$ rpki-client -vvf repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft File: 901FA7FD9132963972C91517CDC7E5EE9077E078.mft (raw, json) Hash identifier: Y/dsgXxhgwXYAJsZ8RlgMkfsQOn8sc/HU7YwT6q76A4= Subject key identifier: FF:9A:2F:D1:BF:71:A3:6C:B3:60:08:D9:C0:19:39:D8:47:9E:34:E2 Authority key identifier: 90:1F:A7:FD:91:32:96:39:72:C9:15:17:CD:C7:E5:EE:90:77:E0:78 Certificate issuer: /CN=901FA7FD9132963972C91517CDC7E5EE9077E078 Certificate serial: 775CD56BCDBBDFCC9DC1AE41F37B3B112DAE555E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/901FA7FD9132963972C91517CDC7E5EE9077E078.cer Subject info access: rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft Manifest number: 0104 Signing time: Fri 13 Jun 2025 18:50:47 +0000 Manifest this update: Fri 13 Jun 2025 18:45:47 +0000 Manifest next update: Tue 17 Jun 2025 06:03:47 +0000 Files and hashes: 1: 901FA7FD9132963972C91517CDC7E5EE9077E078.crl (hash: lyoy3NN5zEmTNe2t7V6PkiBbeVd4q3PS68hTfp6yc3k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.crl rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/901FA7FD9132963972C91517CDC7E5EE9077E078.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 06:03:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:5c:d5:6b:cd:bb:df:cc:9d:c1:ae:41:f3:7b:3b:11:2d:ae:55:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=901FA7FD9132963972C91517CDC7E5EE9077E078 Validity Not Before: Jun 13 18:45:47 2025 GMT Not After : Jun 17 06:03:47 2025 GMT Subject: CN=FF9A2FD1BF71A36CB36008D9C01939D8479E34E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:72:ee:04:24:a6:28:ce:3a:51:05:a4:b5:b7: 9c:05:c8:0e:07:57:c4:24:91:35:f8:e6:4f:46:66: b1:5f:c8:c0:89:c6:fb:19:86:69:c6:82:8b:16:5b: bd:c9:52:44:f3:46:bf:44:a1:7c:cf:7d:0f:f7:7a: dc:1f:1b:57:2a:99:35:49:f5:1d:a4:42:b6:3f:75: 5a:04:5e:f2:81:f8:18:e2:13:2f:e3:cd:85:f1:ee: 96:fc:4e:05:30:4e:9c:bd:2f:c5:8b:ba:2d:a2:c1: 05:fc:93:1e:b6:85:55:9b:ff:ef:f3:51:a2:92:15: ca:bd:ee:fa:f7:66:cf:41:d8:cc:bc:8b:dc:42:84: 2b:98:d9:64:da:3e:24:00:e3:0e:ba:93:b8:e6:2d: 03:ad:38:6b:ab:a5:84:c7:cf:1f:8b:1f:d1:4e:ac: ac:35:97:32:f3:19:85:a7:de:26:7c:c2:18:d4:2e: 5a:af:be:df:2e:80:ea:d4:47:22:3f:57:a1:f9:56: 8e:f8:38:f9:ec:ea:17:64:85:4c:84:b2:6d:59:d1: 3b:18:1f:23:f8:50:03:bb:04:82:db:c7:ba:5a:c4: 0b:0a:8f:14:da:bb:1b:14:79:ae:58:cc:5e:5f:cf: 50:4a:9b:61:91:b0:24:1e:4f:c9:01:92:eb:8e:dc: 79:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:9A:2F:D1:BF:71:A3:6C:B3:60:08:D9:C0:19:39:D8:47:9E:34:E2 X509v3 Authority Key Identifier: keyid:90:1F:A7:FD:91:32:96:39:72:C9:15:17:CD:C7:E5:EE:90:77:E0:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/901FA7FD9132963972C91517CDC7E5EE9077E078.