$ rpki-client -vvf repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft File: C00606846C7D0E540F5703EC90A0C331460D7ECA.mft (raw, json) Hash identifier: CsuEhf484bGyK1MgqqK4HrhxHScgfTZftuwlEmkwaCI= Subject key identifier: AA:73:61:2F:5B:A3:FC:48:D5:D5:F7:54:D2:AB:D5:D6:00:46:0C:D8 Authority key identifier: C0:06:06:84:6C:7D:0E:54:0F:57:03:EC:90:A0:C3:31:46:0D:7E:CA Certificate issuer: /CN=C00606846C7D0E540F5703EC90A0C331460D7ECA Certificate serial: 6059A7621327A4ED95E17AB25EC07EFCA0CB02AA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00606846C7D0E540F5703EC90A0C331460D7ECA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft Manifest number: 9A Signing time: Sat 14 Jun 2025 22:41:18 +0000 Manifest this update: Sat 14 Jun 2025 22:36:18 +0000 Manifest next update: Wed 18 Jun 2025 06:53:18 +0000 Files and hashes: 1: C00606846C7D0E540F5703EC90A0C331460D7ECA.crl (hash: iwj7e4aZ+UVkC5+1m45fA0X5OmMm4VHbqu19rIhSndc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.crl rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00606846C7D0E540F5703EC90A0C331460D7ECA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 06:53:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:59:a7:62:13:27:a4:ed:95:e1:7a:b2:5e:c0:7e:fc:a0:cb:02:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C00606846C7D0E540F5703EC90A0C331460D7ECA Validity Not Before: Jun 14 22:36:18 2025 GMT Not After : Jun 18 06:53:18 2025 GMT Subject: CN=AA73612F5BA3FC48D5D5F754D2ABD5D600460CD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:98:6a:e4:72:e0:92:09:b4:8b:be:18:50:7c: b1:55:3b:fa:a9:a0:e8:17:a8:47:ed:08:20:78:46: 61:49:b2:88:db:4c:b0:a8:4f:73:90:f6:fd:5e:de: b2:9d:99:73:3a:f0:bb:fd:d8:f0:f3:8c:98:ca:27: c9:10:05:2a:07:48:33:65:ee:2e:8d:2a:1d:00:da: 34:b2:31:14:b8:d0:b5:88:e1:35:2f:1a:74:07:41: af:0b:69:31:3e:fe:e7:7d:5e:72:1b:b5:4d:cc:47: 81:f0:fb:7b:47:2f:e9:8e:f5:0b:40:2d:15:49:3c: 8f:cc:b2:78:b6:f0:2a:c2:98:eb:26:f8:2d:1f:6a: cb:53:1f:5a:26:ef:24:bc:48:81:be:68:e3:be:2d: 7e:98:4b:84:e3:5f:59:9c:d9:14:ba:f2:5e:02:95: 6e:ae:f4:ef:13:c9:0b:4e:40:5f:f5:f7:8d:0f:9e: 8c:8b:88:63:69:78:d3:c9:e7:0e:fb:22:1a:76:97: 92:9c:05:ac:b5:fb:f1:4d:31:86:ed:5d:15:14:1d: 42:71:af:af:e7:3c:35:d4:33:3b:7d:25:7c:93:f7: 64:e5:76:42:66:5f:4f:9b:bd:68:15:72:e3:37:8a: d5:14:e1:da:1d:ec:3b:75:d9:ec:1c:c7:14:7e:f2: 45:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:73:61:2F:5B:A3:FC:48:D5:D5:F7:54:D2:AB:D5:D6:00:46:0C:D8 X509v3 Authority Key Identifier: