$ rpki-client -vvf repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.mft File: D018BF43793F56145B87233DD668DE3BDEEFFE13.mft (raw, json) Hash identifier: cjAPTaNOKDBYRpIHntXsfg0dlOFH2lQgLdelkw40bjQ= Subject key identifier: A7:3C:C0:2C:40:DF:94:AA:09:94:5E:51:8D:3C:DD:EF:15:82:1D:0A Authority key identifier: D0:18:BF:43:79:3F:56:14:5B:87:23:3D:D6:68:DE:3B:DE:EF:FE:13 Certificate issuer: /CN=D018BF43793F56145B87233DD668DE3BDEEFFE13 Certificate serial: 592261C798B7D256B37663557131269C1A52EE18 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D018BF43793F56145B87233DD668DE3BDEEFFE13.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.mft Manifest number: 3B Signing time: Tue 01 Jul 2025 02:41:13 +0000 Manifest this update: Tue 01 Jul 2025 02:36:13 +0000 Manifest next update: Fri 04 Jul 2025 13:55:13 +0000 Files and hashes: 1: D018BF43793F56145B87233DD668DE3BDEEFFE13.crl (hash: 2kpcsum3zwEWAK/sQYuFroMHLtVioUtqvhXkpzTxXIE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.crl rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D018BF43793F56145B87233DD668DE3BDEEFFE13.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 13:55:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:22:61:c7:98:b7:d2:56:b3:76:63:55:71:31:26:9c:1a:52:ee:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D018BF43793F56145B87233DD668DE3BDEEFFE13 Validity Not Before: Jul 1 02:36:13 2025 GMT Not After : Jul 4 13:55:13 2025 GMT Subject: CN=A73CC02C40DF94AA09945E518D3CDDEF15821D0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:6d:8e:e2:e7:47:f0:2c:f2:e6:17:10:b2:12: 15:ea:22:ea:a4:f3:62:4f:3e:df:14:5c:89:60:aa: 1a:03:5e:d8:96:36:7f:88:82:ec:b2:72:5d:ba:3a: 6f:1b:64:e2:dd:e2:01:c8:0e:fc:6f:05:67:43:0a: e4:d1:41:43:f3:2e:d5:39:ea:9a:f0:58:0e:ab:5b: b3:4b:ce:ad:37:f6:a7:45:ae:b8:16:33:d4:d1:29: 27:f9:57:5f:07:52:4c:b4:5e:c0:61:96:98:b9:09: 87:b7:d9:2c:6f:bb:7d:6a:1b:0b:70:ba:6c:4b:70: df:84:20:9f:8d:10:a5:a4:03:62:99:0c:15:72:56: b6:d8:c2:9c:b5:32:f0:6d:75:68:a4:99:b4:06:77: b3:65:5b:bc:64:37:f2:85:3a:aa:ff:bb:4d:e9:58: b6:93:fb:43:77:65:51:2d:35:79:98:5f:e9:e1:2e: bf:63:7d:be:8d:d3:61:f2:fb:38:b0:d4:40:b4:df: fb:87:c1:18:25:42:ee:e2:70:35:84:de:05:ef:48: 3f:57:1f:94:46:fb:49:38:00:be:76:19:4c:42:18: e1:61:4e:1a:47:8a:42:7e:dc:3a:d3:d1:a1:37:b4: f9:37:df:9a:d2:45:ce:4c:5e:90:64:d6:3c:de:0d: 75:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:3C:C0:2C:40:DF:94:AA:09:94:5E:51:8D:3C:DD:EF:15:82:1D:0A X509v3 Authority Key Identifier: keyid:D0:18:BF:43:79:3F:56:14:5B:87:23:3D:D6:68:DE:3B:DE:EF:FE:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D018BF43793F56145B87233DD668DE3BDEEFFE13.