$ rpki-client -vvf repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft File: 0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft (raw, json) Hash identifier: i9DOIae81Jq/OPg8Uh2rxdTnKX0Hr95l2L4rq3L3cQE= Subject key identifier: 3A:2F:E9:F1:38:C2:6B:71:A9:D6:CB:0E:7C:19:7A:B2:BE:CB:1E:75 Authority key identifier: 0F:44:BF:25:8D:75:F2:D1:C4:45:D5:29:C3:01:5F:9F:E5:1B:28:0F Certificate issuer: /CN=0F44BF258D75F2D1C445D529C3015F9FE51B280F Certificate serial: 68841E87DCD9A0BEA53A572AE9463CAFD427E757 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0F44BF258D75F2D1C445D529C3015F9FE51B280F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft Manifest number: 52 Signing time: Thu 05 Jun 2025 21:01:13 +0000 Manifest this update: Thu 05 Jun 2025 20:56:13 +0000 Manifest next update: Mon 09 Jun 2025 03:58:13 +0000 Files and hashes: 1: 0F44BF258D75F2D1C445D529C3015F9FE51B280F.crl (hash: apowQ1S0oSYyN9vgGBxcGHvWM2qXjoKMOr/Vk+aaU2Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.crl rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0F44BF258D75F2D1C445D529C3015F9FE51B280F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 03:58:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:84:1e:87:dc:d9:a0:be:a5:3a:57:2a:e9:46:3c:af:d4:27:e7:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F44BF258D75F2D1C445D529C3015F9FE51B280F Validity Not Before: Jun 5 20:56:13 2025 GMT Not After : Jun 9 03:58:13 2025 GMT Subject: CN=3A2FE9F138C26B71A9D6CB0E7C197AB2BECB1E75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:58:24:cb:93:d7:e7:7b:e3:0d:bd:4e:aa:f3: e9:09:64:12:a3:18:7e:cc:c7:57:91:97:cc:a8:d9: 6a:d2:c8:09:ba:50:9a:86:e7:d1:fe:63:bf:65:4c: ec:e6:94:53:ca:12:be:70:a5:8b:ec:e8:71:ae:e1: 7a:52:c6:d0:b8:ba:96:cc:4e:1a:38:95:15:e8:07: 95:7e:c2:b4:e7:3a:ae:e9:26:e4:4b:07:07:2d:38: ac:b2:c7:ae:9b:74:ab:a1:4c:e1:77:35:2c:42:6b: c0:cc:b2:9d:bf:d8:00:13:fa:2e:d3:71:6d:c4:a6: ab:4a:32:50:1f:00:08:91:60:a7:43:7e:70:77:7a: 9a:6f:12:09:ab:7c:22:b1:9b:a0:0e:d7:8e:23:d2: 9e:1d:62:f8:71:5d:3e:d6:0c:44:9f:6a:16:0c:82: 4b:b5:4f:8b:ad:9c:a8:d8:cd:5b:3d:15:cb:93:ed: 00:a6:c5:53:35:27:d4:ab:bc:67:6e:55:26:9c:9a: c3:a4:03:65:fb:63:44:7c:47:ef:0e:68:58:ab:72: 95:6d:9c:92:70:20:53:6d:4c:af:53:2d:68:08:3d: 8d:cf:53:b9:e8:23:db:8e:f8:f1:18:93:89:56:bc: a4:ef:82:9e:6c:1f:db:7f:ab:8b:a9:46:1f:ba:ff: 71:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:2F:E9:F1:38:C2:6B:71:A9:D6:CB:0E:7C:19:7A:B2:BE:CB:1E:75 X509v3 Authority Key Identifier: