$ rpki-client -vvf repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.mft File: 2244AB179BDE031980D325EEBEAFEC994CA8B419.mft (raw, json) Hash identifier: EUOITjsmsXUTMmnORwosUl8T5V6ybrXZi19X9HgEhfU= Subject key identifier: 5D:DC:A7:D6:7C:04:CC:E7:54:48:96:D3:C9:EA:D2:57:9E:38:0F:DF Authority key identifier: 22:44:AB:17:9B:DE:03:19:80:D3:25:EE:BE:AF:EC:99:4C:A8:B4:19 Certificate issuer: /CN=2244AB179BDE031980D325EEBEAFEC994CA8B419 Certificate serial: 0E58B1A6919EC366BFC5EECCCA910A783C0554E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2244AB179BDE031980D325EEBEAFEC994CA8B419.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.mft Manifest number: 8A Signing time: Wed 02 Jul 2025 20:50:58 +0000 Manifest this update: Wed 02 Jul 2025 20:45:58 +0000 Manifest next update: Sun 06 Jul 2025 08:28:58 +0000 Files and hashes: 1: 2244AB179BDE031980D325EEBEAFEC994CA8B419.crl (hash: GDheZVA73Q8U++v2+mGiPQl3MNZzePdbbAtWHcps2/s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.crl rsync://repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2244AB179BDE031980D325EEBEAFEC994CA8B419.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 08:03:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:58:b1:a6:91:9e:c3:66:bf:c5:ee:cc:ca:91:0a:78:3c:05:54:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2244AB179BDE031980D325EEBEAFEC994CA8B419 Validity Not Before: Jul 2 20:45:58 2025 GMT Not After : Jul 6 08:28:58 2025 GMT Subject: CN=5DDCA7D67C04CCE7544896D3C9EAD2579E380FDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:87:fb:d8:d0:76:c6:b8:33:a3:eb:bc:ed:7c: 1f:88:ed:b3:e9:6f:58:6a:0e:cf:10:f1:e7:34:17: 02:85:42:74:dc:7f:fd:2a:1c:5f:b5:f1:bc:c8:42: b2:cf:60:cb:da:b1:37:ea:85:48:87:92:36:fe:d9: 44:d8:56:89:81:9e:5e:1b:f7:90:54:de:b7:26:a7: 62:4c:80:02:02:d5:c5:3f:96:10:e2:b1:48:a7:1e: 1c:2d:17:c2:d2:11:14:b9:3f:c9:a7:18:be:c8:d3: b6:68:94:ed:91:e2:9f:4f:2e:29:3f:54:86:ab:c2: 99:0f:fa:44:da:b2:4e:17:15:3c:f5:b9:23:be:8e: 72:6d:d4:dd:50:d5:ad:f1:60:9b:2f:1a:66:58:7d: 89:40:f6:ba:fe:d5:29:6b:82:37:41:79:f4:56:d8: 6e:e7:82:2b:7a:2f:90:59:48:9a:85:0e:1e:a4:7f: d3:a7:cf:1b:cc:8b:19:e7:84:f7:f0:da:af:3e:bc: 95:3a:91:5b:d8:66:c0:ae:01:71:64:f6:17:36:36: a7:3b:32:95:18:a3:7e:c1:e3:9a:d3:23:10:3a:62: 5e:95:01:83:47:71:0c:ba:63:0b:e5:56:2e:19:23: 34:f5:03:da:f7:80:fd:8b:23:0d:3b:17:ce:c1:46: 93:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:DC:A7:D6:7C:04:CC:E7:54:48:96:D3:C9:EA:D2:57:9E:38:0F:DF X509v3 Authority Key Identifier: keyid:22:44:AB:17:9B:DE:03:19:80:D3:25:EE:BE:AF:EC:99:4C:A8:B4:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2244AB179BDE031980D325EEBEAFEC994CA8B419.