$ rpki-client -vvf repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft File: 2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft (raw, json) Hash identifier: 979VpDHRAwk+DF50D2CXnwiD3u6wyM5GKf0IN+Qdq14= Subject key identifier: 16:2C:E3:C2:F2:4B:43:F6:B9:0B:33:F8:8A:95:F5:FC:38:18:D4:CE Authority key identifier: 2A:57:5A:DD:64:4E:97:D6:1D:2E:BF:FF:2A:23:05:6B:78:EF:AE:6C Certificate issuer: /CN=2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C Certificate serial: 428B207B4126E30B33D66A909622412A73ADBC7B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft Manifest number: 9E Signing time: Thu 03 Jul 2025 00:41:40 +0000 Manifest this update: Thu 03 Jul 2025 00:36:40 +0000 Manifest next update: Sun 06 Jul 2025 06:53:40 +0000 Files and hashes: 1: 2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.crl (hash: 0uTKXRCtSFYZr3lKsCBImRY3Dbb8CuHLm+Vq+GHwZcA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.crl rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 16:57:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:8b:20:7b:41:26:e3:0b:33:d6:6a:90:96:22:41:2a:73:ad:bc:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C Validity Not Before: Jul 3 00:36:40 2025 GMT Not After : Jul 6 06:53:40 2025 GMT Subject: CN=162CE3C2F24B43F6B90B33F88A95F5FC3818D4CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2c:25:76:72:4c:7d:ee:3e:56:51:29:7e:fa: ea:f6:23:a0:aa:46:6c:9f:03:92:e8:87:70:66:99: 68:f4:f2:90:dd:d0:8b:35:35:45:bf:c5:59:1e:76: 1e:d9:72:c8:86:d6:d0:4e:40:85:3c:64:b9:1d:36: ca:81:09:44:c3:76:52:ce:03:35:1f:43:66:03:d6: 4d:53:a2:fb:aa:94:32:dc:d8:37:bd:44:fc:b9:64: b7:6e:74:ca:c8:18:0e:72:87:54:ee:8c:95:52:64: 05:39:f5:3b:99:d9:9d:37:f5:0d:2b:1e:b5:86:e2: bf:d4:e4:38:c6:98:66:83:6d:78:f2:63:42:66:14: ae:a8:95:b1:95:2e:05:a7:26:94:37:36:53:40:ac: 8d:a4:44:20:42:e6:0a:6e:c3:7c:28:d1:b0:1b:bd: d4:4b:60:31:f5:54:cd:4d:81:9b:ed:8f:25:97:3b: ad:1b:3b:75:82:35:61:cd:62:52:1b:02:86:13:ec: b2:ad:9a:34:5d:83:0e:95:40:74:9f:81:9e:48:ca: a0:71:48:6b:82:eb:65:b5:6c:e3:97:47:54:ee:61: 64:fc:c3:10:fb:0f:97:40:b6:db:c8:ec:2d:eb:5b: 7f:32:cb:e1:95:5d:22:d1:b1:8f:a3:6f:ec:6c:5c: 3d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:2C:E3:C2:F2:4B:43:F6:B9:0B:33:F8:8A:95:F5:FC:38:18:D4:CE X509v3 Authority Key Identifier: keyid:2A:57:5A:DD:64:4E:97:D6:1D:2E:BF:FF:2A:23:05:6B:78:EF:AE:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:1b:5e:d2:cf:6c:93:60:52:84:01:35:86:59:fc:75:26:d7: