$ rpki-client -vvf repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft File: C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft (raw, json) Hash identifier: lfmk2ZfL8OsnsZNztH+rcxZq7ZQsa56sjmVO3vrvLZE= Subject key identifier: 21:8F:9E:D0:C5:D8:1B:D6:48:97:3F:DB:6A:73:F2:8D:B9:C7:97:E7 Authority key identifier: C3:0D:E7:1F:7C:AE:16:CA:2D:8D:AB:6D:01:CA:43:D7:2F:B4:FE:6E Certificate issuer: /CN=C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E Certificate serial: 177BF6150B970BA64627A99560204CD82DD6CFF2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft Manifest number: 03CE Signing time: Sun 15 Jun 2025 09:30:53 +0000 Manifest this update: Sun 15 Jun 2025 09:25:53 +0000 Manifest next update: Wed 18 Jun 2025 17:35:53 +0000 Files and hashes: 1: C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.crl (hash: WEEXtT9vxeUo2nDU4j6mjqAU6m/vmzYHw3UsajsfgZA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.crl rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 17:35:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:7b:f6:15:0b:97:0b:a6:46:27:a9:95:60:20:4c:d8:2d:d6:cf:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E Validity Not Before: Jun 15 09:25:53 2025 GMT Not After : Jun 18 17:35:53 2025 GMT Subject: CN=218F9ED0C5D81BD648973FDB6A73F28DB9C797E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:54:00:fe:70:67:97:42:7c:1c:33:21:61:ce: 35:13:b2:30:d3:ca:1a:5d:88:7d:c6:f5:78:f3:13: be:79:b3:22:53:78:00:ee:26:66:e7:d5:4b:5e:53: 17:a4:15:be:a8:54:42:0d:e1:81:73:f6:af:68:cc: 7f:08:8f:50:04:34:19:df:d0:51:3f:17:c5:1e:c4: bc:ff:fd:11:b6:9a:cd:cf:0f:be:0d:4c:a7:46:50: 2b:b5:85:89:e7:47:0f:b2:2a:ea:8c:98:f0:65:b9: 06:fa:39:28:2c:15:27:10:ad:4d:34:70:39:d3:ba: ce:bf:8e:23:3f:23:a2:e2:68:15:59:22:08:56:5c: d3:ae:fe:0e:cd:50:3c:85:73:f4:d4:3c:4d:07:49: 6c:56:d7:e0:20:db:0a:67:35:15:9b:2b:51:c6:6f: e8:82:df:56:84:f5:c2:d3:59:40:34:be:16:0f:a6: 81:69:be:a9:65:c2:6d:a8:7e:31:ea:7c:bd:8d:a5: f3:00:0d:6b:1e:5a:cf:02:fd:dd:f1:03:e1:55:9d: 0f:ca:b8:4f:b5:89:c4:4a:fe:de:11:ed:1d:8c:b1: 2b:55:f8:d9:bc:22:a5:f9:16:6f:88:d2:0f:f7:1c: e4:3f:43:a8:ab:ac:bb:87:e4:04:26:49:19:59:4f: 60:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:8F:9E:D0:C5:D8:1B:D6:48:97:3F:DB:6A:73:F2:8D:B9:C7:97:E7 X509v3 Authority Key Identifier: keyid:C3:0D:E7:1F:7C:AE:16:CA:2D:8D:AB:6D:01:CA:43:D7:2F:B4:FE:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/03b59ce4-66a2-4f4d-b3d6-9299484ba56b/0/C30DE71F7CAE16CA2D8DAB6D01CA43D72FB4FE6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:99:d8:80:30:65:71:c1:e8:e7:71:05:13:e4:f4:c2:93:82: 