$ rpki-client -vvf repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft File: 0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft (raw, json) Hash identifier: FziwYeVOxRmH2tAJ6e7QOq3kaWh8rucbLPOexgmGGw0= Subject key identifier: 08:1A:10:A4:B3:BC:02:26:06:78:28:6F:37:47:FE:D6:A2:D5:75:BC Authority key identifier: 0F:BA:D9:2F:48:DF:15:47:7E:4D:D9:3C:DC:7A:52:77:FE:93:A8:EB Certificate issuer: /CN=0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB Certificate serial: 6E96C273956E313777036B4A4F4FABEEDB900998 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft Manifest number: 75 Signing time: Sun 29 Jun 2025 10:01:03 +0000 Manifest this update: Sun 29 Jun 2025 09:56:03 +0000 Manifest next update: Wed 02 Jul 2025 16:49:03 +0000 Files and hashes: 1: 0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.crl (hash: 0Y3YKyOgg6hxv6SWB9VkDLhyEykWOrP1R5sasbtVGW0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.crl rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:96:c2:73:95:6e:31:37:77:03:6b:4a:4f:4f:ab:ee:db:90:09:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB Validity Not Before: Jun 29 09:56:03 2025 GMT Not After : Jul 2 16:49:03 2025 GMT Subject: CN=081A10A4B3BC02260678286F3747FED6A2D575BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2f:3e:d8:92:26:1b:73:9a:06:bf:69:1d:61: b8:bf:ed:90:ca:8f:d3:0e:f0:dc:75:6a:01:3e:35: c3:de:aa:d5:80:ae:26:e9:f7:18:f1:c0:c7:9d:db: 6f:71:ee:e1:f4:5a:d9:aa:07:cc:b0:46:c0:1f:a2: f9:c4:80:e1:26:80:61:81:3a:67:c2:29:79:1d:9b: f4:96:9a:20:33:7c:bf:80:f2:d9:4e:6c:94:23:08: 4f:f2:23:66:d2:eb:b9:7a:c4:61:3b:4c:18:7c:ae: 61:93:2e:dd:cf:f6:d3:68:62:a7:56:31:5a:0e:1f: 9a:25:da:07:7d:7b:04:ba:76:ac:bb:bd:0c:72:01: 8b:f7:ea:2d:02:ee:f8:33:e9:3a:b3:83:f2:c1:ec: 2c:f3:20:74:b2:38:2c:ba:64:f1:75:e1:dc:3f:c7: d6:57:13:0a:6c:b0:f1:71:e5:9d:2e:08:89:24:9d: 85:86:ab:1e:08:34:7a:69:57:30:9c:16:f0:e9:c6: cf:ee:9a:e9:e3:f5:d9:fb:8d:27:72:d1:eb:b9:ad: ac:b0:81:d6:50:b7:49:e4:72:91:09:61:8f:7e:88: d0:5a:6a:91:e2:54:7d:d0:48:8a:11:ba:0c:3e:da: f7:51:6f:db:aa:8a:ef:9f:ee:f8:45:1b:fc:7d:47: c3:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:1A:10:A4:B3:BC:02:26:06:78:28:6F:37:47:FE:D6:A2:D5:75:BC X509v3 Authority Key Identifier: keyid:0F:BA:D9:2F:48:DF:15:47:7E:4D:D9:3C:DC:7A:52:77:FE:93:A8:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:d8:22:a9:4a:23:33:8e:eb:aa:56:c4:3c:b4:ed:7e:fb:c9: d4:ab:0a:6f:17:12:80:3e:8a:9f:7f:38:6e:36:3c:b0:ab:6a: 