$ rpki-client -vvf repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft File: C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft (raw, json) Hash identifier: +pmUJDfVdWUJhwH701BNBSBU+lyc8KVIeWuOV2LfCSU= Subject key identifier: E0:D1:DE:97:9C:23:4A:5E:AF:B4:18:3A:2E:CB:18:2F:45:58:0D:E1 Authority key identifier: C1:66:91:03:D8:70:A3:90:C5:6C:8D:FD:3C:1B:FE:23:E4:8B:05:40 Certificate issuer: /CN=C1669103D870A390C56C8DFD3C1BFE23E48B0540 Certificate serial: 104D375866BBD754880AE42407178DC8C295EB9B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1669103D870A390C56C8DFD3C1BFE23E48B0540.cer Subject info access: rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft Manifest number: 96 Signing time: Sun 04 May 2025 18:31:20 +0000 Manifest this update: Sun 04 May 2025 18:26:20 +0000 Manifest next update: Wed 07 May 2025 21:39:20 +0000 Files and hashes: 1: C1669103D870A390C56C8DFD3C1BFE23E48B0540.crl (hash: 1I1kH6SGS484x8ARnteXDWC2Br8EKE30zxgL4pG+RNo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.crl rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1669103D870A390C56C8DFD3C1BFE23E48B0540.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 21:39:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:4d:37:58:66:bb:d7:54:88:0a:e4:24:07:17:8d:c8:c2:95:eb:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1669103D870A390C56C8DFD3C1BFE23E48B0540 Validity Not Before: May 4 18:26:20 2025 GMT Not After : May 7 21:39:20 2025 GMT Subject: CN=E0D1DE979C234A5EAFB4183A2ECB182F45580DE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:42:b1:1f:9a:bb:f9:a5:3d:95:28:4d:33:ab: 2a:db:8a:85:7a:4d:d6:f5:88:1f:28:8b:fb:71:f4: b4:1b:5f:38:73:b1:b4:9a:97:46:f0:ef:c5:6a:d1: 2b:e8:c6:a4:fb:34:b2:2d:50:83:49:91:59:eb:6e: 27:49:d3:82:96:4e:c1:90:61:7b:20:b4:e7:ea:3d: 5f:92:44:5b:d5:08:41:07:b6:d1:47:ff:f2:10:83: 6f:2b:25:38:c3:14:0b:5e:19:e3:88:88:43:63:c7: 03:cb:18:8f:f9:3b:d4:ba:11:0f:b5:c6:32:5b:95: 6f:59:11:db:6d:8c:55:92:e8:5a:bd:12:1e:5d:ce: 90:67:42:a8:82:d0:5b:0d:63:43:14:15:fd:30:e2: a5:39:4b:2e:42:46:fa:72:2a:fc:ff:16:e6:b6:d5: e7:5c:58:e0:8d:88:af:88:1f:e5:a0:7b:a6:46:44: 49:61:9d:ac:d3:9c:10:a5:7a:ff:84:2a:f2:9b:c4: 36:55:f5:44:ba:d2:22:60:6e:95:7b:18:92:d8:49: 35:d7:10:dd:4a:ff:76:d0:12:7b:7a:01:a8:03:99: f2:08:c2:3e:0e:4e:dc:4e:d2:03:c4:90:b2:b8:26: e8:51:25:f6:c2:af:dc:16:ff:33:e0:83:09:6e:fa: 79:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:D1:DE:97:9C:23:4A:5E:AF:B4:18:3A:2E:CB:18:2F:45:58:0D:E1 X509v3 Authority Key Identifier: keyid:C1:66:91:03:D8:70:A3:90:C5:6C:8D:FD:3C:1B:FE:23:E4:8B:05:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1669103D870A390C56C8DFD3C1BFE23E48B0540.