$ rpki-client -vvf repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.mft File: 9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.mft (raw, json) Hash identifier: 3kEQnDYD2zKo5oWycDjRf6WNsSUXh1QOTiRZON9gOvA= Subject key identifier: 4B:7E:3B:49:85:CB:EE:2C:D1:F9:74:9A:71:28:32:5A:D2:BB:28:28 Authority key identifier: 9F:5F:18:EC:02:2F:5E:04:65:72:CD:5F:5C:C4:21:FA:9D:AF:FA:EA Certificate issuer: /CN=9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA Certificate serial: 44A30C23250CFECF8044CBABC3CFA3143E5DA2AF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.mft Manifest number: 49 Signing time: Fri 06 Jun 2025 01:30:03 +0000 Manifest this update: Fri 06 Jun 2025 01:25:03 +0000 Manifest next update: Mon 09 Jun 2025 03:06:03 +0000 Files and hashes: 1: 9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.crl (hash: ijnJtt9o5F5WP2Y+xa4etDB4Z96FssM4+z9NCkM9aBY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.crl rsync://repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 03:06:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:a3:0c:23:25:0c:fe:cf:80:44:cb:ab:c3:cf:a3:14:3e:5d:a2:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA Validity Not Before: Jun 6 01:25:03 2025 GMT Not After : Jun 9 03:06:03 2025 GMT Subject: CN=4B7E3B4985CBEE2CD1F9749A7128325AD2BB2828 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:d7:87:9d:d9:5f:61:6d:a4:60:8c:62:62:83: 16:d4:9a:f6:b6:6e:c5:c7:0a:b2:97:fe:fa:21:eb: 74:16:fb:ba:70:8a:ec:cc:ac:af:7c:e9:16:2c:fa: 1a:2c:6c:43:c4:80:e8:3c:fb:b0:35:c7:ed:df:b8: 4b:7a:55:d8:e7:ae:4f:32:90:0a:09:9e:29:ce:06: c7:3d:00:58:01:46:75:c4:d7:6d:80:67:cf:37:f1: eb:51:b9:f9:86:6c:4b:50:7a:57:7d:1a:60:d3:c6: 65:f7:f7:5e:17:3a:6d:71:4e:6d:ce:b5:65:6b:ec: 94:9d:42:6c:67:b0:54:53:f2:10:ee:d2:3f:7d:5a: a7:00:eb:df:a1:3f:79:c8:37:f1:22:94:a0:c0:1b: ee:3a:af:53:43:24:cc:d9:16:08:b0:d8:93:44:c3: 98:31:ee:3a:6a:17:a3:20:f1:d5:66:0a:51:69:d5: b2:78:ae:c0:34:0b:f7:6e:43:1d:41:b2:9d:5f:d5: 41:88:ba:bb:b9:73:6e:60:9b:ca:de:ae:df:e2:20: eb:ce:f2:a5:9e:33:35:49:b5:2b:02:12:bb:2a:fd: 06:9c:39:c5:cb:ac:3d:28:a4:b0:06:20:01:9c:9c: ab:97:8d:2e:9e:08:ea:f7:eb:ce:69:a4:7e:7c:c7: 3e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:7E:3B:49:85:CB:EE:2C:D1:F9:74:9A:71:28:32:5A:D2:BB:28:28 X509v3 Authority Key Identifier: keyid:9F:5F:18:EC:02:2F:5E:04:65:72:CD:5F:5C:C4:21:FA:9D:AF:FA:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:b6:3b:f3:e8:fb:44:64:9a:f3:b1:d9:ee:ed:2d:69:b4:cf: 