$ rpki-client -vvf repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/93D212CCFA351E8E694E5AFB214D80DC8C741916.mft File: 93D212CCFA351E8E694E5AFB214D80DC8C741916.mft (raw, json) Hash identifier: /HHHTjg929T6/sGHhm+YjjGxt/P8uTmmjiKIaMBAEUg= Subject key identifier: CB:96:4B:40:A4:4A:F1:03:AA:9C:69:E2:9E:E2:DC:0B:50:C9:A7:9A Authority key identifier: 93:D2:12:CC:FA:35:1E:8E:69:4E:5A:FB:21:4D:80:DC:8C:74:19:16 Certificate issuer: /CN=93D212CCFA351E8E694E5AFB214D80DC8C741916 Certificate serial: 0CDB41498C3BE05E010FA5DC477FDEE55D425BBD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/93D212CCFA351E8E694E5AFB214D80DC8C741916.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/93D212CCFA351E8E694E5AFB214D80DC8C741916.mft Manifest number: C9 Signing time: Sun 29 Jun 2025 22:00:45 +0000 Manifest this update: Sun 29 Jun 2025 21:55:45 +0000 Manifest next update: Thu 03 Jul 2025 03:21:45 +0000 Files and hashes: 1: 93D212CCFA351E8E694E5AFB214D80DC8C741916.crl (hash: StGnP0RQFiowKKFFoJgbgSuhCqN9vCmo7m7DLaVBXN4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/93D212CCFA351E8E694E5AFB214D80DC8C741916.crl rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/93D212CCFA351E8E694E5AFB214D80DC8C741916.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/93D212CCFA351E8E694E5AFB214D80DC8C741916.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 03:21:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:db:41:49:8c:3b:e0:5e:01:0f:a5:dc:47:7f:de:e5:5d:42:5b:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93D212CCFA351E8E694E5AFB214D80DC8C741916 Validity Not Before: Jun 29 21:55:45 2025 GMT Not After : Jul 3 03:21:45 2025 GMT Subject: CN=CB964B40A44AF103AA9C69E29EE2DC0B50C9A79A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4c:0f:4f:ca:31:c0:20:6f:17:58:7e:e4:98: 17:d6:68:52:85:a7:1e:a0:97:f1:dc:f8:7e:aa:9f: 5c:d3:7a:47:05:40:7e:fa:46:21:7f:d6:aa:e2:4b: b5:c2:6f:01:73:d9:05:e2:b7:1f:50:a1:0a:8a:d7: cd:65:f0:19:39:6b:ae:0f:7e:87:c2:33:e3:15:73: 9c:3d:20:7f:d6:ac:3e:f4:80:e3:f0:f2:54:73:b9: ca:2d:60:2e:93:f7:76:3e:76:fe:6f:84:f1:88:54: 16:79:f6:2b:22:89:b7:57:f6:40:af:85:d1:ef:b6: 66:d7:18:7e:6f:3b:21:69:be:12:74:34:fd:0b:e7: 1e:78:78:cf:65:19:38:b4:6d:88:d1:b6:44:d1:f9: 83:38:ae:76:6d:9f:4f:e9:73:23:64:24:69:27:d1: c7:66:76:b4:bb:2b:57:ab:c2:a9:63:19:b2:78:25: 10:4f:03:41:a3:f8:4e:d6:48:d9:4a:a5:9d:7a:48: 45:cf:a0:29:10:1d:3e:5c:5a:17:0c:5d:8c:f6:86: 6d:e1:58:93:b5:ee:6c:a6:46:fe:01:30:7e:65:7c: 83:5e:ae:6e:56:1c:65:3f:20:7c:45:c6:05:1d:f9: 73:9d:61:1f:dc:e4:22:eb:bf:b9:ff:69:9b:43:0a: 90:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:96:4B:40:A4:4A:F1:03:AA:9C:69:E2:9E:E2:DC:0B:50:C9:A7:9A X509v3 Authority Key Identifier: keyid:93:D2:12:CC:FA:35:1E:8E:69:4E:5A:FB:21:4D:80:DC:8C:74:19:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/93D212CCFA351E8E694E5AFB214D80DC8C741916.