$ rpki-client -vvf repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft File: D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft (raw, json) Hash identifier: BdjKS2UPMUyJcDbXabiOFzSLyf/fQbQ8MHybUrMvL2Y= Subject key identifier: AE:89:43:6E:57:FE:F0:29:8E:5C:94:67:4A:CA:70:3F:D7:8C:2D:B0 Authority key identifier: D7:F2:3D:7B:54:89:0F:0E:EC:F5:50:FF:A4:27:99:B6:4D:9B:D4:C9 Certificate issuer: /CN=D7F23D7B54890F0EECF550FFA42799B64D9BD4C9 Certificate serial: 70F7630E97DD9D02B6F5372E41177385EBBD6C34 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft Manifest number: D4 Signing time: Mon 02 Jun 2025 06:21:17 +0000 Manifest this update: Mon 02 Jun 2025 06:16:17 +0000 Manifest next update: Thu 05 Jun 2025 17:37:17 +0000 Files and hashes: 1: D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.crl (hash: FSZeKt730Y4nbEmFFq7a6wdyOG2AMPVMwOhfHqvqctg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.crl rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 17:37:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:f7:63:0e:97:dd:9d:02:b6:f5:37:2e:41:17:73:85:eb:bd:6c:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7F23D7B54890F0EECF550FFA42799B64D9BD4C9 Validity Not Before: Jun 2 06:16:17 2025 GMT Not After : Jun 5 17:37:17 2025 GMT Subject: CN=AE89436E57FEF0298E5C94674ACA703FD78C2DB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:72:4b:cf:aa:45:f6:e9:1f:a2:39:34:a7:f5: 48:be:3b:97:d8:e9:55:0d:a0:4a:32:ff:ed:f0:bb: 1f:fc:29:c1:36:f5:d1:c7:c5:ff:fa:15:37:24:ec: d4:1a:50:64:15:ee:f2:1e:4a:e8:54:58:e5:22:1a: a2:e6:dc:c8:14:4f:ce:c1:e6:a4:70:65:0e:d3:12: b6:30:e1:95:aa:70:35:f7:46:bb:06:06:b1:c1:30: 54:4e:c1:75:16:47:3f:c5:a9:08:b3:9d:aa:b1:5b: 3d:dd:40:60:21:26:67:db:35:31:c2:38:5b:3e:84: 74:43:cc:c2:44:49:59:f6:d7:47:9c:b5:b1:04:73: fb:d8:df:38:bf:a7:99:61:86:42:f0:b7:9c:4b:a2: ce:6f:f2:0f:43:5c:8c:e3:af:bb:d6:30:c2:9a:2b: 0d:9c:bd:22:b1:ef:5d:e3:c1:48:e2:3c:2a:26:be: 30:e6:f5:e7:aa:3f:9d:00:5b:eb:64:bd:b5:a1:fe: 9a:6b:70:97:89:89:aa:35:9f:4b:b1:70:9d:d0:47: 5d:24:c4:74:30:08:16:02:f0:1e:2f:4a:09:95:d9: 4d:c1:0e:0e:11:18:a9:79:4e:74:51:cc:49:b9:46: 5e:9b:ae:26:15:f8:c1:8b:ca:5d:62:6c:10:63:8f: e4:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:89:43:6E:57:FE:F0:29:8E:5C:94:67:4A:CA:70:3F:D7:8C:2D:B0 X509v3 Authority Key Identifier: keyid:D7:F2:3D:7B:54:89:0F:0E:EC:F5:50:FF:A4:27:99:B6:4D:9B:D4:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:56:2d:a3:58:82:47:83:a1:15:9d:cf:52:cd:7c:93:4f:af: