$ rpki-client -vvf repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft File: 42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft (raw, json) Hash identifier: KSBZ3OrgTjlTtd05BbGFSPGolEXsUC0OP3GVKElr5b4= Subject key identifier: FD:F9:E3:94:26:8A:1C:E9:F8:4D:84:6F:CF:C5:96:45:19:3B:70:AB Authority key identifier: 42:19:91:69:94:4E:D2:2D:1F:EA:CF:CC:40:8F:AE:E5:36:FB:B6:AF Certificate issuer: /CN=42199169944ED22D1FEACFCC408FAEE536FBB6AF Certificate serial: 2D89F2F8B26CD93CADE2E016F1BD15D781C3F439 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42199169944ED22D1FEACFCC408FAEE536FBB6AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft Manifest number: 016F Signing time: Fri 06 Jun 2025 11:21:12 +0000 Manifest this update: Fri 06 Jun 2025 11:16:12 +0000 Manifest next update: Mon 09 Jun 2025 11:46:12 +0000 Files and hashes: 1: 42199169944ED22D1FEACFCC408FAEE536FBB6AF.crl (hash: uzclnmEOqIVf2u/xBZe2wJI0Ql4nXhc35S72I5Frc20=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.crl rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42199169944ED22D1FEACFCC408FAEE536FBB6AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 11:46:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:89:f2:f8:b2:6c:d9:3c:ad:e2:e0:16:f1:bd:15:d7:81:c3:f4:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42199169944ED22D1FEACFCC408FAEE536FBB6AF Validity Not Before: Jun 6 11:16:12 2025 GMT Not After : Jun 9 11:46:12 2025 GMT Subject: CN=FDF9E394268A1CE9F84D846FCFC59645193B70AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d9:ab:af:0b:f4:7f:9f:89:33:91:8a:27:78: 4d:f8:46:6f:e9:b8:fb:2e:c4:ca:e1:12:cb:35:16: 9e:a2:66:d9:72:81:fa:92:61:b9:e7:89:5f:35:c3: b6:e3:a6:f7:74:dc:5d:43:70:14:90:2c:57:89:b3: db:4e:15:c5:c6:7e:01:90:03:70:2b:46:ba:d3:7b: 24:58:af:27:b7:c5:71:47:5e:e4:0b:cb:4c:28:f0: ab:23:ce:e9:56:65:70:9c:ac:70:1f:3c:47:69:73: 9c:8d:84:cc:00:15:bf:cf:4c:a8:2e:49:aa:7f:1b: 89:3d:53:22:6c:34:a9:ed:e4:c8:2d:12:b4:00:bd: c4:79:3c:23:dd:31:88:46:4a:48:c3:ed:a1:87:75: 2c:e6:a9:07:61:20:b5:23:57:ab:ed:fc:43:6c:6d: 6f:5c:48:59:94:07:d8:79:b9:5b:81:35:ad:cf:3d: 59:b6:95:62:ce:1b:65:e6:a4:e3:5c:ef:08:fc:73: 37:1b:88:9b:8f:91:ee:b5:d1:0a:6b:cc:b1:a5:fb: cd:47:b2:e7:0f:38:54:19:12:9e:3a:33:c6:1e:d2: 90:9e:a0:dd:d0:f5:ff:58:02:be:51:d6:38:c7:fc: 83:8f:e5:72:5c:de:1c:fc:65:67:8e:f1:35:8d:57: 24:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:F9:E3:94:26:8A:1C:E9:F8:4D:84:6F:CF:C5:96:45:19:3B:70:AB X509v3 Authority Key Identifier: