$ rpki-client -vvf repo-rpki.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.mft File: 0690815B5E9C2228263F17C9B3F5F99DD6882F9C.mft (raw, json) Hash identifier: Irfh3Ql+Zy7+I6X9TVWcRrKc5t2JAkohIgL4Ft5QDaY= Subject key identifier: 17:E5:45:B8:64:C7:ED:D8:74:2B:E7:FE:77:00:54:87:A2:2F:F1:97 Authority key identifier: 06:90:81:5B:5E:9C:22:28:26:3F:17:C9:B3:F5:F9:9D:D6:88:2F:9C Certificate issuer: /CN=0690815B5E9C2228263F17C9B3F5F99DD6882F9C Certificate serial: 18333C84D632C13C69D2112774EDAEBB169514E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.mft Manifest number: 0159 Signing time: Sat 28 Jun 2025 12:21:11 +0000 Manifest this update: Sat 28 Jun 2025 12:16:11 +0000 Manifest next update: Tue 01 Jul 2025 21:40:11 +0000 Files and hashes: 1: 0690815B5E9C2228263F17C9B3F5F99DD6882F9C.crl (hash: Svd+kcgHITH7AI3tMjIYmitvu+3C1LBu0S+VgI085EU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.crl rsync://repo-rpki.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 21:40:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:33:3c:84:d6:32:c1:3c:69:d2:11:27:74:ed:ae:bb:16:95:14:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0690815B5E9C2228263F17C9B3F5F99DD6882F9C Validity Not Before: Jun 28 12:16:11 2025 GMT Not After : Jul 1 21:40:11 2025 GMT Subject: CN=17E545B864C7EDD8742BE7FE77005487A22FF197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ce:24:20:8a:0e:de:6f:06:d9:47:f6:ff:fb: 6c:9c:de:0d:38:cc:65:07:5d:dd:89:12:b8:7e:55: c6:86:c1:52:91:b9:94:17:c6:79:16:a3:48:a4:0e: 63:da:55:5f:0e:7a:14:c8:89:11:73:fc:ce:fd:02: b6:97:5d:a4:e4:1b:41:95:7d:40:48:ed:1d:f3:79: a2:2f:dd:a0:9e:d4:c5:d1:f4:cd:a6:03:92:55:f8: 17:ab:fe:89:a6:c2:3e:dd:f1:82:2b:73:5a:d4:19: 07:ce:55:4d:01:14:3a:cf:a4:38:73:4a:38:be:c3: 3b:38:64:74:e1:d4:4f:6e:9f:f8:21:12:e2:13:10: e0:00:47:b1:77:17:9c:1b:47:b3:9b:6f:3d:50:04: a1:a4:e4:20:c5:58:8b:3b:10:cc:16:da:1b:bb:a3: 3d:2b:57:7b:a1:66:31:23:49:57:47:24:1b:25:32: 85:f1:9d:5e:dc:c1:05:85:85:be:b0:e9:fb:2d:ec: c5:33:30:16:df:84:d1:a8:d0:bd:90:c7:d4:03:9f: c0:35:1d:7c:2b:2a:b8:02:c6:52:ce:ae:ae:17:e3: 31:c9:b0:0e:4c:6d:89:9e:f0:28:d1:ba:37:ed:cd: 02:21:55:a4:eb:94:17:a7:87:41:b2:0b:c9:9f:c0: 3a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:E5:45:B8:64:C7:ED:D8:74:2B:E7:FE:77:00:54:87:A2:2F:F1:97 X509v3 Authority Key Identifier: keyid:06:90:81:5B:5E:9C:22:28:26:3F:17:C9:B3:F5:F9:9D:D6:88:2F:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:4f:1e:1c:ff:80:34:c7:8e:4e:d6:8a:ef:77:9f:0e:8c:36: