$ rpki-client -vvf repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft File: C00606846C7D0E540F5703EC90A0C331460D7ECA.mft (raw, json) Hash identifier: L0B7eYdG5tXwASYfWWGuDL/I5pZHBa2HzjQuH+zyZHI= Subject key identifier: B9:D3:2D:E0:38:A7:89:28:41:0F:B2:C0:C1:F1:C3:24:8B:B5:C5:18 Authority key identifier: C0:06:06:84:6C:7D:0E:54:0F:57:03:EC:90:A0:C3:31:46:0D:7E:CA Certificate issuer: /CN=C00606846C7D0E540F5703EC90A0C331460D7ECA Certificate serial: 5F9706BB7501F282F7E78AC943CCF2B67D7A71FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00606846C7D0E540F5703EC90A0C331460D7ECA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft Manifest number: B1 Signing time: Wed 06 Aug 2025 01:01:19 +0000 Manifest this update: Wed 06 Aug 2025 00:56:19 +0000 Manifest next update: Sat 09 Aug 2025 02:35:19 +0000 Files and hashes: 1: C00606846C7D0E540F5703EC90A0C331460D7ECA.crl (hash: cnR2YlBdKDEO3jtcRVITG2Gb4v87/01Tt/Kb+02usV8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.crl rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00606846C7D0E540F5703EC90A0C331460D7ECA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 02:35:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:97:06:bb:75:01:f2:82:f7:e7:8a:c9:43:cc:f2:b6:7d:7a:71:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C00606846C7D0E540F5703EC90A0C331460D7ECA Validity Not Before: Aug 6 00:56:19 2025 GMT Not After : Aug 9 02:35:19 2025 GMT Subject: CN=B9D32DE038A78928410FB2C0C1F1C3248BB5C518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b1:1a:45:24:19:2f:be:bb:84:26:d0:37:e4: 17:e9:00:2a:98:9e:25:22:d6:a1:fa:af:74:45:16: 2a:d5:1f:4f:94:29:49:41:4e:a4:9e:fe:45:40:8d: 17:0f:ac:ef:b6:f3:6e:3d:84:0e:a9:89:21:c8:aa: 24:c4:a8:a9:6e:f0:6f:18:4d:65:c8:1c:a2:c9:38: 07:aa:e7:f4:22:16:cc:de:3c:a0:45:b0:ab:e8:3d: a9:49:f6:fe:25:95:24:27:ba:34:77:d0:8a:91:cc: 63:b4:7c:cb:0a:12:ce:14:12:e8:ef:ac:94:f8:c6: 12:e5:ac:a8:7a:ed:65:70:94:c0:33:15:5c:bd:6e: b2:d7:a5:09:ad:8d:c9:a7:e7:65:85:95:3f:3b:79: d8:18:3f:9b:5b:c5:4a:43:fb:6f:54:6f:4c:a3:d8: 4e:db:14:71:9a:e7:4b:d7:62:dd:7e:50:64:2b:8a: 39:1e:89:a8:c9:12:ad:72:45:ce:d4:11:71:f8:b6: fe:77:a1:25:58:a2:81:95:72:c7:61:b2:21:91:7a: 55:39:31:ee:17:01:11:72:e3:9a:ca:a2:94:cd:16: 0f:45:84:21:35:67:c5:c9:5f:72:71:8a:34:f0:67: 12:37:4a:07:dd:93:c7:30:50:ff:56:9a:6b:2f:ff: 38:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:D3:2D:E0:38:A7:89:28:41:0F:B2:C0:C1:F1:C3:24:8B:B5:C5:18 X509v3 Authority Key Identifier: