$ rpki-client -vvf repo-rpki.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/C2759C8490CBC757371078D2CA604D6FF8EE4C19.mft File: C2759C8490CBC757371078D2CA604D6FF8EE4C19.mft (raw, json) Hash identifier: 6aJbQ4nq+Ck+ayn7GS0W5OawMpnj5kwYwWNFctLUzxg= Subject key identifier: A4:0F:D2:59:EA:F4:F7:B4:22:D1:81:3D:A7:63:44:53:0F:02:F1:04 Authority key identifier: C2:75:9C:84:90:CB:C7:57:37:10:78:D2:CA:60:4D:6F:F8:EE:4C:19 Certificate issuer: /CN=C2759C8490CBC757371078D2CA604D6FF8EE4C19 Certificate serial: 05C1DBD99B386ACFC9DC06D34164CB91FF2F03DC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2759C8490CBC757371078D2CA604D6FF8EE4C19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/C2759C8490CBC757371078D2CA604D6FF8EE4C19.mft Manifest number: 2A Signing time: Sun 29 Jun 2025 11:30:34 +0000 Manifest this update: Sun 29 Jun 2025 11:25:34 +0000 Manifest next update: Wed 02 Jul 2025 13:41:34 +0000 Files and hashes: 1: C2759C8490CBC757371078D2CA604D6FF8EE4C19.crl (hash: 2GdfAWGvpnToEiiV5nWeYL0GMEZ74Now69MGHE7z8Is=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/C2759C8490CBC757371078D2CA604D6FF8EE4C19.crl rsync://repo-rpki.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/C2759C8490CBC757371078D2CA604D6FF8EE4C19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2759C8490CBC757371078D2CA604D6FF8EE4C19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:c1:db:d9:9b:38:6a:cf:c9:dc:06:d3:41:64:cb:91:ff:2f:03:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2759C8490CBC757371078D2CA604D6FF8EE4C19 Validity Not Before: Jun 29 11:25:34 2025 GMT Not After : Jul 2 13:41:34 2025 GMT Subject: CN=A40FD259EAF4F7B422D1813DA76344530F02F104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:e2:cf:09:37:b4:08:cb:ab:de:ee:73:5c:29: 70:f7:7f:59:c3:89:46:42:53:7c:18:3c:60:94:9b: d7:52:98:f0:4f:42:0c:92:62:39:63:8f:39:4d:03: e5:64:41:ca:a8:34:06:15:cc:cd:0c:46:2d:19:23: b5:84:30:b1:8b:8b:50:b1:45:a3:5c:fb:1e:b7:9a: ee:04:83:5e:3d:38:b2:d4:b8:37:7c:da:46:f1:a0: 9a:ff:56:96:fa:6d:98:17:99:bf:64:3e:3d:e3:27: 1e:fb:0c:be:cd:cc:56:d3:58:04:b1:60:d5:0c:cd: e1:d0:c9:e5:25:74:33:c9:7d:52:98:d7:b0:8c:e7: 41:39:e4:00:41:7a:ee:ec:ca:41:50:2c:a6:6c:c9: d2:07:dc:76:43:bf:02:8f:33:b0:d6:38:7d:42:ed: bb:3f:13:49:80:e5:c9:ca:64:97:53:14:b7:0a:27: af:1d:ce:d0:ce:d8:97:c8:be:89:6c:84:4e:cb:e0: 21:95:db:13:4c:25:fd:fa:dc:54:3c:a0:94:91:a3: 8c:e4:c1:91:f4:2d:aa:3f:07:18:88:41:02:1c:75: c4:09:87:9b:0a:34:e6:da:d0:23:f2:9f:26:a5:92: cf:a3:95:77:1f:c7:f4:3a:71:c3:de:34:25:66:b9: e3:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:0F:D2:59:EA:F4:F7:B4:22:D1:81:3D:A7:63:44:53:0F:02:F1:04 X509v3 Authority Key Identifier: