$ rpki-client -vvf repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft File: 104297C14501204E355A97BD8ED42B1FB7C82B01.mft (raw, json) Hash identifier: uVbzQOElRvxJszFKl51a1zfh4wST4OQYST4qmDcpl98= Subject key identifier: 77:9F:1A:82:EF:12:F2:CE:79:E2:C4:7B:D2:17:D9:20:B5:FC:30:D7 Authority key identifier: 10:42:97:C1:45:01:20:4E:35:5A:97:BD:8E:D4:2B:1F:B7:C8:2B:01 Certificate issuer: /CN=104297C14501204E355A97BD8ED42B1FB7C82B01 Certificate serial: 79EBF8AAC6F9D906668983C8E9185816F22E5D84 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104297C14501204E355A97BD8ED42B1FB7C82B01.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft Manifest number: 0207 Signing time: Fri 06 Jun 2025 04:51:42 +0000 Manifest this update: Fri 06 Jun 2025 04:46:42 +0000 Manifest next update: Mon 09 Jun 2025 05:44:42 +0000 Files and hashes: 1: 104297C14501204E355A97BD8ED42B1FB7C82B01.crl (hash: NjNYKxQIduU7a/ChRCrlMA3N5HhTjmuM/pg0pOsfjNw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.crl rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104297C14501204E355A97BD8ED42B1FB7C82B01.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 05:44:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:eb:f8:aa:c6:f9:d9:06:66:89:83:c8:e9:18:58:16:f2:2e:5d:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=104297C14501204E355A97BD8ED42B1FB7C82B01 Validity Not Before: Jun 6 04:46:42 2025 GMT Not After : Jun 9 05:44:42 2025 GMT Subject: CN=779F1A82EF12F2CE79E2C47BD217D920B5FC30D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:51:2b:b4:dd:fd:fc:70:d2:8d:a6:8f:11:71: 31:48:a4:81:b4:e7:be:35:d2:a3:cd:b6:b1:e8:11: 2e:7a:a6:bb:84:14:d7:fe:8a:0b:74:9b:a1:33:58: 4d:52:bf:5a:5b:09:be:f1:21:a3:5f:81:90:f0:9a: 22:30:c5:d8:1c:ca:db:b8:00:a1:22:9a:ab:a8:c1: 66:18:ba:bc:39:05:31:44:39:73:e1:bc:3f:33:08: 3d:d2:70:a5:da:6e:a7:1b:9e:9a:8b:ba:33:e6:ec: 35:27:2d:2b:28:2e:b6:ee:af:bf:d1:1c:8b:78:3e: 71:1d:f0:85:bb:12:7b:a8:66:b8:01:28:37:a6:fd: c9:95:09:02:92:c5:26:e0:17:0f:d9:c1:81:d8:bc: 22:b8:c6:5c:93:09:d1:5b:f8:dc:6a:b3:52:76:d6: 01:7c:65:8f:95:20:2a:ea:3c:5e:90:b5:0c:07:6b: eb:ee:fe:ba:69:33:9c:54:bb:78:10:b6:e4:4c:8e: ce:fc:a9:f4:d8:2b:66:a3:7b:3b:84:4c:d4:2b:70: 9a:61:e5:75:6d:94:82:26:03:d8:5e:f7:4a:82:4d: 8d:70:2c:43:07:98:c9:fc:5d:66:38:fd:81:68:cd: 55:8e:09:c0:c3:bc:e5:f1:2c:5c:eb:94:9f:a0:bd: 65:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:9F:1A:82:EF:12:F2:CE:79:E2:C4:7B:D2:17:D9:20:B5:FC:30:D7 X509v3 Authority Key Identifier: keyid:10:42:97:C1:45:01:20:4E:35:5A:97:BD:8E:D4:2B:1F:B7:C8:2B:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/104297C14501204E355A97BD8ED42B1FB7C82B01.