$ rpki-client -vvf repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft File: C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft (raw, json) Hash identifier: tJnqlG9xjhnXyh1bAnF9Iuyvj/iEEUdwKRT3LK+itQQ= Subject key identifier: 47:21:BC:23:7B:25:57:5D:DE:12:68:8C:EE:38:E4:7C:B7:A6:36:7B Authority key identifier: C1:66:91:03:D8:70:A3:90:C5:6C:8D:FD:3C:1B:FE:23:E4:8B:05:40 Certificate issuer: /CN=C1669103D870A390C56C8DFD3C1BFE23E48B0540 Certificate serial: 7928B01B13F121A9A710C3FF3621E71D49209B19 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1669103D870A390C56C8DFD3C1BFE23E48B0540.cer Subject info access: rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft Manifest number: AF Signing time: Sun 29 Jun 2025 10:01:21 +0000 Manifest this update: Sun 29 Jun 2025 09:56:21 +0000 Manifest next update: Wed 02 Jul 2025 21:55:21 +0000 Files and hashes: 1: C1669103D870A390C56C8DFD3C1BFE23E48B0540.crl (hash: 01CV3HrsjkgLaIY2ep+lQXDM0xsmK6ac+uH0Md5fI1s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.crl rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1669103D870A390C56C8DFD3C1BFE23E48B0540.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:28:b0:1b:13:f1:21:a9:a7:10:c3:ff:36:21:e7:1d:49:20:9b:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1669103D870A390C56C8DFD3C1BFE23E48B0540 Validity Not Before: Jun 29 09:56:21 2025 GMT Not After : Jul 2 21:55:21 2025 GMT Subject: CN=4721BC237B25575DDE12688CEE38E47CB7A6367B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:0e:94:f3:c0:a9:0f:62:a1:d9:97:9d:0c:fd: 35:5d:a3:8f:ca:76:1a:55:74:ce:75:f2:57:21:db: 79:5c:ba:71:8d:5d:4e:67:b7:9b:52:3d:c8:26:6e: 7c:76:26:bf:a6:ef:e7:0a:dd:b1:88:a1:b5:e9:38: 0c:33:2e:ba:6e:4e:00:1a:52:38:7e:b7:c0:34:cc: 06:64:29:0c:90:e1:43:c8:d0:91:dc:cc:44:b2:d8: fa:14:b8:52:86:0a:da:84:c3:c3:64:a0:42:a0:72: 9d:da:d1:2e:9f:74:5f:5c:6f:54:3b:80:d4:1f:5a: cb:dd:25:7e:29:c3:64:50:3c:b1:a4:ff:49:52:11: 1a:1b:f2:65:b9:78:4f:2d:f6:3b:0c:13:05:9b:dc: c5:8f:a5:a0:de:76:a0:e4:7c:5c:ad:8a:d5:d2:7b: 76:db:36:21:4f:84:46:1c:c4:e5:28:64:70:99:fc: 36:de:a5:b8:58:9e:df:e4:b1:4e:dc:e7:7b:1c:ab: 4b:e1:4b:d6:4e:fc:a6:04:18:d7:53:22:c8:3e:c6: 06:16:09:b7:a8:f4:3b:93:0e:ed:09:86:9c:cc:73: f3:d7:d5:f1:76:0b:eb:d4:73:85:ed:0e:94:5e:6e: 6b:34:7d:b2:69:89:87:7c:8f:21:68:c6:b7:77:76: 42:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:21:BC:23:7B:25:57:5D:DE:12:68:8C:EE:38:E4:7C:B7:A6:36:7B X509v3 Authority Key Identifier: keyid:C1:66:91:03:D8:70:A3:90:C5:6C:8D:FD:3C:1B:FE:23:E4:8B:05:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1669103D870A390C56C8DFD3C1BFE23E48B0540.