$ rpki-client -vvf repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft File: 416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft (raw, json) Hash identifier: 53As22Rw85fLAHO1Bv09fOByz1yBiGbbu1OJQIfjx2I= Subject key identifier: B7:FD:20:B4:84:99:76:87:8E:72:6F:85:C5:EC:4A:89:17:9D:57:AE Authority key identifier: 41:66:66:F3:F3:35:ED:7A:8B:1B:CB:AD:17:E6:ED:C4:F3:B7:E7:30 Certificate issuer: /CN=416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730 Certificate serial: 01117B6F56B8355F5FBF7B8AA27E9ADA64BCF07D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.cer Subject info access: rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft Manifest number: 04E6 Signing time: Mon 30 Jun 2025 11:11:43 +0000 Manifest this update: Mon 30 Jun 2025 11:06:43 +0000 Manifest next update: Thu 03 Jul 2025 11:55:43 +0000 Files and hashes: 1: 416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.crl (hash: W0o7Mh/B5Ov+VXvn9RtOveFc1pK9GwQw13gERiMyBYA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.crl rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 11:55:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:11:7b:6f:56:b8:35:5f:5f:bf:7b:8a:a2:7e:9a:da:64:bc:f0:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730 Validity Not Before: Jun 30 11:06:43 2025 GMT Not After : Jul 3 11:55:43 2025 GMT Subject: CN=B7FD20B4849976878E726F85C5EC4A89179D57AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0f:d5:5c:3e:b9:53:1d:cc:a5:51:87:24:ec: 7b:4f:da:c1:e8:56:08:f6:17:80:95:21:aa:e2:87: 37:c5:a6:cd:b4:09:f0:90:6f:21:d7:24:ca:cb:28: 9a:35:1f:12:7d:70:a1:3b:c2:5a:04:cc:ad:82:b9: 6e:51:fe:a5:84:b9:af:9a:84:44:11:b0:34:8b:98: fe:20:15:3e:d2:ff:70:2a:4a:16:7e:cf:6a:60:91: a7:8b:81:8a:a3:0b:1a:2c:b1:9f:0f:7c:09:9a:04: 56:32:03:8d:f8:09:89:dc:ab:62:60:75:48:06:5b: 9c:8a:d1:13:8d:de:b9:74:f4:fa:9a:78:f8:15:dd: fd:bf:0c:0a:8a:e4:4b:ad:5b:67:9d:76:b9:d0:43: 23:eb:90:57:a5:76:a3:16:fe:e2:ed:bf:04:9d:cb: 4a:fa:61:ee:15:ec:34:97:e4:c4:53:7a:e1:33:61: 3b:a2:29:e3:1d:13:65:f9:87:3c:55:b7:27:df:78: b3:b6:eb:99:8e:00:e5:4a:b6:60:e2:d1:db:4d:9d: cd:f5:c5:7a:be:91:9b:60:03:0a:cb:07:4c:38:a3: 4c:9c:84:c6:ae:f5:4b:04:1f:af:44:0f:93:39:b1: 5e:c1:82:b5:f7:c2:5c:df:d1:99:2c:f0:1b:bb:55: 45:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:FD:20:B4:84:99:76:87:8E:72:6F:85:C5:EC:4A:89:17:9D:57:AE X509v3 Authority Key Identifier: keyid:41:66:66:F3:F3:35:ED:7A:8B:1B:CB:AD:17:E6:ED:C4:F3:B7:E7:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:ec:6f:dc:da:9e:2b:2a:3a:3a:d6:f6:84:88:86:a2:b6:d2: