$ rpki-client -vvf repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft File: 114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft (raw, json) Hash identifier: 6hQww8RDPusDilbMUb86ktDV7bCdBfT7B1T69NscBko= Subject key identifier: 43:FC:E7:5D:D9:E2:49:39:38:42:DA:84:21:28:C5:C4:60:16:AD:21 Authority key identifier: 11:4C:9E:7E:A9:1F:63:87:C2:CB:F1:D1:6E:A8:24:58:0C:D6:85:87 Certificate issuer: /CN=114C9E7EA91F6387C2CBF1D16EA824580CD68587 Certificate serial: 69CA96ED278068AF5D6B00AAE70CABC55BB36BE4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/114C9E7EA91F6387C2CBF1D16EA824580CD68587.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft Manifest number: 04E6 Signing time: Thu 03 Jul 2025 19:32:12 +0000 Manifest this update: Thu 03 Jul 2025 19:27:12 +0000 Manifest next update: Mon 07 Jul 2025 04:54:12 +0000 Files and hashes: 1: 114C9E7EA91F6387C2CBF1D16EA824580CD68587.crl (hash: jj6T5R+fFdk78GT2PQENQo8X3q5XvXlPIFCAOtNUQmQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.crl rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/114C9E7EA91F6387C2CBF1D16EA824580CD68587.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 04:54:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:ca:96:ed:27:80:68:af:5d:6b:00:aa:e7:0c:ab:c5:5b:b3:6b:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=114C9E7EA91F6387C2CBF1D16EA824580CD68587 Validity Not Before: Jul 3 19:27:12 2025 GMT Not After : Jul 7 04:54:12 2025 GMT Subject: CN=43FCE75DD9E249393842DA842128C5C46016AD21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ff:57:4a:68:7d:01:4b:e1:93:9e:d7:1f:63: 5e:51:39:58:ba:a3:0f:8d:4a:8f:3f:ac:5a:17:b2: 4d:7b:ee:40:3e:f6:28:51:5c:61:c3:4c:3b:35:37: ac:07:d2:22:de:65:0b:c8:01:cf:3c:f7:2f:06:bf: 42:5c:6a:a2:71:34:8f:c0:0d:b4:f1:38:16:57:44: 7a:e2:4f:1f:99:fb:f4:01:f2:85:de:8b:93:17:47: b5:ba:17:99:cb:6b:fb:fc:4f:c5:df:c4:82:63:fa: 69:b7:ae:96:a5:75:11:3e:30:58:dc:f1:81:cb:6e: c1:ac:ef:a3:e0:ea:03:25:95:6f:1e:91:bd:7e:11: 83:c8:e6:f2:cc:fc:55:de:74:7e:c5:56:d6:a7:20: 62:af:58:2b:8d:50:69:21:22:4c:10:1a:c0:46:9e: b3:b1:10:2e:09:e9:38:7d:2a:aa:60:79:9f:af:09: cd:8c:65:ab:44:7c:aa:81:83:71:58:f4:07:07:87: 24:3b:78:df:b9:d7:e3:35:c7:6b:98:6f:d9:f2:4d: 66:4b:7c:ab:a0:35:fe:7e:0d:4d:62:c1:44:d0:bf: 9b:62:6d:f8:89:ef:0e:c0:12:75:1d:35:d9:63:4b: b6:85:1c:96:61:76:6d:a9:12:f5:fa:2c:a1:48:3a: 66:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:FC:E7:5D:D9:E2:49:39:38:42:DA:84:21:28:C5:C4:60:16:AD:21 X509v3 Authority Key Identifier: keyid:11:4C:9E:7E:A9:1F:63:87:C2:CB:F1:D1:6E:A8:24:58:0C:D6:85:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/114C9E7EA91F6387C2CBF1D16EA824580CD68587.