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:53:20:73:d1:08:97:03:73:b6:b2:86:6a:4f:2b:11:84:9e: dc:b0:6c:dc:14:62:79:86:e7:0c:e1:00:1e:fc:1d:6a:4c:93: 78:9c:d0:ea:99:67:ea:26:40:20:3c:6f:d8:a8:23:9a:cb:5b: 97:e4:88:b9:0c:7d:8d:88:e0:2f:d1:04:f2:16:3f:9e:17:33: da:84:45:4e:f3:43:20:3b:3c:38:c6:8b:b7:ee:0a:2a:9c:91: 56:2d:c5:19:35:e0:f7:cb:1e:20:72:f1:0d:0b:48:00:26:19: 37:bc:e1:4b:16:00:00:be:90:aa:ed:5e:50:97:b7:43:60:6a: 48:f6:f9:6a:5b:de:8c:da:9e:c2:66:e9:b1:1f:dd:3b:13:ac: 0d:7c:79:ad:18:a3:b3:3b:f4:5e:1f:01:bb:9c:81:4d:67:c8: 9c:2c:2c:3f:04:19:9d:cb:e6:75:bf:84:ac:02:ae:5a:50:2b: 1a:22:d0:26:a4:33:58:9c:d0:94:ba:ec:90:83:28:40:8a:48: 38:56:b9:7c:f3:56:bc:80:14:ec:fe:85:45:ad:02:6e:41:89: 6a:67:e6:b8:be:f9:ea:a3:1d:84:e6:fc:58:ec:3a:fa:a3:77: d7:f8:a9:8b:07:ef:86:b8:c0:c6:ed:27:9c:80:74:81:47:d0: 86:e2:42:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEE03WGa711SICuQkBxeNyMKV65swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE2NjkxMDNEODcwQTM5MEM1NkM4REZEM0MxQkZFMjNF NDhCMDU0MDAeFw0yNTA1MDQxODI2MjBaFw0yNTA1MDcyMTM5MjBaMDMxMTAvBgNV BAMTKEUwRDFERTk3OUMyMzRBNUVBRkI0MTgzQTJFQ0IxODJGNDU1ODBERTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3QrEfmrv5pT2VKE0zqyrbioV6 Tdb1iB8oi/tx9LQbXzhzsbSal0bw78Vq0SvoxqT7NLItUINJkVnrbidJ04KWTsGQ YXsgtOfqPV+SRFvVCEEHttFH//IQg28rJTjDFAteGeOIiENjxwPLGI/5O9S6EQ+1 xjJblW9ZEdttjFWS6Fq9Eh5dzpBnQqiC0FsNY0MUFf0w4qU5Sy5CRvpyKvz/Fua2 1edcWOCNiK+IH+Wge6ZGRElhnazTnBClev+EKvKbxDZV9US60iJgbpV7GJLYSTXX EN1K/3bQEnt6AagDmfIIwj4OTtxO0gPEkLK4JuhRJfbCr9wW/zPggwlu+nk9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4NHel5wjSl6vtBg6LssYL0VYDeEwHwYDVR0j BBgwFoAUwWaRA9hwo5DFbI39PBv+I+SLBUAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ODhkMGI2ZS1iMmVkLTQ5YzgtYTQ5OC04ZmQyOTlhZmI3MDEvMC9DMTY2OTEwM0Q4 NzBBMzkwQzU2QzhERkQzQzFCRkUyM0U0OEIwNTQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE2NjkxMDNEODcwQTM5MEM1NkM4REZEM0MxQkZFMjNFNDhC MDU0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODg4ZDBiNmUtYjJlZC00OWM4LWE0 OTgtOGZkMjk5YWZiNzAxLzAvQzE2NjkxMDNEODcwQTM5MEM1NkM4REZEM0MxQkZF MjNFNDhCMDU0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJlTIHPRCJcDc7ayhmpPKxGEntywbNwUYnmG 5wzhAB78HWpMk3ic0OqZZ+omQCA8b9ioI5rLW5fkiLkMfY2I4C/RBPIWP54XM9qE RU7zQyA7PDjGi7fuCiqckVYtxRk14PfLHiBy8Q0LSAAmGTe84UsWAAC+kKrtXlCX t0Ngakj2+Wpb3ozansJm6bEf3TsTrA18ea0Yo7M79F4fAbucgU1nyJwsLD8EGZ3L 5nW/hKwCrlpQKxoi0CakM1ic0JS67JCDKECKSDhWuXzzVryAFOz+hUWtAm5BiWpn 5ri++eqjHYTm/FjsOvqjd9f4qYsH74a4wMbtJ5yAdIFH0IbiQp4= -----END CERTIFICATE-----Generated at Tue May 6 14:30:05 2025 by rpki-client