$ rpki-client -vvf repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.mft File: 2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.mft (raw, json) Hash identifier: 8vE26zmMKbQdzVhDRFt0JHFssKJK03joGIbKUaEDdGQ= Subject key identifier: 99:9E:97:A9:89:20:97:05:71:2D:16:BD:E8:3A:25:FF:67:28:32:90 Authority key identifier: 25:66:F4:DF:5C:09:FF:A8:E4:F4:D6:99:99:41:B9:AB:A2:B7:22:8B Certificate issuer: /CN=2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B Certificate serial: 7D0F01359727CD549F4ECFD1514714B704186780 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.mft Manifest number: E1 Signing time: Sat 07 Jun 2025 11:42:01 +0000 Manifest this update: Sat 07 Jun 2025 11:37:01 +0000 Manifest next update: Tue 10 Jun 2025 16:59:01 +0000 Files and hashes: 1: 2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.crl (hash: 4ygmEUH7/x/txNOcuZWdBeS9bZZF1yE2R3x1uPAOBAc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.crl rsync://repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 16:59:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:0f:01:35:97:27:cd:54:9f:4e:cf:d1:51:47:14:b7:04:18:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B Validity Not Before: Jun 7 11:37:01 2025 GMT Not After : Jun 10 16:59:01 2025 GMT Subject: CN=999E97A989209705712D16BDE83A25FF67283290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:16:aa:85:99:44:3a:86:c7:61:2f:f7:bf:ff: ef:b6:e7:1a:fd:33:8d:6a:38:46:a9:7a:99:8c:ae: b1:1c:2d:8e:9c:5b:20:05:e7:db:c1:0e:5a:0a:31: 6b:e6:7e:a4:ad:01:b0:94:ef:ac:ff:a9:ed:ff:59: 96:09:bf:fa:a0:f0:54:7f:5c:74:4f:d4:94:19:f7: e4:ca:02:21:6d:45:b4:da:89:d2:fe:69:08:d6:57: 8a:b3:1b:09:a2:6f:84:c7:84:8e:f4:9e:95:1a:61: 43:36:b0:1f:24:cd:7e:a6:22:9f:9e:ce:73:c1:67: 58:ad:f8:1f:24:fd:78:f9:07:d9:1f:20:98:56:f7: d7:d5:99:dd:22:5d:c8:c0:5a:b9:d2:84:79:90:f1: d7:54:72:f3:37:02:5e:8a:46:2a:25:c3:4c:c4:43: 5e:6f:e7:bf:82:74:8a:b1:69:26:c4:b2:fe:11:de: 28:50:58:67:13:10:f8:66:0c:f2:dd:46:75:64:d8: a4:4e:c7:77:c3:47:96:b2:16:40:06:56:5e:27:9e: 92:cd:b3:0b:d9:bb:15:a9:5d:95:65:0f:e6:b9:96: ca:9b:e3:c2:1e:e5:ac:15:aa:12:bf:54:a9:30:af: ce:21:0d:2b:8c:bb:bd:3a:5f:aa:fd:81:31:32:0a: fd:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:9E:97:A9:89:20:97:05:71:2D:16:BD:E8:3A:25:FF:67:28:32:90 X509v3 Authority Key Identifier: keyid:25:66:F4:DF:5C:09:FF:A8:E4:F4:D6:99:99:41:B9:AB:A2:B7:22:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:06:2a:7e:8d:e3:35:7e:4c:f4:c7:ce:25:60:39:1a:01:3a: 