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:de:2c:19:7d:57:b9:06:dc:07:1a:79:e7:2f:42:42:d7:12: 15:55:d7:71:b1:4a:82:12:cf:77:f2:a4:7c:97:a5:46:7c:bc: 43:f3:2c:1a:f1:c9:be:c3:0b:8b:60:97:be:5c:2c:e4:5a:51: 69:56:2b:7b:63:27:50:a6:16:53:d4:aa:33:6a:03:94:30:3d: 66:b3:0b:45:4a:4c:39:cd:12:9d:2f:5b:43:83:81:22:03:2a: f3:8c:b6:68:95:f3:e7:29:b5:d1:03:ec:43:5c:53:70:00:c4: 6b:95:a1:7f:dd:b0:24:33:db:69:5e:93:58:5b:08:9d:e5:5c: 3e:41:46:19:6e:d6:d9:33:47:76:ec:15:c0:a4:e8:ec:b8:93: ba:73:1d:3c:57:da:5c:96:b6:d9:86:59:45:5d:6d:3e:dd:3d: ea:63:c9:d2:95:64:57:0c:1b:0d:0a:32:50:5b:21:00:6f:89: cc:4e:fc:12:3e:50:a6:65:01:a0:37:64:78:8b:11:95:b4:65: ba:92:4c:3f:51:96:b0:a8:37:42:9b:e5:40:b7:53:22:11:d8: 74:f5:d8:1f:b0:a5:da:d1:12:02:2f:5f:34:f2:1f:7d:70:d1: 74:6a:50:40:46:ab:41:db:89:7a:9b:88:bf:bc:68:71:38:eb: 5d:85:42:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWSJhx5i30lazdmNVcTEmnBpS7hgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDAxOEJGNDM3OTNGNTYxNDVCODcyMzNERDY2OERFM0JE RUVGRkUxMzAeFw0yNTA3MDEwMjM2MTNaFw0yNTA3MDQxMzU1MTNaMDMxMTAvBgNV BAMTKEE3M0NDMDJDNDBERjk0QUEwOTk0NUU1MThEM0NEREVGMTU4MjFEMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxbY7i50fwLPLmFxCyEhXqIuqk 82JPPt8UXIlgqhoDXtiWNn+Iguyycl26Om8bZOLd4gHIDvxvBWdDCuTRQUPzLtU5 6prwWA6rW7NLzq039qdFrrgWM9TRKSf5V18HUky0XsBhlpi5CYe32Sxvu31qGwtw umxLcN+EIJ+NEKWkA2KZDBVyVrbYwpy1MvBtdWikmbQGd7NlW7xkN/KFOqr/u03p WLaT+0N3ZVEtNXmYX+nhLr9jfb6N02Hy+ziw1EC03/uHwRglQu7icDWE3gXvSD9X H5RG+0k4AL52GUxCGOFhThpHikJ+3DrT0aE3tPk335rSRc5MXpBk1jzeDXUdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpzzALEDflKoJlF5RjTzd7xWCHQowHwYDVR0j BBgwFoAU0Bi/Q3k/VhRbhyM91mjeO97v/hMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWFkMzE0YS03NjU3LTQ5MDEtYjdkZC0zYjlhOWJmYzZlOWMvMC9EMDE4QkY0Mzc5 M0Y1NjE0NUI4NzIzM0RENjY4REUzQkRFRUZGRTEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDAxOEJGNDM3OTNGNTYxNDVCODcyMzNERDY2OERFM0JERUVG RkUxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODlhZDMxNGEtNzY1Ny00OTAxLWI3 ZGQtM2I5YTliZmM2ZTljLzAvRDAxOEJGNDM3OTNGNTYxNDVCODcyMzNERDY2OERF M0JERUVGRkUxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGTeLBl9V7kG3AcaeecvQkLXEhVV13GxSoIS z3fypHyXpUZ8vEPzLBrxyb7DC4tgl75cLORaUWlWK3tjJ1CmFlPUqjNqA5QwPWaz C0VKTDnNEp0vW0ODgSIDKvOMtmiV8+cptdED7ENcU3AAxGuVoX/dsCQz22lek1hb CJ3lXD5BRhlu1tkzR3bsFcCk6Oy4k7pzHTxX2lyWttmGWUVdbT7dPepjydKVZFcM Gw0KMlBbIQBvicxO/BI+UKZlAaA3ZHiLEZW0ZbqSTD9RlrCoN0Kb5UC3UyIR2HT1 2B+wpdrREgIvXzTyH31w0XRqUEBGq0HbiXqbiL+8aHE4612FQi0= -----END CERTIFICATE-----Generated at Wed Jul 2 14:29:34 2025 by rpki-client