keyid:0F:44:BF:25:8D:75:F2:D1:C4:45:D5:29:C3:01:5F:9F:E5:1B:28:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0F44BF258D75F2D1C445D529C3015F9FE51B280F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:75:1c:ea:ae:ed:d8:c4:da:34:5e:22:72:17:b5:9a:82:09: 30:2b:08:26:57:93:53:fa:a5:c3:97:13:3a:74:f5:b1:30:a9: 3d:a3:83:b7:4b:c4:d4:18:61:9d:f1:6c:f6:9a:16:54:28:40: 0c:01:69:04:56:44:20:80:95:56:8c:1b:2b:05:31:a8:5f:6e: 69:70:a6:16:34:80:25:f4:c8:0d:0c:8f:c7:a8:09:e5:76:fd: 6c:bc:ed:72:15:53:2c:04:a3:45:ad:ca:e6:ad:ac:41:dd:5d: 52:49:20:03:95:a9:69:1f:11:f7:77:8c:e2:cd:91:81:20:9f: d7:3e:b0:54:65:a2:53:41:d1:58:18:9d:3d:00:01:6a:5f:72: 54:0f:17:70:23:8e:32:5f:69:35:fa:46:fc:4a:6a:d6:b6:6d: 0e:9f:8f:26:cb:3b:85:83:a4:5a:9c:3a:93:12:25:95:f5:60: 3f:15:0f:04:2d:a4:60:b0:39:fd:38:ea:e2:93:3a:49:b0:f3: 6a:c0:60:4f:82:72:fa:a8:48:6a:d9:a7:71:d0:76:84:e6:f7: 22:87:c3:ce:df:c9:bc:08:14:85:a5:50:28:ca:43:d7:5b:e9: 7c:39:c8:41:58:2d:76:3c:14:40:f8:93:34:c3:4f:07:4b:c5: 91:9a:9f:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaIQeh9zZoL6lOlcq6UY8r9Qn51cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEY0NEJGMjU4RDc1RjJEMUM0NDVENTI5QzMwMTVGOUZF NTFCMjgwRjAeFw0yNTA2MDUyMDU2MTNaFw0yNTA2MDkwMzU4MTNaMDMxMTAvBgNV BAMTKDNBMkZFOUYxMzhDMjZCNzFBOUQ2Q0IwRTdDMTk3QUIyQkVDQjFFNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOWCTLk9fne+MNvU6q8+kJZBKj GH7Mx1eRl8yo2WrSyAm6UJqG59H+Y79lTOzmlFPKEr5wpYvs6HGu4XpSxtC4upbM Tho4lRXoB5V+wrTnOq7pJuRLBwctOKyyx66bdKuhTOF3NSxCa8DMsp2/2AAT+i7T cW3EpqtKMlAfAAiRYKdDfnB3eppvEgmrfCKxm6AO144j0p4dYvhxXT7WDESfahYM gku1T4utnKjYzVs9FcuT7QCmxVM1J9SrvGduVSacmsOkA2X7Y0R8R+8OaFircpVt nJJwIFNtTK9TLWgIPY3PU7noI9uO+PEYk4lWvKTvgp5sH9t/q4upRh+6/3FZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOi/p8TjCa3Gp1ssOfBl6sr7LHnUwHwYDVR0j BBgwFoAUD0S/JY118tHERdUpwwFfn+UbKA8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTNkZTNlYy00ZDNjLTQ0MDItYTdiOC04YTFiOTYyMjZlNzUvMC8wRjQ0QkYyNThE NzVGMkQxQzQ0NUQ1MjlDMzAxNUY5RkU1MUIyODBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMEY0NEJGMjU4RDc1RjJEMUM0NDVENTI5QzMwMTVGOUZFNTFC MjgwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTEzZGUzZWMtNGQzYy00NDAyLWE3 YjgtOGExYjk2MjI2ZTc1LzAvMEY0NEJGMjU4RDc1RjJEMUM0NDVENTI5QzMwMTVG OUZFNTFCMjgwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEV1HOqu7djE2jReInIXtZqCCTArCCZXk1P6 pcOXEzp09bEwqT2jg7dLxNQYYZ3xbPaaFlQoQAwBaQRWRCCAlVaMGysFMahfbmlw phY0gCX0yA0Mj8eoCeV2/Wy87XIVUywEo0WtyuatrEHdXVJJIAOVqWkfEfd3jOLN kYEgn9c+sFRlolNB0VgYnT0AAWpfclQPF3AjjjJfaTX6RvxKata2bQ6fjybLO4WD pFqcOpMSJZX1YD8VDwQtpGCwOf046uKTOkmw82rAYE+CcvqoSGrZp3HQdoTm9yKH w87fybwIFIWlUCjKQ9db6Xw5yEFYLXY8FED4kzTDTwdLxZGanxs= -----END CERTIFICATE-----Generated at Fri Jun 6 18:25:06 2025 by rpki-client