$ rpki-client -vvf repo-rpki.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.mft File: 75F87E19F3D7CA128A64BB0695F7DD416C17CC96.mft (raw, json) Hash identifier: YM9YFEE+N/KIz/9RRaix18RzBIbccRSDoLKFgTGBMVk= Subject key identifier: 52:DD:C1:6E:A5:92:BF:5F:24:CE:4A:0B:E5:46:8B:BB:3C:E7:91:F0 Authority key identifier: 75:F8:7E:19:F3:D7:CA:12:8A:64:BB:06:95:F7:DD:41:6C:17:CC:96 Certificate issuer: /CN=75F87E19F3D7CA128A64BB0695F7DD416C17CC96 Certificate serial: 26683B62AE46684FD8BAB5698758D1F9AEBEB151 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.cer Subject info access: rsync://repo-rpki.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.mft Manifest number: 0178 Signing time: Sun 01 Jun 2025 19:32:15 +0000 Manifest this update: Sun 01 Jun 2025 19:27:15 +0000 Manifest next update: Thu 05 Jun 2025 00:43:15 +0000 Files and hashes: 1: 75F87E19F3D7CA128A64BB0695F7DD416C17CC96.crl (hash: BGmTytsulakNXtpx0tkNcIBs6gStNzd3WaAfhbD9dSk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.crl rsync://repo-rpki.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 00:43:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:68:3b:62:ae:46:68:4f:d8:ba:b5:69:87:58:d1:f9:ae:be:b1:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75F87E19F3D7CA128A64BB0695F7DD416C17CC96 Validity Not Before: Jun 1 19:27:15 2025 GMT Not After : Jun 5 00:43:15 2025 GMT Subject: CN=52DDC16EA592BF5F24CE4A0BE5468BBB3CE791F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:55:62:89:40:60:46:d5:35:04:e7:bc:59:93: 22:bb:cf:6f:c0:35:d6:a3:71:dc:73:04:07:ee:ae: 19:d1:7f:7a:94:4c:1f:e3:c2:b1:0c:93:9f:91:2c: 3c:b0:fc:5a:df:72:63:3a:32:f9:88:44:8b:db:eb: 25:06:b1:89:da:c8:7e:da:bd:63:ce:b1:e8:2a:4f: 36:e2:d6:29:33:3a:f9:2c:21:e8:2f:b9:af:31:dc: c5:73:6a:64:bd:c8:d8:81:72:08:64:21:4b:4f:f1: 81:49:c0:ab:d5:14:e8:e4:95:74:76:ae:88:9f:09: 21:3a:72:c6:ac:11:97:b5:6d:ba:fd:d7:a1:dd:62: 04:63:0e:63:3c:71:53:d1:1f:07:94:af:ff:8c:b7: 05:ee:c2:9a:2b:e5:4f:76:d4:a0:a7:4a:b9:8f:9b: 27:2a:9b:3c:e3:69:c1:6b:52:08:2e:fc:2a:9d:83: d9:42:11:53:3f:17:a5:3d:d0:40:39:82:c0:d2:2a: d8:22:93:81:00:90:47:83:22:49:ff:e5:8d:cd:18: 4a:ea:f0:d5:69:77:48:a0:f4:bc:07:22:f3:c5:99: fd:88:ae:d8:9d:bf:93:09:54:5a:13:f5:7b:ab:c1: 3b:d3:29:f4:10:5b:f3:c4:82:f3:c0:74:02:1e:21: 4a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:DD:C1:6E:A5:92:BF:5F:24:CE:4A:0B:E5:46:8B:BB:3C:E7:91:F0 X509v3 Authority Key Identifier: keyid:75:F8:7E:19:F3:D7:CA:12:8A:64:BB:06:95:F7:DD:41:6C:17:CC:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/abcaea3b-bd7f-481a-9bc7-aa160d05d262/0/75F87E19F3D7CA128A64BB0695F7DD416C17CC96.