$ rpki-client -vvf repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.mft File: C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.mft (raw, json) Hash identifier: SnmWx27e1pOfYCgmNdjgjXvKh0oIt0HFdmdSI1r1png= Subject key identifier: 77:21:00:22:8B:38:1E:A3:7E:F4:93:41:40:A9:09:A7:C2:3E:85:8E Authority key identifier: C9:27:69:FD:5D:97:A4:67:70:E3:A1:0F:9D:57:AE:93:1F:9A:9F:C2 Certificate issuer: /CN=C92769FD5D97A46770E3A10F9D57AE931F9A9FC2 Certificate serial: 67645D85A9CF2EAD39DAF2B2759C634A836C3BD9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.mft Manifest number: 012E Signing time: Tue 03 Jun 2025 12:24:09 +0000 Manifest this update: Tue 03 Jun 2025 12:19:09 +0000 Manifest next update: Fri 06 Jun 2025 22:24:09 +0000 Files and hashes: 1: C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.crl (hash: Vvlu3BsRBFmIv37nXvHxpvZKsx1kQUoZkqEq6ltBSUs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.crl rsync://repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:24:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:64:5d:85:a9:cf:2e:ad:39:da:f2:b2:75:9c:63:4a:83:6c:3b:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C92769FD5D97A46770E3A10F9D57AE931F9A9FC2 Validity Not Before: Jun 3 12:19:09 2025 GMT Not After : Jun 6 22:24:09 2025 GMT Subject: CN=772100228B381EA37EF4934140A909A7C23E858E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:92:0b:37:e4:80:ee:b6:bf:90:3c:d3:65:09: 91:ae:3a:69:e7:eb:7a:23:d8:ff:00:10:c5:8b:b6: 97:a2:68:04:85:29:79:0a:b0:9b:00:c9:70:c0:c7: c8:37:27:11:2c:de:5f:51:90:84:1f:6b:47:25:18: d5:50:84:d1:11:c4:d2:36:25:be:40:2d:c0:fb:b4: 15:00:f0:f1:09:96:63:43:44:4c:38:e3:b9:27:c1: 6e:96:f2:62:f7:2a:63:25:15:67:63:f1:67:80:15: 19:75:bc:80:76:35:3a:b3:39:a2:bd:f5:62:c8:c9: 09:fb:7d:11:7c:fa:32:5e:02:b6:76:c2:1b:3c:2b: 44:ea:35:a3:89:1c:55:f6:3d:a7:8b:73:4d:f5:b6: 8e:d5:d6:be:39:59:7b:f0:74:93:4e:a4:c3:6e:23: 1e:39:91:e2:9c:54:65:4d:16:94:c9:82:f4:4b:28: 92:5f:d9:d0:a4:16:53:22:dc:d8:df:ae:37:60:ea: 31:aa:d1:fc:0f:b6:34:c4:0a:ca:7c:a2:f4:19:7a: 34:31:f3:e4:75:6e:6c:bb:4e:2a:40:97:5b:9f:a9: 97:a8:11:b3:8b:83:0c:c2:1d:0e:35:b5:61:c6:7e: f4:5c:2f:9b:71:89:87:3b:f2:2f:03:e5:a6:4b:df: 04:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:21:00:22:8B:38:1E:A3:7E:F4:93:41:40:A9:09:A7:C2:3E:85:8E X509v3 Authority Key Identifier: keyid:C9:27:69:FD:5D:97:A4:67:70:E3:A1:0F:9D:57:AE:93:1F:9A:9F:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:5c:26:5c:f6:0a:3d:84:b9:fb:1f:8f:1a:3a:4c:35:91:4f: 