$ rpki-client -vvf repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.mft File: 4CC71073C4D5095D162AA86A1727D924EB83598A.mft (raw, json) Hash identifier: Dzj+7XxA128aV6O8ErpBHi5IgiwtxA+3UoneUp4mWH8= Subject key identifier: 2A:83:5D:5A:B4:E9:36:47:7C:E6:CA:8D:16:C5:72:BD:C6:F5:B7:4E Authority key identifier: 4C:C7:10:73:C4:D5:09:5D:16:2A:A8:6A:17:27:D9:24:EB:83:59:8A Certificate issuer: /CN=4CC71073C4D5095D162AA86A1727D924EB83598A Certificate serial: 204F56CFE171FBE6BDC3FC3882A83400A1C7252E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CC71073C4D5095D162AA86A1727D924EB83598A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.mft Manifest number: 01CC Signing time: Thu 05 Jun 2025 12:21:27 +0000 Manifest this update: Thu 05 Jun 2025 12:16:27 +0000 Manifest next update: Mon 09 Jun 2025 00:09:27 +0000 Files and hashes: 1: 4CC71073C4D5095D162AA86A1727D924EB83598A.crl (hash: TWlYQCdeXWpal4ODMz+K21nea45IU2letEP5Ip/Rgi4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.crl rsync://repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CC71073C4D5095D162AA86A1727D924EB83598A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 21:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:4f:56:cf:e1:71:fb:e6:bd:c3:fc:38:82:a8:34:00:a1:c7:25:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CC71073C4D5095D162AA86A1727D924EB83598A Validity Not Before: Jun 5 12:16:27 2025 GMT Not After : Jun 9 00:09:27 2025 GMT Subject: CN=2A835D5AB4E936477CE6CA8D16C572BDC6F5B74E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:04:eb:23:f9:76:8d:5e:3f:99:59:5f:81:7f: 4a:1a:71:c6:f4:dd:4d:48:a7:ad:97:f2:46:1a:bd: ed:04:92:fb:be:a7:17:83:71:c1:7a:bd:4c:54:23: 77:5d:5f:af:a9:6f:34:0e:f1:6e:f1:22:3d:7e:fd: 79:37:df:d0:52:e9:d5:80:0c:5c:79:5d:9a:a0:9d: a8:1b:bb:cc:74:c6:f6:a2:26:97:eb:9f:8a:e2:0d: c0:75:f2:56:6c:1e:f9:64:72:24:6f:06:05:a2:ca: 94:09:de:60:6c:f0:0e:97:56:38:5e:4d:47:71:73: 97:07:5c:3e:44:ec:c0:54:3c:a1:1d:9c:a0:c9:b6: bc:2c:c0:40:eb:09:2d:a3:ac:36:d6:10:37:1c:03: eb:07:02:6f:d0:c6:68:e9:ad:9e:51:48:0e:dc:7c: be:4f:4b:70:4a:ba:e6:7b:d5:42:67:da:a9:21:74: 32:c4:1a:c6:e3:cb:76:46:3c:3e:23:96:f1:22:11: 87:3e:a0:f5:09:86:9c:97:98:6d:57:9e:fe:e1:f8: 1e:41:4d:cd:1b:bf:36:a3:b3:92:1b:93:98:f4:f6: a8:25:c2:95:28:98:a6:ca:d5:02:fb:e1:b5:a2:c4: 9c:6f:2a:85:6b:9d:dc:62:7d:22:ca:24:34:43:eb: 39:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:83:5D:5A:B4:E9:36:47:7C:E6:CA:8D:16:C5:72:BD:C6:F5:B7:4E X509v3 Authority Key Identifier: