$ rpki-client -vvf repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft File: 97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft (raw, json) Hash identifier: TiPkGiH0n3u/lts8KJ1TDpQ9qt678oWb95xE5Qk1AXw= Subject key identifier: 6B:5E:21:35:FD:8F:86:34:A4:01:4D:E4:7E:CD:55:74:C4:48:12:28 Authority key identifier: 97:A2:5D:3F:DD:AA:C4:37:1D:F4:BE:C7:7A:A5:89:D7:E1:71:45:DC Certificate issuer: /CN=97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC Certificate serial: 5AD527B716219845D371BB31B810B88BF93C12A5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft Manifest number: 02B9 Signing time: Tue 03 Jun 2025 15:10:00 +0000 Manifest this update: Tue 03 Jun 2025 15:05:00 +0000 Manifest next update: Fri 06 Jun 2025 19:17:00 +0000 Files and hashes: 1: 97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.crl (hash: 13TjNDXoRLC+QLsa+qtNWOmwYhZxd4R6CQfoUdDzGUk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.crl rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:17:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:d5:27:b7:16:21:98:45:d3:71:bb:31:b8:10:b8:8b:f9:3c:12:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC Validity Not Before: Jun 3 15:05:00 2025 GMT Not After : Jun 6 19:17:00 2025 GMT Subject: CN=6B5E2135FD8F8634A4014DE47ECD5574C4481228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:68:63:ec:ba:ec:30:2e:e1:df:18:2a:cb:12: fa:b3:81:81:c4:29:51:9c:a8:6b:92:56:96:38:5d: 8e:a7:07:a8:9d:60:24:80:67:24:90:91:08:ed:2f: 96:0a:7c:c5:be:51:48:90:7a:f7:4f:59:5f:9d:77: 7f:06:6a:04:9f:9b:1b:7b:0a:5d:7c:a2:d4:02:2c: 4a:03:1a:30:13:6a:fa:0a:60:7c:0e:57:1c:b8:e0: f9:1b:6d:2a:45:32:06:3a:6c:f4:46:5c:39:ab:2d: ad:f4:e9:8f:a3:3d:39:5d:c8:db:3d:aa:dc:d1:78: ee:4a:cf:bf:3e:9f:0e:04:c0:b4:93:d2:6e:8d:a1: 73:20:2d:63:3a:45:32:7c:39:67:74:11:18:16:c4: 0e:16:eb:1c:36:b4:41:1e:a3:39:5a:b6:8e:5d:5e: 88:4e:57:97:3a:f6:90:70:16:09:7a:e6:e9:f5:9a: d6:24:ac:c3:c0:f2:e9:64:7b:47:c4:fd:4a:61:ca: 5d:4f:22:cb:a9:be:78:d7:a0:91:5d:53:bb:bb:6d: 10:2c:ce:4d:c7:f1:26:c7:f4:08:af:93:49:cc:4b: 57:0f:8b:d0:c2:9b:95:1e:57:50:2a:50:81:bf:56: f4:88:2e:25:1f:37:d4:f1:72:fa:f7:59:0e:c5:50: 14:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:5E:21:35:FD:8F:86:34:A4:01:4D:E4:7E:CD:55:74:C4:48:12:28 X509v3 Authority Key Identifier: keyid:97:A2:5D:3F:DD:AA:C4:37:1D:F4:BE:C7:7A:A5:89:D7:E1:71:45:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dbf1dafc-b829-42cb-b17c-015f0a90d83d/0/97A25D3FDDAAC4371DF4BEC77AA589D7E17145DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:7a:41:a6:bd:f4:f1:21:50:b1:d7:1a:cd:0c:47:83:8b:36: 