$ rpki-client -vvf repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.mft File: 20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.mft (raw, json) Hash identifier: th3RgfyPmwFB48Na5kaSlLXG+QbozgB6j4D8OQ8Oous= Subject key identifier: 33:25:F4:21:73:D5:C5:F7:47:FE:0F:20:B5:9E:2E:05:2A:C2:60:3C Authority key identifier: 20:A4:A2:CE:A0:09:88:40:AF:6A:1C:5B:F3:D8:4E:41:5D:7F:18:D5 Certificate issuer: /CN=20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5 Certificate serial: 01C18248C8F98EE8DE2777D16BE686C3F1EB1045 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.mft Manifest number: 78 Signing time: Wed 04 Jun 2025 11:40:00 +0000 Manifest this update: Wed 04 Jun 2025 11:35:00 +0000 Manifest next update: Sat 07 Jun 2025 17:51:00 +0000 Files and hashes: 1: 20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.crl (hash: xVJjq8g8vSHMUniuJDwdOSUW5qM9ts8sGNkcMaupdZ8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.crl rsync://repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 17:51:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:c1:82:48:c8:f9:8e:e8:de:27:77:d1:6b:e6:86:c3:f1:eb:10:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5 Validity Not Before: Jun 4 11:35:00 2025 GMT Not After : Jun 7 17:51:00 2025 GMT Subject: CN=3325F42173D5C5F747FE0F20B59E2E052AC2603C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:03:30:78:1d:16:29:18:3c:23:9e:40:1e:ac: 4e:01:6a:44:56:50:86:c8:46:07:f6:7c:5b:a5:ac: d0:4c:56:e6:fc:f8:fb:c4:b0:6c:09:f4:4b:61:2e: 68:9f:6d:8c:68:d9:63:ea:3d:f9:c6:9a:e0:da:84: 74:20:ec:9d:73:1c:bf:8d:5a:f1:d8:57:3d:32:fa: 6c:ad:22:24:8f:d5:1b:f8:6c:b8:2d:1f:15:4f:0a: 4f:f6:8d:2b:f3:fe:10:77:7f:8d:61:e3:d2:27:c0: 55:1d:4c:d4:48:ee:1f:c2:26:36:62:3a:cf:56:58: 6a:a8:4e:df:08:c4:88:0e:71:5c:ec:b6:1b:59:24: 8d:2a:9f:39:08:86:18:ce:4e:fb:0c:56:05:99:fa: e8:f6:4d:a6:cf:76:99:f2:f3:d9:ce:e1:82:7a:92: fc:27:6b:e0:59:b4:c9:20:c3:87:91:d3:1c:79:79: fc:91:59:8b:e2:6d:a8:cc:d8:6e:bc:c7:5a:6c:da: 46:a2:6e:41:96:8b:ec:b2:f7:10:0e:17:e8:ba:6f: fe:80:00:27:fc:f8:93:f6:50:2b:f6:d1:0e:9c:cc: d7:29:fa:36:bb:0f:0b:62:ec:4f:a3:60:c5:c6:14: c4:9b:c2:d0:8a:1b:ac:d6:1c:19:d1:15:4a:dd:1b: 66:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:25:F4:21:73:D5:C5:F7:47:FE:0F:20:B5:9E:2E:05:2A:C2:60:3C X509v3 Authority Key Identifier: keyid:20:A4:A2:CE:A0:09:88:40:AF:6A:1C:5B:F3:D8:4E:41:5D:7F:18:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac81e6ec-c87b-4fdb-a2fa-ecc470c41d53/0/20A4A2CEA0098840AF6A1C5BF3D84E415D7F18D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:91:49:b0:d0:75:02:87:66:e8:6b:78:77:83:20:25:98:35: