$ rpki-client -vvf repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft File: C00606846C7D0E540F5703EC90A0C331460D7ECA.mft (raw, json) Hash identifier: 9IpWuAjBU80zVMw0iABDt+lpokGbCx80irYtZvd+xpc= Subject key identifier: 1C:C7:84:94:C4:C4:4D:CE:C1:0D:A0:AF:4D:0F:81:E9:E7:B5:BA:54 Authority key identifier: C0:06:06:84:6C:7D:0E:54:0F:57:03:EC:90:A0:C3:31:46:0D:7E:CA Certificate issuer: /CN=C00606846C7D0E540F5703EC90A0C331460D7ECA Certificate serial: 7D25305C82C9B20935BB097BA16F7DB399D05F94 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00606846C7D0E540F5703EC90A0C331460D7ECA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft Manifest number: 8A Signing time: Fri 09 May 2025 09:21:18 +0000 Manifest this update: Fri 09 May 2025 09:16:18 +0000 Manifest next update: Mon 12 May 2025 14:37:18 +0000 Files and hashes: 1: C00606846C7D0E540F5703EC90A0C331460D7ECA.crl (hash: dro+Enp133QtXVgf1Midy5yknSwWUQzTTBc1hLIfTr0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.crl rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00606846C7D0E540F5703EC90A0C331460D7ECA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 14:37:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:25:30:5c:82:c9:b2:09:35:bb:09:7b:a1:6f:7d:b3:99:d0:5f:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C00606846C7D0E540F5703EC90A0C331460D7ECA Validity Not Before: May 9 09:16:18 2025 GMT Not After : May 12 14:37:18 2025 GMT Subject: CN=1CC78494C4C44DCEC10DA0AF4D0F81E9E7B5BA54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:6f:8f:49:63:66:77:1f:32:ac:c6:db:60:cd: af:c1:e4:b0:15:d6:e7:e9:7b:c6:f7:cb:00:b5:77: 14:00:8d:90:81:d5:e3:0e:f3:67:fa:9d:9b:ce:89: 3b:bc:51:a4:4b:94:f5:0f:d4:f2:96:ee:d8:5b:8d: 21:52:fd:58:ee:8b:2b:53:54:6e:22:a0:e8:32:c9: 16:16:63:78:8a:e7:91:6a:ca:e8:e9:54:13:47:0d: 7b:19:06:28:3f:b5:7a:0c:be:68:5c:3e:df:eb:d3: b4:34:0d:05:18:2e:a9:af:36:2b:40:36:e4:c9:73: c9:41:39:4c:f5:f9:09:d3:08:c2:7c:79:65:69:80: 13:66:8a:36:7e:ff:a7:d6:9b:9f:a7:8d:f8:07:cd: 32:82:ba:d1:73:6f:db:60:06:87:76:ec:78:bb:6e: ce:ec:bb:6c:4e:d0:ba:90:2b:71:35:f6:cb:36:3d: d4:70:9b:b8:47:f0:78:7e:91:7d:19:1e:77:73:49: 60:14:df:3a:57:94:11:c6:8d:69:11:26:83:99:d2: 6d:bf:15:9d:32:8a:91:61:53:ed:ea:bd:58:95:ef: cd:96:be:de:55:31:6c:c7:0b:11:66:45:ab:72:e0: 46:98:ab:2e:7d:7c:83:fe:ac:22:e0:75:71:6a:fa: d6:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:C7:84:94:C4:C4:4D:CE:C1:0D:A0:AF:4D:0F:81:E9:E7:B5:BA:54 X509v3 Authority Key Identifier: