$ rpki-client -vvf repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.mft File: C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.mft (raw, json) Hash identifier: C9nDW0DMn/XbkekXyy20NWD5Ty6zL+Xaj2GgA+bm6Ss= Subject key identifier: 9B:7D:A1:51:CA:CA:0C:D9:DC:DB:36:AE:DB:0F:6A:C9:47:A0:A2:96 Authority key identifier: C9:27:69:FD:5D:97:A4:67:70:E3:A1:0F:9D:57:AE:93:1F:9A:9F:C2 Certificate issuer: /CN=C92769FD5D97A46770E3A10F9D57AE931F9A9FC2 Certificate serial: 7263AC8744CD25CB988985DB496514CE673DF533 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.mft Manifest number: 0139 Signing time: Sat 28 Jun 2025 14:52:19 +0000 Manifest this update: Sat 28 Jun 2025 14:47:19 +0000 Manifest next update: Wed 02 Jul 2025 00:55:19 +0000 Files and hashes: 1: C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.crl (hash: 0h2PYdnG9zMcdkOJy4CAuiI0s3btBHozGiCeKiY6VEI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.crl rsync://repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 00:55:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:63:ac:87:44:cd:25:cb:98:89:85:db:49:65:14:ce:67:3d:f5:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C92769FD5D97A46770E3A10F9D57AE931F9A9FC2 Validity Not Before: Jun 28 14:47:19 2025 GMT Not After : Jul 2 00:55:19 2025 GMT Subject: CN=9B7DA151CACA0CD9DCDB36AEDB0F6AC947A0A296 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c8:3e:17:63:00:c8:4a:6d:1f:da:2a:dd:44: 7c:34:af:a9:c8:b2:4c:6d:32:aa:e9:83:fc:9b:83: 8d:1a:cb:91:d2:72:ea:dc:b8:ea:10:6f:4b:33:90: 13:fa:f4:88:d3:69:4a:d0:36:5e:6d:39:c9:8c:ee: 20:60:ba:ad:c0:c0:07:79:8d:55:ff:9f:58:24:5d: 52:83:c0:eb:04:19:17:6f:79:a1:37:ca:16:b9:79: f4:0c:59:e1:f5:f4:43:84:e1:50:b5:d1:70:30:3a: e3:d1:59:f1:16:87:09:54:4e:5b:03:ed:28:7a:55: b5:38:2f:5a:81:38:ed:3e:78:bf:22:b0:e6:81:46: 57:6a:8b:68:f3:2c:99:73:ad:1d:a9:20:63:d2:4a: 7c:03:70:e2:cc:8d:27:08:9b:99:ba:94:de:4f:32: d4:76:f2:e3:b5:78:3f:2e:02:33:98:54:8a:80:65: ac:44:39:b9:9b:14:f2:12:98:e5:08:04:fe:ea:8b: b1:ac:94:50:d1:14:bc:f5:02:fc:88:e4:aa:e2:d6: 04:0b:66:42:7f:51:cc:6a:4e:c7:a3:6f:d9:31:d7: 3f:aa:ef:81:c4:82:b5:32:43:3c:c8:c9:0f:ba:d4: bd:41:db:7c:d8:37:7d:33:ef:9f:99:dd:5a:3c:17: 5a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:7D:A1:51:CA:CA:0C:D9:DC:DB:36:AE:DB:0F:6A:C9:47:A0:A2:96 X509v3 Authority Key Identifier: keyid:C9:27:69:FD:5D:97:A4:67:70:E3:A1:0F:9D:57:AE:93:1F:9A:9F:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:59:03:68:dc:83:53:34:f2:de:dd:41:c0:d8:8c:9e:06:9f: