$ rpki-client -vvf repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft File: 416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft (raw, json) Hash identifier: DGGqjkzYW7+yrJllrnqVL6crP1ZwtOwzPUDH7WJ7avo= Subject key identifier: A6:DE:5E:90:7B:0F:A3:1B:12:84:C4:F6:06:1F:40:34:4F:7F:63:91 Authority key identifier: 41:66:66:F3:F3:35:ED:7A:8B:1B:CB:AD:17:E6:ED:C4:F3:B7:E7:30 Certificate issuer: /CN=416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730 Certificate serial: 0DC092817D8B579A6CB1BD64E62347A3F0678A7A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.cer Subject info access: rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft Manifest number: 04DF Signing time: Sat 14 Jun 2025 15:41:41 +0000 Manifest this update: Sat 14 Jun 2025 15:36:41 +0000 Manifest next update: Wed 18 Jun 2025 03:29:41 +0000 Files and hashes: 1: 416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.crl (hash: VxBYvFdbrC47zIvX2y5zTjBL7SzYTykWQ5DPEmnA0/s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.crl rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 03:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:c0:92:81:7d:8b:57:9a:6c:b1:bd:64:e6:23:47:a3:f0:67:8a:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730 Validity Not Before: Jun 14 15:36:41 2025 GMT Not After : Jun 18 03:29:41 2025 GMT Subject: CN=A6DE5E907B0FA31B1284C4F6061F40344F7F6391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:92:d3:f7:30:40:f4:32:fc:34:13:73:8f:76: 94:31:e4:d1:fe:e8:55:4c:48:37:48:c1:b6:fd:a7: ad:81:6e:c2:1e:f9:3c:0a:c0:56:e5:0b:a8:22:20: 50:48:a9:81:0b:1c:a9:13:74:8d:2f:9a:52:a4:8e: c2:cb:2f:98:3e:e6:6c:7b:9f:45:2a:e0:e2:4d:05: 4c:13:a8:2e:47:3c:f2:30:c1:ad:d0:48:2b:b1:6d: 41:bb:b6:d8:68:1b:ec:fb:40:24:f5:b2:ad:ec:96: 4c:e2:46:ea:fb:89:82:30:9d:7c:a2:81:1e:a7:5b: 01:8f:9e:00:9a:83:28:0b:2f:33:38:fe:7c:01:68: 97:e1:cf:c1:6f:95:10:f4:6c:2b:f2:95:91:df:25: 53:f6:15:db:de:48:b0:0f:74:b1:51:c1:bc:dc:71: d1:96:ac:7f:68:63:a6:4b:a2:e0:8f:bf:89:4f:22: 85:20:d2:07:22:46:17:ac:14:81:ab:d0:9e:0a:71: fc:60:dd:9f:c7:0c:7c:48:15:29:cf:58:79:48:1f: 3b:88:a7:9e:4a:66:f6:48:db:d7:a8:f1:93:b4:94: ed:1d:41:36:84:5c:01:b3:84:64:ef:52:60:18:9d: 93:6d:22:b3:a5:cb:9c:86:0f:3c:06:13:4c:f0:15: ce:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:DE:5E:90:7B:0F:A3:1B:12:84:C4:F6:06:1F:40:34:4F:7F:63:91 X509v3 Authority Key Identifier: keyid:41:66:66:F3:F3:35:ED:7A:8B:1B:CB:AD:17:E6:ED:C4:F3:B7:E7:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04391698-08ec-4790-a184-922852fa4d0a/0/416666F3F335ED7A8B1BCBAD17E6EDC4F3B7E730.