$ rpki-client -vvf repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft File: 0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft (raw, json) Hash identifier: byQzx1G2Xsi4mfQKIR2tOCyXFoFT9LK/Ki/j9gAnDQk= Subject key identifier: 20:55:04:10:5D:57:28:CB:C7:42:B5:B8:48:23:53:44:AA:33:FA:12 Authority key identifier: 0F:BA:D9:2F:48:DF:15:47:7E:4D:D9:3C:DC:7A:52:77:FE:93:A8:EB Certificate issuer: /CN=0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB Certificate serial: 02344694D05514A947460E8160E6CBA7704A24E3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft Manifest number: 6B Signing time: Fri 06 Jun 2025 20:31:02 +0000 Manifest this update: Fri 06 Jun 2025 20:26:02 +0000 Manifest next update: Tue 10 Jun 2025 00:37:02 +0000 Files and hashes: 1: 0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.crl (hash: dP+/LrJEjvxWHOtaCBk/3TABDWJ639jPADWXy7Djol4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.crl rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 00:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:34:46:94:d0:55:14:a9:47:46:0e:81:60:e6:cb:a7:70:4a:24:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB Validity Not Before: Jun 6 20:26:02 2025 GMT Not After : Jun 10 00:37:02 2025 GMT Subject: CN=205504105D5728CBC742B5B848235344AA33FA12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:6a:2f:db:65:bf:5f:ec:62:b1:85:49:25:0a: 34:be:5e:6e:d8:03:a2:06:3c:3a:12:e7:13:00:eb: 46:bf:8c:b6:5a:54:a1:0b:ca:d6:b1:af:3f:d2:d1: c6:3e:67:57:b2:82:ea:3d:19:d6:67:71:f5:6b:d9: ee:e4:49:61:fa:fd:8f:45:c9:ae:83:d7:97:3f:c5: a7:59:04:bb:fe:e9:05:aa:77:9f:1b:6a:30:fa:79: 4b:18:a9:24:f4:f7:7e:b4:29:89:ff:bf:4b:01:81: 06:31:b2:36:dc:8a:19:5f:66:7b:6b:53:09:0d:36: 7a:af:cc:8a:66:b3:5f:d6:39:27:fb:ad:b4:ff:66: e4:ad:4b:f1:b8:a4:ad:30:67:f0:f3:bc:bd:60:be: 64:58:3f:c2:e3:93:44:0d:23:e9:1a:1d:7f:b7:45: cb:9f:d4:ad:50:c7:f4:bf:b2:45:21:25:ca:8c:20: 39:cd:7c:91:44:a5:61:48:20:c6:64:74:f9:64:a9: 36:fa:ea:23:60:dc:bf:15:b7:56:67:38:3d:55:4b: a0:86:1e:d2:30:d3:75:f1:00:5d:0e:5e:46:a3:f2: f0:02:1b:6b:38:49:ee:ea:84:59:34:8e:27:50:4f: 40:00:d0:09:a3:66:42:6b:15:e6:f8:35:3b:10:3e: cd:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:55:04:10:5D:57:28:CB:C7:42:B5:B8:48:23:53:44:AA:33:FA:12 X509v3 Authority Key Identifier: keyid:0F:BA:D9:2F:48:DF:15:47:7E:4D:D9:3C:DC:7A:52:77:FE:93:A8:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:5b:31:d1:2e:32:b1:c4:89:76:ad:55:17:9f:84:a9:0d:4a: 