$ rpki-client -vvf repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft File: 9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft (raw, json) Hash identifier: 7S1iK5C/2XoxqFS0K/ms5kbOKaxde73Po8tFm39E6Ac= Subject key identifier: 0E:E1:0B:91:23:1E:23:77:AE:61:3D:FB:45:D0:D8:FA:8A:08:2A:EB Authority key identifier: 94:79:B8:C5:D5:AE:8F:AB:DC:57:A9:AB:54:9A:DD:E2:0B:E8:A4:B3 Certificate issuer: /CN=9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3 Certificate serial: 3E5918B27EEFA2A619FF39191779863E6F8100B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft Manifest number: 01D1 Signing time: Mon 30 Jun 2025 16:12:00 +0000 Manifest this update: Mon 30 Jun 2025 16:07:00 +0000 Manifest next update: Thu 03 Jul 2025 18:58:00 +0000 Files and hashes: 1: 9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.crl (hash: xoKdIgOPE+3NGdPt8Yrnvrn1Bu5qcvrCeasl8UW9I3o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.crl rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 18:58:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:59:18:b2:7e:ef:a2:a6:19:ff:39:19:17:79:86:3e:6f:81:00:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3 Validity Not Before: Jun 30 16:07:00 2025 GMT Not After : Jul 3 18:58:00 2025 GMT Subject: CN=0EE10B91231E2377AE613DFB45D0D8FA8A082AEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:63:b3:04:9f:09:67:3b:d3:00:3e:95:0c:08: 00:33:bf:f9:a7:80:3c:fe:97:b5:13:97:d8:ec:7b: e6:c0:9e:77:00:1d:58:7e:20:50:7f:bf:47:94:3b: 2a:f7:12:15:f1:dd:c2:63:d6:ae:cf:97:0e:1c:35: 56:b2:5d:9b:a2:34:cd:f1:34:8b:7a:00:e2:9d:0b: a7:ea:81:68:f5:2b:5c:5f:d5:f5:0d:da:45:3f:47: 99:62:64:0a:53:b0:f8:e1:c4:c7:dd:1b:dd:00:f0: 9b:6e:10:2b:10:1f:2f:4c:98:07:12:5e:70:c4:d1: 90:e6:bd:c1:53:cc:26:32:11:6f:72:0d:49:65:a9: 0e:54:f4:ec:2d:03:ee:17:f4:ab:4e:87:c2:2e:d8: a2:63:d4:68:29:f4:4c:e5:ab:e5:ba:bf:5f:21:07: 53:a2:65:81:27:49:33:24:87:35:50:81:b3:82:8c: 93:75:60:81:da:93:c1:6e:e5:ba:38:25:32:1a:45: 1d:f9:c4:3f:cb:b0:55:e8:01:29:a8:06:52:a3:ac: af:fd:43:e1:0e:45:df:b1:6a:49:c5:6f:1b:76:4e: ce:91:93:c1:db:46:51:89:31:99:a4:7c:61:25:3a: 0c:a2:85:e1:1a:fa:78:a0:8e:bc:fb:7f:a3:f6:47: 6f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:E1:0B:91:23:1E:23:77:AE:61:3D:FB:45:D0:D8:FA:8A:08:2A:EB X509v3 Authority Key Identifier: keyid:94:79:B8:C5:D5:AE:8F:AB:DC:57:A9:AB:54:9A:DD:E2:0B:E8:A4:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:11:1b:9a:2f:49:00:61:a8:19:ea:50:4c:73:76:f8:0a:8b: 