keyid:4C:C7:10:73:C4:D5:09:5D:16:2A:A8:6A:17:27:D9:24:EB:83:59:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CC71073C4D5095D162AA86A1727D924EB83598A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:dd:11:0a:d1:0f:6b:3e:5f:da:8f:2d:89:ed:12:1f:2d:bb: 6a:09:ba:ac:1d:69:82:93:df:e0:60:2c:22:76:54:00:cb:c1: 31:57:a8:c7:55:ee:5f:25:e1:42:30:63:25:67:44:79:31:8d: 21:24:81:8d:bb:3b:6f:2a:4a:ea:49:04:37:2f:4c:db:cc:06: e4:e5:82:2c:79:c9:ee:a8:14:d4:96:d4:62:81:96:05:65:28: 99:9d:e5:55:ad:06:07:d8:c8:c8:4d:a5:a6:25:be:b7:dc:76: 6a:1d:e5:20:44:a7:2f:67:68:12:5e:6d:2a:1c:d0:d6:b7:11: 74:0d:c7:f7:ea:fe:b3:8f:61:7d:25:8e:7d:af:86:b5:74:45: 04:c4:20:14:9f:5f:ef:06:9a:ef:31:39:b5:4f:ac:32:05:1e: 3e:83:0a:31:89:c7:4a:eb:45:9b:37:6c:92:5c:90:03:13:bf: a9:17:ab:e9:10:e4:96:22:04:65:e8:8a:bf:59:c7:fc:02:9b: 1c:75:ac:8d:c1:a9:d1:81:a7:b1:62:d3:4c:37:f2:c3:d6:c3: 2b:1b:9a:d4:c6:8b:94:1e:60:a8:01:71:81:8b:a4:da:11:fd: c1:54:f1:6e:b7:36:ca:02:7c:6b:43:27:95:de:f1:42:7f:e3: 17:8e:d1:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIE9Wz+Fx++a9w/w4gqg0AKHHJS4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENDNzEwNzNDNEQ1MDk1RDE2MkFBODZBMTcyN0Q5MjRF QjgzNTk4QTAeFw0yNTA2MDUxMjE2MjdaFw0yNTA2MDkwMDA5MjdaMDMxMTAvBgNV BAMTKDJBODM1RDVBQjRFOTM2NDc3Q0U2Q0E4RDE2QzU3MkJEQzZGNUI3NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxBOsj+XaNXj+ZWV+Bf0oaccb0 3U1Ip62X8kYave0Ekvu+pxeDccF6vUxUI3ddX6+pbzQO8W7xIj1+/Xk339BS6dWA DFx5XZqgnagbu8x0xvaiJpfrn4riDcB18lZsHvlkciRvBgWiypQJ3mBs8A6XVjhe TUdxc5cHXD5E7MBUPKEdnKDJtrwswEDrCS2jrDbWEDccA+sHAm/QxmjprZ5RSA7c fL5PS3BKuuZ71UJn2qkhdDLEGsbjy3ZGPD4jlvEiEYc+oPUJhpyXmG1Xnv7h+B5B Tc0bvzajs5Ibk5j09qglwpUomKbK1QL74bWixJxvKoVrndxifSLKJDRD6zlRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKoNdWrTpNkd85sqNFsVyvcb1t04wHwYDVR0j BBgwFoAUTMcQc8TVCV0WKqhqFyfZJOuDWYowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MjM2ZjA2MC1lODYyLTRmMWMtYjgxYS0wMWZjYmEzZmY3N2MvMC80Q0M3MTA3M0M0 RDUwOTVEMTYyQUE4NkExNzI3RDkyNEVCODM1OThBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNENDNzEwNzNDNEQ1MDk1RDE2MkFBODZBMTcyN0Q5MjRFQjgz NTk4QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjIzNmYwNjAtZTg2Mi00ZjFjLWI4 MWEtMDFmY2JhM2ZmNzdjLzAvNENDNzEwNzNDNEQ1MDk1RDE2MkFBODZBMTcyN0Q5 MjRFQjgzNTk4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHrdEQrRD2s+X9qPLYntEh8tu2oJuqwdaYKT 3+BgLCJ2VADLwTFXqMdV7l8l4UIwYyVnRHkxjSEkgY27O28qSupJBDcvTNvMBuTl gix5ye6oFNSW1GKBlgVlKJmd5VWtBgfYyMhNpaYlvrfcdmod5SBEpy9naBJebSoc 0Na3EXQNx/fq/rOPYX0ljn2vhrV0RQTEIBSfX+8Gmu8xObVPrDIFHj6DCjGJx0rr RZs3bJJckAMTv6kXq+kQ5JYiBGXoir9Zx/wCmxx1rI3BqdGBp7Fi00w38sPWwysb mtTGi5QeYKgBcYGLpNoR/cFU8W63NsoCfGtDJ5Xe8UJ/4xeO0WI= -----END CERTIFICATE-----Generated at Thu Jun 5 18:10:38 2025 by rpki-client