$ rpki-client -vvf repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.mft File: D4D0F3E6E684847D602FC73758893CE2BB05D399.mft (raw, json) Hash identifier: /AfzhhoU6d7LRjs4vD5L/aiwVo0d5PsXbHrwn+zwabM= Subject key identifier: 11:93:B3:CF:F8:9F:54:A7:00:CD:57:D2:ED:45:58:82:40:99:79:5C Authority key identifier: D4:D0:F3:E6:E6:84:84:7D:60:2F:C7:37:58:89:3C:E2:BB:05:D3:99 Certificate issuer: /CN=D4D0F3E6E684847D602FC73758893CE2BB05D399 Certificate serial: 0F4143FB220AA3C1BB0E7F0D1B42FF1B9DB2CB7F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4D0F3E6E684847D602FC73758893CE2BB05D399.cer Subject info access: rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.mft Manifest number: 0184 Signing time: Sun 15 Jun 2025 10:30:43 +0000 Manifest this update: Sun 15 Jun 2025 10:25:43 +0000 Manifest next update: Wed 18 Jun 2025 18:07:43 +0000 Files and hashes: 1: D4D0F3E6E684847D602FC73758893CE2BB05D399.crl (hash: OQoy74OedxDR2Yh9WaMOTqSR5JXvUEkJxBk1RzXfa9I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.crl rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4D0F3E6E684847D602FC73758893CE2BB05D399.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 18:07:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:41:43:fb:22:0a:a3:c1:bb:0e:7f:0d:1b:42:ff:1b:9d:b2:cb:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4D0F3E6E684847D602FC73758893CE2BB05D399 Validity Not Before: Jun 15 10:25:43 2025 GMT Not After : Jun 18 18:07:43 2025 GMT Subject: CN=1193B3CFF89F54A700CD57D2ED4558824099795C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:df:25:78:d1:c5:58:11:ed:31:86:fe:29:33: fb:fa:d2:a4:6b:26:32:ea:c0:51:b8:e1:2c:44:53: 3b:d1:12:20:4d:3c:86:07:37:b2:8a:ed:44:22:e3: 66:1a:c2:2a:6e:c9:85:1a:7c:32:c6:f4:c2:76:3e: 15:cc:b8:01:26:99:10:8b:de:2b:90:62:1a:6d:c1: 48:ea:f7:63:a8:54:a0:46:a6:78:4e:08:40:51:bb: 49:1c:24:d3:97:19:2c:d6:99:be:26:1d:c1:02:80: f8:b7:97:f8:1d:70:00:e2:3b:62:0e:af:ea:e9:b1: a1:b6:2b:4e:a3:80:0e:bc:34:d6:f5:c1:8a:bf:f8: f9:84:1e:8f:88:8c:f8:9f:4c:61:bc:1a:06:22:dc: dc:be:76:df:ff:b5:21:bd:75:1d:f1:5d:a2:5a:d3: ac:e8:89:59:40:a1:97:b7:29:99:65:84:e5:87:75: 12:c1:b7:df:f1:73:43:79:73:16:06:92:38:7c:37: 68:30:03:ea:a6:42:27:b4:4c:b2:0f:40:6f:df:24: b2:25:89:dd:b1:10:9f:d0:4d:8d:3b:0d:00:3b:12: 22:d6:ed:d5:37:43:5a:68:7b:91:d5:08:a4:bb:9f: 4d:9c:c7:32:b1:8d:b4:96:cf:15:12:ae:a4:16:11: c6:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:93:B3:CF:F8:9F:54:A7:00:CD:57:D2:ED:45:58:82:40:99:79:5C X509v3 Authority Key Identifier: keyid:D4:D0:F3:E6:E6:84:84:7D:60:2F:C7:37:58:89:3C:E2:BB:05:D3:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4D0F3E6E684847D602FC73758893CE2BB05D399.