14:ce:df:14:a5:9a:ea:53:33:36:14:95:65:2d:a3:88:64:ce: 33:09:8a:6e:53:9b:22:6f:f5:29:07:80:02:46:6f:81:95:88: 7e:96:8b:ca:3d:21:0c:4d:9b:b3:38:a1:a6:69:cf:f4:2b:fb: 3e:78:16:98:76:39:f7:41:65:75:fc:3b:2c:7c:ec:91:af:7b: 68:e2:6a:17:34:de:4a:84:10:6a:5f:e3:68:41:92:7d:07:ef: e8:fb:be:f0:c1:c9:19:d0:e9:18:29:59:72:6d:e2:45:e0:b5: ae:f1:ed:eb:12:ec:39:cd:f3:43:b9:82:4d:e0:6d:0e:c2:d3: 69:b5:6e:b5:41:7d:d7:a6:ba:d3:94:78:b2:f6:4b:6d:c3:7a: c4:06:87:47:d2:8c:60:76:6e:00:66:1b:e9:00:26:11:de:7e: c8:e1:ab:b7:c2:02:37:62:2d:e3:b0:8c:4b:44:2d:05:ac:c4: ca:63:b8:c2:c3:50:e8:bb:c9:59:a7:67:0f:e4:70:1b:56:7e: 3a:7e:bc:4c:4a:ae:05:35:39:5b:29:56:18:9e:92:8d:fa:44: 40:02:d3:5d:89:21:3c:92:7e:8a:35:a3:5e:de:2b:3f:16:70: ba:44:1b:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWtUntxYhmEXTcbsxuBC4i/k8EqUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTdBMjVEM0ZEREFBQzQzNzFERjRCRUM3N0FBNTg5RDdF MTcxNDVEQzAeFw0yNTA2MDMxNTA1MDBaFw0yNTA2MDYxOTE3MDBaMDMxMTAvBgNV BAMTKDZCNUUyMTM1RkQ4Rjg2MzRBNDAxNERFNDdFQ0Q1NTc0QzQ0ODEyMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+aGPsuuwwLuHfGCrLEvqzgYHE KVGcqGuSVpY4XY6nB6idYCSAZySQkQjtL5YKfMW+UUiQevdPWV+dd38GagSfmxt7 Cl18otQCLEoDGjATavoKYHwOVxy44PkbbSpFMgY6bPRGXDmrLa306Y+jPTldyNs9 qtzReO5Kz78+nw4EwLST0m6NoXMgLWM6RTJ8OWd0ERgWxA4W6xw2tEEeozlato5d XohOV5c69pBwFgl65un1mtYkrMPA8ulke0fE/Uphyl1PIsupvnjXoJFdU7u7bRAs zk3H8SbH9Aivk0nMS1cPi9DCm5UeV1AqUIG/VvSILiUfN9Txcvr3WQ7FUBRTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa14hNf2PhjSkAU3kfs1VdMRIEigwHwYDVR0j BBgwFoAUl6JdP92qxDcd9L7HeqWJ1+FxRdwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YmYxZGFmYy1iODI5LTQyY2ItYjE3Yy0wMTVmMGE5MGQ4M2QvMC85N0EyNUQzRkRE QUFDNDM3MURGNEJFQzc3QUE1ODlEN0UxNzE0NURDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTdBMjVEM0ZEREFBQzQzNzFERjRCRUM3N0FBNTg5RDdFMTcx NDVEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGJmMWRhZmMtYjgyOS00MmNiLWIx N2MtMDE1ZjBhOTBkODNkLzAvOTdBMjVEM0ZEREFBQzQzNzFERjRCRUM3N0FBNTg5 RDdFMTcxNDVEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJJ6Qaa99PEhULHXGs0MR4OLNhTO3xSlmupT MzYUlWUto4hkzjMJim5TmyJv9SkHgAJGb4GViH6Wi8o9IQxNm7M4oaZpz/Qr+z54 Fph2OfdBZXX8Oyx87JGve2jiahc03kqEEGpf42hBkn0H7+j7vvDByRnQ6RgpWXJt 4kXgta7x7esS7DnN80O5gk3gbQ7C02m1brVBfdemutOUeLL2S23DesQGh0fSjGB2 bgBmG+kAJhHefsjhq7fCAjdiLeOwjEtELQWsxMpjuMLDUOi7yVmnZw/kcBtWfjp+ vExKrgU1OVspVhieko36REAC012JITySfoo1o17eKz8WcLpEG3M= -----END CERTIFICATE-----Generated at Thu Jun 5 18:10:51 2025 by rpki-client