ea:7c:e6:a4:78:cd:39:d9:50:dc:6a:61:ea:0f:34:c7:85:3e: 17:b3:6b:87:8e:22:54:2e:a2:91:f3:a9:5c:39:8d:33:53:4a: aa:8e:b1:66:77:73:e2:ab:df:6a:42:47:2b:97:22:52:ba:35: 5d:26:47:f6:33:72:73:9e:7e:df:c6:88:b8:c0:32:d8:d1:e8: a2:cd:b5:98:19:28:61:8b:07:18:25:18:e8:53:d6:71:fd:65: 9b:25:58:35:8b:a7:b4:a9:46:24:7c:89:3c:a0:7d:ab:e6:2b: 35:9d:f4:14:11:cb:dd:0f:08:75:10:aa:d4:62:9d:64:3a:43: 9f:e3:bf:5a:9e:87:40:fc:6a:90:a9:ee:a6:87:1d:6d:b9:76: f2:1a:6c:ca:63:db:8f:35:cf:59:3a:bf:8a:68:f6:fb:43:9b: f4:e4:f2:7f:dd:f2:3b:4b:13:7f:bb:32:f0:aa:05:c6:89:9a: c2:71:46:40:e5:d1:80:9c:e7:6e:17:6b:5c:ec:99:aa:80:0e: e3:41:0a:40:cc:2b:ff:bb:3c:ac:60:e3:d7:e3:f5:d8:77:c2: 8f:cc:14:23:43:a5:27:d7:48:d3:4f:e2:a8:87:f0:18:c7:ae: 2d:4d:8f:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAcGCSMj5jujeJ3fRa+aGw/HrEEUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBBNEEyQ0VBMDA5ODg0MEFGNkExQzVCRjNEODRFNDE1 RDdGMThENTAeFw0yNTA2MDQxMTM1MDBaFw0yNTA2MDcxNzUxMDBaMDMxMTAvBgNV BAMTKDMzMjVGNDIxNzNENUM1Rjc0N0ZFMEYyMEI1OUUyRTA1MkFDMjYwM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTAzB4HRYpGDwjnkAerE4BakRW UIbIRgf2fFulrNBMVub8+PvEsGwJ9EthLmifbYxo2WPqPfnGmuDahHQg7J1zHL+N WvHYVz0y+mytIiSP1Rv4bLgtHxVPCk/2jSvz/hB3f41h49InwFUdTNRI7h/CJjZi Os9WWGqoTt8IxIgOcVzsthtZJI0qnzkIhhjOTvsMVgWZ+uj2TabPdpny89nO4YJ6 kvwna+BZtMkgw4eR0xx5efyRWYvibajM2G68x1ps2kaibkGWi+yy9xAOF+i6b/6A ACf8+JP2UCv20Q6czNcp+ja7Dwti7E+jYMXGFMSbwtCKG6zWHBnRFUrdG2aXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMyX0IXPVxfdH/g8gtZ4uBSrCYDwwHwYDVR0j BBgwFoAUIKSizqAJiECvahxb89hOQV1/GNUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YzgxZTZlYy1jODdiLTRmZGItYTJmYS1lY2M0NzBjNDFkNTMvMC8yMEE0QTJDRUEw MDk4ODQwQUY2QTFDNUJGM0Q4NEU0MTVEN0YxOEQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjBBNEEyQ0VBMDA5ODg0MEFGNkExQzVCRjNEODRFNDE1RDdG MThENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWM4MWU2ZWMtYzg3Yi00ZmRiLWEy ZmEtZWNjNDcwYzQxZDUzLzAvMjBBNEEyQ0VBMDA5ODg0MEFGNkExQzVCRjNEODRF NDE1RDdGMThENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADqRSbDQdQKHZuhreHeDICWYNep85qR4zTnZ UNxqYeoPNMeFPheza4eOIlQuopHzqVw5jTNTSqqOsWZ3c+Kr32pCRyuXIlK6NV0m R/YzcnOeft/GiLjAMtjR6KLNtZgZKGGLBxglGOhT1nH9ZZslWDWLp7SpRiR8iTyg favmKzWd9BQRy90PCHUQqtRinWQ6Q5/jv1qeh0D8apCp7qaHHW25dvIabMpj2481 z1k6v4po9vtDm/Tk8n/d8jtLE3+7MvCqBcaJmsJxRkDl0YCc524Xa1zsmaqADuNB CkDMK/+7PKxg49fj9dh3wo/MFCNDpSfXSNNP4qiH8BjHri1Nj5Y= -----END CERTIFICATE-----Generated at Thu Jun 5 18:11:31 2025 by rpki-client