$ rpki-client -vvf repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft File: 1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft (raw, json) Hash identifier: hZveb9oUiUhA2pt+sSsX7PGMSH7iQARVrdM43M9AFpE= Subject key identifier: A1:93:A2:90:72:FE:9A:7D:2F:90:C3:9A:A3:E0:2B:2A:FC:4D:D5:23 Authority key identifier: 10:07:D1:5C:BB:EA:AB:DE:19:9A:EF:BC:2A:3F:E3:17:B7:57:BD:23 Certificate issuer: /CN=1007D15CBBEAABDE199AEFBC2A3FE317B757BD23 Certificate serial: 60FCC660D7B493FD6414278FB14AB5D9E0C7E95B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft Manifest number: 01D3 Signing time: Wed 04 Jun 2025 07:51:55 +0000 Manifest this update: Wed 04 Jun 2025 07:46:55 +0000 Manifest next update: Sat 07 Jun 2025 18:50:55 +0000 Files and hashes: 1: 1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.crl (hash: Jxt2+Ns04iCNOFSW+GTawK1aAAR1K4kX3DBWWyp/7tg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.crl rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 18:50:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:fc:c6:60:d7:b4:93:fd:64:14:27:8f:b1:4a:b5:d9:e0:c7:e9:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1007D15CBBEAABDE199AEFBC2A3FE317B757BD23 Validity Not Before: Jun 4 07:46:55 2025 GMT Not After : Jun 7 18:50:55 2025 GMT Subject: CN=A193A29072FE9A7D2F90C39AA3E02B2AFC4DD523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3e:dd:b1:53:53:87:aa:03:b4:54:9e:37:bf: 73:6d:1c:cc:5a:2d:b5:5c:9b:2d:66:3f:7a:32:97: c1:76:32:7b:83:50:60:df:6d:b4:16:d3:f8:2a:d8: 87:a9:c2:d0:b6:48:d8:7e:bb:9f:02:56:a8:d5:e9: 36:3d:ff:3d:40:ee:73:68:be:98:50:d4:60:46:0f: 0a:6c:37:06:82:e6:1f:04:a6:91:60:31:4f:57:1e: 75:88:9e:20:74:0f:3a:60:35:84:19:e0:7e:71:e1: 5f:13:0f:5f:31:f2:d2:b7:d3:42:b4:97:68:e0:6a: cd:c4:a7:22:78:7b:f1:f2:83:f2:ac:7a:75:f0:b0: f7:21:0c:9a:72:76:3b:e2:45:58:9e:df:08:75:93: e2:46:24:cb:ad:c8:e9:9d:a6:e1:07:3e:a4:d8:d0: 87:06:2c:36:f1:af:c5:7b:d2:72:e6:b4:c4:0a:69: 57:ee:bf:dd:ab:e7:00:c8:af:ca:ae:ab:c8:51:92: 45:e4:ed:dc:74:e7:dd:3e:01:a9:e3:68:17:7e:ab: 5b:a3:c3:15:a5:1e:18:01:aa:dd:d6:00:29:ab:da: d7:d5:d0:1f:c7:06:9e:d8:7f:22:15:87:d5:18:ea: d3:38:42:89:fd:29:f6:f9:93:4c:68:1c:21:c6:ee: 17:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:93:A2:90:72:FE:9A:7D:2F:90:C3:9A:A3:E0:2B:2A:FC:4D:D5:23 X509v3 Authority Key Identifier: keyid:10:07:D1:5C:BB:EA:AB:DE:19:9A:EF:BC:2A:3F:E3:17:B7:57:BD:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:94:cd:37:8b:32:77:8a:a3:ff:e5:37:1e:bb:25:93:6f:5f: ad:c4:ff:35:6c:43:ac:f8:16:04:2c:eb:6d:3a:18:f0:77:5f: b7:dc:d3:37:8e:88:49:af:58:6c:e0:11:d4:f8:98:7c:af:06: a5:28:be:f2:ab:6c:aa:b3:59:b6:4b:f7:79:71:5c:3f:a1:42: 8b:70:d4:ed:28:cb:45:24:30:4e:14:bd:e6:03:c8:61:5a:01: a9:3d:0b:3c:52:80:8d:18:dd:5c:17:9e:0e:3d:43:e5:6d:3e: 94:11:b0:98:4c:04:ee:f1:54:2c:47:84:0a:ef:93:d1:1a:11: 03:0a:d2:1f:88:3b:a8:38:c7:50:d7:18:df:fe:86:f2:00:9a: 3c:59:6b:a9:4a:60:c0:1b:fe:01:0c:91:17:a5:c2:2b:a1:a3: ec:59:49:ce:70:ab:9d:93:56:56:69:f6:75:da:65:a4:d3:63: af:be:2b:ff:4b:91:68:4d:62:a9:41:c7:44:6b:fb:2b:5e:58: 3f:20:0c:a4:7a:f1:3f:fc:2f:81:51:fe:3d:fd:c4:bd:2d:ef: f2:b5:9f:42:8c:9d:67:6e:7e:a4:4b:97:94:06:a0:6f:44:66: da:60:cc:0a:96:a3:71:1a:a0:52:8a:0d:80:d2:11:94:01:99: 8d:5a:4c:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYPzGYNe0k/1kFCePsUq12eDH6VswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTAwN0QxNUNCQkVBQUJERTE5OUFFRkJDMkEzRkUzMTdC NzU3QkQyMzAeFw0yNTA2MDQwNzQ2NTVaFw0yNTA2MDcxODUwNTVaMDMxMTAvBgNV BAMTKEExOTNBMjkwNzJGRTlBN0QyRjkwQzM5QUEzRTAyQjJBRkM0REQ1MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOPt2xU1OHqgO0VJ43v3NtHMxa LbVcmy1mP3oyl8F2MnuDUGDfbbQW0/gq2IepwtC2SNh+u58CVqjV6TY9/z1A7nNo vphQ1GBGDwpsNwaC5h8EppFgMU9XHnWIniB0DzpgNYQZ4H5x4V8TD18x8tK300K0 l2jgas3EpyJ4e/Hyg/KsenXwsPchDJpydjviRVie3wh1k+JGJMutyOmdpuEHPqTY 0IcGLDbxr8V70nLmtMQKaVfuv92r5wDIr8quq8hRkkXk7dx0590+AanjaBd+q1uj wxWlHhgBqt3WACmr2tfV0B/HBp7YfyIVh9UY6tM4Qon9Kfb5k0xoHCHG7hcHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoZOikHL+mn0vkMOao+ArKvxN1SMwHwYDVR0j BBgwFoAUEAfRXLvqq94Zmu+8Kj/jF7dXvSMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWExNmVjNS01ODdlLTQ3YTQtOGFmZS1kMWJlY2Y1NmI2MTQvMC8xMDA3RDE1Q0JC RUFBQkRFMTk5QUVGQkMyQTNGRTMxN0I3NTdCRDIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTAwN0QxNUNCQkVBQUJERTE5OUFFRkJDMkEzRkUzMTdCNzU3 QkQyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFhMTZlYzUtNTg3ZS00N2E0LThh ZmUtZDFiZWNmNTZiNjE0LzAvMTAwN0QxNUNCQkVBQUJERTE5OUFFRkJDMkEzRkUz MTdCNzU3QkQyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADCUzTeLMneKo//lNx67JZNvX63E/zVsQ6z4 FgQs6206GPB3X7fc0zeOiEmvWGzgEdT4mHyvBqUovvKrbKqzWbZL93lxXD+hQotw 1O0oy0UkME4UveYDyGFaAak9CzxSgI0Y3VwXng49Q+VtPpQRsJhMBO7xVCxHhArv k9EaEQMK0h+IO6g4x1DXGN/+hvIAmjxZa6lKYMAb/gEMkRelwiuho+xZSc5wq52T VlZp9nXaZaTTY6++K/9LkWhNYqlBx0Rr+yteWD8gDKR68T/8L4FR/j39xL0t7/K1 n0KMnWdufqRLl5QGoG9EZtpgzAqWo3EaoFKKDYDSEZQBmY1aTNQ= -----END CERTIFICATE-----Generated at Thu Jun 5 18:53:44 2025 by rpki-client