e2:ba:42:fe:46:3e:74:bd:73:0b:08:9e:a6:e8:a0:ac:4f:60: e0:cb:26:22:de:65:2f:b5:53:dc:d0:3b:27:4b:97:9b:49:9a: 2e:d2:15:e6:ed:e5:57:db:e3:50:49:c5:a8:ae:b3:2c:cf:79: 14:f2:61:7a:86:ca:f0:a5:d4:20:89:83:45:f1:f6:15:56:18: 95:31:2c:d6:00:8d:37:b8:0d:81:b5:c9:76:16:4e:f0:f3:55: cd:3f:f0:46:69:1a:51:a7:b7:6e:5d:20:b2:58:c8:74:e7:7a: f1:47:e0:b2:51:da:33:7e:99:e9:6a:36:17:b1:28:38:0e:9d: c9:b7:d0:15:fb:f0:8e:e1:3b:46:29:98:24:d6:4c:57:f5:b0: 9e:d3:71:c9:d7:73:cd:49:8e:29:10:a6:6f:5c:b7:67:62:d6: 3d:51:5e:f5:e0:8c:ea:85:8d:a8:eb:75:f2:35:b1:75:45:df: ff:3a:bf:79:13:95:5e:48:44:17:a2:fc:f8:4b:7e:ac:2b:3a: cc:1d:53:5b:60:9f:e5:c3:ba:81:e6:2b:be:6e:65:cc:14:37: 6f:80:ec:de:d8:31:3e:01:1c:27:83:da:ff:61:4d:83:a4:1d: 72:6d:aa:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGDM8hNYywTxp0hEndO2uuxaVFOAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY5MDgxNUI1RTlDMjIyODI2M0YxN0M5QjNGNUY5OURE Njg4MkY5QzAeFw0yNTA2MjgxMjE2MTFaFw0yNTA3MDEyMTQwMTFaMDMxMTAvBgNV BAMTKDE3RTU0NUI4NjRDN0VERDg3NDJCRTdGRTc3MDA1NDg3QTIyRkYxOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1ziQgig7ebwbZR/b/+2yc3g04 zGUHXd2JErh+VcaGwVKRuZQXxnkWo0ikDmPaVV8OehTIiRFz/M79AraXXaTkG0GV fUBI7R3zeaIv3aCe1MXR9M2mA5JV+Ber/ommwj7d8YIrc1rUGQfOVU0BFDrPpDhz Sji+wzs4ZHTh1E9un/ghEuITEOAAR7F3F5wbR7Obbz1QBKGk5CDFWIs7EMwW2hu7 oz0rV3uhZjEjSVdHJBslMoXxnV7cwQWFhb6w6fst7MUzMBbfhNGo0L2Qx9QDn8A1 HXwrKrgCxlLOrq4X4zHJsA5MbYme8CjRujftzQIhVaTrlBenh0GyC8mfwDoXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF+VFuGTH7dh0K+f+dwBUh6Iv8ZcwHwYDVR0j BBgwFoAUBpCBW16cIigmPxfJs/X5ndaIL5wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x M2ZhN2Q1Yy0zNjhkLTRhZjMtYjhlNy0xNzg2MjQ2ZGQ2MmYvMC8wNjkwODE1QjVF OUMyMjI4MjYzRjE3QzlCM0Y1Rjk5REQ2ODgyRjlDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDY5MDgxNUI1RTlDMjIyODI2M0YxN0M5QjNGNUY5OURENjg4 MkY5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTNmYTdkNWMtMzY4ZC00YWYzLWI4 ZTctMTc4NjI0NmRkNjJmLzAvMDY5MDgxNUI1RTlDMjIyODI2M0YxN0M5QjNGNUY5 OURENjg4MkY5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAARPHhz/gDTHjk7Wiu93nw6MNuK6Qv5GPnS9 cwsInqbooKxPYODLJiLeZS+1U9zQOydLl5tJmi7SFebt5Vfb41BJxaiusyzPeRTy YXqGyvCl1CCJg0Xx9hVWGJUxLNYAjTe4DYG1yXYWTvDzVc0/8EZpGlGnt25dILJY yHTnevFH4LJR2jN+melqNhexKDgOncm30BX78I7hO0YpmCTWTFf1sJ7TccnXc81J jikQpm9ct2di1j1RXvXgjOqFjajrdfI1sXVF3/86v3kTlV5IRBei/PhLfqwrOswd U1tgn+XDuoHmK75uZcwUN2+A7N7YMT4BHCeD2v9hTYOkHXJtqik= -----END CERTIFICATE-----Generated at Mon Jun 30 00:49:59 2025 by rpki-client