$ rpki-client -vvf repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft File: 96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft (raw, json) Hash identifier: OgA1ckWRA56ZLb7zv7uYLlGimUGgVYynDtOWoICEVx0= Subject key identifier: F1:8E:81:3C:BE:69:F7:B0:CB:47:FA:C1:82:46:6D:7F:4C:4E:9B:50 Authority key identifier: 96:FB:31:74:E7:1D:4C:E9:BB:1C:57:29:5C:2F:55:E7:46:41:F8:EE Certificate issuer: /CN=96FB3174E71D4CE9BB1C57295C2F55E74641F8EE Certificate serial: 77C905B1FFA4E9C1EBDC370E2336AFB9F1289E2C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft Manifest number: 4C Signing time: Fri 06 Jun 2025 08:02:12 +0000 Manifest this update: Fri 06 Jun 2025 07:57:12 +0000 Manifest next update: Mon 09 Jun 2025 08:56:12 +0000 Files and hashes: 1: 96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.crl (hash: /5wXZdymyC8F7ffjgUSt8E3GAKP9Dvc4ZUBLQZY11WM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.crl rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 08:56:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:c9:05:b1:ff:a4:e9:c1:eb:dc:37:0e:23:36:af:b9:f1:28:9e:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96FB3174E71D4CE9BB1C57295C2F55E74641F8EE Validity Not Before: Jun 6 07:57:12 2025 GMT Not After : Jun 9 08:56:12 2025 GMT Subject: CN=F18E813CBE69F7B0CB47FAC182466D7F4C4E9B50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d1:41:f4:c9:94:cf:a9:9e:19:cf:1b:65:e0: c5:da:42:93:11:cb:cc:81:a0:5d:ab:e9:e9:57:5c: 14:f2:61:b7:ec:dc:3f:4f:3a:93:7a:a2:b3:79:9f: db:a4:fd:28:72:b0:b0:ea:a2:8c:73:bc:52:43:d3: 9a:c0:67:6c:af:06:10:5e:e5:25:60:0a:c4:9a:1c: 86:82:3b:6d:7f:65:03:81:57:cb:21:10:03:d5:96: 41:9d:95:37:c0:6c:ff:5f:10:e3:06:e0:ce:28:9c: 6f:0f:e0:0c:99:66:d4:00:1b:c7:d4:64:19:ff:fd: f6:02:9d:15:b6:06:ca:1b:00:40:da:0d:a2:4f:35: a0:fe:63:17:5c:c9:79:e3:24:ee:3b:30:b8:bc:e9: b0:fb:0b:33:59:aa:c1:20:02:bf:b9:4d:d7:03:22: 9c:95:3d:2b:be:09:46:81:85:b2:79:b3:ca:70:a9: bd:9d:07:37:5c:00:9f:a6:25:ca:cf:78:3a:7f:05: 21:25:70:08:15:ca:bd:95:39:31:c6:06:95:f1:81: e9:9e:94:4d:6f:f2:a3:81:93:28:cf:34:b2:93:a2: 3c:3d:dc:72:72:b1:96:ce:1f:bd:c2:c5:72:36:f3: b4:b4:2f:9b:21:7d:73:c1:49:08:8b:2e:79:bd:28: b5:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:8E:81:3C:BE:69:F7:B0:CB:47:FA:C1:82:46:6D:7F:4C:4E:9B:50 X509v3 Authority Key Identifier: keyid:96:FB:31:74:E7:1D:4C:E9:BB:1C:57:29:5C:2F:55:E7:46:41:F8:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:cc:61:16:c7:59:f1:84:27:f1:ae:e7:9d:1c:5b:c7:ba:23: