$ rpki-client -vvf repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft File: C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft (raw, json) Hash identifier: cUDT/7anNoDjQWQT6lX43kcses+P20NfH8xUqXe2w60= Subject key identifier: 47:96:F3:64:9E:1B:63:CE:63:C7:28:6E:58:F4:D1:17:73:7C:FB:99 Authority key identifier: C1:93:44:D0:F4:EF:3C:AD:E2:A7:71:14:81:E3:D1:45:2C:62:1D:62 Certificate issuer: /CN=C19344D0F4EF3CADE2A7711481E3D1452C621D62 Certificate serial: 0FEE1CA309FF8074BBF239D4D490F2494E11C1C1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19344D0F4EF3CADE2A7711481E3D1452C621D62.cer Subject info access: rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft Manifest number: 01D2 Signing time: Sat 28 Jun 2025 16:31:56 +0000 Manifest this update: Sat 28 Jun 2025 16:26:56 +0000 Manifest next update: Wed 02 Jul 2025 04:00:56 +0000 Files and hashes: 1: C19344D0F4EF3CADE2A7711481E3D1452C621D62.crl (hash: 6YZLUG/6RIAxgkPJwuS21pFxCGdyYtIvSd7AAyuoyxw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.crl rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19344D0F4EF3CADE2A7711481E3D1452C621D62.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 04:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:ee:1c:a3:09:ff:80:74:bb:f2:39:d4:d4:90:f2:49:4e:11:c1:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C19344D0F4EF3CADE2A7711481E3D1452C621D62 Validity Not Before: Jun 28 16:26:56 2025 GMT Not After : Jul 2 04:00:56 2025 GMT Subject: CN=4796F3649E1B63CE63C7286E58F4D117737CFB99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ae:ca:c6:5a:da:34:74:cb:a4:3f:47:f0:92: 59:f2:5c:7c:6b:a2:9c:6e:9f:9a:71:02:19:04:ba: 02:3a:4e:c2:0e:9f:9b:76:46:8a:01:12:3a:5c:24: b6:2c:fa:4e:a0:62:40:b8:a5:29:49:40:f3:73:47: 7b:cf:84:c0:57:34:c4:f7:21:0d:2c:2f:c8:e8:e7: f2:79:d4:7d:41:b8:8a:5e:b3:10:f6:b1:14:a5:54: 32:4c:21:b7:5b:d6:b7:f2:cf:a2:d1:a8:d8:9f:89: e5:7a:1f:8b:8c:8b:62:9d:ed:2c:65:c9:9a:df:31: c0:d6:17:14:d3:bd:38:60:76:7e:27:0f:6e:87:29: 7a:39:1d:65:11:b4:ab:53:59:5f:3c:b7:8e:38:84: 83:46:36:e3:21:0e:82:4b:19:f3:84:93:31:97:fa: f9:cf:c6:45:a4:67:f6:55:85:a9:99:54:f1:9a:18: d7:c9:35:72:d9:d2:1c:74:8d:c1:ae:88:7c:04:d3: 14:39:2a:8d:0b:ca:6a:a1:86:af:ec:43:1f:0d:93: 7e:00:bd:92:4c:5c:85:12:71:66:99:1f:f9:31:e0: 34:dc:ec:bb:3a:64:9b:82:8c:e4:d7:61:ce:ca:5d: 60:7e:05:4d:8f:a1:06:43:7f:4d:9d:07:8a:df:3d: 12:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:96:F3:64:9E:1B:63:CE:63:C7:28:6E:58:F4:D1:17:73:7C:FB:99 X509v3 Authority Key Identifier: keyid:C1:93:44:D0:F4:EF:3C:AD:E2:A7:71:14:81:E3:D1:45:2C:62:1D:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19344D0F4EF3CADE2A7711481E3D1452C621D62.