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:b5:1b:8e:c4:a1:a6:5a:89:71:81:0d:1c:f7:e3:90:99:a8: 7a:d4:27:15:3b:78:1e:1a:bd:a5:aa:0e:f0:71:cf:03:60:27: a4:3b:c9:20:d5:2c:66:40:a8:0b:26:61:f4:80:61:99:7b:03: eb:47:09:c8:e2:aa:e3:4e:2c:21:94:21:ae:f3:d1:71:d4:fa: 0f:a4:bd:ce:c9:c6:ba:4f:fc:f3:2e:c7:22:26:ed:26:1e:a7: 93:af:8e:9a:6c:28:df:80:63:d7:e6:ea:6c:5b:19:88:82:65: 52:3a:1a:8e:da:73:bd:04:75:99:89:79:37:94:f6:2d:74:08: 70:c9:00:13:2a:1e:a3:5b:b4:98:75:23:81:39:39:2a:95:c2: 3a:88:31:c3:bd:9e:2c:71:de:ff:b6:7d:a2:cd:ce:8f:b9:57: 0a:75:ab:aa:20:ec:93:f0:58:84:9a:59:6b:ea:85:a1:0f:06: a7:b7:ac:7c:b8:2d:74:98:9e:3a:a0:ca:62:4d:ec:0c:21:fc: 04:d4:b4:17:f4:4d:25:4b:23:65:0b:e0:f1:86:f1:f4:48:50: 3d:2a:4b:1d:5e:2d:1c:47:26:8c:ef:ff:71:0e:78:e4:48:44: 2c:1e:ef:69:d0:3b:83:4a:ee:58:b8:a6:09:99:7e:58:42:16: 4d:c9:ef:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD0FD+yIKo8G7Dn8NG0L/G52yy38wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDREMEYzRTZFNjg0ODQ3RDYwMkZDNzM3NTg4OTNDRTJC QjA1RDM5OTAeFw0yNTA2MTUxMDI1NDNaFw0yNTA2MTgxODA3NDNaMDMxMTAvBgNV BAMTKDExOTNCM0NGRjg5RjU0QTcwMENENTdEMkVENDU1ODgyNDA5OTc5NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh3yV40cVYEe0xhv4pM/v60qRr JjLqwFG44SxEUzvREiBNPIYHN7KK7UQi42YawipuyYUafDLG9MJ2PhXMuAEmmRCL 3iuQYhptwUjq92OoVKBGpnhOCEBRu0kcJNOXGSzWmb4mHcECgPi3l/gdcADiO2IO r+rpsaG2K06jgA68NNb1wYq/+PmEHo+IjPifTGG8GgYi3Ny+dt//tSG9dR3xXaJa 06zoiVlAoZe3KZllhOWHdRLBt9/xc0N5cxYGkjh8N2gwA+qmQie0TLIPQG/fJLIl id2xEJ/QTY07DQA7EiLW7dU3Q1poe5HVCKS7n02cxzKxjbSWzxUSrqQWEcbVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEZOzz/ifVKcAzVfS7UVYgkCZeVwwHwYDVR0j BBgwFoAU1NDz5uaEhH1gL8c3WIk84rsF05kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MjM1MzBlYy05OTBlLTQxZDctOWQ3OC1iNzdlMjBkNzZiY2QvMC9ENEQwRjNFNkU2 ODQ4NDdENjAyRkM3Mzc1ODg5M0NFMkJCMDVEMzk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDREMEYzRTZFNjg0ODQ3RDYwMkZDNzM3NTg4OTNDRTJCQjA1 RDM5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODIzNTMwZWMtOTkwZS00MWQ3LTlk NzgtYjc3ZTIwZDc2YmNkLzAvRDREMEYzRTZFNjg0ODQ3RDYwMkZDNzM3NTg4OTND RTJCQjA1RDM5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGK1G47EoaZaiXGBDRz345CZqHrUJxU7eB4a vaWqDvBxzwNgJ6Q7ySDVLGZAqAsmYfSAYZl7A+tHCcjiquNOLCGUIa7z0XHU+g+k vc7JxrpP/PMuxyIm7SYep5OvjppsKN+AY9fm6mxbGYiCZVI6Go7ac70EdZmJeTeU 9i10CHDJABMqHqNbtJh1I4E5OSqVwjqIMcO9nixx3v+2faLNzo+5Vwp1q6og7JPw WISaWWvqhaEPBqe3rHy4LXSYnjqgymJN7Awh/ATUtBf0TSVLI2UL4PGG8fRIUD0q Sx1eLRxHJozv/3EOeORIRCwe72nQO4NK7li4pgmZflhCFk3J75s= -----END CERTIFICATE-----Generated at Tue Jun 17 01:39:44 2025 by rpki-client