0d:6e:0d:d9:5e:80:da:22:26:cc:cd:d8:5e:f6:ae:64:4e:f0: 27:16:14:8b:6a:65:d6:f6:27:d4:26:0c:9d:25:a7:1c:01:3f: a3:66:85:23:73:0f:25:c4:de:7a:db:b2:33:ae:c4:b3:a5:1f: 20:f9:fa:f2:58:23:d5:2a:83:88:24:00:5a:15:40:ae:34:e1: 75:6b:ba:49:83:9e:fb:22:81:6d:35:8d:75:7e:04:86:be:1c: 89:68:c6:19:0a:5d:e5:f6:53:0c:25:98:9a:45:63:d2:e8:85: b4:90:83:e8:da:70:3d:04:92:a5:3c:c7:13:0e:c2:bd:84:51: cc:b5:ff:29:a7:36:54:21:90:84:1e:a9:f8:41:c3:f2:db:a9: 46:48:63:a5:bb:72:be:af:d9:a6:dc:e7:f3:d9:6a:7c:25:44: 6f:90:07:a6:42:7f:be:7c:bf:42:bd:27:2f:2e:2f:c4:4d:52: e3:5a:62:04:a8:38:83:07:52:03:70:20:bc:e0:95:19:a5:86: 12:ac:8a:49:91:23:53:70:03:aa:bf:96:7b:f0:86:a3:ca:2f: 27:eb:f4:6f:82:ce:53:08:be:11:f7:80:9c:09:a9:00:ad:55: f1:df:2c:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPlkYsn7voqYZ/zkZF3mGPm+BALEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ3OUI4QzVENUFFOEZBQkRDNTdBOUFCNTQ5QURERTIw QkU4QTRCMzAeFw0yNTA2MzAxNjA3MDBaFw0yNTA3MDMxODU4MDBaMDMxMTAvBgNV BAMTKDBFRTEwQjkxMjMxRTIzNzdBRTYxM0RGQjQ1RDBEOEZBOEEwODJBRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPY7MEnwlnO9MAPpUMCAAzv/mn gDz+l7UTl9jse+bAnncAHVh+IFB/v0eUOyr3EhXx3cJj1q7Plw4cNVayXZuiNM3x NIt6AOKdC6fqgWj1K1xf1fUN2kU/R5liZApTsPjhxMfdG90A8JtuECsQHy9MmAcS XnDE0ZDmvcFTzCYyEW9yDUllqQ5U9OwtA+4X9KtOh8Iu2KJj1Ggp9Ezlq+W6v18h B1OiZYEnSTMkhzVQgbOCjJN1YIHak8Fu5bo4JTIaRR35xD/LsFXoASmoBlKjrK/9 Q+EORd+xaknFbxt2Ts6Rk8HbRlGJMZmkfGElOgyiheEa+nigjrz7f6P2R28FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDuELkSMeI3euYT37RdDY+ooIKuswHwYDVR0j BBgwFoAUlHm4xdWuj6vcV6mrVJrd4gvopLMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTBhYTE1OC02NTgxLTRjYmUtYjZjZS1kODcyMWM3MTlmYTAvMC85NDc5QjhDNUQ1 QUU4RkFCREM1N0E5QUI1NDlBRERFMjBCRThBNEIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTQ3OUI4QzVENUFFOEZBQkRDNTdBOUFCNTQ5QURERTIwQkU4 QTRCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTkwYWExNTgtNjU4MS00Y2JlLWI2 Y2UtZDg3MjFjNzE5ZmEwLzAvOTQ3OUI4QzVENUFFOEZBQkRDNTdBOUFCNTQ5QURE RTIwQkU4QTRCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKMRG5ovSQBhqBnqUExzdvgKiw1uDdlegNoi JszN2F72rmRO8CcWFItqZdb2J9QmDJ0lpxwBP6NmhSNzDyXE3nrbsjOuxLOlHyD5 +vJYI9Uqg4gkAFoVQK404XVrukmDnvsigW01jXV+BIa+HIloxhkKXeX2UwwlmJpF Y9LohbSQg+jacD0EkqU8xxMOwr2EUcy1/ymnNlQhkIQeqfhBw/LbqUZIY6W7cr6v 2abc5/PZanwlRG+QB6ZCf758v0K9Jy8uL8RNUuNaYgSoOIMHUgNwILzglRmlhhKs ikmRI1NwA6q/lnvwhqPKLyfr9G+CzlMIvhH3gJwJqQCtVfHfLIA= -----END CERTIFICATE-----Generated at Tue Jul 1 08:34:13 2025 by rpki-client