77:a7:e5:18:07:be:76:04:b8:fb:d8:64:52:37:26:35:0e:ce: a4:c4:c8:6c:1d:b9:0d:f9:5d:7f:bd:15:de:a9:f0:b8:d2:9e: 44:69:b5:e4:05:63:e8:e5:4b:eb:3b:57:00:bd:e0:34:78:42: f7:4c:86:35:a4:37:0a:1e:56:2d:cf:48:79:cc:e8:17:d8:3f: 2e:13:54:dc:73:d0:7f:2d:96:6c:00:c2:33:bf:36:bb:ec:7a: c6:f3:18:58:44:3e:d8:c6:54:06:e1:a9:78:3b:e4:aa:b1:62: 3b:ef:16:73:5f:25:97:f7:ce:f5:d3:36:7b:42:75:f7:84:4a: 7e:86:95:60:55:45:f7:16:50:0e:87:61:1e:94:cd:94:c7:ce: 4a:fc:3c:b4:65:fa:3b:70:97:29:c7:8b:ea:4a:c2:16:e0:ff: 92:8c:76:cc:26:c1:cb:e4:d4:94:43:ac:83:b2:d3:14:47:e2: ff:76:57:58:9f:69:a6:07:8f:4a:97:65:c0:95:2a:e3:ea:eb: b4:db:5e:db:9a:ba:7c:b2:18:49:95:a0:f0:c5:6d:92:29:26: 23:38:36:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbpbCc5VuMTd3A2tKT0+r7tuQCZgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZCQUQ5MkY0OERGMTU0NzdFNEREOTNDREM3QTUyNzdG RTkzQThFQjAeFw0yNTA2MjkwOTU2MDNaFw0yNTA3MDIxNjQ5MDNaMDMxMTAvBgNV BAMTKDA4MUExMEE0QjNCQzAyMjYwNjc4Mjg2RjM3NDdGRUQ2QTJENTc1QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdLz7YkiYbc5oGv2kdYbi/7ZDK j9MO8Nx1agE+NcPeqtWAribp9xjxwMed229x7uH0WtmqB8ywRsAfovnEgOEmgGGB OmfCKXkdm/SWmiAzfL+A8tlObJQjCE/yI2bS67l6xGE7TBh8rmGTLt3P9tNoYqdW MVoOH5ol2gd9ewS6dqy7vQxyAYv36i0C7vgz6Tqzg/LB7CzzIHSyOCy6ZPF14dw/ x9ZXEwpssPFx5Z0uCIkknYWGqx4INHppVzCcFvDpxs/umunj9dn7jSdy0eu5rayw gdZQt0nkcpEJYY9+iNBaapHiVH3QSIoRugw+2vdRb9uqiu+f7vhFG/x9R8PLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCBoQpLO8AiYGeChvN0f+1qLVdbwwHwYDVR0j BBgwFoAUD7rZL0jfFUd+Tdk83HpSd/6TqOswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODFhZjAyMS0xYzAxLTRhMmUtYjVkMy1jMWJiYjE2NTBjNDMvMC8wRkJBRDkyRjQ4 REYxNTQ3N0U0REQ5M0NEQzdBNTI3N0ZFOTNBOEVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZCQUQ5MkY0OERGMTU0NzdFNEREOTNDREM3QTUyNzdGRTkz QThFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzgxYWYwMjEtMWMwMS00YTJlLWI1 ZDMtYzFiYmIxNjUwYzQzLzAvMEZCQUQ5MkY0OERGMTU0NzdFNEREOTNDREM3QTUy NzdGRTkzQThFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIPYIqlKIzOO66pWxDy07X77ydSrCm8XEoA+ ip9/OG42PLCranen5RgHvnYEuPvYZFI3JjUOzqTEyGwduQ35XX+9Fd6p8LjSnkRp teQFY+jlS+s7VwC94DR4QvdMhjWkNwoeVi3PSHnM6BfYPy4TVNxz0H8tlmwAwjO/ NrvsesbzGFhEPtjGVAbhqXg75KqxYjvvFnNfJZf3zvXTNntCdfeESn6GlWBVRfcW UA6HYR6UzZTHzkr8PLRl+jtwlynHi+pKwhbg/5KMdswmwcvk1JRDrIOy0xRH4v92 V1ifaaYHj0qXZcCVKuPq67TbXtuaunyyGEmVoPDFbZIpJiM4NmE= -----END CERTIFICATE-----Generated at Sun Jun 29 18:10:27 2025 by rpki-client