$ rpki-client -vvf repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft File: 0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft (raw, json) Hash identifier: MOesBuFHzghu/7lywu73xbbT2xwQThpGxj/mqwG23ZU= Subject key identifier: 5A:6F:82:B8:3C:81:FE:D7:03:91:B4:64:39:B9:D3:80:37:8F:62:03 Authority key identifier: 0F:44:BF:25:8D:75:F2:D1:C4:45:D5:29:C3:01:5F:9F:E5:1B:28:0F Certificate issuer: /CN=0F44BF258D75F2D1C445D529C3015F9FE51B280F Certificate serial: 4FFEFEA6E4FA7A0AB8012A8056F971EBF20F5D22 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0F44BF258D75F2D1C445D529C3015F9FE51B280F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft Manifest number: 66 Signing time: Sun 20 Jul 2025 23:31:13 +0000 Manifest this update: Sun 20 Jul 2025 23:26:13 +0000 Manifest next update: Thu 24 Jul 2025 09:47:13 +0000 Files and hashes: 1: 0F44BF258D75F2D1C445D529C3015F9FE51B280F.crl (hash: x3M0qr1ykIOgSZz9893U39In4n+qr1+1FsYJi55Ga0s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.crl rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0F44BF258D75F2D1C445D529C3015F9FE51B280F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 09:47:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:fe:fe:a6:e4:fa:7a:0a:b8:01:2a:80:56:f9:71:eb:f2:0f:5d:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F44BF258D75F2D1C445D529C3015F9FE51B280F Validity Not Before: Jul 20 23:26:13 2025 GMT Not After : Jul 24 09:47:13 2025 GMT Subject: CN=5A6F82B83C81FED70391B46439B9D380378F6203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:94:ab:1d:b1:32:55:a2:f8:81:c5:b0:e9:df: 74:c1:01:0b:76:9b:ad:f4:10:29:43:23:93:f4:0e: 50:ea:2e:bb:1f:ad:cb:89:10:01:b6:58:00:e8:a6: ae:cc:f3:39:bf:02:cb:53:51:2a:86:c2:a2:18:74: eb:61:99:f2:1a:f6:db:99:fb:d1:6c:83:33:61:76: 1b:04:64:d1:42:e9:f8:57:b5:9c:56:81:a7:ee:ba: 17:66:39:1a:b9:51:91:5d:d9:1d:0d:3d:07:77:1d: f7:b6:25:5a:2a:3e:e5:be:4b:b5:06:89:a2:7f:ae: a0:d1:60:82:fe:62:96:6b:e7:d5:fd:19:4a:1d:aa: f5:fd:99:83:15:65:dc:68:ee:21:82:3a:2b:8b:e7: e3:56:de:23:b2:05:a6:d4:be:28:b8:6c:3c:b5:a4: 4b:e3:18:26:14:24:65:c3:fd:a6:f5:5f:45:c9:59: 0a:5e:b4:7a:19:65:00:b8:30:b5:17:23:a9:b8:54: ec:fa:53:f7:2b:42:2f:3b:50:62:f9:dc:ec:c2:4c: 22:4c:a8:47:ea:6b:8b:fd:9c:c8:b9:a6:1f:b5:e1: b5:14:21:9e:f0:ef:6e:6d:3f:2c:4e:a8:61:2e:bf: f4:28:db:4c:14:3d:b6:c1:fd:fc:9c:2b:17:c2:b7: 09:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:6F:82:B8:3C:81:FE:D7:03:91:B4:64:39:B9:D3:80:37:8F:62:03 X509v3 Authority Key Identifier: keyid:0F:44:BF:25:8D:75:F2:D1:C4:45:D5:29:C3:01:5F:9F:E5:1B:28:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0F44BF258D75F2D1C445D529C3015F9FE51B280F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:b4:81:b1:1d:41:57:6b:42:76:a4:82:ee:b2:d1:b5:1f:90: da:a8:68:16:c5:b8:eb:04:3b:07:5c:5f:8d:6b:1b:b0:c3:13: a2:41:c5:5d:57:04:cd:cd:6e:b2:4b:89:c1:98:73:a4:47:38: 02:93:57:8e:75:74:f8:75:f8:6d:27:93:01:6b:4a:cb:a8:ed: ac:6f:eb:80:a8:a0:a7:7f:78:4c:0d:03:82:4c:3f:ca:9e:67: 53:83:19:c2:75:6f:6b:5b:e6:ba:ac:e9:29:d7:85:eb:9b:32: ae:51:97:87:8e:f6:79:4a:cc:41:97:4b:cd:34:fe:f2:74:b3: ed:10:60:04:11:7f:19:59:4a:21:42:b2:8a:b8:49:34:25:8b: f9:15:48:2c:30:e2:71:35:c9:45:10:54:58:2d:64:4c:9c:55: 7e:40:82:c3:c5:45:c0:47:13:5e:df:d1:83:3e:25:9c:1c:96: 8d:ae:14:98:4d:3d:dc:e8:c3:75:0a:f4:79:37:fa:9a:86:63: e3:2b:a4:20:44:57:a7:1e:a7:16:fd:c9:37:6f:cd:d1:f3:88: 48:02:f8:0f:0d:f7:be:a1:dd:fd:47:cc:52:3f:19:c5:d7:ba: 09:24:31:3b:46:10:bd:d6:ac:06:58:8b:1a:a1:67:1d:a9:46: a1:f1:9c:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT/7+puT6egq4ASqAVvlx6/IPXSIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEY0NEJGMjU4RDc1RjJEMUM0NDVENTI5QzMwMTVGOUZF NTFCMjgwRjAeFw0yNTA3MjAyMzI2MTNaFw0yNTA3MjQwOTQ3MTNaMDMxMTAvBgNV BAMTKDVBNkY4MkI4M0M4MUZFRDcwMzkxQjQ2NDM5QjlEMzgwMzc4RjYyMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQlKsdsTJVoviBxbDp33TBAQt2 m630EClDI5P0DlDqLrsfrcuJEAG2WADopq7M8zm/AstTUSqGwqIYdOthmfIa9tuZ +9FsgzNhdhsEZNFC6fhXtZxWgafuuhdmORq5UZFd2R0NPQd3Hfe2JVoqPuW+S7UG iaJ/rqDRYIL+YpZr59X9GUodqvX9mYMVZdxo7iGCOiuL5+NW3iOyBabUvii4bDy1 pEvjGCYUJGXD/ab1X0XJWQpetHoZZQC4MLUXI6m4VOz6U/crQi87UGL53OzCTCJM qEfqa4v9nMi5ph+14bUUIZ7w725tPyxOqGEuv/Qo20wUPbbB/fycKxfCtwmJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWm+CuDyB/tcDkbRkObnTgDePYgMwHwYDVR0j BBgwFoAUD0S/JY118tHERdUpwwFfn+UbKA8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTNkZTNlYy00ZDNjLTQ0MDItYTdiOC04YTFiOTYyMjZlNzUvMC8wRjQ0QkYyNThE NzVGMkQxQzQ0NUQ1MjlDMzAxNUY5RkU1MUIyODBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMEY0NEJGMjU4RDc1RjJEMUM0NDVENTI5QzMwMTVGOUZFNTFC MjgwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTEzZGUzZWMtNGQzYy00NDAyLWE3 YjgtOGExYjk2MjI2ZTc1LzAvMEY0NEJGMjU4RDc1RjJEMUM0NDVENTI5QzMwMTVG OUZFNTFCMjgwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJm0gbEdQVdrQnakgu6y0bUfkNqoaBbFuOsE OwdcX41rG7DDE6JBxV1XBM3NbrJLicGYc6RHOAKTV451dPh1+G0nkwFrSsuo7axv 64CooKd/eEwNA4JMP8qeZ1ODGcJ1b2tb5rqs6SnXheubMq5Rl4eO9nlKzEGXS800 /vJ0s+0QYAQRfxlZSiFCsoq4STQli/kVSCww4nE1yUUQVFgtZEycVX5AgsPFRcBH E17f0YM+JZwclo2uFJhNPdzow3UK9Hk3+pqGY+MrpCBEV6cepxb9yTdvzdHziEgC +A8N976h3f1HzFI/GcXXugkkMTtGEL3WrAZYixqhZx2pRqHxnKw= -----END CERTIFICATE-----Generated at Tue Jul 22 04:21:44 2025 by rpki-client