c6:48:9e:1d:dc:52:0f:f2:21:97:70:52:88:c9:39:8a:2f:95: 4e:c9:a7:31:e5:62:23:86:5a:bc:76:7b:4c:42:a4:74:1c:9b: 70:5f:6b:1c:f5:eb:dd:7f:c6:d1:ec:95:d9:2a:d7:f8:fa:f3: ab:2d:b9:75:a1:bf:4e:3b:1c:42:3f:2d:a7:7a:fc:18:00:00: 7e:45:ec:1c:17:08:74:80:11:67:f6:d1:01:fa:53:30:e5:1b: 18:1a:b0:6d:36:62:0c:b3:d0:43:78:84:dd:c0:12:6f:00:31: d0:f7:dc:fb:eb:dc:ef:b7:8d:ff:ef:a9:74:95:e8:a1:70:a7: a8:88:45:b6:ef:89:98:bd:7f:1e:01:96:f6:a6:ab:ac:07:e8: bd:18:ee:ac:5c:88:c8:55:31:7a:cf:1b:a5:99:9c:7c:f3:a0: de:fc:5e:df:59:af:9d:7a:7f:75:4a:80:1f:49:17:a9:9c:da: 3a:fd:52:c3:9b:56:87:c5:a9:6c:3a:12:6b:b9:70:e1:e0:d1: eb:d9:08:62:68:29:ea:10:d1:49:9c:d3:52:0c:2f:d2:a1:e2: f3:b3:c7:be:93:98:83:c8:d4:d1:df:0c:5e:ee:e7:6c:a4:7a: 48:af:49:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcmOsh0TNJcuYiYXbSWUUzmc99TMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzkyNzY5RkQ1RDk3QTQ2NzcwRTNBMTBGOUQ1N0FFOTMx RjlBOUZDMjAeFw0yNTA2MjgxNDQ3MTlaFw0yNTA3MDIwMDU1MTlaMDMxMTAvBgNV BAMTKDlCN0RBMTUxQ0FDQTBDRDlEQ0RCMzZBRURCMEY2QUM5NDdBMEEyOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHyD4XYwDISm0f2irdRHw0r6nI skxtMqrpg/ybg40ay5HScurcuOoQb0szkBP69IjTaUrQNl5tOcmM7iBguq3AwAd5 jVX/n1gkXVKDwOsEGRdveaE3yha5efQMWeH19EOE4VC10XAwOuPRWfEWhwlUTlsD 7Sh6VbU4L1qBOO0+eL8isOaBRldqi2jzLJlzrR2pIGPSSnwDcOLMjScIm5m6lN5P MtR28uO1eD8uAjOYVIqAZaxEObmbFPISmOUIBP7qi7GslFDRFLz1AvyI5Kri1gQL ZkJ/UcxqTsejb9kx1z+q74HEgrUyQzzIyQ+61L1B23zYN30z75+Z3Vo8F1pRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm32hUcrKDNnc2zau2w9qyUegopYwHwYDVR0j BBgwFoAUySdp/V2XpGdw46EPnVeukx+an8IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NWQ3Nzg0MC02MDhlLTQ0OWEtYjIyZi0zNmE2ZTI1MmZiMjMvMC9DOTI3NjlGRDVE OTdBNDY3NzBFM0ExMEY5RDU3QUU5MzFGOUE5RkMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzkyNzY5RkQ1RDk3QTQ2NzcwRTNBMTBGOUQ1N0FFOTMxRjlB OUZDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjVkNzc4NDAtNjA4ZS00NDlhLWIy MmYtMzZhNmUyNTJmYjIzLzAvQzkyNzY5RkQ1RDk3QTQ2NzcwRTNBMTBGOUQ1N0FF OTMxRjlBOUZDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFFZA2jcg1M08t7dQcDYjJ4Gn8ZInh3cUg/y IZdwUojJOYovlU7JpzHlYiOGWrx2e0xCpHQcm3Bfaxz1691/xtHsldkq1/j686st uXWhv047HEI/Lad6/BgAAH5F7BwXCHSAEWf20QH6UzDlGxgasG02Ygyz0EN4hN3A Em8AMdD33Pvr3O+3jf/vqXSV6KFwp6iIRbbviZi9fx4Blvamq6wH6L0Y7qxciMhV MXrPG6WZnHzzoN78Xt9Zr516f3VKgB9JF6mc2jr9UsObVofFqWw6Emu5cOHg0evZ CGJoKeoQ0Umc01IML9Kh4vOzx76TmIPI1NHfDF7u52ykekivSQQ= -----END CERTIFICATE-----Generated at Mon Jun 30 05:23:15 2025 by rpki-client