$ rpki-client -vvf repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft File: 901FA7FD9132963972C91517CDC7E5EE9077E078.mft (raw, json) Hash identifier: gA+ygukziJE2jNoEbCsTiLbcxp6OjF/m8hbG2yMJOiU= Subject key identifier: D5:7F:02:9D:F5:4C:8F:32:01:4D:92:2B:5A:B2:4D:BB:29:BE:FB:15 Authority key identifier: 90:1F:A7:FD:91:32:96:39:72:C9:15:17:CD:C7:E5:EE:90:77:E0:78 Certificate issuer: /CN=901FA7FD9132963972C91517CDC7E5EE9077E078 Certificate serial: 7668B0872F7E978965CD37ECF70588A73E7CB75F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/901FA7FD9132963972C91517CDC7E5EE9077E078.cer Subject info access: rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft Manifest number: 010B Signing time: Sun 29 Jun 2025 08:10:47 +0000 Manifest this update: Sun 29 Jun 2025 08:05:47 +0000 Manifest next update: Wed 02 Jul 2025 14:14:47 +0000 Files and hashes: 1: 901FA7FD9132963972C91517CDC7E5EE9077E078.crl (hash: sXqcMzaNrCEzs8Bvj+zCL2lUiPeEa19Ax+hxqVFNJGI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.crl rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/901FA7FD9132963972C91517CDC7E5EE9077E078.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:68:b0:87:2f:7e:97:89:65:cd:37:ec:f7:05:88:a7:3e:7c:b7:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=901FA7FD9132963972C91517CDC7E5EE9077E078 Validity Not Before: Jun 29 08:05:47 2025 GMT Not After : Jul 2 14:14:47 2025 GMT Subject: CN=D57F029DF54C8F32014D922B5AB24DBB29BEFB15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:48:1a:bb:66:27:a5:e5:52:c3:2c:f3:2b:48: 53:de:d7:85:86:04:36:58:67:78:4f:49:b2:95:3f: 89:df:57:7f:13:b2:68:73:c7:5d:c7:62:cd:d5:8d: 5f:1d:90:fe:f7:54:e6:02:3d:09:91:4f:5a:f7:87: be:ac:a4:42:92:e8:18:c9:1b:19:de:46:fd:2d:53: 4a:df:f8:84:01:bd:7a:f0:a3:9d:78:21:47:fa:70: 35:28:f7:0e:fb:3f:3a:e1:a8:29:a9:4b:ae:04:92: c6:51:39:f9:87:01:fa:25:05:d5:b3:dc:2d:72:cb: 84:33:43:c6:e0:f2:e9:a1:ed:32:73:58:c7:77:06: d1:5b:8c:ef:2f:8e:dc:1b:57:2a:d5:22:7d:7a:12: e8:a6:99:d4:c6:92:5d:b2:2a:68:41:d2:4e:85:5a: 05:16:84:24:41:61:32:bf:52:22:3a:40:49:37:f8: bf:ce:fa:06:fd:8f:67:2b:b4:d0:53:f7:41:3d:c0: 7e:64:cf:f5:d0:60:e9:49:c5:76:7c:24:6a:1c:7b: 64:88:dc:a2:b2:96:c0:f7:63:51:2b:e0:cf:16:b7: 1b:cf:18:97:2e:bd:50:11:77:9a:3e:a0:5e:1e:55: 32:18:98:60:e7:4d:0b:9a:09:ae:58:94:9a:94:01: c0:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:7F:02:9D:F5:4C:8F:32:01:4D:92:2B:5A:B2:4D:BB:29:BE:FB:15 X509v3 Authority Key Identifier: keyid:90:1F:A7:FD:91:32:96:39:72:C9:15:17:CD:C7:E5:EE:90:77:E0:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/901FA7FD9132963972C91517CDC7E5EE9077E078.