$ rpki-client -vvf repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.mft File: 8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.mft (raw, json) Hash identifier: Ri9qgXbqvBw1tWrSByEcifctPfut44zygJpcvJw8vz8= Subject key identifier: 58:E5:8E:59:7B:3D:0B:9B:99:F8:7A:4B:69:B3:B5:C7:30:CB:C4:BD Authority key identifier: 86:94:CD:BB:52:F4:AE:A8:9A:F4:6C:A5:BF:A5:A6:39:97:3D:73:02 Certificate issuer: /CN=8694CDBB52F4AEA89AF46CA5BFA5A639973D7302 Certificate serial: 51FE64DACA1060FAEDC7468357E63E9CB72E83C3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.mft Manifest number: 2C Signing time: Tue 01 Jul 2025 14:51:35 +0000 Manifest this update: Tue 01 Jul 2025 14:46:35 +0000 Manifest next update: Fri 04 Jul 2025 15:44:35 +0000 Files and hashes: 1: 8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.crl (hash: 0wHk8u0OW0spdKlOilRTTzj4i72LUZu5lnS+wfWtRbw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.crl rsync://repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 15:44:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:fe:64:da:ca:10:60:fa:ed:c7:46:83:57:e6:3e:9c:b7:2e:83:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8694CDBB52F4AEA89AF46CA5BFA5A639973D7302 Validity Not Before: Jul 1 14:46:35 2025 GMT Not After : Jul 4 15:44:35 2025 GMT Subject: CN=58E58E597B3D0B9B99F87A4B69B3B5C730CBC4BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:00:03:66:06:8a:12:6f:9b:93:53:53:69:bb: f8:d1:73:5e:f1:6b:d4:a0:af:8c:09:29:6f:cb:91: fb:c0:86:d7:88:0e:89:0a:a3:fb:52:85:d4:09:7f: c6:62:36:c6:ca:c2:6f:42:a8:a9:c2:a2:f5:76:2a: f5:40:53:92:8b:f8:e7:80:c9:ef:84:4b:7e:a1:50: cd:be:c1:d5:d3:66:8d:1f:4f:55:fd:e5:dd:6f:98: e6:f8:d0:d2:fb:8b:1a:6b:91:8c:23:df:57:dd:ae: ee:c1:0f:82:19:99:27:c0:6c:91:00:cc:d8:71:1b: 95:4f:8a:c0:f9:4c:8a:c9:ed:49:ac:ea:6a:8c:f5: ed:d7:37:07:10:f8:88:19:46:c3:72:22:89:5e:ce: 9d:33:b3:6b:f7:80:07:29:93:0c:c1:85:6e:c9:85: 3c:62:f9:2d:1c:02:92:91:d0:5f:8a:88:f6:2d:8e: 5c:45:db:a7:ed:cb:24:60:80:29:4e:c7:2a:b5:1d: 4b:e4:e0:69:2e:a6:eb:3f:c6:5f:87:e6:79:d7:16: 69:90:44:ff:a0:69:cd:57:8f:fa:b4:c1:bd:c8:a0: d0:44:dd:7c:de:3f:e4:39:42:1d:46:62:7d:26:a6: 9b:3b:a8:24:68:4f:b2:c7:1e:45:f9:5d:fc:34:9f: a6:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:E5:8E:59:7B:3D:0B:9B:99:F8:7A:4B:69:B3:B5:C7:30:CB:C4:BD X509v3 Authority Key Identifier: keyid:86:94:CD:BB:52:F4:AE:A8:9A:F4:6C:A5:BF:A5:A6:39:97:3D:73:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:39:a7:ba:cc:14:18:67:8d:be:56:50:de:4d:cb:5a:e3:6b: