$ rpki-client -vvf repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.mft File: A349D07CAB13BF067B13D95E99981C2BA84B9A6B.mft (raw, json) Hash identifier: QktFlfpZ5cX4I0gEQAGK+zPIQkZb71Ubq68siXIncak= Subject key identifier: B4:5C:60:2A:B8:FD:13:C4:87:FE:07:3A:7E:34:17:A8:0C:8D:80:7F Authority key identifier: A3:49:D0:7C:AB:13:BF:06:7B:13:D9:5E:99:98:1C:2B:A8:4B:9A:6B Certificate issuer: /CN=A349D07CAB13BF067B13D95E99981C2BA84B9A6B Certificate serial: 43A7B5ED4A98FFD469F50C933338FED23531858E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.mft Manifest number: 0496 Signing time: Sun 29 Jun 2025 04:30:35 +0000 Manifest this update: Sun 29 Jun 2025 04:25:35 +0000 Manifest next update: Wed 02 Jul 2025 14:29:35 +0000 Files and hashes: 1: A349D07CAB13BF067B13D95E99981C2BA84B9A6B.crl (hash: DawwcjgJmyhxCF5ixSWAu7o2sSs4Dq8e4GYqgRUrKa8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.crl rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:a7:b5:ed:4a:98:ff:d4:69:f5:0c:93:33:38:fe:d2:35:31:85:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A349D07CAB13BF067B13D95E99981C2BA84B9A6B Validity Not Before: Jun 29 04:25:35 2025 GMT Not After : Jul 2 14:29:35 2025 GMT Subject: CN=B45C602AB8FD13C487FE073A7E3417A80C8D807F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:0b:ce:f2:2c:73:8e:c0:3c:f3:36:8e:cc:f8: da:2f:f7:4d:f7:9d:5c:c4:99:e3:fc:92:a0:8e:ff: 46:eb:01:2b:b9:08:e8:79:83:bc:ef:22:fc:e1:6b: 9e:d3:ae:34:98:8a:d9:3b:95:e7:a5:80:65:78:6a: 3e:a3:a8:68:3f:44:75:2a:7d:3d:09:56:61:1b:64: d0:7a:4d:dd:f4:a2:d9:36:6f:f0:39:aa:82:5a:e7: a6:61:9f:6f:27:ce:b4:77:8c:1e:85:9e:34:97:99: 3e:d3:eb:70:87:e1:cd:51:32:68:1f:11:d2:7d:2c: f2:5f:14:90:a8:5f:5f:b2:4e:8e:f4:37:2c:99:71: 7d:95:41:10:ec:92:59:ac:20:2c:2c:48:ff:a3:8a: 89:0b:c1:c2:15:8b:d7:3c:25:08:37:21:67:6a:4e: 06:54:9b:f2:4b:f2:0b:9d:83:57:85:81:0b:5b:20: 90:96:bb:ba:07:10:8a:bf:65:c1:6a:8d:75:82:4f: f1:a7:25:f0:8d:2c:41:06:fc:11:ab:ca:d0:f7:76: 0b:c1:6a:19:66:aa:05:3d:d5:2e:ef:b4:d2:ca:2c: 9b:e5:cc:5d:51:e0:cd:dd:dd:31:10:6c:3d:99:77: 12:8b:e8:bd:ff:9f:fa:85:99:29:91:eb:e3:9a:81: de:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:5C:60:2A:B8:FD:13:C4:87:FE:07:3A:7E:34:17:A8:0C:8D:80:7F X509v3 Authority Key Identifier: keyid:A3:49:D0:7C:AB:13:BF:06:7B:13:D9:5E:99:98:1C:2B:A8:4B:9A:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:12:97:6c:d5:5f:1f:5f:f4:f2:20:df:5a:20:30:71:a1:e5: 06:6b:55:cd:e8:9e:7d:ca:f0:d6:f3:f0:2d:54:36:f8:2d:28: 