$ rpki-client -vvf repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.mft File: AD2137BA5758D926364E9E038F19A65DC3F1846E.mft (raw, json) Hash identifier: S51T42I5ELQuKKFrw0tGAw6dxrCSukP+2e82OdpZjdM= Subject key identifier: DB:E2:9F:0B:14:EB:55:0D:A3:1A:43:3B:00:F3:8F:F6:B4:80:1B:85 Authority key identifier: AD:21:37:BA:57:58:D9:26:36:4E:9E:03:8F:19:A6:5D:C3:F1:84:6E Certificate issuer: /CN=AD2137BA5758D926364E9E038F19A65DC3F1846E Certificate serial: 79A552FFA6571A99626333C939ED2579F5F10E93 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2137BA5758D926364E9E038F19A65DC3F1846E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.mft Manifest number: 021C Signing time: Sun 01 Jun 2025 17:12:11 +0000 Manifest this update: Sun 01 Jun 2025 17:07:11 +0000 Manifest next update: Thu 05 Jun 2025 02:44:11 +0000 Files and hashes: 1: AD2137BA5758D926364E9E038F19A65DC3F1846E.crl (hash: b82X1NZavuZghl1CkGpYzZ3AdB/+w7cL/nAHX7M0TKw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.crl rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2137BA5758D926364E9E038F19A65DC3F1846E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 02:44:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:a5:52:ff:a6:57:1a:99:62:63:33:c9:39:ed:25:79:f5:f1:0e:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD2137BA5758D926364E9E038F19A65DC3F1846E Validity Not Before: Jun 1 17:07:11 2025 GMT Not After : Jun 5 02:44:11 2025 GMT Subject: CN=DBE29F0B14EB550DA31A433B00F38FF6B4801B85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:52:a9:b8:78:36:28:d0:6b:d8:34:4d:ce:d6: 01:cf:f4:4b:37:5b:bc:d4:a9:97:de:df:e3:9a:44: 9c:f3:a9:1e:1a:5f:71:6c:78:ff:75:74:f8:56:90: c3:fb:a4:5c:13:7a:7f:47:28:5a:52:88:0d:31:91: 2e:04:d2:3c:5b:4c:1d:3b:29:98:10:96:7a:6b:e0: 3a:8a:1b:dc:4a:a1:74:e5:2a:63:e1:40:0d:e4:67: 40:8f:13:eb:f6:95:3f:b0:e3:e7:ca:dd:8f:f7:5b: 7e:70:0c:97:42:f8:d0:5c:95:4a:10:22:42:0b:5d: 7f:86:ad:58:16:5f:68:e4:3d:13:d4:0d:64:e3:1a: 2d:95:9c:c5:c7:fd:8f:7d:08:ae:5f:f9:9b:6a:f0: c5:5c:83:4a:4a:58:e9:55:f1:f2:63:36:0a:81:b5: d6:de:18:26:d5:f9:40:65:e8:af:b1:b0:55:33:a8: 9d:e4:96:9e:72:50:5e:3f:c8:1f:5e:72:ce:56:55: 83:a7:1d:2b:d3:a3:08:c9:2a:3c:5e:3f:67:6e:95: 50:d8:3b:e4:54:ad:58:a6:83:20:01:f1:5b:cb:c2: 1a:b0:ee:9b:49:ba:72:7c:b8:a3:e6:8f:9a:23:c4: e9:22:09:5d:03:a7:c6:fd:f2:93:26:3b:2a:01:92: 8e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:E2:9F:0B:14:EB:55:0D:A3:1A:43:3B:00:F3:8F:F6:B4:80:1B:85 X509v3 Authority Key Identifier: keyid:AD:21:37:BA:57:58:D9:26:36:4E:9E:03:8F:19:A6:5D:C3:F1:84:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2137BA5758D926364E9E038F19A65DC3F1846E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:6e:c5:a8:01:6e:46:b7:68:a5:e5:2f:75:1d:5b:89:25:a0: da:c2:94:77:b0:ef:d1:fb:43:8c:f3:d8:9c:d7:92:c5:d6:b0: 44:ef:b7:97:34:fb:5f:1e:7c:a6:e1:0c:62:19:51:16:fc:8f: 6d:5b:44:e9:f0:84:95:a2:ff:0f:21:71:1d:ac:59:16:26:73: 9b:2a:8b:0b:f9:65:f2:d7:bf:53:2f:be:79:5b:8d:bc:40:97: d0:b8:96:5c:2e:f6:1f:4c:f5:bc:2f:19:00:23:04:d1:cd:87: 53:ae:e4:63:4b:74:8a:8e:b2:a3:85:7d:5f:a7:98:8b:3a:ac: 18:d3:53:9b:8f:d6:1a:8f:3d:a7:4d:b4:3c:11:87:5f:50:c7: c6:7c:83:b8:58:b4:d9:03:b5:1c:76:cd:b5:db:77:ad:26:93: c5:7c:58:43:23:bd:9f:87:63:57:aa:e9:6f:a3:76:31:be:31: 39:21:3d:82:f6:18:04:d8:a2:ab:b1:72:0a:ed:75:eb:c8:89: bc:76:1e:85:a7:c6:62:1d:8b:11:48:95:c1:9e:d2:64:62:89: 14:99:fc:fa:23:69:31:f2:31:78:fc:1d:12:ff:bc:23:84:cc: 60:e4:45:58:94:39:73:cb:8e:83:2b:a9:3c:a0:bc:fc:7a:fd: 13:a2:87:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeaVS/6ZXGpliYzPJOe0lefXxDpMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQyMTM3QkE1NzU4RDkyNjM2NEU5RTAzOEYxOUE2NURD M0YxODQ2RTAeFw0yNTA2MDExNzA3MTFaFw0yNTA2MDUwMjQ0MTFaMDMxMTAvBgNV BAMTKERCRTI5RjBCMTRFQjU1MERBMzFBNDMzQjAwRjM4RkY2QjQ4MDFCODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQUqm4eDYo0GvYNE3O1gHP9Es3 W7zUqZfe3+OaRJzzqR4aX3FseP91dPhWkMP7pFwTen9HKFpSiA0xkS4E0jxbTB07 KZgQlnpr4DqKG9xKoXTlKmPhQA3kZ0CPE+v2lT+w4+fK3Y/3W35wDJdC+NBclUoQ IkILXX+GrVgWX2jkPRPUDWTjGi2VnMXH/Y99CK5f+Ztq8MVcg0pKWOlV8fJjNgqB tdbeGCbV+UBl6K+xsFUzqJ3klp5yUF4/yB9ecs5WVYOnHSvTowjJKjxeP2dulVDY O+RUrVimgyAB8VvLwhqw7ptJunJ8uKPmj5ojxOkiCV0Dp8b98pMmOyoBko49AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2+KfCxTrVQ2jGkM7APOP9rSAG4UwHwYDVR0j BBgwFoAUrSE3uldY2SY2Tp4DjxmmXcPxhG4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzRkMjBhMy0zZDgzLTRjNGYtOTEzOC03NmJjN2M1MTBlYjkvMC9BRDIxMzdCQTU3 NThEOTI2MzY0RTlFMDM4RjE5QTY1REMzRjE4NDZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQyMTM3QkE1NzU4RDkyNjM2NEU5RTAzOEYxOUE2NURDM0Yx ODQ2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTc0ZDIwYTMtM2Q4My00YzRmLTkx MzgtNzZiYzdjNTEwZWI5LzAvQUQyMTM3QkE1NzU4RDkyNjM2NEU5RTAzOEYxOUE2 NURDM0YxODQ2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHBuxagBbka3aKXlL3UdW4kloNrClHew79H7 Q4zz2JzXksXWsETvt5c0+18efKbhDGIZURb8j21bROnwhJWi/w8hcR2sWRYmc5sq iwv5ZfLXv1MvvnlbjbxAl9C4llwu9h9M9bwvGQAjBNHNh1Ou5GNLdIqOsqOFfV+n mIs6rBjTU5uP1hqPPadNtDwRh19Qx8Z8g7hYtNkDtRx2zbXbd60mk8V8WEMjvZ+H Y1eq6W+jdjG+MTkhPYL2GATYoquxcgrtdevIibx2HoWnxmIdixFIlcGe0mRiiRSZ /PojaTHyMXj8HRL/vCOEzGDkRViUOXPLjoMrqTygvPx6/ROih2M= -----END CERTIFICATE-----Generated at Tue Jun 3 23:34:25 2025 by rpki-client