keyid:42:19:91:69:94:4E:D2:2D:1F:EA:CF:CC:40:8F:AE:E5:36:FB:B6:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42199169944ED22D1FEACFCC408FAEE536FBB6AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:08:74:7e:20:f1:53:a0:dd:b6:8e:a4:bc:c1:9f:a1:6a:9e: e0:51:37:ca:1c:e0:3c:1c:85:ba:2f:13:d2:e3:b7:d5:81:f1: b3:07:34:2f:08:5b:fe:97:e9:de:51:aa:c4:e4:9d:12:76:23: da:e4:2c:12:d4:da:6f:4e:20:64:25:a8:db:c3:a8:2b:6e:d6: ac:03:a0:dc:79:40:fc:64:09:7f:0d:0b:40:f4:a7:0e:7f:0f: b6:0e:ec:02:76:3d:1e:3b:19:7e:11:49:59:5a:95:69:63:2d: 9b:d7:89:87:7d:1e:d3:2b:71:ac:a1:83:74:ee:30:56:98:55: 0e:72:ba:e2:d4:bf:9f:b6:68:12:cb:29:c0:0b:68:82:9e:50: 50:a9:d0:b6:c6:8e:6f:a3:c1:c0:4d:5e:72:19:8a:a9:0e:b3: b0:42:78:26:37:78:37:ff:0e:a6:35:43:7a:04:35:20:f8:bd: 4d:ec:b6:bc:e3:fa:54:64:8c:f2:25:a9:58:d8:30:ac:5b:3e: c5:27:5a:6a:a0:5b:9b:58:f9:0d:f4:09:91:b5:d0:19:9a:78: e6:af:5c:76:cd:bd:ed:23:56:fd:42:ce:54:be:f1:0b:dd:2a: 81:3f:80:0a:33:52:04:44:7b:6c:d5:97:99:69:c1:cc:ea:29: 41:5f:06:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULYny+LJs2Tyt4uAW8b0V14HD9DkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDIxOTkxNjk5NDRFRDIyRDFGRUFDRkNDNDA4RkFFRTUz NkZCQjZBRjAeFw0yNTA2MDYxMTE2MTJaFw0yNTA2MDkxMTQ2MTJaMDMxMTAvBgNV BAMTKEZERjlFMzk0MjY4QTFDRTlGODREODQ2RkNGQzU5NjQ1MTkzQjcwQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB2auvC/R/n4kzkYoneE34Rm/p uPsuxMrhEss1Fp6iZtlygfqSYbnniV81w7bjpvd03F1DcBSQLFeJs9tOFcXGfgGQ A3ArRrrTeyRYrye3xXFHXuQLy0wo8KsjzulWZXCcrHAfPEdpc5yNhMwAFb/PTKgu Sap/G4k9UyJsNKnt5MgtErQAvcR5PCPdMYhGSkjD7aGHdSzmqQdhILUjV6vt/ENs bW9cSFmUB9h5uVuBNa3PPVm2lWLOG2XmpONc7wj8czcbiJuPke610QprzLGl+81H sucPOFQZEp46M8Ye0pCeoN3Q9f9YAr5R1jjH/IOP5XJc3hz8ZWeO8TWNVyQZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/fnjlCaKHOn4TYRvz8WWRRk7cKswHwYDVR0j BBgwFoAUQhmRaZRO0i0f6s/MQI+u5Tb7tq8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NDE4ZGVhMi1hODkxLTQ5ZWYtYTA2Zi1mZTdmMmM4MzI1OGIvMC80MjE5OTE2OTk0 NEVEMjJEMUZFQUNGQ0M0MDhGQUVFNTM2RkJCNkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDIxOTkxNjk5NDRFRDIyRDFGRUFDRkNDNDA4RkFFRTUzNkZC QjZBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjQxOGRlYTItYTg5MS00OWVmLWEw NmYtZmU3ZjJjODMyNThiLzAvNDIxOTkxNjk5NDRFRDIyRDFGRUFDRkNDNDA4RkFF RTUzNkZCQjZBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADwIdH4g8VOg3baOpLzBn6FqnuBRN8oc4Dwc hbovE9Ljt9WB8bMHNC8IW/6X6d5RqsTknRJ2I9rkLBLU2m9OIGQlqNvDqCtu1qwD oNx5QPxkCX8NC0D0pw5/D7YO7AJ2PR47GX4RSVlalWljLZvXiYd9HtMrcayhg3Tu MFaYVQ5yuuLUv5+2aBLLKcALaIKeUFCp0LbGjm+jwcBNXnIZiqkOs7BCeCY3eDf/ DqY1Q3oENSD4vU3strzj+lRkjPIlqVjYMKxbPsUnWmqgW5tY+Q30CZG10BmaeOav XHbNve0jVv1CzlS+8QvdKoE/gAozUgREe2zVl5lpwczqKUFfBqk= -----END CERTIFICATE-----Generated at Sat Jun 7 03:58:21 2025 by rpki-client