$ rpki-client -vvf repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft File: 4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft (raw, json) Hash identifier: mLi/vnpwAI6ZD4C38I1S2TBVTbKUaSSloLdD3y/sNDs= Subject key identifier: 98:C1:AA:61:48:39:C3:6C:CF:EE:54:52:38:5F:86:D8:68:71:01:D2 Authority key identifier: 4A:8B:6A:33:95:61:2C:D3:3D:A8:B3:C3:81:D6:ED:CF:A4:A4:5A:1F Certificate issuer: /CN=4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F Certificate serial: 0F085AB8E3FE9CF6645EB83C7E48057C5B96AB07 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft Manifest number: 01E7 Signing time: Fri 27 Jun 2025 20:11:10 +0000 Manifest this update: Fri 27 Jun 2025 20:06:10 +0000 Manifest next update: Tue 01 Jul 2025 00:19:10 +0000 Files and hashes: 1: 4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.crl (hash: /d0+zknvB1X6uMhHCtXcNxIJfTgBC0tbADH5s3IXqCA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.crl rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 00:19:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:08:5a:b8:e3:fe:9c:f6:64:5e:b8:3c:7e:48:05:7c:5b:96:ab:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F Validity Not Before: Jun 27 20:06:10 2025 GMT Not After : Jul 1 00:19:10 2025 GMT Subject: CN=98C1AA614839C36CCFEE5452385F86D8687101D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5c:a1:1a:2f:0c:54:a1:fa:ac:c7:3b:0f:51: 5a:1a:ff:18:55:a3:43:20:37:7b:89:fa:0d:f6:08: af:5a:0a:c4:5c:f4:c8:37:43:7b:6c:dc:40:d4:1c: 9a:04:87:61:67:33:48:ee:77:c2:d7:66:4e:49:f9: 7c:43:de:cd:4d:f6:49:5f:57:11:72:bd:24:5f:08: 86:da:10:85:2e:ad:98:82:fc:56:a3:b8:dc:eb:c4: 3c:4d:29:fd:7f:34:47:db:6e:3d:36:76:8f:2a:a5: 88:01:b3:93:ea:9a:5a:e6:f3:69:57:e5:f1:01:60: 73:a4:cf:ba:f2:aa:86:6f:7e:6f:60:85:5e:2d:56: 81:42:fb:59:76:41:ff:12:fe:7b:2f:51:76:73:ed: 68:10:c0:b4:01:d5:ad:fa:98:4b:5b:c2:d0:76:d6: 09:fa:ed:30:2e:ab:2f:24:26:db:31:38:c3:42:dd: 66:7a:44:87:80:82:df:b2:41:93:91:76:f2:2d:4b: 17:1a:33:a3:20:ec:ed:d4:72:17:b1:a2:6f:e8:87: c9:4b:7a:21:ec:37:97:cd:d6:16:84:57:9b:71:a3: 0a:9f:88:06:14:2f:de:60:8e:42:9c:5c:68:de:db: 0b:21:13:63:1d:10:48:7e:47:35:24:76:aa:8e:3b: e1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:C1:AA:61:48:39:C3:6C:CF:EE:54:52:38:5F:86:D8:68:71:01:D2 X509v3 Authority Key Identifier: keyid:4A:8B:6A:33:95:61:2C:D3:3D:A8:B3:C3:81:D6:ED:CF:A4:A4:5A:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:36:23:b9:3e:03:0a:2b:ab:60:67:ad:32:4e:21:ef:25:62: 