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:2a:38:98:01:d7:d2:2b:f1:8e:f3:b2:11:3f:e8:bd:b7:ce: 56:69:58:e0:6b:cc:13:60:b9:e0:63:75:d5:c4:9c:99:7d:f6: 6d:39:6f:be:0a:45:50:7d:13:bd:c1:0a:ed:10:0b:c8:3a:85: e1:84:6e:02:54:4b:16:dc:59:61:1f:64:f4:91:46:50:0b:f2: e7:c7:71:48:b4:d0:a2:91:6e:69:4b:bc:4e:42:44:0f:74:86: f3:67:77:8c:e4:4b:f1:42:a9:32:90:b9:c8:00:f8:2b:f3:fb: fd:ca:8d:d3:de:54:c7:ad:d3:45:e0:db:a3:4d:30:c7:42:68: ba:89:e2:27:70:0a:36:cb:91:25:9c:a9:b6:58:b7:98:70:da: 0f:13:db:e5:f0:8e:0d:6c:10:e3:8a:97:d3:a7:70:c4:f6:f0: e7:1e:6a:b4:fb:7f:ad:23:db:52:2f:6b:46:3b:ce:80:9b:c6: 8c:ba:0b:01:04:b8:89:c0:88:4e:25:d5:11:a1:b0:5a:37:b9: 48:21:83:9f:04:5d:d2:22:60:26:48:92:57:3e:33:20:3f:fd: b3:92:5f:28:6b:e5:3d:ec:3b:2f:6c:6a:99:61:a5:7d:5a:1b: 7e:34:de:73:e6:f6:00:71:7c:9a:0a:56:ae:18:a7:4b:01:ce: a5:e2:45:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD+4cown/gHS78jnU1JDySU4RwcEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE5MzQ0RDBGNEVGM0NBREUyQTc3MTE0ODFFM0QxNDUy QzYyMUQ2MjAeFw0yNTA2MjgxNjI2NTZaFw0yNTA3MDIwNDAwNTZaMDMxMTAvBgNV BAMTKDQ3OTZGMzY0OUUxQjYzQ0U2M0M3Mjg2RTU4RjREMTE3NzM3Q0ZCOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMrsrGWto0dMukP0fwklnyXHxr opxun5pxAhkEugI6TsIOn5t2RooBEjpcJLYs+k6gYkC4pSlJQPNzR3vPhMBXNMT3 IQ0sL8jo5/J51H1BuIpesxD2sRSlVDJMIbdb1rfyz6LRqNifieV6H4uMi2Kd7Sxl yZrfMcDWFxTTvThgdn4nD26HKXo5HWURtKtTWV88t444hINGNuMhDoJLGfOEkzGX +vnPxkWkZ/ZVhamZVPGaGNfJNXLZ0hx0jcGuiHwE0xQ5Ko0Lymqhhq/sQx8Nk34A vZJMXIUScWaZH/kx4DTc7Ls6ZJuCjOTXYc7KXWB+BU2PoQZDf02dB4rfPRJxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR5bzZJ4bY85jxyhuWPTRF3N8+5kwHwYDVR0j BBgwFoAUwZNE0PTvPK3ip3EUgePRRSxiHWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MWI2ZGQ5Yi1kMTUyLTRjOGYtODdiNy02MjllYjgwOGY5MTEvMC9DMTkzNDREMEY0 RUYzQ0FERTJBNzcxMTQ4MUUzRDE0NTJDNjIxRDYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE5MzQ0RDBGNEVGM0NBREUyQTc3MTE0ODFFM0QxNDUyQzYy MUQ2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDFiNmRkOWItZDE1Mi00YzhmLTg3 YjctNjI5ZWI4MDhmOTExLzAvQzE5MzQ0RDBGNEVGM0NBREUyQTc3MTE0ODFFM0Qx NDUyQzYyMUQ2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACoqOJgB19Ir8Y7zshE/6L23zlZpWOBrzBNg ueBjddXEnJl99m05b74KRVB9E73BCu0QC8g6heGEbgJUSxbcWWEfZPSRRlAL8ufH cUi00KKRbmlLvE5CRA90hvNnd4zkS/FCqTKQucgA+Cvz+/3KjdPeVMet00Xg26NN MMdCaLqJ4idwCjbLkSWcqbZYt5hw2g8T2+Xwjg1sEOOKl9OncMT28OcearT7f60j 21Iva0Y7zoCbxoy6CwEEuInAiE4l1RGhsFo3uUghg58EXdIiYCZIklc+MyA//bOS Xyhr5T3sOy9saplhpX1aG3403nPm9gBxfJoKVq4Yp0sBzqXiRQE= -----END CERTIFICATE-----Generated at Mon Jun 30 04:26:18 2025 by rpki-client