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:8d:52:9b:1a:55:84:ca:7e:4e:85:e5:cf:81:02:ea:41:23: f9:1a:6a:a1:0e:90:10:12:86:a0:85:53:c2:6a:40:a7:d6:5f: cd:f0:a3:9e:40:af:d7:e6:55:17:24:77:d1:2b:b8:48:1b:57: 56:a3:5a:2c:16:cf:78:fd:65:d4:14:d4:0b:12:46:44:27:47: 14:30:a6:ea:b5:0c:12:7d:db:ce:0c:59:67:0c:f8:6e:c3:15: b2:00:63:90:0c:d6:47:31:03:7e:a6:d6:c1:48:6c:9d:d7:d9: 2d:8b:2f:d2:a6:c7:ee:a8:57:0a:fb:6f:77:db:c0:bb:46:22: 36:fb:9b:57:66:61:e8:79:e9:24:bc:d0:38:e3:3a:e8:99:54: 7b:c2:df:ea:55:33:35:1f:67:b3:ba:0b:24:6d:7e:38:a6:38: ab:79:b0:21:fd:b6:2d:39:e8:65:f2:36:63:74:d2:c6:61:fc: 1a:c1:26:b7:a6:96:b7:fb:78:c8:28:d3:bd:4f:a8:7f:5e:79: f2:46:6c:0c:bb:7d:9f:50:ce:3d:6f:e4:bc:92:35:bb:d6:e4: 10:5b:0f:9f:26:68:14:ec:b2:b7:8d:76:7e:19:28:f2:05:7f: 61:1b:5f:60:74:f9:a7:11:db:6e:01:7d:85:c5:f0:8d:6b:51: 81:00:8a:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDcCSgX2LV5pssb1k5iNHo/BninowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDE2NjY2RjNGMzM1RUQ3QThCMUJDQkFEMTdFNkVEQzRG M0I3RTczMDAeFw0yNTA2MTQxNTM2NDFaFw0yNTA2MTgwMzI5NDFaMDMxMTAvBgNV BAMTKEE2REU1RTkwN0IwRkEzMUIxMjg0QzRGNjA2MUY0MDM0NEY3RjYzOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaktP3MED0Mvw0E3OPdpQx5NH+ 6FVMSDdIwbb9p62BbsIe+TwKwFblC6giIFBIqYELHKkTdI0vmlKkjsLLL5g+5mx7 n0Uq4OJNBUwTqC5HPPIwwa3QSCuxbUG7tthoG+z7QCT1sq3slkziRur7iYIwnXyi gR6nWwGPngCagygLLzM4/nwBaJfhz8FvlRD0bCvylZHfJVP2FdveSLAPdLFRwbzc cdGWrH9oY6ZLouCPv4lPIoUg0gciRhesFIGr0J4Kcfxg3Z/HDHxIFSnPWHlIHzuI p55KZvZI29eo8ZO0lO0dQTaEXAGzhGTvUmAYnZNtIrOly5yGDzwGE0zwFc7tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpt5ekHsPoxsShMT2Bh9ANE9/Y5EwHwYDVR0j BBgwFoAUQWZm8/M17XqLG8utF+btxPO35zAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDM5MTY5OC0wOGVjLTQ3OTAtYTE4NC05MjI4NTJmYTRkMGEvMC80MTY2NjZGM0Yz MzVFRDdBOEIxQkNCQUQxN0U2RURDNEYzQjdFNzMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDE2NjY2RjNGMzM1RUQ3QThCMUJDQkFEMTdFNkVEQzRGM0I3 RTczMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQzOTE2OTgtMDhlYy00NzkwLWEx ODQtOTIyODUyZmE0ZDBhLzAvNDE2NjY2RjNGMzM1RUQ3QThCMUJDQkFEMTdFNkVE QzRGM0I3RTczMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHGNUpsaVYTKfk6F5c+BAupBI/kaaqEOkBAS hqCFU8JqQKfWX83wo55Ar9fmVRckd9EruEgbV1ajWiwWz3j9ZdQU1AsSRkQnRxQw puq1DBJ9284MWWcM+G7DFbIAY5AM1kcxA36m1sFIbJ3X2S2LL9Kmx+6oVwr7b3fb wLtGIjb7m1dmYeh56SS80DjjOuiZVHvC3+pVMzUfZ7O6CyRtfjimOKt5sCH9ti05 6GXyNmN00sZh/BrBJremlrf7eMgo071PqH9eefJGbAy7fZ9Qzj1v5LySNbvW5BBb D58maBTssreNdn4ZKPIFf2EbX2B0+acR224BfYXF8I1rUYEAinU= -----END CERTIFICATE-----Generated at Tue Jun 17 03:44:54 2025 by rpki-client