34:94:1f:7f:66:59:dd:96:3c:25:61:06:48:f8:24:61:b9:41: 21:10:bf:a6:fe:5e:30:91:ef:84:92:ba:76:b7:c6:49:ca:77: 15:3c:bb:09:f9:72:be:bc:88:1b:d5:e8:42:62:3f:b3:e2:55: f7:51:29:d4:9c:6c:ec:b2:a6:c9:9c:02:2c:c0:a4:8b:b6:b1: 83:f4:bc:7c:79:d3:20:0d:30:7d:94:03:75:ed:df:2d:54:53: 12:d9:e0:9f:84:17:5a:f3:79:2d:a6:09:b5:9b:50:30:ef:49: bb:18:5e:79:c5:2a:cc:02:fa:57:4d:e9:5b:0a:18:89:69:82: 1b:ed:01:9c:13:7b:3d:e4:fc:fa:87:f4:d7:73:bd:0f:f6:4a: d2:03:d8:5f:65:7b:d6:f1:1c:01:a8:48:cd:20:47:5e:57:17: 75:55:09:92:3b:54:e5:57:62:88:93:9f:c9:36:60:02:f1:7e: 82:f6:55:43:4c:a7:e3:7d:17:1c:38:b5:3f:f2:55:70:54:04: 9a:b9:4b:4c:44:c1:90:ff:fe:83:04:e8:ea:ec:83:35:10:d9: a3:75:91:56:3e:f2:1f:a2:81:75:b8:40:94:0a:ab:01:8f:4c: e9:c7:50:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF3v2FQuXC6ZGJ6mVYCBM2C3Wz/IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMwREU3MUY3Q0FFMTZDQTJEOERBQjZEMDFDQTQzRDcy RkI0RkU2RTAeFw0yNTA2MTUwOTI1NTNaFw0yNTA2MTgxNzM1NTNaMDMxMTAvBgNV BAMTKDIxOEY5RUQwQzVEODFCRDY0ODk3M0ZEQjZBNzNGMjhEQjlDNzk3RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2VAD+cGeXQnwcMyFhzjUTsjDT yhpdiH3G9XjzE755syJTeADuJmbn1UteUxekFb6oVEIN4YFz9q9ozH8Ij1AENBnf 0FE/F8UexLz//RG2ms3PD74NTKdGUCu1hYnnRw+yKuqMmPBluQb6OSgsFScQrU00 cDnTus6/jiM/I6LiaBVZIghWXNOu/g7NUDyFc/TUPE0HSWxW1+Ag2wpnNRWbK1HG b+iC31aE9cLTWUA0vhYPpoFpvqllwm2ofjHqfL2NpfMADWseWs8C/d3xA+FVnQ/K uE+1icRK/t4R7R2MsStV+Nm8IqX5Fm+I0g/3HOQ/Q6irrLuH5AQmSRlZT2C9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIY+e0MXYG9ZIlz/banPyjbnHl+cwHwYDVR0j BBgwFoAUww3nH3yuFsotjattAcpD1y+0/m4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w M2I1OWNlNC02NmEyLTRmNGQtYjNkNi05Mjk5NDg0YmE1NmIvMC9DMzBERTcxRjdD QUUxNkNBMkQ4REFCNkQwMUNBNDNENzJGQjRGRTZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzMwREU3MUY3Q0FFMTZDQTJEOERBQjZEMDFDQTQzRDcyRkI0 RkU2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDNiNTljZTQtNjZhMi00ZjRkLWIz ZDYtOTI5OTQ4NGJhNTZiLzAvQzMwREU3MUY3Q0FFMTZDQTJEOERBQjZEMDFDQTQz RDcyRkI0RkU2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJiZ2IAwZXHB6OdxBRPk9MKTgjSUH39mWd2W PCVhBkj4JGG5QSEQv6b+XjCR74SSuna3xknKdxU8uwn5cr68iBvV6EJiP7PiVfdR KdScbOyypsmcAizApIu2sYP0vHx50yANMH2UA3Xt3y1UUxLZ4J+EF1rzeS2mCbWb UDDvSbsYXnnFKswC+ldN6VsKGIlpghvtAZwTez3k/PqH9NdzvQ/2StID2F9le9bx HAGoSM0gR15XF3VVCZI7VOVXYoiTn8k2YALxfoL2VUNMp+N9Fxw4tT/yVXBUBJq5 S0xEwZD//oME6OrsgzUQ2aN1kVY+8h+igXW4QJQKqwGPTOnHUJg= -----END CERTIFICATE-----Generated at Mon Jun 16 12:16:37 2025 by rpki-client