fd:bf:f7:55:16:72:38:28:1b:da:35:c2:91:2f:d3:c4:5c:20: a9:c6:92:96:5b:09:bb:36:f5:86:2f:9c:91:0b:ba:9b:64:bd: 18:a1:7a:a2:3d:ce:12:9b:8a:e5:bd:90:1f:d9:74:04:53:f9: f8:6b:34:f5:de:cb:15:c1:b3:a8:bb:d9:5d:c5:8b:83:94:f4: 70:16:1a:5f:8a:e7:e8:5d:c8:a3:57:2d:dd:35:eb:39:c9:c1: 1c:6e:20:19:73:56:e0:35:86:bb:3b:a9:84:99:11:de:39:25: 56:3f:0b:dc:7d:52:c2:f3:7a:b9:60:1c:4e:f8:07:c6:d0:a3: 95:cc:dd:6d:3b:af:56:49:ee:90:62:79:85:ab:4f:62:f9:f2: ac:1b:68:39:0d:ba:70:e8:08:53:b0:df:fc:89:ff:72:19:c2: e4:a6:ea:10:69:28:e9:fc:8b:2d:6b:8f:d7:15:f2:66:ea:5b: c7:1d:5e:3e:d4:81:e5:5d:d8:ea:0b:6c:00:38:fb:e8:a7:cd: cc:3d:1f:46:54:3c:51:b8:d4:7a:be:1a:55:a9:ac:a4:9f:1d: b8:86:ce:d1:74:df:86:b5:21:d0:e8:2f:62:c8:a4:5e:5d:31: 87:00:05:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcPdjDpfdnQK29TcuQRdzheu9bDQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdGMjNEN0I1NDg5MEYwRUVDRjU1MEZGQTQyNzk5QjY0 RDlCRDRDOTAeFw0yNTA2MDIwNjE2MTdaFw0yNTA2MDUxNzM3MTdaMDMxMTAvBgNV BAMTKEFFODk0MzZFNTdGRUYwMjk4RTVDOTQ2NzRBQ0E3MDNGRDc4QzJEQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRckvPqkX26R+iOTSn9Ui+O5fY 6VUNoEoy/+3wux/8KcE29dHHxf/6FTck7NQaUGQV7vIeSuhUWOUiGqLm3MgUT87B 5qRwZQ7TErYw4ZWqcDX3RrsGBrHBMFROwXUWRz/FqQiznaqxWz3dQGAhJmfbNTHC OFs+hHRDzMJESVn210ectbEEc/vY3zi/p5lhhkLwt5xLos5v8g9DXIzjr7vWMMKa Kw2cvSKx713jwUjiPComvjDm9eeqP50AW+tkvbWh/pprcJeJiao1n0uxcJ3QR10k xHQwCBYC8B4vSgmV2U3BDg4RGKl5TnRRzEm5Rl6briYV+MGLyl1ibBBjj+RHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrolDblf+8CmOXJRnSspwP9eMLbAwHwYDVR0j BBgwFoAU1/I9e1SJDw7s9VD/pCeZtk2b1MkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Yjk4NTFiMS01YTZkLTRlNzUtOWZmZi1jMDNhOWM0OWNmNjkvMC9EN0YyM0Q3QjU0 ODkwRjBFRUNGNTUwRkZBNDI3OTlCNjREOUJENEM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDdGMjNEN0I1NDg5MEYwRUVDRjU1MEZGQTQyNzk5QjY0RDlC RDRDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmI5ODUxYjEtNWE2ZC00ZTc1LTlm ZmYtYzAzYTljNDljZjY5LzAvRDdGMjNEN0I1NDg5MEYwRUVDRjU1MEZGQTQyNzk5 QjY0RDlCRDRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACJWLaNYgkeDoRWdz1LNfJNPr/2/91UWcjgo G9o1wpEv08RcIKnGkpZbCbs29YYvnJELuptkvRiheqI9zhKbiuW9kB/ZdART+fhr NPXeyxXBs6i72V3Fi4OU9HAWGl+K5+hdyKNXLd016znJwRxuIBlzVuA1hrs7qYSZ Ed45JVY/C9x9UsLzerlgHE74B8bQo5XM3W07r1ZJ7pBieYWrT2L58qwbaDkNunDo CFOw3/yJ/3IZwuSm6hBpKOn8iy1rj9cV8mbqW8cdXj7UgeVd2OoLbAA4++inzcw9 H0ZUPFG41Hq+GlWprKSfHbiGztF034a1IdDoL2LIpF5dMYcABTc= -----END CERTIFICATE-----Generated at Tue Jun 3 23:41:23 2025 by rpki-client