c0:e5:dc:0e:9c:5a:e6:b3:7a:f3:c9:a4:01:53:c3:a9:57:fa: 56:b6:05:84:e5:72:19:a7:75:e2:92:3f:32:56:ac:96:56:0f: 8d:d8:b0:82:0f:eb:f7:7d:d8:36:1d:c2:81:f8:e7:d0:cd:e7: e8:70:20:b7:b5:41:1a:9d:83:4b:74:d3:f2:46:50:49:96:6d: 50:cc:76:43:2a:85:2d:97:f2:18:f8:d5:d7:94:ee:dc:ea:c8: b4:5b:25:ab:51:c7:60:76:37:ea:b0:98:ad:63:f5:f5:8f:17: 0e:3d:e9:42:34:7e:9d:74:84:94:2e:46:f0:6b:c5:03:e2:28: ab:14:f5:98:53:dc:ab:c7:1a:8d:be:55:b7:59:36:3e:1a:8d: 88:36:f2:ab:ce:ce:65:b3:7a:f6:21:2e:da:d4:3e:a7:64:d6: 67:4f:ff:d1:80:ca:aa:2c:9e:ca:7b:1b:cd:b0:7b:0a:3b:cd: 87:76:18:30:a9:cf:91:99:9a:4a:b1:39:9a:5d:29:6e:bb:9c: bd:22:ec:41:6b:2e:1f:ac:cd:86:fd:8b:79:4a:38:45:62:23: e3:99:8e:32:80:ef:aa:a4:c5:f1:3f:0f:58:d9:83:92:e6:40: b8:af:62:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUf5k2soQYPrtx0aDV+Y+nLcug8MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY5NENEQkI1MkY0QUVBODlBRjQ2Q0E1QkZBNUE2Mzk5 NzNENzMwMjAeFw0yNTA3MDExNDQ2MzVaFw0yNTA3MDQxNTQ0MzVaMDMxMTAvBgNV BAMTKDU4RTU4RTU5N0IzRDBCOUI5OUY4N0E0QjY5QjNCNUM3MzBDQkM0QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaAANmBooSb5uTU1Npu/jRc17x a9Sgr4wJKW/LkfvAhteIDokKo/tShdQJf8ZiNsbKwm9CqKnCovV2KvVAU5KL+OeA ye+ES36hUM2+wdXTZo0fT1X95d1vmOb40NL7ixprkYwj31fdru7BD4IZmSfAbJEA zNhxG5VPisD5TIrJ7Ums6mqM9e3XNwcQ+IgZRsNyIolezp0zs2v3gAcpkwzBhW7J hTxi+S0cApKR0F+KiPYtjlxF26ftyyRggClOxyq1HUvk4Gkupus/xl+H5nnXFmmQ RP+gac1Xj/q0wb3IoNBE3XzeP+Q5Qh1GYn0mpps7qCRoT7LHHkX5Xfw0n6aNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWOWOWXs9C5uZ+HpLabO1xzDLxL0wHwYDVR0j BBgwFoAUhpTNu1L0rqia9Gylv6WmOZc9cwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Y2YwMGY4YS01Y2JkLTQ2MGYtYmZjNi1iZDg5NDJiNjUzN2MvMC84Njk0Q0RCQjUy RjRBRUE4OUFGNDZDQTVCRkE1QTYzOTk3M0Q3MzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODY5NENEQkI1MkY0QUVBODlBRjQ2Q0E1QkZBNUE2Mzk5NzNE NzMwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGNmMDBmOGEtNWNiZC00NjBmLWJm YzYtYmQ4OTQyYjY1MzdjLzAvODY5NENEQkI1MkY0QUVBODlBRjQ2Q0E1QkZBNUE2 Mzk5NzNENzMwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH85p7rMFBhnjb5WUN5Ny1rja8Dl3A6cWuaz evPJpAFTw6lX+la2BYTlchmndeKSPzJWrJZWD43YsIIP6/d92DYdwoH459DN5+hw ILe1QRqdg0t00/JGUEmWbVDMdkMqhS2X8hj41deU7tzqyLRbJatRx2B2N+qwmK1j 9fWPFw496UI0fp10hJQuRvBrxQPiKKsU9ZhT3KvHGo2+VbdZNj4ajYg28qvOzmWz evYhLtrUPqdk1mdP/9GAyqosnsp7G82wewo7zYd2GDCpz5GZmkqxOZpdKW67nL0i 7EFrLh+szYb9i3lKOEViI+OZjjKA76qkxfE/D1jZg5LmQLivYho= -----END CERTIFICATE-----Generated at Thu Jul 3 06:51:17 2025 by rpki-client