9b:a4:b8:d2:40:ad:ca:10:f5:00:30:01:14:dd:9e:7f:79:31: 21:99:13:6c:63:b5:33:0f:2c:b3:c2:01:2e:7a:9d:18:f7:6f: a9:1a:ca:6b:fa:4a:ae:39:03:56:ef:dd:77:b1:35:6b:76:7f: a4:b2:ae:16:ac:cf:8b:03:75:81:62:fb:7d:e5:8e:61:0b:c1: 61:a2:e7:09:5d:cf:2e:67:b6:61:12:4c:a4:4c:a0:78:df:d7: 10:21:b6:19:8c:2e:03:ec:85:1b:56:81:40:17:85:24:9e:92: 59:f8:dc:87:3f:5b:fb:39:01:82:23:8c:6d:01:94:3b:a1:31: 46:55:17:66:ce:ff:4a:93:81:82:90:91:8b:b6:0d:60:43:3d: b8:ca:24:df:b2:65:57:b8:50:49:3f:8a:df:89:80:d7:2a:16: f3:97:c9:12:16:20:fa:03:19:09:c8:64:2c:0a:77:d2:85:00: b8:f8:83:41:dd:71:87:8c:d1:db:7e:86:04:7c:70:00:f8:a3: c3:f2:83:1d:7d:ec:b7:0f:af:33:fb:92:11:fd:e0:ab:d8:cb: c5:68:07:ba:48:bc:6a:df:be:5e:94:4d:df:57:0f:af:6e:46: 04:28:f9:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ2RdhanPLq052vKydZxjSoNsO9kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzkyNzY5RkQ1RDk3QTQ2NzcwRTNBMTBGOUQ1N0FFOTMx RjlBOUZDMjAeFw0yNTA2MDMxMjE5MDlaFw0yNTA2MDYyMjI0MDlaMDMxMTAvBgNV BAMTKDc3MjEwMDIyOEIzODFFQTM3RUY0OTM0MTQwQTkwOUE3QzIzRTg1OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdkgs35IDutr+QPNNlCZGuOmnn 63oj2P8AEMWLtpeiaASFKXkKsJsAyXDAx8g3JxEs3l9RkIQfa0clGNVQhNERxNI2 Jb5ALcD7tBUA8PEJlmNDREw447knwW6W8mL3KmMlFWdj8WeAFRl1vIB2NTqzOaK9 9WLIyQn7fRF8+jJeArZ2whs8K0TqNaOJHFX2PaeLc031to7V1r45WXvwdJNOpMNu Ix45keKcVGVNFpTJgvRLKJJf2dCkFlMi3Njfrjdg6jGq0fwPtjTECsp8ovQZejQx 8+R1bmy7TipAl1ufqZeoEbOLgwzCHQ41tWHGfvRcL5txiYc78i8D5aZL3wSlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdyEAIos4HqN+9JNBQKkJp8I+hY4wHwYDVR0j BBgwFoAUySdp/V2XpGdw46EPnVeukx+an8IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NWQ3Nzg0MC02MDhlLTQ0OWEtYjIyZi0zNmE2ZTI1MmZiMjMvMC9DOTI3NjlGRDVE OTdBNDY3NzBFM0ExMEY5RDU3QUU5MzFGOUE5RkMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzkyNzY5RkQ1RDk3QTQ2NzcwRTNBMTBGOUQ1N0FFOTMxRjlB OUZDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjVkNzc4NDAtNjA4ZS00NDlhLWIy MmYtMzZhNmUyNTJmYjIzLzAvQzkyNzY5RkQ1RDk3QTQ2NzcwRTNBMTBGOUQ1N0FF OTMxRjlBOUZDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABpcJlz2Cj2Eufsfjxo6TDWRT5ukuNJArcoQ 9QAwARTdnn95MSGZE2xjtTMPLLPCAS56nRj3b6kaymv6Sq45A1bv3XexNWt2f6Sy rhasz4sDdYFi+33ljmELwWGi5wldzy5ntmESTKRMoHjf1xAhthmMLgPshRtWgUAX hSSekln43Ic/W/s5AYIjjG0BlDuhMUZVF2bO/0qTgYKQkYu2DWBDPbjKJN+yZVe4 UEk/it+JgNcqFvOXyRIWIPoDGQnIZCwKd9KFALj4g0HdcYeM0dt+hgR8cAD4o8Py gx197LcPrzP7khH94KvYy8VoB7pIvGrfvl6UTd9XD69uRgQo+YI= -----END CERTIFICATE-----Generated at Tue Jun 3 23:33:24 2025 by rpki-client