keyid:C0:06:06:84:6C:7D:0E:54:0F:57:03:EC:90:A0:C3:31:46:0D:7E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00606846C7D0E540F5703EC90A0C331460D7ECA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:36:2d:dc:d1:3e:6f:25:38:9d:f2:bd:bb:65:06:7a:e3:3a: 1c:96:d5:fa:31:95:bb:3a:c4:d4:a1:00:24:d9:08:39:6f:ec: 60:59:05:2c:6a:d4:ec:04:38:bb:a8:87:18:0f:61:8f:70:31: 90:11:1e:29:8e:f7:cd:1e:ac:4e:40:1c:7a:1c:7a:7f:48:8c: 24:a6:54:15:10:9d:f4:d1:68:49:0c:70:d1:23:fe:c7:6a:ea: cc:41:73:2a:87:bd:61:d5:27:e4:67:f8:d6:13:12:81:26:17: d2:77:00:46:e4:15:29:f2:5c:17:29:e7:d0:3e:30:3c:9e:a6: 73:a9:50:45:38:c0:ec:cc:d3:63:7a:f1:4a:a0:93:86:ce:13: 1f:3b:a2:87:0b:cf:31:7a:81:3e:90:20:27:09:25:e3:44:28: cc:14:ef:6a:34:30:00:95:5b:64:49:9d:36:68:8c:d0:47:c3: 8b:0f:b9:9d:3b:de:82:00:49:3d:22:9b:5e:01:30:82:85:96: d1:b2:f7:ad:73:70:1b:73:79:a2:2b:13:ff:df:f4:2c:f4:99: f4:31:8a:4f:3a:ed:31:c6:2f:18:62:52:90:9a:1b:f2:7a:e1: 3c:c9:37:7e:7c:5d:0f:dc:1e:ac:01:f0:40:c8:6d:ba:ff:e9: 0e:12:2d:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYFmnYhMnpO2V4XqyXsB+/KDLAqowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzAwNjA2ODQ2QzdEMEU1NDBGNTcwM0VDOTBBMEMzMzE0 NjBEN0VDQTAeFw0yNTA2MTQyMjM2MThaFw0yNTA2MTgwNjUzMThaMDMxMTAvBgNV BAMTKEFBNzM2MTJGNUJBM0ZDNDhENUQ1Rjc1NEQyQUJENUQ2MDA0NjBDRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtmGrkcuCSCbSLvhhQfLFVO/qp oOgXqEftCCB4RmFJsojbTLCoT3OQ9v1e3rKdmXM68Lv92PDzjJjKJ8kQBSoHSDNl 7i6NKh0A2jSyMRS40LWI4TUvGnQHQa8LaTE+/ud9XnIbtU3MR4Hw+3tHL+mO9QtA LRVJPI/Msni28CrCmOsm+C0fastTH1om7yS8SIG+aOO+LX6YS4TjX1mc2RS68l4C lW6u9O8TyQtOQF/1940PnoyLiGNpeNPJ5w77Ihp2l5KcBay1+/FNMYbtXRUUHUJx r6/nPDXUMzt9JXyT92TldkJmX0+bvWgVcuM3itUU4dod7Dt12ewcxxR+8kV/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqnNhL1uj/EjV1fdU0qvV1gBGDNgwHwYDVR0j BBgwFoAUwAYGhGx9DlQPVwPskKDDMUYNfsowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MTMzNGQwMy1lYWU0LTRkMjAtYmE1NC1iMTg4OWQ5MjQ3YWMvMC9DMDA2MDY4NDZD N0QwRTU0MEY1NzAzRUM5MEEwQzMzMTQ2MEQ3RUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzAwNjA2ODQ2QzdEMEU1NDBGNTcwM0VDOTBBMEMzMzE0NjBE N0VDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjEzMzRkMDMtZWFlNC00ZDIwLWJh NTQtYjE4ODlkOTI0N2FjLzAvQzAwNjA2ODQ2QzdEMEU1NDBGNTcwM0VDOTBBMEMz MzE0NjBEN0VDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH82LdzRPm8lOJ3yvbtlBnrjOhyW1foxlbs6 xNShACTZCDlv7GBZBSxq1OwEOLuohxgPYY9wMZARHimO980erE5AHHocen9IjCSm VBUQnfTRaEkMcNEj/sdq6sxBcyqHvWHVJ+Rn+NYTEoEmF9J3AEbkFSnyXBcp59A+ MDyepnOpUEU4wOzM02N68Uqgk4bOEx87oocLzzF6gT6QICcJJeNEKMwU72o0MACV W2RJnTZojNBHw4sPuZ073oIAST0im14BMIKFltGy961zcBtzeaIrE//f9Cz0mfQx ik867THGLxhiUpCaG/J64TzJN358XQ/cHqwB8EDIbbr/6Q4SLZo= -----END CERTIFICATE-----Generated at Sun Jun 15 17:57:29 2025 by rpki-client