49:08:ab:ff:e8:02:7e:fb:2e:f1:d7:77:14:ef:e7:dc:58:58: 16:4a:84:37:51:cb:46:72:ab:f1:ac:b7:98:70:ee:7e:91:3b: 66:59:d2:f6:1d:90:72:2e:d1:38:08:1b:fc:99:0b:43:7e:e8: 10:86:29:9c:cd:a4:61:4b:8e:e3:a7:4f:b4:0b:26:82:bf:65: 37:dc:79:9c:bf:ce:6b:91:f4:87:fb:22:48:81:60:bd:a4:ff: e8:b4:db:4f:5c:6a:a9:8d:5c:48:b5:13:57:3e:0d:26:c5:9d: cd:77:12:d7:3b:de:be:4f:e9:43:c8:36:44:34:9c:bd:f7:ea: b8:36:76:22:6f:fc:e1:7f:8e:90:fc:3d:5a:56:ad:37:35:ac: 47:47:90:84:6d:82:a1:eb:73:b8:b1:23:c0:c5:52:11:18:ee: 12:72:38:36:16:6f:ab:0d:a6:ee:8b:62:ca:61:61:e5:15:c6: e4:39:05:e8:0c:1c:d9:3c:ec:7b:ec:4a:c6:b3:93:32:26:29: 26:69:47:8a:cb:e7:e9:09:44:9f:8b:c2:a1:46:df:2b:ee:bf: 24:9b:c6:3b:54:50:59:b6:5c:31:dc:38:82:36:a4:c1:4b:12: 61:a2:43:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAjRGlNBVFKlHRg6BYObLp3BKJOMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZCQUQ5MkY0OERGMTU0NzdFNEREOTNDREM3QTUyNzdG RTkzQThFQjAeFw0yNTA2MDYyMDI2MDJaFw0yNTA2MTAwMDM3MDJaMDMxMTAvBgNV BAMTKDIwNTUwNDEwNUQ1NzI4Q0JDNzQyQjVCODQ4MjM1MzQ0QUEzM0ZBMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdai/bZb9f7GKxhUklCjS+Xm7Y A6IGPDoS5xMA60a/jLZaVKELytaxrz/S0cY+Z1eyguo9GdZncfVr2e7kSWH6/Y9F ya6D15c/xadZBLv+6QWqd58bajD6eUsYqST09360KYn/v0sBgQYxsjbcihlfZntr UwkNNnqvzIpms1/WOSf7rbT/ZuStS/G4pK0wZ/DzvL1gvmRYP8Ljk0QNI+kaHX+3 Rcuf1K1Qx/S/skUhJcqMIDnNfJFEpWFIIMZkdPlkqTb66iNg3L8Vt1ZnOD1VS6CG HtIw03XxAF0OXkaj8vACG2s4Se7qhFk0jidQT0AA0AmjZkJrFeb4NTsQPs0NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIFUEEF1XKMvHQrW4SCNTRKoz+hIwHwYDVR0j BBgwFoAUD7rZL0jfFUd+Tdk83HpSd/6TqOswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODFhZjAyMS0xYzAxLTRhMmUtYjVkMy1jMWJiYjE2NTBjNDMvMC8wRkJBRDkyRjQ4 REYxNTQ3N0U0REQ5M0NEQzdBNTI3N0ZFOTNBOEVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZCQUQ5MkY0OERGMTU0NzdFNEREOTNDREM3QTUyNzdGRTkz QThFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzgxYWYwMjEtMWMwMS00YTJlLWI1 ZDMtYzFiYmIxNjUwYzQzLzAvMEZCQUQ5MkY0OERGMTU0NzdFNEREOTNDREM3QTUy NzdGRTkzQThFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKFbMdEuMrHEiXatVRefhKkNSkkIq//oAn77 LvHXdxTv59xYWBZKhDdRy0Zyq/Gst5hw7n6RO2ZZ0vYdkHIu0TgIG/yZC0N+6BCG KZzNpGFLjuOnT7QLJoK/ZTfceZy/zmuR9If7IkiBYL2k/+i0209caqmNXEi1E1c+ DSbFnc13Etc73r5P6UPINkQ0nL336rg2diJv/OF/jpD8PVpWrTc1rEdHkIRtgqHr c7ixI8DFUhEY7hJyODYWb6sNpu6LYsphYeUVxuQ5BegMHNk87HvsSsazkzImKSZp R4rL5+kJRJ+LwqFG3yvuvySbxjtUUFm2XDHcOII2pMFLEmGiQ3A= -----END CERTIFICATE-----Generated at Sun Jun 8 05:04:42 2025 by rpki-client