df:fb:db:8b:b4:d2:fa:e2:00:06:a1:a5:5c:09:f2:0d:a4:95: 1b:b2:5d:c5:8d:0e:f8:35:d7:fc:28:f1:a4:cc:df:4b:a6:9b: 59:fb:26:bf:03:8c:ed:37:53:9f:07:36:7b:73:75:6e:fe:fe: 7b:82:1b:29:78:d6:e7:9d:6b:e3:2c:a6:ce:91:8f:97:85:fc: 5e:7b:79:7a:ab:b7:3f:ff:25:54:65:73:b2:fd:5e:7a:d7:cf: 34:d1:00:a0:3a:bb:fb:a6:3a:85:b9:c6:97:b5:17:f7:df:f4: 3f:d4:a2:cc:25:74:46:27:33:cb:a6:79:e2:43:5e:68:63:09: 79:2e:f9:11:77:a7:69:18:52:a6:ec:88:de:eb:06:af:38:55: cf:25:47:e2:32:44:05:fa:e5:d8:a8:c9:3b:7a:f7:98:53:b0: 86:8e:2d:4c:41:84:07:0e:f5:41:96:96:bf:ec:03:0f:be:cf: 18:8e:f6:09:ba:09:14:be:b4:8a:2a:c1:c9:89:90:34:f6:96: 74:37:10:cf:eb:9d:ad:c6:ea:88:15:22:40:e8:9b:67:ea:e6: f0:26:62:6a:87:cd:a3:72:e0:24:9b:3b:6b:3d:25:71:d1:85: 92:58:88:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQosge0Em4wsz1mqQliJBKnOtvHswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE1NzVBREQ2NDRFOTdENjFEMkVCRkZGMkEyMzA1NkI3 OEVGQUU2QzAeFw0yNTA3MDMwMDM2NDBaFw0yNTA3MDYwNjUzNDBaMDMxMTAvBgNV BAMTKDE2MkNFM0MyRjI0QjQzRjZCOTBCMzNGODhBOTVGNUZDMzgxOEQ0Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8LCV2ckx97j5WUSl++ur2I6Cq RmyfA5Loh3BmmWj08pDd0Is1NUW/xVkedh7ZcsiG1tBOQIU8ZLkdNsqBCUTDdlLO AzUfQ2YD1k1TovuqlDLc2De9RPy5ZLdudMrIGA5yh1TujJVSZAU59TuZ2Z039Q0r HrWG4r/U5DjGmGaDbXjyY0JmFK6olbGVLgWnJpQ3NlNArI2kRCBC5gpuw3wo0bAb vdRLYDH1VM1NgZvtjyWXO60bO3WCNWHNYlIbAoYT7LKtmjRdgw6VQHSfgZ5IyqBx SGuC62W1bOOXR1TuYWT8wxD7D5dAttvI7C3rW38yy+GVXSLRsY+jb+xsXD2NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFizjwvJLQ/a5CzP4ipX1/DgY1M4wHwYDVR0j BBgwFoAUKlda3WROl9YdLr//KiMFa3jvrmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDM1NGMxYi02NzdlLTQxZDYtYWIwZi1lOTZlZGZkOTI5NTcvMC8yQTU3NUFERDY0 NEU5N0Q2MUQyRUJGRkYyQTIzMDU2Qjc4RUZBRTZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkE1NzVBREQ2NDRFOTdENjFEMkVCRkZGMkEyMzA1NkI3OEVG QUU2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmQzNTRjMWItNjc3ZS00MWQ2LWFi MGYtZTk2ZWRmZDkyOTU3LzAvMkE1NzVBREQ2NDRFOTdENjFEMkVCRkZGMkEyMzA1 NkI3OEVGQUU2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB0bXtLPbJNgUoQBNYZZ/HUm19/724u00vri AAahpVwJ8g2klRuyXcWNDvg11/wo8aTM30umm1n7Jr8DjO03U58HNntzdW7+/nuC Gyl41ueda+Msps6Rj5eF/F57eXqrtz//JVRlc7L9XnrXzzTRAKA6u/umOoW5xpe1 F/ff9D/UoswldEYnM8umeeJDXmhjCXku+RF3p2kYUqbsiN7rBq84Vc8lR+IyRAX6 5dioyTt695hTsIaOLUxBhAcO9UGWlr/sAw++zxiO9gm6CRS+tIoqwcmJkDT2lnQ3 EM/rna3G6ogVIkDom2fq5vAmYmqHzaNy4CSbO2s9JXHRhZJYiGI= -----END CERTIFICATE-----Generated at Thu Jul 3 03:43:33 2025 by rpki-client