ef:bf:04:1c:f6:97:ad:34:b5:57:2e:47:3f:6a:97:2b:50:4f: 85:13:5b:f2:0e:55:96:ae:9c:99:ef:df:d7:46:e8:af:20:76: 0c:ef:ec:70:fa:c4:2f:cf:0b:51:c0:17:b3:ca:85:ba:65:21: b6:65:9f:ab:3f:84:54:50:87:3b:03:7e:e1:4d:1b:f1:1f:b9: 8d:13:c1:b8:9c:73:fb:04:6b:51:87:4f:de:5d:98:7d:9a:80: cf:54:e2:3e:d1:3c:f7:68:4c:8a:82:92:68:2f:b9:2d:1a:63: a6:b3:4a:96:5e:49:ec:ba:60:a5:78:a6:81:0a:9c:03:b1:36: 8e:1b:ea:04:01:09:3b:12:53:b0:8e:40:7f:b7:bb:9c:4c:37: 92:68:f9:39:28:ec:48:1d:ef:07:94:f3:bb:44:77:31:cd:bd: 70:5b:44:6d:c4:c9:2d:bd:2e:75:86:f6:75:86:10:09:13:38: d1:8d:07:17:f9:11:fe:90:7d:57:d5:f5:75:b4:d8:d5:5e:0b: 4c:8e:72:c6:9c:5a:bf:11:3a:17:70:99:f1:6f:0f:19:c8:32: fb:e7:54:dc:52:53:10:a3:1d:21:3c:42:5b:9b:90:f3:97:02: c7:49:63:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUARF7b1a4NV9fv3uKon6a2mS88H0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDE2NjY2RjNGMzM1RUQ3QThCMUJDQkFEMTdFNkVEQzRG M0I3RTczMDAeFw0yNTA2MzAxMTA2NDNaFw0yNTA3MDMxMTU1NDNaMDMxMTAvBgNV BAMTKEI3RkQyMEI0ODQ5OTc2ODc4RTcyNkY4NUM1RUM0QTg5MTc5RDU3QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGD9VcPrlTHcylUYck7HtP2sHo Vgj2F4CVIarihzfFps20CfCQbyHXJMrLKJo1HxJ9cKE7wloEzK2CuW5R/qWEua+a hEQRsDSLmP4gFT7S/3AqShZ+z2pgkaeLgYqjCxossZ8PfAmaBFYyA434CYncq2Jg dUgGW5yK0RON3rl09PqaePgV3f2/DAqK5EutW2eddrnQQyPrkFeldqMW/uLtvwSd y0r6Ye4V7DSX5MRTeuEzYTuiKeMdE2X5hzxVtyffeLO265mOAOVKtmDi0dtNnc31 xXq+kZtgAwrLB0w4o0ychMau9UsEH69ED5M5sV7BgrX3wlzf0Zks8Bu7VUUrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt/0gtISZdoeOcm+FxexKiRedV64wHwYDVR0j BBgwFoAUQWZm8/M17XqLG8utF+btxPO35zAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDM5MTY5OC0wOGVjLTQ3OTAtYTE4NC05MjI4NTJmYTRkMGEvMC80MTY2NjZGM0Yz MzVFRDdBOEIxQkNCQUQxN0U2RURDNEYzQjdFNzMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDE2NjY2RjNGMzM1RUQ3QThCMUJDQkFEMTdFNkVEQzRGM0I3 RTczMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQzOTE2OTgtMDhlYy00NzkwLWEx ODQtOTIyODUyZmE0ZDBhLzAvNDE2NjY2RjNGMzM1RUQ3QThCMUJDQkFEMTdFNkVE QzRGM0I3RTczMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI/sb9zanisqOjrW9oSIhqK20u+/BBz2l600 tVcuRz9qlytQT4UTW/IOVZaunJnv39dG6K8gdgzv7HD6xC/PC1HAF7PKhbplIbZl n6s/hFRQhzsDfuFNG/EfuY0Twbicc/sEa1GHT95dmH2agM9U4j7RPPdoTIqCkmgv uS0aY6azSpZeSey6YKV4poEKnAOxNo4b6gQBCTsSU7COQH+3u5xMN5Jo+Tko7Egd 7weU87tEdzHNvXBbRG3EyS29LnWG9nWGEAkTONGNBxf5Ef6QfVfV9XW02NVeC0yO csacWr8ROhdwmfFvDxnIMvvnVNxSUxCjHSE8QlubkPOXAsdJY00= -----END CERTIFICATE-----Generated at Mon Jun 30 19:55:07 2025 by rpki-client