9c:f4:38:70:e4:98:90:eb:80:53:b7:2d:52:8d:f2:48:54:92: cc:3f:78:86:f9:b9:0c:88:99:ee:2e:a8:93:e3:2c:6f:84:9f: bc:0b:9f:7b:16:89:db:4f:33:96:3c:b0:94:61:29:ff:05:8e: 8e:7a:72:52:68:1c:2a:fb:60:62:50:0f:b9:08:d5:aa:26:93: cd:8a:1a:9e:3b:62:ec:75:ae:24:5b:cc:21:37:4f:d6:d1:83: 94:ae:f0:e6:8a:a0:c3:af:b3:fa:6d:30:f6:01:dc:d3:9c:3c: 82:79:f4:5e:83:29:96:0b:cc:75:91:50:f4:94:2f:89:5c:2d: 33:e8:8c:bc:f4:1e:fe:70:af:15:41:50:53:5a:1f:1e:6e:1a: 27:94:79:58:b1:3a:f0:8f:94:2f:ae:0f:64:c4:04:30:b1:d4: c8:50:21:1d:ff:60:73:e4:a9:34:8c:f0:d7:45:60:b1:d7:4a: b1:6d:b6:79:a0:4b:8e:76:dd:e1:87:1c:df:fb:2d:f7:77:75: 36:60:5c:af:24:46:0d:8c:75:fb:7b:50:a9:36:2f:8c:32:4e: 3a:49:b0:12:e3:af:11:f5:d9:8b:4d:44:29:92:72:1c:f6:c6: db:d7:a7:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURKMMIyUM/s+ARMurw8+jFD5doq8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY1RjE4RUMwMjJGNUUwNDY1NzJDRDVGNUNDNDIxRkE5 REFGRkFFQTAeFw0yNTA2MDYwMTI1MDNaFw0yNTA2MDkwMzA2MDNaMDMxMTAvBgNV BAMTKDRCN0UzQjQ5ODVDQkVFMkNEMUY5NzQ5QTcxMjgzMjVBRDJCQjI4MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm14ed2V9hbaRgjGJigxbUmva2 bsXHCrKX/voh63QW+7pwiuzMrK986RYs+hosbEPEgOg8+7A1x+3fuEt6Vdjnrk8y kAoJninOBsc9AFgBRnXE122AZ8838etRufmGbEtQeld9GmDTxmX3914XOm1xTm3O tWVr7JSdQmxnsFRT8hDu0j99WqcA69+hP3nIN/EilKDAG+46r1NDJMzZFgiw2JNE w5gx7jpqF6Mg8dVmClFp1bJ4rsA0C/duQx1Bsp1f1UGIuru5c25gm8rert/iIOvO 8qWeMzVJtSsCErsq/QacOcXLrD0opLAGIAGcnKuXjS6eCOr3685ppH58xz49AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS347SYXL7izR+XSacSgyWtK7KCgwHwYDVR0j BBgwFoAUn18Y7AIvXgRlcs1fXMQh+p2v+uowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MmFlNWUyMS0wOGNjLTRjYTQtYjk5Yy01ZmY1YTBkNDY0OTAvMC85RjVGMThFQzAy MkY1RTA0NjU3MkNENUY1Q0M0MjFGQTlEQUZGQUVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY1RjE4RUMwMjJGNUUwNDY1NzJDRDVGNUNDNDIxRkE5REFG RkFFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjJhZTVlMjEtMDhjYy00Y2E0LWI5 OWMtNWZmNWEwZDQ2NDkwLzAvOUY1RjE4RUMwMjJGNUUwNDY1NzJDRDVGNUNDNDIx RkE5REFGRkFFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABi2O/Po+0RkmvOx2e7tLWm0z5z0OHDkmJDr gFO3LVKN8khUksw/eIb5uQyIme4uqJPjLG+En7wLn3sWidtPM5Y8sJRhKf8Fjo56 clJoHCr7YGJQD7kI1aomk82KGp47Yux1riRbzCE3T9bRg5Su8OaKoMOvs/ptMPYB 3NOcPIJ59F6DKZYLzHWRUPSUL4lcLTPojLz0Hv5wrxVBUFNaHx5uGieUeVixOvCP lC+uD2TEBDCx1MhQIR3/YHPkqTSM8NdFYLHXSrFttnmgS4523eGHHN/7Lfd3dTZg XK8kRg2Mdft7UKk2L4wyTjpJsBLjrxH12YtNRCmSchz2xtvXp4U= -----END CERTIFICATE-----Generated at Sun Jun 8 01:55:45 2025 by rpki-client