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:27:4b:62:b8:b6:d8:20:78:45:d1:ca:60:8c:80:f9:be:ad: 7e:cb:9c:9f:3c:1a:ee:63:e2:b4:68:01:f2:dc:50:a8:74:b7: 95:d8:a0:73:94:79:8d:98:5b:ba:5e:4a:bc:9b:e4:8c:35:3d: 61:e5:e7:e8:6a:f6:6f:0b:1b:bd:b2:e7:b9:12:e5:1e:ce:d2: 5f:58:94:17:b3:a5:29:f9:3b:cf:13:a1:30:7f:aa:29:58:12: ec:df:2c:e6:d0:c7:b4:bb:24:dd:59:33:f4:57:93:e3:8c:52: 0e:15:f6:8e:e5:29:bd:3c:0e:64:aa:4c:30:b9:fa:5a:98:1f: 3a:8b:75:77:25:75:f0:54:c2:14:5d:8a:eb:ff:92:38:e6:ec: 7a:f0:58:2c:d2:b8:0b:d1:53:f2:40:38:d0:59:f9:80:23:1f: 52:90:ee:d7:41:76:04:80:67:7f:21:a8:f7:18:d0:6f:08:d0: da:03:3b:81:63:9a:15:62:61:28:bd:62:26:8c:dd:a3:fc:4a: be:b0:19:19:af:b0:eb:5d:c6:a5:bc:3c:b0:b7:6c:9c:2e:b1: 96:e2:9b:e2:da:42:65:c6:84:37:e0:a3:1a:12:21:82:92:a4: 7e:89:14:a8:c1:d4:b0:e9:fd:9c:40:15:ef:7f:e8:1a:37:70: ac:8a:1a:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeSiwGxPxIamnEMP/NiHnHUkgmxkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE2NjkxMDNEODcwQTM5MEM1NkM4REZEM0MxQkZFMjNF NDhCMDU0MDAeFw0yNTA2MjkwOTU2MjFaFw0yNTA3MDIyMTU1MjFaMDMxMTAvBgNV BAMTKDQ3MjFCQzIzN0IyNTU3NURERTEyNjg4Q0VFMzhFNDdDQjdBNjM2N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3DpTzwKkPYqHZl50M/TVdo4/K dhpVdM518lch23lcunGNXU5nt5tSPcgmbnx2Jr+m7+cK3bGIobXpOAwzLrpuTgAa Ujh+t8A0zAZkKQyQ4UPI0JHczESy2PoUuFKGCtqEw8NkoEKgcp3a0S6fdF9cb1Q7 gNQfWsvdJX4pw2RQPLGk/0lSERob8mW5eE8t9jsMEwWb3MWPpaDedqDkfFytitXS e3bbNiFPhEYcxOUoZHCZ/DbepbhYnt/ksU7c53scq0vhS9ZO/KYEGNdTIsg+xgYW Cbeo9DuTDu0JhpzMc/PX1fF2C+vUc4XtDpRebms0fbJpiYd8jyFoxrd3dkJZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURyG8I3slV13eEmiM7jjkfLemNnswHwYDVR0j BBgwFoAUwWaRA9hwo5DFbI39PBv+I+SLBUAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ODhkMGI2ZS1iMmVkLTQ5YzgtYTQ5OC04ZmQyOTlhZmI3MDEvMC9DMTY2OTEwM0Q4 NzBBMzkwQzU2QzhERkQzQzFCRkUyM0U0OEIwNTQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE2NjkxMDNEODcwQTM5MEM1NkM4REZEM0MxQkZFMjNFNDhC MDU0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODg4ZDBiNmUtYjJlZC00OWM4LWE0 OTgtOGZkMjk5YWZiNzAxLzAvQzE2NjkxMDNEODcwQTM5MEM1NkM4REZEM0MxQkZF MjNFNDhCMDU0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMAnS2K4ttggeEXRymCMgPm+rX7LnJ88Gu5j 4rRoAfLcUKh0t5XYoHOUeY2YW7peSryb5Iw1PWHl5+hq9m8LG72y57kS5R7O0l9Y lBezpSn5O88ToTB/qilYEuzfLObQx7S7JN1ZM/RXk+OMUg4V9o7lKb08DmSqTDC5 +lqYHzqLdXcldfBUwhRdiuv/kjjm7HrwWCzSuAvRU/JAONBZ+YAjH1KQ7tdBdgSA Z38hqPcY0G8I0NoDO4FjmhViYSi9YiaM3aP8Sr6wGRmvsOtdxqW8PLC3bJwusZbi m+LaQmXGhDfgoxoSIYKSpH6JFKjB1LDp/ZxAFe9/6Bo3cKyKGoE= -----END CERTIFICATE-----Generated at Sun Jun 29 18:13:14 2025 by rpki-client