keyid:C0:06:06:84:6C:7D:0E:54:0F:57:03:EC:90:A0:C3:31:46:0D:7E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00606846C7D0E540F5703EC90A0C331460D7ECA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:cf:da:11:cf:f0:05:4e:20:cb:d5:1d:eb:20:86:05:01:71: 29:f9:f7:b9:ef:8a:0f:c2:87:00:94:22:05:b0:22:39:67:e1: e3:2e:8a:b1:21:db:fb:5d:8b:95:e2:15:7d:d2:3f:f6:16:27: 04:3f:89:4f:ca:f3:0b:64:d0:20:d4:b4:1e:d6:b1:de:c9:50: e3:75:f0:75:cc:73:d6:dd:21:50:99:5c:96:53:09:6e:48:ed: b3:cf:29:74:55:79:bc:87:96:8c:f1:d0:5d:df:65:d1:ce:34: a1:12:72:dd:50:f5:f4:f5:c4:79:ff:1c:b6:20:d5:fe:98:5d: a2:a6:ee:b4:50:99:eb:96:8e:19:8a:f2:28:82:2b:22:46:b7: d9:ea:dc:dc:2e:55:a8:df:b0:cd:f1:eb:8d:25:ed:d1:ec:f7: 0c:c3:ec:d7:3f:60:00:9e:a7:f7:63:c0:04:ac:cc:3e:29:4c: 5c:fd:ff:57:df:56:1b:5a:b5:98:96:8c:61:0c:5f:c4:87:29: 9b:37:ca:52:f9:ee:4f:25:26:1a:99:64:b9:47:ea:55:80:a9: 6e:32:83:86:fb:13:6d:4e:22:93:89:03:6a:55:2b:94:d9:52: 9a:59:2b:9f:eb:60:dc:fb:3f:c3:18:52:72:e1:26:75:83:8c: aa:a7:fe:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX5cGu3UB8oL354rJQ8zytn16cf4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzAwNjA2ODQ2QzdEMEU1NDBGNTcwM0VDOTBBMEMzMzE0 NjBEN0VDQTAeFw0yNTA4MDYwMDU2MTlaFw0yNTA4MDkwMjM1MTlaMDMxMTAvBgNV BAMTKEI5RDMyREUwMzhBNzg5Mjg0MTBGQjJDMEMxRjFDMzI0OEJCNUM1MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDsRpFJBkvvruEJtA35BfpACqY niUi1qH6r3RFFirVH0+UKUlBTqSe/kVAjRcPrO+28249hA6piSHIqiTEqKlu8G8Y TWXIHKLJOAeq5/QiFszePKBFsKvoPalJ9v4llSQnujR30IqRzGO0fMsKEs4UEujv rJT4xhLlrKh67WVwlMAzFVy9brLXpQmtjcmn52WFlT87edgYP5tbxUpD+29Ub0yj 2E7bFHGa50vXYt1+UGQrijkeiajJEq1yRc7UEXH4tv53oSVYooGVcsdhsiGRelU5 Me4XARFy45rKopTNFg9FhCE1Z8XJX3JxijTwZxI3Sgfdk8cwUP9Wmmsv/zixAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUudMt4DiniShBD7LAwfHDJIu1xRgwHwYDVR0j BBgwFoAUwAYGhGx9DlQPVwPskKDDMUYNfsowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MTMzNGQwMy1lYWU0LTRkMjAtYmE1NC1iMTg4OWQ5MjQ3YWMvMC9DMDA2MDY4NDZD N0QwRTU0MEY1NzAzRUM5MEEwQzMzMTQ2MEQ3RUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzAwNjA2ODQ2QzdEMEU1NDBGNTcwM0VDOTBBMEMzMzE0NjBE N0VDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjEzMzRkMDMtZWFlNC00ZDIwLWJh NTQtYjE4ODlkOTI0N2FjLzAvQzAwNjA2ODQ2QzdEMEU1NDBGNTcwM0VDOTBBMEMz MzE0NjBEN0VDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAITP2hHP8AVOIMvVHesghgUBcSn597nvig/C hwCUIgWwIjln4eMuirEh2/tdi5XiFX3SP/YWJwQ/iU/K8wtk0CDUtB7Wsd7JUON1 8HXMc9bdIVCZXJZTCW5I7bPPKXRVebyHlozx0F3fZdHONKESct1Q9fT1xHn/HLYg 1f6YXaKm7rRQmeuWjhmK8iiCKyJGt9nq3NwuVajfsM3x640l7dHs9wzD7Nc/YACe p/djwASszD4pTFz9/1ffVhtatZiWjGEMX8SHKZs3ylL57k8lJhqZZLlH6lWAqW4y g4b7E21OIpOJA2pVK5TZUppZK5/rYNz7P8MYUnLhJnWDjKqn/sA= -----END CERTIFICATE-----Generated at Thu Aug 7 03:22:24 2025 by rpki-client