$ rpki-client -vvf repo-rpki.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/C2759C8490CBC757371078D2CA604D6FF8EE4C19.mft File: C2759C8490CBC757371078D2CA604D6FF8EE4C19.mft (raw, json) Hash identifier: ivW1MtTb267pKE2YdZwCCi7qZ/1QOvYT0ia1iSut+VQ= Subject key identifier: 75:35:15:1B:A4:19:B2:5B:22:A5:93:6F:A7:5E:91:D0:8F:EA:AE:0D Authority key identifier: C2:75:9C:84:90:CB:C7:57:37:10:78:D2:CA:60:4D:6F:F8:EE:4C:19 Certificate issuer: /CN=C2759C8490CBC757371078D2CA604D6FF8EE4C19 Certificate serial: 5316CA50B545F9BF1E6CAB2AD33A65264C9D5700 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2759C8490CBC757371078D2CA604D6FF8EE4C19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/C2759C8490CBC757371078D2CA604D6FF8EE4C19.mft Manifest number: 20 Signing time: Fri 06 Jun 2025 19:40:34 +0000 Manifest this update: Fri 06 Jun 2025 19:35:34 +0000 Manifest next update: Mon 09 Jun 2025 22:35:34 +0000 Files and hashes: 1: C2759C8490CBC757371078D2CA604D6FF8EE4C19.crl (hash: 1FfNL9THtu4WJ4sjl8Lcd1W3mLvGrpaKnAwGELS+Dcw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/C2759C8490CBC757371078D2CA604D6FF8EE4C19.crl rsync://repo-rpki.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/C2759C8490CBC757371078D2CA604D6FF8EE4C19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2759C8490CBC757371078D2CA604D6FF8EE4C19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 22:35:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:16:ca:50:b5:45:f9:bf:1e:6c:ab:2a:d3:3a:65:26:4c:9d:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2759C8490CBC757371078D2CA604D6FF8EE4C19 Validity Not Before: Jun 6 19:35:34 2025 GMT Not After : Jun 9 22:35:34 2025 GMT Subject: CN=7535151BA419B25B22A5936FA75E91D08FEAAE0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d3:41:19:71:d0:e3:52:67:4a:d0:1e:8a:21: 2a:97:df:4a:be:c4:0f:63:18:f3:1e:23:56:99:c1: 00:02:07:9c:78:17:d5:72:de:57:11:e8:c2:5b:ce: 7c:2e:23:a7:a7:3f:59:19:9a:92:72:76:74:da:85: 3b:63:bb:e5:0e:72:02:a5:ab:04:b0:2f:72:3d:74: fd:49:33:fe:d5:2f:99:c3:92:a2:45:be:a6:e1:e6: 45:30:08:5b:2f:fa:bc:11:5d:b5:c0:97:96:df:4e: f4:d8:ac:6d:74:6b:c7:e4:8e:e1:09:c3:17:72:c1: 35:be:54:88:be:a1:4f:46:2a:21:75:ff:5f:ff:08: ee:83:77:db:52:df:e8:01:f3:03:2f:1f:c1:34:5b: e8:77:75:c0:c9:66:3e:8b:d4:0e:9c:77:9c:a7:c1: 29:52:09:69:70:45:43:5a:eb:0c:74:e1:a8:c6:5a: ae:5f:40:7c:4a:e0:83:3c:18:dc:d7:82:32:f4:6c: da:f5:a5:70:07:f7:a4:ba:fc:44:b7:57:3b:19:4d: 66:a8:e7:6d:ee:7e:89:ee:50:24:44:18:2a:4b:f2: 52:84:f9:9e:c4:01:56:69:e9:7d:6d:e0:2d:47:0d: c3:9f:cf:26:26:82:b1:98:1e:f0:c5:a0:4a:52:a4: 60:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:35:15:1B:A4:19:B2:5B:22:A5:93:6F:A7:5E:91:D0:8F:EA:AE:0D X509v3 Authority Key Identifier: keyid:C2:75:9C:84:90:CB:C7:57:37:10:78:D2:CA:60:4D:6F:F8:EE:4C:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/C2759C8490CBC757371078D2CA604D6FF8EE4C19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2759C8490CBC757371078D2CA604D6FF8EE4C19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/C2759C8490CBC757371078D2CA604D6FF8EE4C19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:38:09:e8:5d:9e:f2:a1:42:f2:9c:5f:dd:e8:43:2c:df:28: 57:e9:e9:81:d5:cf:2e:f5:60:d1:8e:50:67:de:9b:89:3a:3d: 58:33:48:26:48:52:a6:37:05:ee:8f:de:55:fe:ce:a4:02:18: a3:c9:4b:e8:2e:8d:81:ea:f6:4b:0d:5d:6d:5f:0f:dc:02:72: 32:e7:13:ec:ab:19:46:4c:ed:65:12:d2:ec:a2:46:fc:98:25: 5a:e8:4b:76:1b:7f:bd:a5:98:29:65:ea:82:3e:60:76:db:6f: 87:b8:c6:18:3d:db:e4:f4:3d:3d:90:04:1c:48:48:73:da:11: 15:9b:06:c8:28:ca:3f:f1:85:f6:43:8b:8d:6d:86:10:84:36: c1:4f:d4:d5:4e:a9:3a:f0:94:f6:33:da:72:07:5c:93:ae:35: 08:32:fa:9b:d5:bd:f5:c7:02:57:d9:f8:d1:05:c4:18:ac:d0: b8:ed:a6:64:be:12:8b:0c:f0:0a:b9:36:a9:cf:28:66:13:a8: f7:83:e8:a2:e9:a4:c2:65:69:b2:96:2d:72:de:d1:5e:53:f5: 64:be:2c:30:f6:9f:96:69:b0:25:c2:39:d5:ff:73:2f:d7:c7: 1d:2a:8a:4f:eb:e3:44:c6:b1:39:36:1e:ae:6d:cb:6c:9d:2e: 54:c2:2e:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUxbKULVF+b8ebKsq0zplJkydVwAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI3NTlDODQ5MENCQzc1NzM3MTA3OEQyQ0E2MDRENkZG OEVFNEMxOTAeFw0yNTA2MDYxOTM1MzRaFw0yNTA2MDkyMjM1MzRaMDMxMTAvBgNV BAMTKDc1MzUxNTFCQTQxOUIyNUIyMkE1OTM2RkE3NUU5MUQwOEZFQUFFMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI00EZcdDjUmdK0B6KISqX30q+ xA9jGPMeI1aZwQACB5x4F9Vy3lcR6MJbznwuI6enP1kZmpJydnTahTtju+UOcgKl qwSwL3I9dP1JM/7VL5nDkqJFvqbh5kUwCFsv+rwRXbXAl5bfTvTYrG10a8fkjuEJ wxdywTW+VIi+oU9GKiF1/1//CO6Dd9tS3+gB8wMvH8E0W+h3dcDJZj6L1A6cd5yn wSlSCWlwRUNa6wx04ajGWq5fQHxK4IM8GNzXgjL0bNr1pXAH96S6/ES3VzsZTWao 523ufonuUCREGCpL8lKE+Z7EAVZp6X1t4C1HDcOfzyYmgrGYHvDFoEpSpGBDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdTUVG6QZslsipZNvp16R0I/qrg0wHwYDVR0j BBgwFoAUwnWchJDLx1c3EHjSymBNb/juTBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZTcxNmRlYS02NTM2LTRkNmUtYjU0Yi1iZjdmNzNjZjZiOTQvMC9DMjc1OUM4NDkw Q0JDNzU3MzcxMDc4RDJDQTYwNEQ2RkY4RUU0QzE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzI3NTlDODQ5MENCQzc1NzM3MTA3OEQyQ0E2MDRENkZGOEVF NEMxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmU3MTZkZWEtNjUzNi00ZDZlLWI1 NGItYmY3ZjczY2Y2Yjk0LzAvQzI3NTlDODQ5MENCQzc1NzM3MTA3OEQyQ0E2MDRE NkZGOEVFNEMxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIs4CehdnvKhQvKcX93oQyzfKFfp6YHVzy71 YNGOUGfem4k6PVgzSCZIUqY3Be6P3lX+zqQCGKPJS+gujYHq9ksNXW1fD9wCcjLn E+yrGUZM7WUS0uyiRvyYJVroS3Ybf72lmCll6oI+YHbbb4e4xhg92+T0PT2QBBxI SHPaERWbBsgoyj/xhfZDi41thhCENsFP1NVOqTrwlPYz2nIHXJOuNQgy+pvVvfXH AlfZ+NEFxBis0LjtpmS+EosM8Aq5NqnPKGYTqPeD6KLppMJlabKWLXLe0V5T9WS+ LDD2n5ZpsCXCOdX/cy/Xxx0qik/r40TGsTk2Hq5ty2ydLlTCLlE= -----END CERTIFICATE-----Generated at Sun Jun 8 01:58:10 2025 by rpki-client