8e:f0:24:33:30:92:61:c5:0e:bf:46:27:36:24:c6:4b:e7:8f: d0:9e:8f:dc:6c:1e:96:70:ae:52:7f:36:e8:77:5b:9d:8d:dc: 13:8f:42:f5:9c:b4:c2:66:a1:29:5f:5f:a0:60:6a:ec:c3:bb: 1e:60:9c:b9:51:df:50:21:af:ac:ae:7a:57:0a:7f:15:9f:41: 1d:96:fa:ab:65:0b:e3:77:3c:a7:5c:e3:70:aa:d5:46:df:af: c0:e4:9f:59:c6:07:1f:1f:2f:ad:55:42:59:30:33:1a:69:74: fb:c0:40:d9:6e:17:b3:12:c4:0f:77:97:c6:3b:3f:a6:48:69: a3:77:9f:b0:e3:e5:5f:f1:c5:f3:06:56:f7:ec:05:09:27:38: 47:bc:54:4c:59:73:87:d6:3a:ef:0e:ec:89:db:3a:37:72:14: b3:00:89:3a:c4:a5:01:fd:d7:3c:d9:9c:51:25:86:9d:2c:35: 5d:eb:37:65:4e:bf:bd:aa:c0:07:fa:23:a9:f1:60:11:34:a0: 3c:56:8c:17:52:72:89:9c:e4:01:26:24:cc:54:db:64:f6:e5: 90:86:8f:09:c3:b7:a2:5c:d6:ac:c0:50:7b:2f:75:37:f4:99: 6e:a0:f9:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDwhauOP+nPZkXrg8fkgFfFuWqwcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE4QjZBMzM5NTYxMkNEMzNEQThCM0MzODFENkVEQ0ZB NEE0NUExRjAeFw0yNTA2MjcyMDA2MTBaFw0yNTA3MDEwMDE5MTBaMDMxMTAvBgNV BAMTKDk4QzFBQTYxNDgzOUMzNkNDRkVFNTQ1MjM4NUY4NkQ4Njg3MTAxRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUXKEaLwxUofqsxzsPUVoa/xhV o0MgN3uJ+g32CK9aCsRc9Mg3Q3ts3EDUHJoEh2FnM0jud8LXZk5J+XxD3s1N9klf VxFyvSRfCIbaEIUurZiC/FajuNzrxDxNKf1/NEfbbj02do8qpYgBs5Pqmlrm82lX 5fEBYHOkz7ryqoZvfm9ghV4tVoFC+1l2Qf8S/nsvUXZz7WgQwLQB1a36mEtbwtB2 1gn67TAuqy8kJtsxOMNC3WZ6RIeAgt+yQZORdvItSxcaM6Mg7O3Uchexom/oh8lL eiHsN5fN1haEV5txowqfiAYUL95gjkKcXGje2wshE2MdEEh+RzUkdqqOO+HzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmMGqYUg5w2zP7lRSOF+G2GhxAdIwHwYDVR0j BBgwFoAUSotqM5VhLNM9qLPDgdbtz6SkWh8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWEzN2FlYy02M2MyLTQ1ZDEtOTZhZS1kYTE2ZDEwMThiMGYvMC80QThCNkEzMzk1 NjEyQ0QzM0RBOEIzQzM4MUQ2RURDRkE0QTQ1QTFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE4QjZBMzM5NTYxMkNEMzNEQThCM0MzODFENkVEQ0ZBNEE0 NUExRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTlhMzdhZWMtNjNjMi00NWQxLTk2 YWUtZGExNmQxMDE4YjBmLzAvNEE4QjZBMzM5NTYxMkNEMzNEQThCM0MzODFENkVE Q0ZBNEE0NUExRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEY2I7k+Aworq2BnrTJOIe8lYo7wJDMwkmHF Dr9GJzYkxkvnj9Cej9xsHpZwrlJ/Nuh3W52N3BOPQvWctMJmoSlfX6BgauzDux5g nLlR31Ahr6yuelcKfxWfQR2W+qtlC+N3PKdc43Cq1Ubfr8Dkn1nGBx8fL61VQlkw MxppdPvAQNluF7MSxA93l8Y7P6ZIaaN3n7Dj5V/xxfMGVvfsBQknOEe8VExZc4fW Ou8O7InbOjdyFLMAiTrEpQH91zzZnFElhp0sNV3rN2VOv72qwAf6I6nxYBE0oDxW jBdScomc5AEmJMxU22T25ZCGjwnDt6Jc1qzAUHsvdTf0mW6g+d4= -----END CERTIFICATE-----Generated at Sun Jun 29 19:59:57 2025 by rpki-client