$ rpki-client -vvf repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.mft File: 309FFE30695E76BA4952E2965B4FE24F9B9D6770.mft (raw, json) Hash identifier: wxmb44Oeu1N24MlE829Wa+49UYIHgLk+zdlx7OSBJUo= Subject key identifier: D6:29:29:5D:0A:D3:72:9E:0B:0C:D0:AA:82:DA:CF:62:00:D2:EF:A5 Authority key identifier: 30:9F:FE:30:69:5E:76:BA:49:52:E2:96:5B:4F:E2:4F:9B:9D:67:70 Certificate issuer: /CN=309FFE30695E76BA4952E2965B4FE24F9B9D6770 Certificate serial: 21E6C34476C8E3B7AFDAAA6969054D78A0056EF9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/309FFE30695E76BA4952E2965B4FE24F9B9D6770.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.mft Manifest number: 88 Signing time: Tue 01 Jul 2025 07:30:43 +0000 Manifest this update: Tue 01 Jul 2025 07:25:43 +0000 Manifest next update: Fri 04 Jul 2025 13:24:43 +0000 Files and hashes: 1: 309FFE30695E76BA4952E2965B4FE24F9B9D6770.crl (hash: EqanAeZFNq2n2coUg/vAUA3PWsErlOXQz7TeV0sa33s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.crl rsync://repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/309FFE30695E76BA4952E2965B4FE24F9B9D6770.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 13:24:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:e6:c3:44:76:c8:e3:b7:af:da:aa:69:69:05:4d:78:a0:05:6e:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=309FFE30695E76BA4952E2965B4FE24F9B9D6770 Validity Not Before: Jul 1 07:25:43 2025 GMT Not After : Jul 4 13:24:43 2025 GMT Subject: CN=D629295D0AD3729E0B0CD0AA82DACF6200D2EFA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4f:48:90:b1:60:9e:53:60:f4:87:d3:97:55: d3:1a:0f:fa:80:fb:e4:97:e1:a9:b9:71:1c:fd:45: 46:39:f2:77:8f:66:2c:5e:08:bf:5d:92:a2:fc:10: 5b:19:cd:32:e4:a8:d1:18:46:a2:da:e6:c5:08:16: 6b:cb:bd:e6:13:14:02:3e:81:b4:b9:f4:1c:fa:2d: e6:33:a6:69:35:59:91:d8:04:bf:11:05:b0:e7:55: f0:47:28:a8:ed:fd:87:0f:93:75:80:cd:9d:d7:8c: 7c:f5:59:80:45:ac:6b:08:4a:25:dc:9a:b7:11:da: cd:46:e2:54:41:73:cd:a3:53:52:1a:72:c7:fa:a4: ce:83:6c:04:5e:ff:c6:f7:0b:20:dc:f7:fc:8c:0d: 47:ec:fd:f3:2a:18:f2:7a:1b:a3:44:12:47:ec:0e: cd:06:92:d3:59:ef:97:74:44:55:8c:e7:95:a9:d5: 2a:d3:c2:33:ce:fb:f5:b6:52:bc:06:78:ff:a9:b9: 8e:78:dc:09:fd:17:8e:8c:c5:93:f7:3e:61:44:77: e8:91:eb:9d:89:1e:c2:d6:44:2a:53:e8:08:6a:72: 38:8a:d6:a5:eb:f7:7b:8c:25:47:18:47:c6:80:10: cc:d6:57:3c:0f:15:e1:77:0b:77:46:ca:25:d7:b7: 19:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:29:29:5D:0A:D3:72:9E:0B:0C:D0:AA:82:DA:CF:62:00:D2:EF:A5 X509v3 Authority Key Identifier: keyid:30:9F:FE:30:69:5E:76:BA:49:52:E2:96:5B:4F:E2:4F:9B:9D:67:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/309FFE30695E76BA4952E2965B4FE24F9B9D6770.