$ rpki-client -vvf repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft File: 9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft (raw, json) Hash identifier: 2j5lVkA6Y5nn9eFHOHkQDD7lxSaQFWKPZzZwsdkp58A= Subject key identifier: E8:AD:3C:49:3E:55:D8:79:CD:6D:A8:C0:AC:12:E5:F2:B8:37:1F:56 Authority key identifier: 94:79:B8:C5:D5:AE:8F:AB:DC:57:A9:AB:54:9A:DD:E2:0B:E8:A4:B3 Certificate issuer: /CN=9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3 Certificate serial: 0700771B7FE6C132F854C06FD75E6488BFF21DD8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft Manifest number: 01C5 Signing time: Tue 03 Jun 2025 03:42:59 +0000 Manifest this update: Tue 03 Jun 2025 03:37:59 +0000 Manifest next update: Fri 06 Jun 2025 15:12:59 +0000 Files and hashes: 1: 9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.crl (hash: NQUYlLHho3KMkUho3BhLL/6E+/SeqZ9MLxYB8wbMro4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.crl rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 15:12:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:00:77:1b:7f:e6:c1:32:f8:54:c0:6f:d7:5e:64:88:bf:f2:1d:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3 Validity Not Before: Jun 3 03:37:59 2025 GMT Not After : Jun 6 15:12:59 2025 GMT Subject: CN=E8AD3C493E55D879CD6DA8C0AC12E5F2B8371F56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:94:0e:23:9a:41:cf:dd:79:d0:64:33:86:df: 27:a9:42:86:df:87:59:a2:6c:00:71:ff:1e:76:ff: 4e:77:e3:ce:61:9d:1b:da:09:1f:90:6b:23:74:4e: a7:2b:f1:3a:2c:8a:4c:20:ee:ab:cc:05:69:81:b7: 8c:7b:16:57:2c:e7:26:e5:df:18:a5:27:41:50:f2: 95:da:bd:1f:47:a9:95:12:b9:07:d5:6b:c2:67:c8: 36:ed:72:ed:31:d8:37:0c:82:27:c0:01:68:56:1f: e2:53:66:47:0c:48:38:12:05:45:58:34:4b:dd:be: bf:d8:f3:41:a8:20:73:cc:a1:c8:7b:44:aa:8a:1f: b1:cb:6d:f2:2a:2b:68:e4:56:91:7b:26:0d:bd:25: 5a:ac:5a:4e:21:3b:3a:40:0d:b1:74:10:f0:7c:de: a8:af:62:8d:03:9d:58:31:d5:22:45:23:b4:17:15: 38:ee:01:c2:df:d0:cb:43:78:52:91:33:83:73:52: 2f:3c:ec:60:80:dd:06:d8:1b:10:1c:fa:f5:05:a9: 6e:ca:62:62:f4:72:c2:5e:28:6f:7a:59:57:bf:86: 14:38:a0:6f:b8:0b:71:05:f3:02:75:23:4c:ce:f4: 02:ea:b6:1a:55:9f:a2:78:b2:20:f9:5e:8d:1a:72: 53:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:AD:3C:49:3E:55:D8:79:CD:6D:A8:C0:AC:12:E5:F2:B8:37:1F:56 X509v3 Authority Key Identifier: keyid:94:79:B8:C5:D5:AE:8F:AB:DC:57:A9:AB:54:9A:DD:E2:0B:E8:A4:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:d1:19:cf:75:d3:ba:57:a4:77:01:e4:54:6c:0e:38:8b:68: 