$ rpki-client -vvf repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.mft File: 381455361E726B6ECCDAF271673BD59B1555336E.mft (raw, json) Hash identifier: dCrNslRxoV9gdr6vv8d2OMILIjC3QxO56fuSrPE/+6Y= Subject key identifier: B2:8B:87:FF:08:63:07:2B:1C:0D:51:D3:C0:FD:30:0F:A8:00:91:C7 Authority key identifier: 38:14:55:36:1E:72:6B:6E:CC:DA:F2:71:67:3B:D5:9B:15:55:33:6E Certificate issuer: /CN=381455361E726B6ECCDAF271673BD59B1555336E Certificate serial: 4B94B9D35A7BF0FA81A7DAEEC9B60A4EC4AA7277 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/381455361E726B6ECCDAF271673BD59B1555336E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.mft Manifest number: 0349 Signing time: Sat 14 Jun 2025 20:01:46 +0000 Manifest this update: Sat 14 Jun 2025 19:56:46 +0000 Manifest next update: Wed 18 Jun 2025 06:50:46 +0000 Files and hashes: 1: 381455361E726B6ECCDAF271673BD59B1555336E.crl (hash: y5Geo0SrWqJVE44Go6tYf5IrkUGtqSwpgawKKA0pBa0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.crl rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/381455361E726B6ECCDAF271673BD59B1555336E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 06:50:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:94:b9:d3:5a:7b:f0:fa:81:a7:da:ee:c9:b6:0a:4e:c4:aa:72:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=381455361E726B6ECCDAF271673BD59B1555336E Validity Not Before: Jun 14 19:56:46 2025 GMT Not After : Jun 18 06:50:46 2025 GMT Subject: CN=B28B87FF0863072B1C0D51D3C0FD300FA80091C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9c:98:43:dc:01:a6:4d:7c:fd:80:0c:5a:00: c7:06:f8:d1:2d:1c:2f:6a:9d:ec:c4:a3:70:c7:06: 7f:10:da:8f:77:8e:d1:55:ec:99:f9:8f:bd:02:34: 77:d2:4c:30:b8:c0:0b:cb:57:f0:3a:cc:85:95:32: 79:f7:0b:94:77:68:8e:70:4a:b4:60:c2:8b:9f:42: ad:a7:92:1a:49:7e:73:d1:c5:ed:d1:1a:c8:03:2c: ff:14:d8:4a:15:5e:b5:1a:49:2d:de:f1:c6:52:9e: 51:ae:72:35:06:39:54:ae:45:63:a0:48:1e:ea:ca: 46:ad:ce:aa:b8:ee:6f:c7:aa:ae:b0:fa:c6:44:18: 24:c6:f6:4d:be:a1:12:6c:28:19:72:ee:c8:0a:e7: e8:92:6f:3b:f6:6f:da:61:ce:ff:c1:ee:d1:45:62: 14:e5:d2:fe:86:63:65:95:c3:f1:17:37:70:c9:3b: 8d:c3:a1:60:60:12:28:b0:0d:9b:26:57:88:23:a2: e4:34:21:66:3d:40:f3:a3:a8:f6:32:da:5c:55:b7: 17:bd:16:03:a2:2d:4f:83:8b:e9:fa:1d:8b:6c:42: 7e:3f:a2:4e:5e:07:1d:6e:35:e4:5f:de:8e:c0:3f: df:52:b2:83:df:5f:6c:17:c5:c1:98:fb:72:61:8e: 01:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:8B:87:FF:08:63:07:2B:1C:0D:51:D3:C0:FD:30:0F:A8:00:91:C7 X509v3 Authority Key Identifier: keyid:38:14:55:36:1E:72:6B:6E:CC:DA:F2:71:67:3B:D5:9B:15:55:33:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/381455361E726B6ECCDAF271673BD59B1555336E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:89:c1:9a:51:c3:51:19:ce:7d:db:e8:1c:c2:e3:64:4e:a0: d7:ac:e5:b3:fb:d9:01:04:b0:25:cc:2e:06:33:d3:8b:01:c6: 6b:35:7d:ab:80:3b:3e:2d:0b:27:78:d7:8a:6c:03:df:c7:06: 6a:5f:e2:20:fc:55:04:b6:2f:bc:e1:0e:2d:bc:c8:2c:d2:56: 5f:57:af:50:b1:97:bd:79:01:08:d6:31:84:74:f1:4e:87:5f: 1b:a1:d0:0a:1e:8d:13:a3:fc:ef:32:cd:de:f6:32:ba:22:bd: 4e:81:43:b9:83:39:15:f8:2a:ba:6a:60:76:ea:68:14:78:6e: 9d:dc:3b:aa:51:bd:cb:6f:58:ff:fe:d4:ad:69:fc:7f:5b:55: 23:16:fc:d4:83:94:55:63:c6:fb:b7:64:af:a5:c0:9c:18:27: 8a:fa:f5:3c:c5:91:63:4e:a3:be:1f:0f:af:0e:94:08:6a:62: 76:f7:f9:49:be:36:d4:03:3c:a7:45:2f:06:31:24:39:83:8f: fd:04:b8:d7:ae:e4:db:68:0f:bc:71:83:92:50:51:96:c2:ef: 13:33:7a:a1:49:9f:1e:8d:6e:d2:50:5c:98:ba:74:28:9e:d7: ed:a3:86:27:09:2a:27:7a:c0:9b:0b:ca:9c:07:ac:26:d8:dc: 2e:23:de:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS5S501p78PqBp9ruybYKTsSqcncwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzgxNDU1MzYxRTcyNkI2RUNDREFGMjcxNjczQkQ1OUIx NTU1MzM2RTAeFw0yNTA2MTQxOTU2NDZaFw0yNTA2MTgwNjUwNDZaMDMxMTAvBgNV BAMTKEIyOEI4N0ZGMDg2MzA3MkIxQzBENTFEM0MwRkQzMDBGQTgwMDkxQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrnJhD3AGmTXz9gAxaAMcG+NEt HC9qnezEo3DHBn8Q2o93jtFV7Jn5j70CNHfSTDC4wAvLV/A6zIWVMnn3C5R3aI5w SrRgwoufQq2nkhpJfnPRxe3RGsgDLP8U2EoVXrUaSS3e8cZSnlGucjUGOVSuRWOg SB7qykatzqq47m/Hqq6w+sZEGCTG9k2+oRJsKBly7sgK5+iSbzv2b9phzv/B7tFF YhTl0v6GY2WVw/EXN3DJO43DoWBgEiiwDZsmV4gjouQ0IWY9QPOjqPYy2lxVtxe9 FgOiLU+Di+n6HYtsQn4/ok5eBx1uNeRf3o7AP99SsoPfX2wXxcGY+3JhjgEfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsouH/whjByscDVHTwP0wD6gAkccwHwYDVR0j BBgwFoAUOBRVNh5ya27M2vJxZzvVmxVVM24wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzE5ODc0Yy1hNmIyLTRiMGItOWNjNi01NTlhNGU3Y2Q5NWEvMC8zODE0NTUzNjFF NzI2QjZFQ0NEQUYyNzE2NzNCRDU5QjE1NTUzMzZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzgxNDU1MzYxRTcyNkI2RUNDREFGMjcxNjczQkQ1OUIxNTU1 MzM2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMxOTg3NGMtYTZiMi00YjBiLTlj YzYtNTU5YTRlN2NkOTVhLzAvMzgxNDU1MzYxRTcyNkI2RUNDREFGMjcxNjczQkQ1 OUIxNTU1MzM2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIiJwZpRw1EZzn3b6BzC42ROoNes5bP72QEE sCXMLgYz04sBxms1fauAOz4tCyd414psA9/HBmpf4iD8VQS2L7zhDi28yCzSVl9X r1Cxl715AQjWMYR08U6HXxuh0AoejROj/O8yzd72MroivU6BQ7mDORX4KrpqYHbq aBR4bp3cO6pRvctvWP/+1K1p/H9bVSMW/NSDlFVjxvu3ZK+lwJwYJ4r69TzFkWNO o74fD68OlAhqYnb3+Um+NtQDPKdFLwYxJDmDj/0EuNeu5NtoD7xxg5JQUZbC7xMz eqFJnx6NbtJQXJi6dCie1+2jhicJKid6wJsLypwHrCbY3C4j3tM= -----END CERTIFICATE-----Generated at Mon Jun 16 15:46:39 2025 by rpki-client