLM35owvyPrMqX 0BfLuSoU8/Cu4JMKxHu/rpVoJ+aAdjc1X2CenpSxLG4jnTdWEf/0w5fCCLcy/Zj9 vugPrnPiNYAEixsqvuDRHhJPz/4eFsABXxROr5R6FkrhcyVlysgHYW87PR8fXskD rNL/7YEKAa/034vF0/oFD6m3PSfknphivNm77Oiapgpl4YP9ILxO7dyBkUmwB3Lb rB8R5gc3KGrWuXnXlXsmjpirF/GJYRBQJIH9PUqDIogfUoC2PYI= -----END CERTIFICATE-----Generated at Thu Jun 5 19:46:57 2025 by rpki-client