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:f8:1b:9e:7d:8b:38:6f:03:f9:49:49:7a:c0:40:fe:eb:0f: 35:47:bd:a4:c3:2d:ff:4d:26:7d:c7:70:70:87:19:49:8b:6c: 1d:76:fc:19:9d:d6:5a:d7:52:3e:86:30:cf:3c:14:8c:08:d1: 52:42:9d:90:f6:50:55:2b:15:17:b9:7a:7e:34:26:dd:41:1b: f3:c5:ca:01:b4:4f:72:19:e8:d4:eb:eb:10:2e:95:f3:65:b6: b4:0d:08:f7:17:f0:ad:2e:f8:2b:51:89:94:e3:7b:93:d9:34: df:14:5a:33:91:f5:ca:c7:db:86:ec:54:5c:fe:1f:63:1a:0e: f5:42:7e:16:13:d7:5c:68:5f:f4:16:8f:e1:14:23:1f:4f:c5: bc:08:90:24:c0:56:dd:e8:dd:7c:35:dc:85:dd:09:06:52:eb: 53:17:f9:90:d2:43:11:80:79:0d:71:ec:57:53:83:72:e4:df: 20:4a:cd:74:b5:9b:6f:f3:4d:5a:09:11:ad:34:de:61:34:45: 9c:a6:b8:d2:5f:91:4b:35:69:7d:5a:31:5d:7c:2a:f8:e5:ad: b7:1b:62:07:b5:52:5e:d3:5f:c4:e9:65:c2:92:cf:13:2f:22: ef:28:b1:b3:ed:06:d9:ef:44:96:1b:e9:1a:02:02:ae:78:8f: c7:36:0f:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIebDRHbI47ev2qppaQVNeKAFbvkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA5RkZFMzA2OTVFNzZCQTQ5NTJFMjk2NUI0RkUyNEY5 QjlENjc3MDAeFw0yNTA3MDEwNzI1NDNaFw0yNTA3MDQxMzI0NDNaMDMxMTAvBgNV BAMTKEQ2MjkyOTVEMEFEMzcyOUUwQjBDRDBBQTgyREFDRjYyMDBEMkVGQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOT0iQsWCeU2D0h9OXVdMaD/qA ++SX4am5cRz9RUY58nePZixeCL9dkqL8EFsZzTLkqNEYRqLa5sUIFmvLveYTFAI+ gbS59Bz6LeYzpmk1WZHYBL8RBbDnVfBHKKjt/YcPk3WAzZ3XjHz1WYBFrGsISiXc mrcR2s1G4lRBc82jU1Iacsf6pM6DbARe/8b3CyDc9/yMDUfs/fMqGPJ6G6NEEkfs Ds0GktNZ75d0RFWM55Wp1SrTwjPO+/W2UrwGeP+puY543An9F46MxZP3PmFEd+iR 652JHsLWRCpT6AhqcjiK1qXr93uMJUcYR8aAEMzWVzwPFeF3C3dGyiXXtxkPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1ikpXQrTcp4LDNCqgtrPYgDS76UwHwYDVR0j BBgwFoAUMJ/+MGledrpJUuKWW0/iT5udZ3AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2NiNTBiMC00M2NjLTQ4ZDAtOTFmNC0wNWJiZGU3YWMxZDAvMC8zMDlGRkUzMDY5 NUU3NkJBNDk1MkUyOTY1QjRGRTI0RjlCOUQ2NzcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzA5RkZFMzA2OTVFNzZCQTQ5NTJFMjk2NUI0RkUyNEY5QjlE Njc3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjNjYjUwYjAtNDNjYy00OGQwLTkx ZjQtMDViYmRlN2FjMWQwLzAvMzA5RkZFMzA2OTVFNzZCQTQ5NTJFMjk2NUI0RkUy NEY5QjlENjc3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG34G559izhvA/lJSXrAQP7rDzVHvaTDLf9N Jn3HcHCHGUmLbB12/Bmd1lrXUj6GMM88FIwI0VJCnZD2UFUrFRe5en40Jt1BG/PF ygG0T3IZ6NTr6xAulfNltrQNCPcX8K0u+CtRiZTje5PZNN8UWjOR9crH24bsVFz+ H2MaDvVCfhYT11xoX/QWj+EUIx9PxbwIkCTAVt3o3Xw13IXdCQZS61MX+ZDSQxGA eQ1x7FdTg3Lk3yBKzXS1m2/zTVoJEa003mE0RZymuNJfkUs1aX1aMV18Kvjlrbcb Yge1Ul7TX8TpZcKSzxMvIu8osbPtBtnvRJYb6RoCAq54j8c2DyI= -----END CERTIFICATE-----Generated at Thu Jul 3 06:49:35 2025 by rpki-client