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:07:c9:75:83:79:0b:bf:93:60:09:a0:9e:9b:4e:f5:3f:13: 00:04:d9:ff:6b:86:bc:af:0d:0f:b4:67:99:18:2f:52:a8:70: 4a:a2:d7:90:d9:c3:be:3a:08:f3:1d:7d:ce:e9:3a:bf:ec:16: 00:43:d7:b7:ef:96:f6:83:56:09:03:dc:97:d1:e4:b4:bf:f2: 43:8d:57:dd:64:a5:36:85:c3:cc:68:cf:70:28:3e:ed:fe:aa: d7:2b:a3:bd:48:0b:79:7d:15:74:18:46:ac:1d:d6:8b:b5:e7: c3:07:b3:0a:3c:f6:50:3b:0c:53:f2:c3:f3:62:14:5c:d6:28: e6:d4:70:93:84:c8:cc:0f:01:df:d9:2e:d4:df:76:38:aa:37: 13:d3:fe:ea:b4:7e:75:91:e4:93:9e:6f:e2:b1:51:02:0f:f8: f7:08:23:eb:50:c7:ac:72:e5:2f:41:b1:3f:f9:b9:ee:5d:fa: b9:12:65:8c:57:c2:11:90:c2:74:02:87:e1:1b:d7:9a:8e:75: 25:d0:cb:99:c4:01:d8:e2:1c:4d:c5:f1:e2:c0:7a:7a:0c:0f: fe:b7:f6:49:16:fc:42:e4:15:34:14:18:aa:44:80:e5:56:67: d4:3e:5b:d5:55:55:ed:d0:eb:cb:ae:4c:04:46:3e:55:01:52: 11:25:bf:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUacqW7SeAaK9dawCq5wyrxVuza+QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE0QzlFN0VBOTFGNjM4N0MyQ0JGMUQxNkVBODI0NTgw Q0Q2ODU4NzAeFw0yNTA3MDMxOTI3MTJaFw0yNTA3MDcwNDU0MTJaMDMxMTAvBgNV BAMTKDQzRkNFNzVERDlFMjQ5MzkzODQyREE4NDIxMjhDNUM0NjAxNkFEMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV/1dKaH0BS+GTntcfY15ROVi6 ow+NSo8/rFoXsk177kA+9ihRXGHDTDs1N6wH0iLeZQvIAc889y8Gv0JcaqJxNI/A DbTxOBZXRHriTx+Z+/QB8oXei5MXR7W6F5nLa/v8T8XfxIJj+mm3rpaldRE+MFjc 8YHLbsGs76Pg6gMllW8ekb1+EYPI5vLM/FXedH7FVtanIGKvWCuNUGkhIkwQGsBG nrOxEC4J6Th9KqpgeZ+vCc2MZatEfKqBg3FY9AcHhyQ7eN+51+M1x2uYb9nyTWZL fKugNf5+DU1iwUTQv5tibfiJ7w7AEnUdNdljS7aFHJZhdm2pEvX6LKFIOmZ1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ/znXdniSTk4QtqEISjFxGAWrSEwHwYDVR0j BBgwFoAUEUyefqkfY4fCy/HRbqgkWAzWhYcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDNlYzg0ZS02MGVmLTQ0ZDQtOWY0My04NWI2Zjk2YjI2Y2YvMC8xMTRDOUU3RUE5 MUY2Mzg3QzJDQkYxRDE2RUE4MjQ1ODBDRDY4NTg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE0QzlFN0VBOTFGNjM4N0MyQ0JGMUQxNkVBODI0NTgwQ0Q2 ODU4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQzZWM4NGUtNjBlZi00NGQ0LTlm NDMtODViNmY5NmIyNmNmLzAvMTE0QzlFN0VBOTFGNjM4N0MyQ0JGMUQxNkVBODI0 NTgwQ0Q2ODU4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAAHyXWDeQu/k2AJoJ6bTvU/EwAE2f9rhryv DQ+0Z5kYL1KocEqi15DZw746CPMdfc7pOr/sFgBD17fvlvaDVgkD3JfR5LS/8kON V91kpTaFw8xoz3AoPu3+qtcro71IC3l9FXQYRqwd1ou158MHswo89lA7DFPyw/Ni FFzWKObUcJOEyMwPAd/ZLtTfdjiqNxPT/uq0fnWR5JOeb+KxUQIP+PcII+tQx6xy 5S9BsT/5ue5d+rkSZYxXwhGQwnQCh+Eb15qOdSXQy5nEAdjiHE3F8eLAenoMD/63 9kkW/ELkFTQUGKpEgOVWZ9Q+W9VVVe3Q68uuTARGPlUBUhElv2U= -----END CERTIFICATE-----Generated at Fri Jul 4 17:22:03 2025 by rpki-client