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:a4:0e:38:5f:fe:dc:c4:6e:bf:71:b2:50:e3:4c:73:52:dc: 09:6c:db:fa:27:53:04:57:78:ad:5d:20:38:c8:b5:5f:b2:10: 79:6b:e3:dd:c3:be:86:29:fc:ef:3c:46:c7:84:84:b4:32:08: 4d:fe:ae:36:dc:69:d9:88:39:14:a8:a5:61:f4:ef:15:0c:60: 17:e5:c4:59:e4:6a:55:cc:b0:c1:ca:bf:52:be:8f:02:96:95: b7:21:c8:55:28:32:d3:60:df:d1:c8:17:a8:21:e3:c4:c5:b7: 7e:0b:8c:49:b6:88:09:cb:53:71:3b:1f:87:18:75:f4:b2:cb: 63:90:8f:53:e9:68:7a:28:ac:06:55:83:07:dd:a9:2f:0f:56: ac:e2:24:07:f9:0c:77:da:87:d8:cb:94:a7:bc:ef:15:c3:49: 34:f9:71:7c:12:d8:6e:58:d8:5a:96:32:84:ad:fc:04:e2:d9: 3c:f6:d7:5f:61:55:69:35:7b:9d:0d:96:37:3d:ab:a4:86:12: 5e:4f:59:e8:6c:2c:a1:fd:e9:fe:1f:68:07:35:7b:f2:16:9f: 9b:12:66:8c:65:ff:ed:7a:11:98:50:ad:cd:5b:e1:83:df:73: af:71:6f:78:8a:eb:bd:7b:82:f1:61:69:13:ef:54:43:2a:ed: 8e:56:1d:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdmiwhy9+l4llzTfs9wWIpz58t18wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTAxRkE3RkQ5MTMyOTYzOTcyQzkxNTE3Q0RDN0U1RUU5 MDc3RTA3ODAeFw0yNTA2MjkwODA1NDdaFw0yNTA3MDIxNDE0NDdaMDMxMTAvBgNV BAMTKEQ1N0YwMjlERjU0QzhGMzIwMTREOTIyQjVBQjI0REJCMjlCRUZCMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLSBq7Ziel5VLDLPMrSFPe14WG BDZYZ3hPSbKVP4nfV38Tsmhzx13HYs3VjV8dkP73VOYCPQmRT1r3h76spEKS6BjJ GxneRv0tU0rf+IQBvXrwo514IUf6cDUo9w77PzrhqCmpS64EksZROfmHAfolBdWz 3C1yy4QzQ8bg8umh7TJzWMd3BtFbjO8vjtwbVyrVIn16EuimmdTGkl2yKmhB0k6F WgUWhCRBYTK/UiI6QEk3+L/O+gb9j2crtNBT90E9wH5kz/XQYOlJxXZ8JGoce2SI 3KKylsD3Y1Er4M8WtxvPGJcuvVARd5o+oF4eVTIYmGDnTQuaCa5YlJqUAcDTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1X8CnfVMjzIBTZIrWrJNuym++xUwHwYDVR0j BBgwFoAUkB+n/ZEyljlyyRUXzcfl7pB34HgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODBhOGRmZC1hNjc5LTQ0NGEtYjlhOC02ZTNjYjQ4MWEwNzkvMC85MDFGQTdGRDkx MzI5NjM5NzJDOTE1MTdDREM3RTVFRTkwNzdFMDc4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTAxRkE3RkQ5MTMyOTYzOTcyQzkxNTE3Q0RDN0U1RUU5MDc3 RTA3OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjgwYThkZmQtYTY3OS00NDRhLWI5 YTgtNmUzY2I0ODFhMDc5LzAvOTAxRkE3RkQ5MTMyOTYzOTcyQzkxNTE3Q0RDN0U1 RUU5MDc3RTA3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADGkDjhf/tzEbr9xslDjTHNS3Als2/onUwRX eK1dIDjItV+yEHlr493DvoYp/O88RseEhLQyCE3+rjbcadmIORSopWH07xUMYBfl xFnkalXMsMHKv1K+jwKWlbchyFUoMtNg39HIF6gh48TFt34LjEm2iAnLU3E7H4cY dfSyy2OQj1PpaHoorAZVgwfdqS8PVqziJAf5DHfah9jLlKe87xXDSTT5cXwS2G5Y 2FqWMoSt/ATi2Tz2119hVWk1e50Nljc9q6SGEl5PWehsLKH96f4faAc1e/IWn5sS Zoxl/+16EZhQrc1b4YPfc69xb3iK6717gvFhaRPvVEMq7Y5WHcQ= -----END CERTIFICATE-----Generated at Sun Jun 29 19:42:37 2025 by rpki-client