$ rpki-client -vvf repo-rpki.idnic.net/repo/d4488d56-6ead-4ce4-8d33-2dcf080d0876/0/75124AA5DD7D2B53783B8C956570CF3235324A6C.mft File: 75124AA5DD7D2B53783B8C956570CF3235324A6C.mft (raw, json) Hash identifier: iQx+2qnoniKVsv8RPRVGTJSREJYCq2+nYzj0AyjN2Es= Subject key identifier: 13:0C:02:58:70:B1:3D:7A:6C:3D:FE:CA:AF:5B:94:EC:8C:53:9B:1E Authority key identifier: 75:12:4A:A5:DD:7D:2B:53:78:3B:8C:95:65:70:CF:32:35:32:4A:6C Certificate issuer: /CN=75124AA5DD7D2B53783B8C956570CF3235324A6C Certificate serial: 18CE791EC32634CBA1439FCAA6E4DA72BBD1927A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75124AA5DD7D2B53783B8C956570CF3235324A6C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d4488d56-6ead-4ce4-8d33-2dcf080d0876/0/75124AA5DD7D2B53783B8C956570CF3235324A6C.mft Manifest number: 01D2 Signing time: Sun 01 Jun 2025 23:50:59 +0000 Manifest this update: Sun 01 Jun 2025 23:45:59 +0000 Manifest next update: Wed 04 Jun 2025 23:53:59 +0000 Files and hashes: 1: 75124AA5DD7D2B53783B8C956570CF3235324A6C.crl (hash: EdCQ4fpFt18OObbjoN323+AlfT+Y42MjxefAZ18y9b4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d4488d56-6ead-4ce4-8d33-2dcf080d0876/0/75124AA5DD7D2B53783B8C956570CF3235324A6C.crl rsync://repo-rpki.idnic.net/repo/d4488d56-6ead-4ce4-8d33-2dcf080d0876/0/75124AA5DD7D2B53783B8C956570CF3235324A6C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75124AA5DD7D2B53783B8C956570CF3235324A6C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 23:53:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:ce:79:1e:c3:26:34:cb:a1:43:9f:ca:a6:e4:da:72:bb:d1:92:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75124AA5DD7D2B53783B8C956570CF3235324A6C Validity Not Before: Jun 1 23:45:59 2025 GMT Not After : Jun 4 23:53:59 2025 GMT Subject: CN=130C025870B13D7A6C3DFECAAF5B94EC8C539B1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:71:74:65:60:27:f0:3e:ef:4f:52:6c:21:f8: 46:7d:69:7e:21:c7:e7:d7:a7:be:9d:53:db:04:ec: e3:e1:c9:d7:4b:95:42:94:55:8f:30:a2:f6:aa:53: 98:21:1a:b1:0b:9f:02:5b:c9:28:7c:2f:64:e1:cc: fb:13:ca:47:75:56:fc:71:46:c8:8e:24:02:55:31: ce:a6:e4:38:1c:0e:11:78:3d:94:72:04:57:2e:2b: f3:7b:d6:00:4e:12:8e:e2:d1:b9:bb:8e:e1:32:6f: 34:7f:16:db:57:b1:c1:51:4b:1a:f3:3d:d7:4a:4e: 6f:2e:c0:d1:e0:3c:72:10:c9:04:84:77:d1:8a:e6: 4c:17:c7:e4:2e:43:54:11:df:4f:f0:f8:e9:21:7a: c4:43:f9:cd:80:2e:45:4c:7d:67:9d:dc:3b:d4:c1: 97:ba:61:47:08:0f:bc:ce:31:e4:ba:0d:c0:b5:47: e4:a4:cb:30:79:e1:bd:8e:7a:9b:0c:8c:56:d4:23: 0f:17:78:3f:88:63:2b:8b:0f:ba:e7:23:b6:8c:2a: 34:59:8e:0b:e6:39:31:01:bc:b2:b2:d1:f5:44:ad: 56:7f:49:1a:ed:a7:e6:e5:e2:1f:83:5b:c0:39:36: 08:29:23:e5:bc:63:2e:e1:0f:1f:2b:aa:63:ae:78: 59:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:0C:02:58:70:B1:3D:7A:6C:3D:FE:CA:AF:5B:94:EC:8C:53:9B:1E X509v3 Authority Key Identifier: