$ rpki-client -vvf repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.mft File: 381455361E726B6ECCDAF271673BD59B1555336E.mft (raw, json) Hash identifier: +/6lobjwhGmX7EHdCbrg5/GLaiEsdA0c0HEmWhhZ7dg= Subject key identifier: E9:48:A4:E2:81:72:2F:22:7A:7E:26:46:05:7D:07:FE:9A:00:A9:4B Authority key identifier: 38:14:55:36:1E:72:6B:6E:CC:DA:F2:71:67:3B:D5:9B:15:55:33:6E Certificate issuer: /CN=381455361E726B6ECCDAF271673BD59B1555336E Certificate serial: 4C4437E2F6A07E1320D7DBDA62219F80DE9A434C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/381455361E726B6ECCDAF271673BD59B1555336E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.mft Manifest number: 0350 Signing time: Tue 01 Jul 2025 00:51:37 +0000 Manifest this update: Tue 01 Jul 2025 00:46:37 +0000 Manifest next update: Fri 04 Jul 2025 05:06:37 +0000 Files and hashes: 1: 381455361E726B6ECCDAF271673BD59B1555336E.crl (hash: abptUnbcpS8LOxgomotlpyzR1ay7Gk4/Z3Ue6v+n6pE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.crl rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/381455361E726B6ECCDAF271673BD59B1555336E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 05:06:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:44:37:e2:f6:a0:7e:13:20:d7:db:da:62:21:9f:80:de:9a:43:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=381455361E726B6ECCDAF271673BD59B1555336E Validity Not Before: Jul 1 00:46:37 2025 GMT Not After : Jul 4 05:06:37 2025 GMT Subject: CN=E948A4E281722F227A7E2646057D07FE9A00A94B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ec:25:a9:38:14:49:5c:18:43:79:df:36:1a: 34:24:01:5e:68:f9:e9:26:f4:52:d2:27:65:09:d0: 49:3d:01:7f:f2:ec:7a:e2:1f:1a:16:5c:10:56:72: 2c:90:d6:df:51:6a:06:6c:24:b7:66:65:b9:1a:c6: 65:94:1a:d3:23:ba:a2:d7:9a:22:01:32:81:1d:cf: 24:3d:18:88:49:04:24:4d:8c:12:d5:6f:8f:c7:fc: 8c:f9:68:59:b6:6b:4d:da:ea:60:cc:28:9a:c8:32: 42:e3:f4:88:99:ff:23:6a:42:4f:8e:4e:65:a7:ff: de:18:f2:bc:ab:ab:3e:da:68:0f:66:06:78:34:23: a7:a5:98:50:59:1a:5c:54:14:70:2c:a0:10:f3:a8: 38:b0:a4:7d:5d:9e:48:3c:55:83:7d:c2:0e:06:75: b1:db:7a:7f:79:5c:ce:23:33:c7:06:e2:3e:58:dc: 19:50:4f:bf:4f:8d:54:3b:17:32:33:c5:cd:c2:62: d7:93:f7:9b:7b:08:7e:e1:5b:52:bf:7d:37:56:d4: 3a:07:39:f3:b7:00:d3:e8:53:01:5e:cc:f1:07:44: 2d:c5:0a:23:af:2b:81:11:08:28:af:4d:7e:40:dd: 7b:a7:c9:15:c4:1c:2d:cb:11:44:1d:f4:69:1d:69: c4:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:48:A4:E2:81:72:2F:22:7A:7E:26:46:05:7D:07:FE:9A:00:A9:4B X509v3 Authority Key Identifier: keyid:38:14:55:36:1E:72:6B:6E:CC:DA:F2:71:67:3B:D5:9B:15:55:33:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/381455361E726B6ECCDAF271673BD59B1555336E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:7d:25:21:cd:3e:3f:a9:26:20:91:e2:27:63:dd:69:34:e2: a7:33:d6:c8:1b:dc:f3:af:73:80:78:e2:ca:2e:69:af:a6:9b: 7b:ae:b1:f9:06:e3:57:b7:74:c7:6e:28:59:6b:d2:30:7d:58: 99:0b:ca:b8:e9:e1:6d:75:08:66:53:33:01:25:49:e7:17:84: 02:72:75:4d:24:f2:b4:77:a0:15:20:3a:f3:ac:d5:ac:6a:8f: ed:25:31:70:39:36:b4:cf:e5:f9:44:2a:e4:84:94:05:f6:e5: 36:7c:5f:d9:35:d8:72:0b:9a:05:7d:01:3c:d0:b3:3d:be:5f: da:fe:27:30:79:b2:cd:77:32:95:fe:14:b6:98:ff:f7:cf:7d: 4d:db:7b:96:27:06:7f:03:2c:eb:06:51:2c:e5:b0:0e:0d:c2: 2d:08:b3:9f:f2:84:17:41:8d:0a:99:8b:13:44:d8:36:f0:87: 38:8b:f2:7a:c5:51:d1:a0:c7:c1:43:65:ef:ff:b3:6e:92:c9: ae:bf:d9:d9:51:9a:95:98:da:37:6e:43:d2:37:cd:b4:69:35: 79:4b:8e:cb:99:d4:2f:ff:7e:fe:da:77:f1:2b:04:55:f0:1b: 57:ea:48:33:7d:84:02:b7:24:c4:df:bd:ba:f1:a9:d1:7e:7a: c0:1d:0d:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTEQ34vagfhMg19vaYiGfgN6aQ0wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzgxNDU1MzYxRTcyNkI2RUNDREFGMjcxNjczQkQ1OUIx NTU1MzM2RTAeFw0yNTA3MDEwMDQ2MzdaFw0yNTA3MDQwNTA2MzdaMDMxMTAvBgNV BAMTKEU5NDhBNEUyODE3MjJGMjI3QTdFMjY0NjA1N0QwN0ZFOUEwMEE5NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/7CWpOBRJXBhDed82GjQkAV5o +ekm9FLSJ2UJ0Ek9AX/y7HriHxoWXBBWciyQ1t9RagZsJLdmZbkaxmWUGtMjuqLX miIBMoEdzyQ9GIhJBCRNjBLVb4/H/Iz5aFm2a03a6mDMKJrIMkLj9IiZ/yNqQk+O TmWn/94Y8ryrqz7aaA9mBng0I6elmFBZGlxUFHAsoBDzqDiwpH1dnkg8VYN9wg4G dbHben95XM4jM8cG4j5Y3BlQT79PjVQ7FzIzxc3CYteT95t7CH7hW1K/fTdW1DoH OfO3ANPoUwFezPEHRC3FCiOvK4ERCCivTX5A3XunyRXEHC3LEUQd9GkdacQpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6Uik4oFyLyJ6fiZGBX0H/poAqUswHwYDVR0j BBgwFoAUOBRVNh5ya27M2vJxZzvVmxVVM24wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzE5ODc0Yy1hNmIyLTRiMGItOWNjNi01NTlhNGU3Y2Q5NWEvMC8zODE0NTUzNjFF NzI2QjZFQ0NEQUYyNzE2NzNCRDU5QjE1NTUzMzZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzgxNDU1MzYxRTcyNkI2RUNDREFGMjcxNjczQkQ1OUIxNTU1 MzM2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMxOTg3NGMtYTZiMi00YjBiLTlj YzYtNTU5YTRlN2NkOTVhLzAvMzgxNDU1MzYxRTcyNkI2RUNDREFGMjcxNjczQkQ1 OUIxNTU1MzM2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFJ9JSHNPj+pJiCR4idj3Wk04qcz1sgb3POv c4B44souaa+mm3uusfkG41e3dMduKFlr0jB9WJkLyrjp4W11CGZTMwElSecXhAJy dU0k8rR3oBUgOvOs1axqj+0lMXA5NrTP5flEKuSElAX25TZ8X9k12HILmgV9ATzQ sz2+X9r+JzB5ss13MpX+FLaY//fPfU3be5YnBn8DLOsGUSzlsA4Nwi0Is5/yhBdB jQqZixNE2DbwhziL8nrFUdGgx8FDZe//s26Sya6/2dlRmpWY2jduQ9I3zbRpNXlL jsuZ1C//fv7ad/ErBFXwG1fqSDN9hAK3JMTfvbrxqdF+esAdDb8= -----END CERTIFICATE-----Generated at Tue Jul 1 15:41:00 2025 by rpki-client