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/93D212CCFA351E8E694E5AFB214D80DC8C741916.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/93D212CCFA351E8E694E5AFB214D80DC8C741916.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:ce:3d:c5:a5:e6:f3:75:a1:00:18:24:01:6f:be:ea:37:fa: 81:de:22:6a:dd:2b:a8:de:e2:41:47:42:ea:de:9f:b9:29:96: 59:9f:7f:00:46:5d:77:c9:75:34:fb:38:ce:65:96:5b:b1:2e: 9c:33:42:1f:7d:54:89:a9:99:fb:3c:8a:73:43:f8:ff:3c:8e: ae:67:5a:14:16:f3:a5:0f:c1:b6:dd:78:15:f7:db:7e:12:e5: 78:1d:34:b0:96:b6:ad:99:99:a3:10:69:0a:58:d7:6d:c4:f2: 0d:06:e4:25:e5:3d:ba:a3:dd:84:33:44:c1:6e:50:ed:91:0a: 34:c8:0f:87:db:41:ec:fc:15:55:f7:fb:99:59:a8:18:60:6f: 1a:fe:e2:ad:8b:bc:2c:be:9e:1f:16:cd:14:0e:61:d2:2e:ca: 65:e6:b0:c5:39:39:c4:5c:c8:0e:2a:3c:97:b1:c6:c2:af:86: eb:65:ec:b3:5a:35:7a:80:57:99:44:01:ad:7c:b8:10:4b:6c: 82:49:9e:c1:b5:e1:13:bc:7b:30:d6:92:68:4f:32:de:b3:cd: e4:25:22:97:ee:c2:34:c3:64:02:b9:74:6d:5f:d2:dc:91:0d: 78:20:57:7c:5a:60:f5:b0:34:b6:f4:13:cd:a2:59:c7:1b:30: a3:ce:db:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDNtBSYw74F4BD6XcR3/e5V1CW70wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTNEMjEyQ0NGQTM1MUU4RTY5NEU1QUZCMjE0RDgwREM4 Qzc0MTkxNjAeFw0yNTA2MjkyMTU1NDVaFw0yNTA3MDMwMzIxNDVaMDMxMTAvBgNV BAMTKENCOTY0QjQwQTQ0QUYxMDNBQTlDNjlFMjlFRTJEQzBCNTBDOUE3OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3TA9PyjHAIG8XWH7kmBfWaFKF px6gl/Hc+H6qn1zTekcFQH76RiF/1qriS7XCbwFz2QXitx9QoQqK181l8Bk5a64P fofCM+MVc5w9IH/WrD70gOPw8lRzucotYC6T93Y+dv5vhPGIVBZ59isiibdX9kCv hdHvtmbXGH5vOyFpvhJ0NP0L5x54eM9lGTi0bYjRtkTR+YM4rnZtn0/pcyNkJGkn 0cdmdrS7K1erwqljGbJ4JRBPA0Gj+E7WSNlKpZ16SEXPoCkQHT5cWhcMXYz2hm3h WJO17mymRv4BMH5lfINerm5WHGU/IHxFxgUd+XOdYR/c5CLrv7n/aZtDCpARAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy5ZLQKRK8QOqnGninuLcC1DJp5owHwYDVR0j BBgwFoAUk9ISzPo1Ho5pTlr7IU2A3Ix0GRYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2I0N2FiNi1kMWYxLTRkMmUtOWNmYy04MDg0YTRiYWNmMGIvMS85M0QyMTJDQ0ZB MzUxRThFNjk0RTVBRkIyMTREODBEQzhDNzQxOTE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTNEMjEyQ0NGQTM1MUU4RTY5NEU1QUZCMjE0RDgwREM4Qzc0 MTkxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjNiNDdhYjYtZDFmMS00ZDJlLTlj ZmMtODA4NGE0YmFjZjBiLzEvOTNEMjEyQ0NGQTM1MUU4RTY5NEU1QUZCMjE0RDgw REM4Qzc0MTkxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKXOPcWl5vN1oQAYJAFvvuo3+oHeImrdK6je 4kFHQuren7kpllmffwBGXXfJdTT7OM5llluxLpwzQh99VImpmfs8inND+P88jq5n WhQW86UPwbbdeBX3234S5XgdNLCWtq2ZmaMQaQpY123E8g0G5CXlPbqj3YQzRMFu UO2RCjTID4fbQez8FVX3+5lZqBhgbxr+4q2LvCy+nh8WzRQOYdIuymXmsMU5OcRc yA4qPJexxsKvhutl7LNaNXqAV5lEAa18uBBLbIJJnsG14RO8ezDWkmhPMt6zzeQl IpfuwjTDZAK5dG1f0tyRDXggV3xaYPWwNLb0E82iWccbMKPO2wM= -----END CERTIFICATE-----Generated at Tue Jul 1 19:16:50 2025 by rpki-client