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:8d:9a:ea:3c:47:d1:2f:20:b9:5f:31:92:81:62:70:88:79: 53:88:33:57:69:4b:6e:28:a3:63:3b:e5:d0:21:39:ce:91:c7: c9:06:ac:1b:c1:77:12:35:60:cc:84:44:cb:b7:59:dd:87:cb: 32:a1:fa:72:19:56:d1:a7:fe:4f:c6:ce:37:f3:bf:89:6c:42: d6:7a:e6:7d:78:61:a7:10:d0:ed:37:05:44:93:07:1d:6d:fa: 42:b0:12:52:a5:97:45:6f:0c:64:9d:45:52:a0:4b:82:4f:fa: da:d8:28:7b:6a:53:8c:4d:41:2a:a5:f9:05:aa:c5:0f:34:23: 44:8e:87:f3:0d:86:55:cc:79:99:fd:90:21:4d:80:0b:1e:36: bf:e3:37:f5:87:ce:8f:32:b2:3b:37:90:3c:8d:dd:7f:81:3a: 38:44:79:56:a1:bb:8f:87:56:1e:ad:21:08:4a:04:7b:fa:24: 2f:ca:33:4f:23:48:58:22:1f:0b:43:5b:03:42:d7:01:a2:ff: 2b:e3:d0:b7:55:19:63:4d:59:a3:89:1e:6d:35:f3:82:7d:9a: 4f:fe:bd:43:13:f3:00:fb:4d:fb:1d:ff:b0:c9:55:ac:12:fb: 0a:c2:0f:50:4f:41:18:24:1f:cd:38:8f:9b:62:42:8e:5b:9b: 3b:4f:78:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJmg7Yq5GaE/YurVph1jR+a6+sVEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzVGODdFMTlGM0Q3Q0ExMjhBNjRCQjA2OTVGN0RENDE2 QzE3Q0M5NjAeFw0yNTA2MDExOTI3MTVaFw0yNTA2MDUwMDQzMTVaMDMxMTAvBgNV BAMTKDUyRERDMTZFQTU5MkJGNUYyNENFNEEwQkU1NDY4QkJCM0NFNzkxRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDVWKJQGBG1TUE57xZkyK7z2/A NdajcdxzBAfurhnRf3qUTB/jwrEMk5+RLDyw/FrfcmM6MvmIRIvb6yUGsYnayH7a vWPOsegqTzbi1ikzOvksIegvua8x3MVzamS9yNiBcghkIUtP8YFJwKvVFOjklXR2 roifCSE6csasEZe1bbr916HdYgRjDmM8cVPRHweUr/+MtwXuwpor5U921KCnSrmP mycqmzzjacFrUggu/Cqdg9lCEVM/F6U90EA5gsDSKtgik4EAkEeDIkn/5Y3NGErq 8NVpd0ig9LwHIvPFmf2Irtidv5MJVFoT9XurwTvTKfQQW/PEgvPAdAIeIUqHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUt3BbqWSv18kzkoL5UaLuzznkfAwHwYDVR0j BBgwFoAUdfh+GfPXyhKKZLsGlffdQWwXzJYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YmNhZWEzYi1iZDdmLTQ4MWEtOWJjNy1hYTE2MGQwNWQyNjIvMC83NUY4N0UxOUYz RDdDQTEyOEE2NEJCMDY5NUY3REQ0MTZDMTdDQzk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzVGODdFMTlGM0Q3Q0ExMjhBNjRCQjA2OTVGN0RENDE2QzE3 Q0M5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWJjYWVhM2ItYmQ3Zi00ODFhLTli YzctYWExNjBkMDVkMjYyLzAvNzVGODdFMTlGM0Q3Q0ExMjhBNjRCQjA2OTVGN0RE NDE2QzE3Q0M5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKaNmuo8R9EvILlfMZKBYnCIeVOIM1dpS24o o2M75dAhOc6Rx8kGrBvBdxI1YMyERMu3Wd2HyzKh+nIZVtGn/k/Gzjfzv4lsQtZ6 5n14YacQ0O03BUSTBx1t+kKwElKll0VvDGSdRVKgS4JP+trYKHtqU4xNQSql+QWq xQ80I0SOh/MNhlXMeZn9kCFNgAseNr/jN/WHzo8ysjs3kDyN3X+BOjhEeVahu4+H Vh6tIQhKBHv6JC/KM08jSFgiHwtDWwNC1wGi/yvj0LdVGWNNWaOJHm0184J9mk/+ vUMT8wD7Tfsd/7DJVawS+wrCD1BPQRgkH804j5tiQo5bmztPeCg= -----END CERTIFICATE-----Generated at Tue Jun 3 23:33:30 2025 by rpki-client