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:2a:b4:3e:f9:21:6a:71:f4:f2:b6:3a:c0:5b:f5:4f:ca:5b: 85:7e:44:36:5c:44:10:f9:59:bd:4d:2f:cd:d1:e7:ee:9b:5b: c1:04:6f:be:07:08:5c:89:f0:ef:d9:49:be:71:48:69:59:e9: e7:1c:f7:7c:08:4b:fe:92:18:b0:4a:62:da:8d:97:57:de:b2: a1:fa:f1:2a:96:c4:bd:1a:1b:38:3d:bc:f1:aa:40:69:b4:25: c6:90:92:e4:ce:4e:44:1e:b3:6f:4e:07:55:5b:a2:ef:cc:ca: d7:02:39:cc:e9:c2:6b:04:a8:c9:d2:2e:ff:1a:f7:f1:65:00: 1f:a6:69:59:9c:72:3c:22:bb:51:20:a3:07:d4:70:1e:72:d2: 53:c3:c5:ac:dc:48:3a:96:90:e3:75:8a:22:d2:73:55:29:82: 87:03:9e:36:e4:32:1b:1a:a5:a5:60:48:f7:6c:58:d0:0d:64: 83:4b:8c:61:31:36:9e:00:85:63:bf:db:1d:12:2d:77:0f:97: e4:f8:57:4f:b0:d6:9d:60:1c:4a:e0:cf:53:5b:4e:3f:02:88: dc:79:01:1e:8f:38:13:97:8e:b8:08:af:0a:63:5a:6b:36:af: 60:4e:bf:86:8d:e5:a0:07:03:d6:9c:8e:e1:d2:b7:5c:03:3a: b1:33:bc:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd1zVa82738ydwa5B83s7ES2uVV4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTAxRkE3RkQ5MTMyOTYzOTcyQzkxNTE3Q0RDN0U1RUU5 MDc3RTA3ODAeFw0yNTA2MTMxODQ1NDdaFw0yNTA2MTcwNjAzNDdaMDMxMTAvBgNV BAMTKEZGOUEyRkQxQkY3MUEzNkNCMzYwMDhEOUMwMTkzOUQ4NDc5RTM0RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQcu4EJKYozjpRBaS1t5wFyA4H V8QkkTX45k9GZrFfyMCJxvsZhmnGgosWW73JUkTzRr9EoXzPfQ/3etwfG1cqmTVJ 9R2kQrY/dVoEXvKB+BjiEy/jzYXx7pb8TgUwTpy9L8WLui2iwQX8kx62hVWb/+/z UaKSFcq97vr3Zs9B2My8i9xChCuY2WTaPiQA4w66k7jmLQOtOGurpYTHzx+LH9FO rKw1lzLzGYWn3iZ8whjULlqvvt8ugOrURyI/V6H5Vo74OPns6hdkhUyEsm1Z0TsY HyP4UAO7BILbx7paxAsKjxTauxsUea5YzF5fz1BKm2GRsCQeT8kBkuuO3HnBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/5ov0b9xo2yzYAjZwBk52EeeNOIwHwYDVR0j BBgwFoAUkB+n/ZEyljlyyRUXzcfl7pB34HgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODBhOGRmZC1hNjc5LTQ0NGEtYjlhOC02ZTNjYjQ4MWEwNzkvMC85MDFGQTdGRDkx MzI5NjM5NzJDOTE1MTdDREM3RTVFRTkwNzdFMDc4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTAxRkE3RkQ5MTMyOTYzOTcyQzkxNTE3Q0RDN0U1RUU5MDc3 RTA3OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjgwYThkZmQtYTY3OS00NDRhLWI5 YTgtNmUzY2I0ODFhMDc5LzAvOTAxRkE3RkQ5MTMyOTYzOTcyQzkxNTE3Q0RDN0U1 RUU5MDc3RTA3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABcqtD75IWpx9PK2OsBb9U/KW4V+RDZcRBD5 Wb1NL83R5+6bW8EEb74HCFyJ8O/ZSb5xSGlZ6ecc93wIS/6SGLBKYtqNl1fesqH6 8SqWxL0aGzg9vPGqQGm0JcaQkuTOTkQes29OB1Vbou/MytcCOczpwmsEqMnSLv8a 9/FlAB+maVmccjwiu1EgowfUcB5y0lPDxazcSDqWkON1iiLSc1UpgocDnjbkMhsa paVgSPdsWNANZINLjGExNp4AhWO/2x0SLXcPl+T4V0+w1p1gHErgz1NbTj8CiNx5 AR6POBOXjrgIrwpjWms2r2BOv4aN5aAHA9acjuHSt1wDOrEzvBc= -----END CERTIFICATE-----Generated at Mon Jun 16 03:47:07 2025 by rpki-client