keyid:75:12:4A:A5:DD:7D:2B:53:78:3B:8C:95:65:70:CF:32:35:32:4A:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d4488d56-6ead-4ce4-8d33-2dcf080d0876/0/75124AA5DD7D2B53783B8C956570CF3235324A6C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/75124AA5DD7D2B53783B8C956570CF3235324A6C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4488d56-6ead-4ce4-8d33-2dcf080d0876/0/75124AA5DD7D2B53783B8C956570CF3235324A6C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:78:cc:3c:10:7b:6d:18:b8:9d:9e:10:cc:5c:f6:5c:84:d8: 12:34:61:9a:9b:6e:19:72:30:53:08:b2:33:d6:81:66:22:67: cf:7c:5e:f0:82:fd:2f:99:67:0e:7d:55:80:20:a2:59:58:81: ec:f2:b8:6e:7e:d9:9b:c9:f1:22:16:66:c9:0a:03:1e:6c:ad: 98:0a:a1:25:b4:7b:af:84:48:5c:be:f9:97:f1:4d:18:02:d1: e6:16:01:3e:14:76:88:e0:06:66:87:93:da:7b:be:b9:a0:2f: d7:9c:25:6b:56:76:b7:d8:e4:2f:35:ae:77:94:04:77:0c:c2: 4a:34:a3:9e:f3:31:20:3a:fa:d6:b8:48:ef:8b:56:c2:c6:4e: 39:91:ed:0f:f6:d2:61:81:8b:8b:2f:9a:8e:00:60:6e:d5:d4: b4:19:6f:77:06:50:a4:a3:e9:78:2a:07:80:11:42:5b:8a:61: de:73:46:0f:44:d4:6d:0b:26:1e:3c:4c:8d:c2:78:39:47:6c: 10:73:4d:15:da:c2:1a:1c:f7:93:d8:83:9f:4d:dc:df:e7:0b: 14:35:2d:ce:9e:69:f5:bc:ce:70:13:10:2c:5a:d3:f8:96:37: e5:d5:65:d7:30:f4:06:4a:0e:9c:73:3a:da:fd:d8:0d:92:97: d8:69:53:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGM55HsMmNMuhQ5/KpuTacrvRknowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzUxMjRBQTVERDdEMkI1Mzc4M0I4Qzk1NjU3MENGMzIz NTMyNEE2QzAeFw0yNTA2MDEyMzQ1NTlaFw0yNTA2MDQyMzUzNTlaMDMxMTAvBgNV BAMTKDEzMEMwMjU4NzBCMTNEN0E2QzNERkVDQUFGNUI5NEVDOEM1MzlCMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAcXRlYCfwPu9PUmwh+EZ9aX4h x+fXp76dU9sE7OPhyddLlUKUVY8wovaqU5ghGrELnwJbySh8L2ThzPsTykd1Vvxx RsiOJAJVMc6m5DgcDhF4PZRyBFcuK/N71gBOEo7i0bm7juEybzR/FttXscFRSxrz PddKTm8uwNHgPHIQyQSEd9GK5kwXx+QuQ1QR30/w+OkhesRD+c2ALkVMfWed3DvU wZe6YUcID7zOMeS6DcC1R+SkyzB54b2OepsMjFbUIw8XeD+IYyuLD7rnI7aMKjRZ jgvmOTEBvLKy0fVErVZ/SRrtp+bl4h+DW8A5NggpI+W8Yy7hDx8rqmOueFm3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEwwCWHCxPXpsPf7Kr1uU7IxTmx4wHwYDVR0j BBgwFoAUdRJKpd19K1N4O4yVZXDPMjUySmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NDQ4OGQ1Ni02ZWFkLTRjZTQtOGQzMy0yZGNmMDgwZDA4NzYvMC83NTEyNEFBNURE N0QyQjUzNzgzQjhDOTU2NTcwQ0YzMjM1MzI0QTZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzUxMjRBQTVERDdEMkI1Mzc4M0I4Qzk1NjU3MENGMzIzNTMy NEE2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDQ0ODhkNTYtNmVhZC00Y2U0LThk MzMtMmRjZjA4MGQwODc2LzAvNzUxMjRBQTVERDdEMkI1Mzc4M0I4Qzk1NjU3MENG MzIzNTMyNEE2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH94zDwQe20YuJ2eEMxc9lyE2BI0YZqbbhly MFMIsjPWgWYiZ898XvCC/S+ZZw59VYAgollYgezyuG5+2ZvJ8SIWZskKAx5srZgK oSW0e6+ESFy++ZfxTRgC0eYWAT4UdojgBmaHk9p7vrmgL9ecJWtWdrfY5C81rneU BHcMwko0o57zMSA6+ta4SO+LVsLGTjmR7Q/20mGBi4svmo4AYG7V1LQZb3cGUKSj 6XgqB4ARQluKYd5zRg9E1G0LJh48TI3CeDlHbBBzTRXawhoc95PYg59N3N/nCxQ1 Lc6eafW8znATECxa0/iWN+XVZdcw9AZKDpxzOtr92A2Sl9hpU+Q= -----END CERTIFICATE-----Generated at Tue Jun 3 23:42:01 2025 by rpki-client