81:0c:91:10:98:1a:15:c9:94:3b:44:af:b7:4d:ff:d1:99:15: 43:0b:36:1f:b1:50:14:eb:45:c6:30:fa:07:85:66:48:84:4e: 30:49:fb:99:b9:d9:7a:df:b4:85:9d:83:c3:2b:89:6e:66:6d: dd:f3:54:a6:12:7d:eb:ba:d2:8a:e5:05:9d:f8:6f:19:54:b4: 2f:4d:5f:9d:3c:76:a5:67:90:00:0f:10:31:a5:9f:2f:70:04: f6:54:a2:59:d7:a4:5e:ea:70:ff:43:c2:95:91:ce:8a:62:f5: f5:8b:d2:94:ac:0f:cb:c0:40:50:33:b7:27:54:bb:04:e6:8c: a3:e1:c4:7b:ce:7a:48:29:eb:d3:10:64:86:3a:be:8b:11:ec: b1:b9:82:31:ba:e7:79:24:1b:6f:1d:b4:2b:ba:bd:17:3c:18: 6d:4a:ea:76:a1:b3:84:5d:88:41:ef:e6:c1:e6:c3:1f:e3:c3: 14:81:6e:81:1a:d4:ca:89:27:20:50:67:88:ed:3f:76:6b:64: 7a:11:b0:ee:bd:32:1b:e9:04:36:a3:70:e6:46:d3:61:44:93: e5:48:82:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ6e17UqY/9Rp9QyTMzj+0jUxhY4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM0OUQwN0NBQjEzQkYwNjdCMTNEOTVFOTk5ODFDMkJB ODRCOUE2QjAeFw0yNTA2MjkwNDI1MzVaFw0yNTA3MDIxNDI5MzVaMDMxMTAvBgNV BAMTKEI0NUM2MDJBQjhGRDEzQzQ4N0ZFMDczQTdFMzQxN0E4MEM4RDgwN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpC87yLHOOwDzzNo7M+Nov9033 nVzEmeP8kqCO/0brASu5COh5g7zvIvzha57TrjSYitk7leelgGV4aj6jqGg/RHUq fT0JVmEbZNB6Td30otk2b/A5qoJa56Zhn28nzrR3jB6FnjSXmT7T63CH4c1RMmgf EdJ9LPJfFJCoX1+yTo70NyyZcX2VQRDsklmsICwsSP+jiokLwcIVi9c8JQg3IWdq TgZUm/JL8gudg1eFgQtbIJCWu7oHEIq/ZcFqjXWCT/GnJfCNLEEG/BGrytD3dgvB ahlmqgU91S7vtNLKLJvlzF1R4M3d3TEQbD2ZdxKL6L3/n/qFmSmR6+Oagd4LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtFxgKrj9E8SH/gc6fjQXqAyNgH8wHwYDVR0j BBgwFoAUo0nQfKsTvwZ7E9lemZgcK6hLmmswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YWRmY2I0NC1hZTdhLTQ0MjMtYWU3ZC0wODY0OGJmMWRlYjEvMC9BMzQ5RDA3Q0FC MTNCRjA2N0IxM0Q5NUU5OTk4MUMyQkE4NEI5QTZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTM0OUQwN0NBQjEzQkYwNjdCMTNEOTVFOTk5ODFDMkJBODRC OUE2Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmFkZmNiNDQtYWU3YS00NDIzLWFl N2QtMDg2NDhiZjFkZWIxLzAvQTM0OUQwN0NBQjEzQkYwNjdCMTNEOTVFOTk5ODFD MkJBODRCOUE2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADgSl2zVXx9f9PIg31ogMHGh5QZrVc3onn3K 8Nbz8C1UNvgtKIEMkRCYGhXJlDtEr7dN/9GZFUMLNh+xUBTrRcYw+geFZkiETjBJ +5m52XrftIWdg8MriW5mbd3zVKYSfeu60orlBZ34bxlUtC9NX508dqVnkAAPEDGl ny9wBPZUolnXpF7qcP9DwpWRzopi9fWL0pSsD8vAQFAztydUuwTmjKPhxHvOekgp 69MQZIY6vosR7LG5gjG653kkG28dtCu6vRc8GG1K6nahs4RdiEHv5sHmwx/jwxSB boEa1MqJJyBQZ4jtP3ZrZHoRsO69MhvpBDajcOZG02FEk+VIgr8= -----END CERTIFICATE-----Generated at Sun Jun 29 20:08:14 2025 by rpki-client