keyid:C2:75:9C:84:90:CB:C7:57:37:10:78:D2:CA:60:4D:6F:F8:EE:4C:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/C2759C8490CBC757371078D2CA604D6FF8EE4C19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2759C8490CBC757371078D2CA604D6FF8EE4C19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/C2759C8490CBC757371078D2CA604D6FF8EE4C19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:e8:a3:27:e5:06:dc:3d:01:34:c9:f7:b3:0b:d0:7d:17:6c: b8:c3:a9:b0:32:ee:a9:86:25:cb:47:8b:f7:a3:a3:78:6b:40: 09:14:78:52:02:64:07:78:22:6f:c6:95:01:ca:54:0b:52:f6: 9a:09:7f:37:9e:3f:b9:eb:3f:cc:81:86:9c:a3:06:0e:2a:e0: 43:dd:de:3f:97:0c:aa:24:22:11:36:56:1c:cb:a6:5f:27:0a: 56:20:60:bd:ce:53:39:61:7f:92:93:8c:d6:1c:74:a1:e1:72: 18:07:bc:02:a5:fc:05:fe:08:0a:d1:8e:1f:e8:e6:50:84:06: df:f5:f7:01:1f:88:1c:d3:d1:2b:50:12:89:a0:c8:c2:9d:39: dd:ba:11:90:b3:c1:9e:59:a0:87:32:e8:a8:61:28:e9:c9:d6: 55:19:96:58:73:c0:30:68:72:b0:ba:fd:8f:4f:c8:a8:3c:6d: 1f:56:92:01:c2:8f:40:da:63:79:a7:1f:3f:b2:05:bc:90:a4: 63:63:bd:55:d3:7a:3c:ff:8c:1d:f3:56:c7:6c:a7:bd:8f:3b: 43:08:f5:40:e8:84:c0:17:f6:a8:52:fc:17:52:98:92:00:7d: 73:63:e7:da:60:7a:97:91:eb:46:4d:13:b5:10:80:b7:0d:42: 49:58:ee:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBcHb2Zs4as/J3AbTQWTLkf8vA9wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI3NTlDODQ5MENCQzc1NzM3MTA3OEQyQ0E2MDRENkZG OEVFNEMxOTAeFw0yNTA2MjkxMTI1MzRaFw0yNTA3MDIxMzQxMzRaMDMxMTAvBgNV BAMTKEE0MEZEMjU5RUFGNEY3QjQyMkQxODEzREE3NjM0NDUzMEYwMkYxMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD74s8JN7QIy6ve7nNcKXD3f1nD iUZCU3wYPGCUm9dSmPBPQgySYjljjzlNA+VkQcqoNAYVzM0MRi0ZI7WEMLGLi1Cx RaNc+x63mu4Eg149OLLUuDd82kbxoJr/Vpb6bZgXmb9kPj3jJx77DL7NzFbTWASx YNUMzeHQyeUldDPJfVKY17CM50E55ABBeu7sykFQLKZsydIH3HZDvwKPM7DWOH1C 7bs/E0mA5cnKZJdTFLcKJ68dztDO2JfIvolshE7L4CGV2xNMJf363FQ8oJSRo4zk wZH0Lao/BxiIQQIcdcQJh5sKNOba0CPynyalks+jlXcfx/Q6ccPeNCVmueNRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpA/SWer097Qi0YE9p2NEUw8C8QQwHwYDVR0j BBgwFoAUwnWchJDLx1c3EHjSymBNb/juTBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZTcxNmRlYS02NTM2LTRkNmUtYjU0Yi1iZjdmNzNjZjZiOTQvMC9DMjc1OUM4NDkw Q0JDNzU3MzcxMDc4RDJDQTYwNEQ2RkY4RUU0QzE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzI3NTlDODQ5MENCQzc1NzM3MTA3OEQyQ0E2MDRENkZGOEVF NEMxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmU3MTZkZWEtNjUzNi00ZDZlLWI1 NGItYmY3ZjczY2Y2Yjk0LzAvQzI3NTlDODQ5MENCQzc1NzM3MTA3OEQyQ0E2MDRE NkZGOEVFNEMxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAATooyflBtw9ATTJ97ML0H0XbLjDqbAy7qmG JctHi/ejo3hrQAkUeFICZAd4Im/GlQHKVAtS9poJfzeeP7nrP8yBhpyjBg4q4EPd 3j+XDKokIhE2VhzLpl8nClYgYL3OUzlhf5KTjNYcdKHhchgHvAKl/AX+CArRjh/o 5lCEBt/19wEfiBzT0StQEomgyMKdOd26EZCzwZ5ZoIcy6KhhKOnJ1lUZllhzwDBo crC6/Y9PyKg8bR9WkgHCj0DaY3mnHz+yBbyQpGNjvVXTejz/jB3zVsdsp72PO0MI 9UDohMAX9qhS/BdSmJIAfXNj59pgepeR60ZNE7UQgLcNQklY7iY= -----END CERTIFICATE-----Generated at Sun Jun 29 18:49:50 2025 by rpki-client