keyid:C0:06:06:84:6C:7D:0E:54:0F:57:03:EC:90:A0:C3:31:46:0D:7E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00606846C7D0E540F5703EC90A0C331460D7ECA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:e9:3e:38:fb:05:ea:de:42:ec:bd:de:92:39:19:a8:13:14: 8e:8b:aa:68:0d:dc:4a:0e:c3:80:13:a8:18:54:4b:2f:cb:7a: 43:ac:ee:44:34:07:10:a4:8f:1d:11:21:54:f6:5f:1c:8f:59: 18:a6:3a:10:5e:ea:1d:2f:00:df:2c:c6:0c:c7:b9:15:a7:e6: 2f:1e:3e:1a:a7:be:dd:cf:70:48:e0:4d:41:9d:2a:2d:0b:53: 48:99:fb:c6:e5:a1:db:49:ab:bc:43:e8:0f:cc:1e:13:f7:51: e7:ee:ce:64:fb:0b:e3:b5:77:ff:4d:24:ea:2b:84:b2:47:65: 4b:7a:93:85:9a:e8:9d:b3:c3:a7:0b:95:8e:8c:af:ec:df:e4: f4:54:ef:f9:e4:b1:ca:bd:76:4a:56:b7:f5:48:8c:3c:b7:0e: 91:5e:61:08:1a:1a:c6:9b:0a:22:70:a7:af:fc:bb:7f:ee:26: 1e:59:8b:18:d9:79:a9:ae:5b:4a:b3:09:5a:cb:54:9c:84:27: cc:b0:6d:3f:93:27:21:ec:a7:cb:e0:0c:2b:0b:17:00:6d:b6: d6:e3:f0:03:42:dc:f0:9a:ac:97:10:45:5c:74:98:80:ad:2f: 52:24:a7:e1:e0:94:9d:a4:3f:13:34:f6:59:06:5c:a2:c2:31: 46:ae:d9:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfSUwXILJsgk1uwl7oW99s5nQX5QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzAwNjA2ODQ2QzdEMEU1NDBGNTcwM0VDOTBBMEMzMzE0 NjBEN0VDQTAeFw0yNTA1MDkwOTE2MThaFw0yNTA1MTIxNDM3MThaMDMxMTAvBgNV BAMTKDFDQzc4NDk0QzRDNDREQ0VDMTBEQTBBRjREMEY4MUU5RTdCNUJBNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnb49JY2Z3HzKsxttgza/B5LAV 1ufpe8b3ywC1dxQAjZCB1eMO82f6nZvOiTu8UaRLlPUP1PKW7thbjSFS/VjuiytT VG4ioOgyyRYWY3iK55FqyujpVBNHDXsZBig/tXoMvmhcPt/r07Q0DQUYLqmvNitA NuTJc8lBOUz1+QnTCMJ8eWVpgBNmijZ+/6fWm5+njfgHzTKCutFzb9tgBod27Hi7 bs7su2xO0LqQK3E19ss2PdRwm7hH8Hh+kX0ZHndzSWAU3zpXlBHGjWkRJoOZ0m2/ FZ0yipFhU+3qvViV782Wvt5VMWzHCxFmRaty4EaYqy59fIP+rCLgdXFq+tYTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHMeElMTETc7BDaCvTQ+B6ee1ulQwHwYDVR0j BBgwFoAUwAYGhGx9DlQPVwPskKDDMUYNfsowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MTMzNGQwMy1lYWU0LTRkMjAtYmE1NC1iMTg4OWQ5MjQ3YWMvMC9DMDA2MDY4NDZD N0QwRTU0MEY1NzAzRUM5MEEwQzMzMTQ2MEQ3RUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzAwNjA2ODQ2QzdEMEU1NDBGNTcwM0VDOTBBMEMzMzE0NjBE N0VDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjEzMzRkMDMtZWFlNC00ZDIwLWJh NTQtYjE4ODlkOTI0N2FjLzAvQzAwNjA2ODQ2QzdEMEU1NDBGNTcwM0VDOTBBMEMz MzE0NjBEN0VDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABrpPjj7BereQuy93pI5GagTFI6LqmgN3EoO w4ATqBhUSy/LekOs7kQ0BxCkjx0RIVT2XxyPWRimOhBe6h0vAN8sxgzHuRWn5i8e Phqnvt3PcEjgTUGdKi0LU0iZ+8blodtJq7xD6A/MHhP3UefuzmT7C+O1d/9NJOor hLJHZUt6k4Wa6J2zw6cLlY6Mr+zf5PRU7/nkscq9dkpWt/VIjDy3DpFeYQgaGsab CiJwp6/8u3/uJh5ZixjZeamuW0qzCVrLVJyEJ8ywbT+TJyHsp8vgDCsLFwBtttbj 8ANC3PCarJcQRVx0mICtL1Ikp+HglJ2kPxM09lkGXKLCMUau2f0= -----END CERTIFICATE-----Generated at Sat May 10 04:00:29 2025 by rpki-client