$ rpki-client -vvf repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft File: 2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft (raw, json) Hash identifier: l/lWimoPBquH+J9RIoRACHW7amcsDmI+loc74UeO7N8= Subject key identifier: 7E:EB:24:A3:F2:AB:C1:06:32:C7:DA:C4:F1:FB:EC:2C:0B:37:0A:7A Authority key identifier: 25:96:AD:9D:A9:03:31:FB:33:6D:C5:2C:5B:72:F9:92:D7:D4:9D:37 Certificate issuer: /CN=2596AD9DA90331FB336DC52C5B72F992D7D49D37 Certificate serial: 427DC7565B49B9A39EE668363F79E0F6AFE8C4DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2596AD9DA90331FB336DC52C5B72F992D7D49D37.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft Manifest number: 9D Signing time: Wed 04 Jun 2025 05:12:14 +0000 Manifest this update: Wed 04 Jun 2025 05:07:14 +0000 Manifest next update: Sat 07 Jun 2025 09:22:14 +0000 Files and hashes: 1: 2596AD9DA90331FB336DC52C5B72F992D7D49D37.crl (hash: ruTANgaFZEhx02K+9Ue5HSeLPQvj+t4PICw/OodUzQU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.crl rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2596AD9DA90331FB336DC52C5B72F992D7D49D37.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 09:22:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:7d:c7:56:5b:49:b9:a3:9e:e6:68:36:3f:79:e0:f6:af:e8:c4:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2596AD9DA90331FB336DC52C5B72F992D7D49D37 Validity Not Before: Jun 4 05:07:14 2025 GMT Not After : Jun 7 09:22:14 2025 GMT Subject: CN=7EEB24A3F2ABC10632C7DAC4F1FBEC2C0B370A7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:73:f5:a9:3b:97:37:0b:af:43:7f:4c:83:ae: ea:5b:f0:db:70:c2:99:fb:3e:6f:a8:c7:7e:62:b1: 66:f9:ba:c0:f8:c9:f9:a4:7a:e3:b2:95:99:15:03: 6d:40:76:63:c0:8b:6a:1a:d4:32:e2:da:7e:70:70: 28:c4:02:27:40:d3:71:c1:5d:69:db:00:4a:92:99: 69:3e:a2:17:62:a5:d9:3d:d5:3b:cf:68:85:f8:aa: b5:d2:33:e9:fb:1d:e7:d8:82:af:f6:60:4d:37:86: 67:a4:e2:8e:e4:21:d6:f5:c3:50:03:cd:d6:b1:6e: 46:22:1f:ea:7f:17:dd:01:ff:8c:85:ef:56:58:e7: 94:0a:2f:7d:2f:c4:84:20:a0:bb:2b:9e:5e:0a:14: b7:4e:02:1f:86:1a:97:8e:01:e1:d9:48:27:ca:a7: e2:ca:b6:07:69:d7:3d:6a:57:84:36:b2:c3:48:06: 7a:2a:fe:f6:b4:1f:06:30:54:68:a3:1a:ac:27:17: 95:4e:6f:e4:9f:fb:8d:27:e5:ca:b0:98:32:85:74: 61:09:d9:55:bd:e5:2d:43:f5:cc:57:28:66:61:a5: e2:5d:72:9b:ea:17:bd:5f:6e:71:c6:6f:b9:a6:ea: 11:53:90:f5:50:72:2e:1f:1d:e2:0d:35:03:f7:b0: ec:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:EB:24:A3:F2:AB:C1:06:32:C7:DA:C4:F1:FB:EC:2C:0B:37:0A:7A X509v3 Authority Key Identifier: keyid:25:96:AD:9D:A9:03:31:FB:33:6D:C5:2C:5B:72:F9:92:D7:D4:9D:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2596AD9DA90331FB336DC52C5B72F992D7D49D37.