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a3fc1da3-8bf3-4ff2-977c-23cb273ad248/0/104297C14501204E355A97BD8ED42B1FB7C82B01.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:8f:1d:a6:a4:62:bf:95:ce:94:52:f5:11:2c:9c:6c:ba:82: 76:67:cc:0c:c2:de:f8:af:f5:35:db:df:3d:83:d8:a8:f5:48: a4:70:5b:c2:3c:9d:b0:e3:2e:bf:95:6d:4c:7d:57:a4:5d:4d: 59:28:b2:cc:20:8a:eb:0f:02:6e:82:f8:06:1d:ac:04:ea:62: cc:72:75:0b:d8:78:87:7c:c5:80:98:b0:33:32:5d:05:0d:15: cb:52:f8:75:de:18:02:a3:fa:21:be:5e:68:82:bb:26:3c:48: dc:6a:7e:f2:27:07:3c:74:92:63:1d:24:05:eb:0f:d5:c6:78: c8:74:a6:b7:17:0f:18:7d:c0:78:ab:c3:31:c4:9e:6d:72:06: ee:54:c7:48:c8:a6:83:86:1e:99:65:4d:6a:44:18:e7:37:6f: 91:cc:69:94:79:df:58:01:ab:3b:60:ec:15:0b:cf:33:51:1e: cb:a6:4b:5f:7e:d6:aa:e6:03:d0:99:bb:5f:a3:e5:2e:7c:b3: f1:8f:3c:86:57:8c:54:c2:ed:46:a7:ae:67:3c:4d:51:9a:5b: 0b:5c:f6:f0:2d:79:ea:61:33:8f:48:f5:eb:07:fd:87:92:6c: f7:4b:d4:a9:c3:83:f9:a9:2e:b9:51:cd:11:31:35:dd:6f:00: 7b:07:4e:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeev4qsb52QZmiYPI6RhYFvIuXYQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA0Mjk3QzE0NTAxMjA0RTM1NUE5N0JEOEVENDJCMUZC N0M4MkIwMTAeFw0yNTA2MDYwNDQ2NDJaFw0yNTA2MDkwNTQ0NDJaMDMxMTAvBgNV BAMTKDc3OUYxQTgyRUYxMkYyQ0U3OUUyQzQ3QkQyMTdEOTIwQjVGQzMwRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOUSu03f38cNKNpo8RcTFIpIG0 57410qPNtrHoES56pruEFNf+igt0m6EzWE1Sv1pbCb7xIaNfgZDwmiIwxdgcytu4 AKEimquowWYYurw5BTFEOXPhvD8zCD3ScKXabqcbnpqLujPm7DUnLSsoLrbur7/R HIt4PnEd8IW7EnuoZrgBKDem/cmVCQKSxSbgFw/ZwYHYvCK4xlyTCdFb+Nxqs1J2 1gF8ZY+VICrqPF6QtQwHa+vu/rppM5xUu3gQtuRMjs78qfTYK2ajezuETNQrcJph 5XVtlIImA9he90qCTY1wLEMHmMn8XWY4/YFozVWOCcDDvOXxLFzrlJ+gvWUvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd58agu8S8s554sR70hfZILX8MNcwHwYDVR0j BBgwFoAUEEKXwUUBIE41Wpe9jtQrH7fIKwEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h M2ZjMWRhMy04YmYzLTRmZjItOTc3Yy0yM2NiMjczYWQyNDgvMC8xMDQyOTdDMTQ1 MDEyMDRFMzU1QTk3QkQ4RUQ0MkIxRkI3QzgyQjAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA0Mjk3QzE0NTAxMjA0RTM1NUE5N0JEOEVENDJCMUZCN0M4 MkIwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTNmYzFkYTMtOGJmMy00ZmYyLTk3 N2MtMjNjYjI3M2FkMjQ4LzAvMTA0Mjk3QzE0NTAxMjA0RTM1NUE5N0JEOEVENDJC MUZCN0M4MkIwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGGPHaakYr+VzpRS9REsnGy6gnZnzAzC3viv 9TXb3z2D2Kj1SKRwW8I8nbDjLr+VbUx9V6RdTVkosswgiusPAm6C+AYdrATqYsxy dQvYeId8xYCYsDMyXQUNFctS+HXeGAKj+iG+XmiCuyY8SNxqfvInBzx0kmMdJAXr D9XGeMh0prcXDxh9wHirwzHEnm1yBu5Ux0jIpoOGHpllTWpEGOc3b5HMaZR531gB qztg7BULzzNRHsumS19+1qrmA9CZu1+j5S58s/GPPIZXjFTC7Uanrmc8TVGaWwtc 9vAteephM49I9esH/YeSbPdL1KnDg/mpLrlRzRExNd1vAHsHTpM= -----END CERTIFICATE-----Generated at Fri Jun 6 16:57:11 2025 by rpki-client