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:31:16:01:5f:fd:02:33:95:a4:d3:c4:7e:26:cc:55:f8:88: 05:b1:aa:08:37:bb:36:87:1e:45:e6:f9:5e:40:8d:87:05:e6: 9d:08:23:c0:24:ee:70:a9:d3:93:9c:b1:11:e4:f9:2b:b5:75: a1:aa:03:3b:93:2f:47:e8:82:83:51:ea:ce:42:1c:d6:ca:b7: 06:74:01:e1:71:f0:31:d9:80:86:21:c2:cf:2f:fa:87:02:bb: 85:fc:64:b7:13:6a:17:a0:d3:3a:46:2e:b6:47:95:3d:1d:9d: b9:85:b9:b6:36:51:57:c9:3f:e9:db:b6:a3:8e:a7:bb:8c:96: d5:11:a8:2f:6d:c3:10:50:80:9a:b0:89:4a:8f:c2:54:7a:28: 42:a6:25:24:5f:5a:2a:00:3a:5e:98:55:98:a9:37:51:b9:33: 5c:d2:74:54:8e:9a:03:eb:f4:04:f2:80:aa:1c:63:30:b0:3c: 06:b2:fc:6e:7a:74:f1:8e:66:a1:93:2c:9f:1e:22:8d:c8:72: fb:fb:45:08:fb:a2:fd:3b:42:cd:1f:db:35:02:eb:b3:38:fd: de:65:de:a2:61:f1:11:41:62:0b:20:55:82:6c:97:67:dc:48: b8:2c:88:1a:f7:23:78:2d:e1:35:84:7c:f3:e5:f6:94:a6:7e: 50:f1:70:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDlixppGew2a/xe7MypEKeDwFVOgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI0NEFCMTc5QkRFMDMxOTgwRDMyNUVFQkVBRkVDOTk0 Q0E4QjQxOTAeFw0yNTA3MDIyMDQ1NThaFw0yNTA3MDYwODI4NThaMDMxMTAvBgNV BAMTKDVERENBN0Q2N0MwNENDRTc1NDQ4OTZEM0M5RUFEMjU3OUUzODBGREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyh/vY0HbGuDOj67ztfB+I7bPp b1hqDs8Q8ec0FwKFQnTcf/0qHF+18bzIQrLPYMvasTfqhUiHkjb+2UTYVomBnl4b 95BU3rcmp2JMgAIC1cU/lhDisUinHhwtF8LSERS5P8mnGL7I07ZolO2R4p9PLik/ VIarwpkP+kTask4XFTz1uSO+jnJt1N1Q1a3xYJsvGmZYfYlA9rr+1SlrgjdBefRW 2G7ngit6L5BZSJqFDh6kf9OnzxvMixnnhPfw2q8+vJU6kVvYZsCuAXFk9hc2Nqc7 MpUYo37B45rTIxA6Yl6VAYNHcQy6YwvlVi4ZIzT1A9r3gP2LIw07F87BRpOPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXdyn1nwEzOdUSJbTyerSV544D98wHwYDVR0j BBgwFoAUIkSrF5veAxmA0yXuvq/smUyotBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZGEwY2RkOS03ZjMxLTRmMWYtYWIwOS1hNjBjYzA4NTljZGEvMC8yMjQ0QUIxNzlC REUwMzE5ODBEMzI1RUVCRUFGRUM5OTRDQThCNDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI0NEFCMTc5QkRFMDMxOTgwRDMyNUVFQkVBRkVDOTk0Q0E4 QjQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmRhMGNkZDktN2YzMS00ZjFmLWFi MDktYTYwY2MwODU5Y2RhLzAvMjI0NEFCMTc5QkRFMDMxOTgwRDMyNUVFQkVBRkVD OTk0Q0E4QjQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ8xFgFf/QIzlaTTxH4mzFX4iAWxqgg3uzaH HkXm+V5AjYcF5p0II8Ak7nCp05OcsRHk+Su1daGqAzuTL0fogoNR6s5CHNbKtwZ0 AeFx8DHZgIYhws8v+ocCu4X8ZLcTaheg0zpGLrZHlT0dnbmFubY2UVfJP+nbtqOO p7uMltURqC9twxBQgJqwiUqPwlR6KEKmJSRfWioAOl6YVZipN1G5M1zSdFSOmgPr 9ATygKocYzCwPAay/G56dPGOZqGTLJ8eIo3Icvv7RQj7ov07Qs0f2zUC67M4/d5l 3qJh8RFBYgsgVYJsl2fcSLgsiBr3I3gt4TWEfPPl9pSmflDxcFo= -----END CERTIFICATE-----Generated at Thu Jul 3 09:59:22 2025 by rpki-client