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:4a:d1:c2:8b:cb:98:2b:1c:61:61:52:bc:d3:30:61:32:65: d3:5d:22:64:da:17:8e:b8:f3:bc:e7:72:f7:94:a0:9b:10:4a: 03:42:bc:78:82:46:87:c0:be:d1:da:c8:0b:8e:67:cc:c4:93: b5:f3:71:85:ca:f7:83:f4:17:82:1e:01:c4:1a:36:b4:e0:e0: cc:b3:a9:3e:ee:5e:62:89:27:08:6f:bf:8d:27:fc:20:3e:6c: e2:95:86:bf:18:9a:5b:ab:16:22:29:10:c3:6a:22:36:64:dc: 52:6f:24:41:35:98:a5:47:a3:26:c1:00:1e:07:24:93:4d:e7: 53:c6:e3:ba:ce:6a:7e:09:bf:86:f9:dc:03:96:bf:77:df:26: 06:ac:4d:54:d7:cb:bf:79:f9:1a:ff:bb:09:44:57:2d:62:6c: 2a:5d:4f:76:5f:49:af:83:6c:45:a9:98:2a:fa:83:e8:c5:3a: 67:f3:f6:1e:27:c5:20:96:24:df:89:fb:68:a3:80:00:37:d2: 03:13:a2:e7:32:b1:30:fe:fe:d9:52:06:e6:90:4d:94:37:e8: 44:be:af:de:cc:77:d0:70:7a:a6:d7:7f:7f:da:d8:9f:32:e3: 3e:34:bd:53:c7:17:e8:1b:86:4f:be:00:72:e9:32:fe:5e:3d: 95:c9:b6:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQn3HVltJuaOe5mg2P3ng9q/oxN0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU5NkFEOURBOTAzMzFGQjMzNkRDNTJDNUI3MkY5OTJE N0Q0OUQzNzAeFw0yNTA2MDQwNTA3MTRaFw0yNTA2MDcwOTIyMTRaMDMxMTAvBgNV BAMTKDdFRUIyNEEzRjJBQkMxMDYzMkM3REFDNEYxRkJFQzJDMEIzNzBBN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcc/WpO5c3C69Df0yDrupb8Ntw wpn7Pm+ox35isWb5usD4yfmkeuOylZkVA21AdmPAi2oa1DLi2n5wcCjEAidA03HB XWnbAEqSmWk+ohdipdk91TvPaIX4qrXSM+n7HefYgq/2YE03hmek4o7kIdb1w1AD zdaxbkYiH+p/F90B/4yF71ZY55QKL30vxIQgoLsrnl4KFLdOAh+GGpeOAeHZSCfK p+LKtgdp1z1qV4Q2ssNIBnoq/va0HwYwVGijGqwnF5VOb+Sf+40n5cqwmDKFdGEJ 2VW95S1D9cxXKGZhpeJdcpvqF71fbnHGb7mm6hFTkPVQci4fHeINNQP3sOwfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfusko/KrwQYyx9rE8fvsLAs3CnowHwYDVR0j BBgwFoAUJZatnakDMfszbcUsW3L5ktfUnTcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjAzNmI3NC04YTVkLTQwYWEtOTYwYy05MjFlNjNhNzBhNGMvMC8yNTk2QUQ5REE5 MDMzMUZCMzM2REM1MkM1QjcyRjk5MkQ3RDQ5RDM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjU5NkFEOURBOTAzMzFGQjMzNkRDNTJDNUI3MkY5OTJEN0Q0 OUQzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGYwMzZiNzQtOGE1ZC00MGFhLTk2 MGMtOTIxZTYzYTcwYTRjLzAvMjU5NkFEOURBOTAzMzFGQjMzNkRDNTJDNUI3MkY5 OTJEN0Q0OUQzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD9K0cKLy5grHGFhUrzTMGEyZdNdImTaF464 87zncveUoJsQSgNCvHiCRofAvtHayAuOZ8zEk7XzcYXK94P0F4IeAcQaNrTg4Myz qT7uXmKJJwhvv40n/CA+bOKVhr8YmlurFiIpEMNqIjZk3FJvJEE1mKVHoybBAB4H JJNN51PG47rOan4Jv4b53AOWv3ffJgasTVTXy795+Rr/uwlEVy1ibCpdT3ZfSa+D bEWpmCr6g+jFOmfz9h4nxSCWJN+J+2ijgAA30gMToucysTD+/tlSBuaQTZQ36ES+ r97Md9BweqbXf3/a2J8y4z40vVPHF+gbhk++AHLpMv5ePZXJtoQ= -----END CERTIFICATE-----Generated at Thu Jun 5 18:12:10 2025 by rpki-client