b8:22:38:dd:75:c2:3f:69:39:38:70:0f:85:44:50:a8:60:11: 7a:cc:b0:13:28:a4:ca:9c:be:9a:7e:d4:b9:d9:f3:04:df:2f: 81:f9:e9:6a:b7:74:4e:eb:bf:03:e7:b6:7e:aa:55:e3:22:e0: 59:bb:ee:04:3c:e3:c8:92:79:39:e8:fe:a4:8f:5c:4d:ec:53: a0:dc:73:d2:c9:59:31:33:39:38:f6:b2:f4:d0:bf:30:03:ac: 70:b6:f7:5e:ff:29:1d:5e:26:ab:a7:34:54:25:bf:e8:2b:69: 9b:9d:b1:d6:ba:eb:21:4e:de:bd:2b:d7:37:e0:27:ca:1e:6b: 04:ce:95:f7:68:5f:81:18:c5:dc:a4:2e:f0:c2:bf:f5:7d:3e: bf:c9:89:61:c9:93:59:c7:e4:f1:f0:1a:46:d6:f8:a5:84:3c: 44:a5:1a:0e:10:07:2d:57:ab:b0:7a:8d:43:79:81:f4:cb:63: 24:e6:9a:8b:31:da:9f:66:07:0d:4a:1a:fa:80:fc:d1:b9:f1: c4:6c:af:f8:82:9e:26:d4:e7:42:f7:6d:8c:18:b4:ac:77:4f: a1:9f:95:35:60:c2:c7:61:83:41:60:18:5f:11:b1:9b:cb:63: 35:40:b8:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd8kFsf+k6cHr3DcOIzavufEoniwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZGQjMxNzRFNzFENENFOUJCMUM1NzI5NUMyRjU1RTc0 NjQxRjhFRTAeFw0yNTA2MDYwNzU3MTJaFw0yNTA2MDkwODU2MTJaMDMxMTAvBgNV BAMTKEYxOEU4MTNDQkU2OUY3QjBDQjQ3RkFDMTgyNDY2RDdGNEM0RTlCNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt0UH0yZTPqZ4Zzxtl4MXaQpMR y8yBoF2r6elXXBTyYbfs3D9POpN6orN5n9uk/ShysLDqooxzvFJD05rAZ2yvBhBe 5SVgCsSaHIaCO21/ZQOBV8shEAPVlkGdlTfAbP9fEOMG4M4onG8P4AyZZtQAG8fU ZBn//fYCnRW2BsobAEDaDaJPNaD+YxdcyXnjJO47MLi86bD7CzNZqsEgAr+5TdcD IpyVPSu+CUaBhbJ5s8pwqb2dBzdcAJ+mJcrPeDp/BSElcAgVyr2VOTHGBpXxgeme lE1v8qOBkyjPNLKTojw93HJysZbOH73CxXI287S0L5shfXPBSQiLLnm9KLWlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8Y6BPL5p97DLR/rBgkZtf0xOm1AwHwYDVR0j BBgwFoAUlvsxdOcdTOm7HFcpXC9V50ZB+O4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzhmOWI2Yi0wMjdhLTRiZTYtYWIwMi0yOGQ1NTFjMzk4MTkvMC85NkZCMzE3NEU3 MUQ0Q0U5QkIxQzU3Mjk1QzJGNTVFNzQ2NDFGOEVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTZGQjMxNzRFNzFENENFOUJCMUM1NzI5NUMyRjU1RTc0NjQx RjhFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTM4ZjliNmItMDI3YS00YmU2LWFi MDItMjhkNTUxYzM5ODE5LzAvOTZGQjMxNzRFNzFENENFOUJCMUM1NzI5NUMyRjU1 RTc0NjQxRjhFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF/MYRbHWfGEJ/Gu550cW8e6I7giON11wj9p OThwD4VEUKhgEXrMsBMopMqcvpp+1LnZ8wTfL4H56Wq3dE7rvwPntn6qVeMi4Fm7 7gQ848iSeTno/qSPXE3sU6Dcc9LJWTEzOTj2svTQvzADrHC2917/KR1eJqunNFQl v+graZudsda66yFO3r0r1zfgJ8oeawTOlfdoX4EYxdykLvDCv/V9Pr/JiWHJk1nH 5PHwGkbW+KWEPESlGg4QBy1Xq7B6jUN5gfTLYyTmmosx2p9mBw1KGvqA/NG58cRs r/iCnibU50L3bYwYtKx3T6GflTVgwsdhg0FgGF8RsZvLYzVAuJQ= -----END CERTIFICATE-----Generated at Sat Jun 7 04:10:42 2025 by rpki-client