80:cc:7b:cb:05:87:64:c7:e6:f4:78:b9:2a:88:fb:f9:24:28: 2a:a0:ad:aa:ca:4d:5e:59:67:70:4f:5e:9b:1c:c7:1b:04:84: b6:04:ce:4f:0b:b7:d0:f0:d0:89:78:11:97:5d:ae:61:1c:10: c7:df:c3:36:ec:9e:cd:f0:23:3d:6a:8b:07:85:4b:e6:8e:96: 07:50:6d:19:70:5a:aa:b3:a8:9b:65:39:86:de:a1:49:5b:32: b4:93:84:d4:1d:46:21:33:04:c9:bd:db:db:06:42:b6:90:f3: f9:fe:be:1a:44:fc:6e:dc:0c:98:8f:ba:b6:66:fa:88:d4:c5: e6:24:7f:f3:fe:2a:b1:ce:d4:c6:1e:06:d1:57:71:6b:76:9b: 39:a5:cc:23:49:95:0b:1b:58:aa:fa:c1:9b:5a:41:20:1c:a5: 74:a5:49:b4:02:58:43:df:ed:79:ae:78:c6:f1:bd:b9:71:78: da:d9:60:6f:2b:99:18:4a:af:6c:25:3a:b5:41:7c:60:46:1b: d2:2a:a5:c2:47:a8:26:10:24:09:a0:ce:95:2a:f0:2e:27:0c: c8:a0:97:f5:d2:8d:db:52:17:0f:29:32:96:7e:74:ac:70:08: 9c:45:6f:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBwB3G3/mwTL4VMBv115kiL/yHdgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ3OUI4QzVENUFFOEZBQkRDNTdBOUFCNTQ5QURERTIw QkU4QTRCMzAeFw0yNTA2MDMwMzM3NTlaFw0yNTA2MDYxNTEyNTlaMDMxMTAvBgNV BAMTKEU4QUQzQzQ5M0U1NUQ4NzlDRDZEQThDMEFDMTJFNUYyQjgzNzFGNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSlA4jmkHP3XnQZDOG3yepQobf h1mibABx/x52/053485hnRvaCR+QayN0Tqcr8Tosikwg7qvMBWmBt4x7Flcs5ybl 3xilJ0FQ8pXavR9HqZUSuQfVa8JnyDbtcu0x2DcMgifAAWhWH+JTZkcMSDgSBUVY NEvdvr/Y80GoIHPMoch7RKqKH7HLbfIqK2jkVpF7Jg29JVqsWk4hOzpADbF0EPB8 3qivYo0DnVgx1SJFI7QXFTjuAcLf0MtDeFKRM4NzUi887GCA3QbYGxAc+vUFqW7K YmL0csJeKG96WVe/hhQ4oG+4C3EF8wJ1I0zO9ALqthpVn6J4siD5Xo0aclMbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6K08ST5V2HnNbajArBLl8rg3H1YwHwYDVR0j BBgwFoAUlHm4xdWuj6vcV6mrVJrd4gvopLMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTBhYTE1OC02NTgxLTRjYmUtYjZjZS1kODcyMWM3MTlmYTAvMC85NDc5QjhDNUQ1 QUU4RkFCREM1N0E5QUI1NDlBRERFMjBCRThBNEIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTQ3OUI4QzVENUFFOEZBQkRDNTdBOUFCNTQ5QURERTIwQkU4 QTRCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTkwYWExNTgtNjU4MS00Y2JlLWI2 Y2UtZDg3MjFjNzE5ZmEwLzAvOTQ3OUI4QzVENUFFOEZBQkRDNTdBOUFCNTQ5QURE RTIwQkU4QTRCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADnRGc9107pXpHcB5FRsDjiLaIDMe8sFh2TH 5vR4uSqI+/kkKCqgrarKTV5ZZ3BPXpscxxsEhLYEzk8Lt9Dw0Il4EZddrmEcEMff wzbsns3wIz1qiweFS+aOlgdQbRlwWqqzqJtlOYbeoUlbMrSThNQdRiEzBMm929sG QraQ8/n+vhpE/G7cDJiPurZm+ojUxeYkf/P+KrHO1MYeBtFXcWt2mzmlzCNJlQsb WKr6wZtaQSAcpXSlSbQCWEPf7XmueMbxvblxeNrZYG8rmRhKr2wlOrVBfGBGG9Iq pcJHqCYQJAmgzpUq8C4nDMigl/XSjdtSFw8pMpZ+dKxwCJxFb+s= -----END CERTIFICATE-----Generated at Tue Jun 3 23:35:48 2025 by rpki-client