$ rpki-client -vvf repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft File: C00606846C7D0E540F5703EC90A0C331460D7ECA.mft (raw, json) Hash identifier: Lc0VTeYn8C7qGCs7gsh+1bK5q2dTLPki39yFk0SZxlw= Subject key identifier: C1:0D:2C:2E:44:23:52:B9:FC:0A:58:D4:51:8F:F9:7F:F8:FC:8F:0D Authority key identifier: C0:06:06:84:6C:7D:0E:54:0F:57:03:EC:90:A0:C3:31:46:0D:7E:CA Certificate issuer: /CN=C00606846C7D0E540F5703EC90A0C331460D7ECA Certificate serial: 7A80FA218FA04FC58C5C5A3CDB009D0C33AA7AD2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00606846C7D0E540F5703EC90A0C331460D7ECA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft Manifest number: A0 Signing time: Sun 29 Jun 2025 00:11:19 +0000 Manifest this update: Sun 29 Jun 2025 00:06:19 +0000 Manifest next update: Wed 02 Jul 2025 05:40:19 +0000 Files and hashes: 1: C00606846C7D0E540F5703EC90A0C331460D7ECA.crl (hash: L5V0SBDfypwC+a35JT7zKzuna4JPq5ZhRBlJCyp+Hok=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.crl rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00606846C7D0E540F5703EC90A0C331460D7ECA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 05:40:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:80:fa:21:8f:a0:4f:c5:8c:5c:5a:3c:db:00:9d:0c:33:aa:7a:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C00606846C7D0E540F5703EC90A0C331460D7ECA Validity Not Before: Jun 29 00:06:19 2025 GMT Not After : Jul 2 05:40:19 2025 GMT Subject: CN=C10D2C2E442352B9FC0A58D4518FF97FF8FC8F0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a5:83:70:a7:84:f3:bd:5a:27:18:0d:97:ad: 2c:b2:dc:9f:33:6e:08:05:e4:46:be:9b:7a:7e:20: 84:9a:6c:cb:98:3d:85:8b:e2:ba:4c:59:2b:b4:33: 61:b3:9e:3b:ab:ba:11:80:46:7f:ee:31:73:c4:35: 47:db:9f:d4:8f:3f:c8:e5:f8:92:93:b1:d2:60:13: 04:4e:5e:a7:79:65:bd:13:9e:26:07:e0:75:a3:f1: 4b:c8:48:a7:18:6b:b9:50:50:41:9a:6b:94:b0:35: 1b:4a:7f:61:d3:cf:32:a4:d6:4f:e6:61:72:de:01: 9a:dd:95:73:d3:c6:dc:7c:a1:b3:6d:52:32:cc:3b: 01:58:06:73:95:dd:99:44:56:f1:a4:5a:00:a3:2e: ef:49:62:37:b6:96:ee:78:93:20:ea:a9:da:e1:56: 07:62:30:97:99:3f:3f:e0:f7:22:38:1c:a3:49:9c: 62:6f:d7:e8:88:e8:f1:de:01:61:5c:cd:2f:6f:62: 2a:fe:55:c8:6a:c8:af:2b:2a:c5:ec:10:c7:c4:51: cf:d0:a3:7e:6e:1f:27:a2:cf:b0:27:26:56:f8:f4: 21:3c:b9:9f:cf:86:c5:f2:6b:07:b6:e3:cd:c5:97: ef:8d:50:52:d1:1c:4d:fa:c5:86:08:8a:22:4a:65: b2:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:0D:2C:2E:44:23:52:B9:FC:0A:58:D4:51:8F:F9:7F:F8:FC:8F:0D X509v3 Authority Key Identifier: keyid:C0:06:06:84:6C:7D:0E:54:0F:57:03:EC:90:A0:C3:31:46:0D:7E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00606846C7D0E540F5703EC90A0C331460D7ECA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:9f:e0:c7:78:50:7d:0b:da:c5:09:a7:6b:c5:bf:8e:a5:b3: c0:2e:b8:c7:16:fc:7f:29:40:9b:31:39:a0:bd:2b:7a:71:26: ab:73:7c:7a:b7:28:06:4a:8d:e0:65:f0:4a:9f:e3:d5:48:10: 51:91:b0:8e:e8:c0:1f:b8:ac:0d:a7:ea:40:05:6c:0f:d4:7a: 07:17:99:9e:f9:63:15:f6:42:3d:6e:82:4d:9b:ec:77:1b:45: a8:b6:25:a4:55:1d:fe:a9:33:5d:f0:d4:08:bc:49:0d:aa:90: eb:2d:0e:60:35:30:97:21:9a:03:fb:37:36:70:d6:85:76:d5: 80:96:be:f7:ab:e5:f2:4a:03:eb:07:05:3c:73:de:8b:a0:ff: c8:37:f0:f4:29:32:b9:93:a7:15:3d:80:ce:db:6c:e4:63:fa: c1:d4:2e:97:0f:13:17:30:de:06:7c:26:c2:21:99:c2:77:af: e9:e9:3f:fa:32:63:84:36:5f:47:d9:1d:dc:0d:25:5a:e4:e1: 7b:fe:0d:3b:0c:d7:bb:f5:f8:ab:18:4b:9c:f5:54:e6:43:c7: 0a:c2:28:39:b0:8e:3d:4d:11:5f:54:0e:8e:66:35:6d:4d:a5: ba:eb:9d:bc:37:2d:34:05:fc:c3:c3:26:27:55:5e:b8:0b:2f: 5a:ac:1b:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeoD6IY+gT8WMXFo82wCdDDOqetIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzAwNjA2ODQ2QzdEMEU1NDBGNTcwM0VDOTBBMEMzMzE0 NjBEN0VDQTAeFw0yNTA2MjkwMDA2MTlaFw0yNTA3MDIwNTQwMTlaMDMxMTAvBgNV BAMTKEMxMEQyQzJFNDQyMzUyQjlGQzBBNThENDUxOEZGOTdGRjhGQzhGMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRpYNwp4TzvVonGA2XrSyy3J8z bggF5Ea+m3p+IISabMuYPYWL4rpMWSu0M2GznjuruhGARn/uMXPENUfbn9SPP8jl +JKTsdJgEwROXqd5Zb0TniYH4HWj8UvISKcYa7lQUEGaa5SwNRtKf2HTzzKk1k/m YXLeAZrdlXPTxtx8obNtUjLMOwFYBnOV3ZlEVvGkWgCjLu9JYje2lu54kyDqqdrh VgdiMJeZPz/g9yI4HKNJnGJv1+iI6PHeAWFczS9vYir+VchqyK8rKsXsEMfEUc/Q o35uHyeiz7AnJlb49CE8uZ/PhsXyawe2483Fl++NUFLRHE36xYYIiiJKZbKBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwQ0sLkQjUrn8CljUUY/5f/j8jw0wHwYDVR0j BBgwFoAUwAYGhGx9DlQPVwPskKDDMUYNfsowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MTMzNGQwMy1lYWU0LTRkMjAtYmE1NC1iMTg4OWQ5MjQ3YWMvMC9DMDA2MDY4NDZD N0QwRTU0MEY1NzAzRUM5MEEwQzMzMTQ2MEQ3RUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzAwNjA2ODQ2QzdEMEU1NDBGNTcwM0VDOTBBMEMzMzE0NjBE N0VDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjEzMzRkMDMtZWFlNC00ZDIwLWJh NTQtYjE4ODlkOTI0N2FjLzAvQzAwNjA2ODQ2QzdEMEU1NDBGNTcwM0VDOTBBMEMz MzE0NjBEN0VDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACef4Md4UH0L2sUJp2vFv46ls8AuuMcW/H8p QJsxOaC9K3pxJqtzfHq3KAZKjeBl8Eqf49VIEFGRsI7owB+4rA2n6kAFbA/UegcX mZ75YxX2Qj1ugk2b7HcbRai2JaRVHf6pM13w1Ai8SQ2qkOstDmA1MJchmgP7NzZw 1oV21YCWvver5fJKA+sHBTxz3oug/8g38PQpMrmTpxU9gM7bbORj+sHULpcPExcw 3gZ8JsIhmcJ3r+npP/oyY4Q2X0fZHdwNJVrk4Xv+DTsM17v1+KsYS5z1VOZDxwrC KDmwjj1NEV9UDo5mNW1Npbrrnbw3LTQF/MPDJidVXrgLL1qsG84= -----END CERTIFICATE-----Generated at Mon Jun 30 16:50:08 2025 by rpki-client