79:89:34:bf:7e:fd:39:9a:76:0f:20:68:bc:b5:24:ec:81:5b: 49:7c:1b:52:a5:5b:cd:c8:97:3a:a1:1d:32:99:5d:f6:64:3a: de:e8:f4:26:10:4a:26:da:20:21:52:c9:9b:b9:d5:7f:5d:2c: 9f:6f:9e:0a:59:e5:4f:d6:95:d1:72:54:bc:a0:05:a8:c9:45: 15:9b:48:ec:75:6d:ef:c9:7c:75:82:9b:5e:3b:fb:b3:4c:13: eb:2c:a3:c6:6d:e4:01:a7:a0:65:f3:bd:b7:2b:e9:22:0e:e5: 61:42:75:92:06:7e:9e:10:77:1d:f6:87:4e:b2:32:17:52:1f: 8e:73:db:48:c0:93:07:bc:7f:d5:3e:f9:c8:2e:db:c5:c9:5f: e8:5a:c3:1c:02:5a:68:df:a9:73:bd:8a:b4:2c:54:c3:1e:99: 6e:76:78:99:18:72:8d:8b:11:68:57:12:63:40:57:c1:67:15: d7:88:8e:71:01:ab:a2:c6:fa:3f:43:fc:23:6f:6c:34:ee:43: b5:5d:9e:d0:f9:8b:e4:39:d8:a6:cb:f8:4e:ce:28:62:16:5e: 04:ac:0e:e3:78:2c:82:b0:de:d8:56:7f:0c:65:53:6a:60:80: 5a:6f:f2:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfQ8BNZcnzVSfTs/RUUcUtwQYZ4AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU2NkY0REY1QzA5RkZBOEU0RjRENjk5OTk0MUI5QUJB MkI3MjI4QjAeFw0yNTA2MDcxMTM3MDFaFw0yNTA2MTAxNjU5MDFaMDMxMTAvBgNV BAMTKDk5OUU5N0E5ODkyMDk3MDU3MTJEMTZCREU4M0EyNUZGNjcyODMyOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCFqqFmUQ6hsdhL/e//++25xr9 M41qOEapepmMrrEcLY6cWyAF59vBDloKMWvmfqStAbCU76z/qe3/WZYJv/qg8FR/ XHRP1JQZ9+TKAiFtRbTaidL+aQjWV4qzGwmib4THhI70npUaYUM2sB8kzX6mIp+e znPBZ1it+B8k/Xj5B9kfIJhW99fVmd0iXcjAWrnShHmQ8ddUcvM3Al6KRiolw0zE Q15v57+CdIqxaSbEsv4R3ihQWGcTEPhmDPLdRnVk2KROx3fDR5ayFkAGVl4nnpLN swvZuxWpXZVlD+a5lsqb48Ie5awVqhK/VKkwr84hDSuMu706X6r9gTEyCv2pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmZ6XqYkglwVxLRa96Dol/2coMpAwHwYDVR0j BBgwFoAUJWb031wJ/6jk9NaZmUG5q6K3IoswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTE2NDExZi03OGNhLTQ5MTYtODkxOS0zN2MxZDk5ZWZiZDgvMC8yNTY2RjRERjVD MDlGRkE4RTRGNEQ2OTk5OTQxQjlBQkEyQjcyMjhCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjU2NkY0REY1QzA5RkZBOEU0RjRENjk5OTk0MUI5QUJBMkI3 MjI4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkxNjQxMWYtNzhjYS00OTE2LTg5 MTktMzdjMWQ5OWVmYmQ4LzAvMjU2NkY0REY1QzA5RkZBOEU0RjRENjk5OTk0MUI5 QUJBMkI3MjI4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACMGKn6N4zV+TPTHziVgORoBOnmJNL9+/Tma dg8gaLy1JOyBW0l8G1KlW83IlzqhHTKZXfZkOt7o9CYQSibaICFSyZu51X9dLJ9v ngpZ5U/WldFyVLygBajJRRWbSOx1be/JfHWCm147+7NME+sso8Zt5AGnoGXzvbcr 6SIO5WFCdZIGfp4Qdx32h06yMhdSH45z20jAkwe8f9U++cgu28XJX+hawxwCWmjf qXO9irQsVMMemW52eJkYco2LEWhXEmNAV8FnFdeIjnEBq6LG+j9D/CNvbDTuQ7Vd ntD5i+Q52KbL+E7OKGIWXgSsDuN4LIKw3thWfwxlU2pggFpv8kE= -----END CERTIFICATE-----Generated at Sun Jun 8 07:22:46 2025 by rpki-client