$ rpki-client -vvf repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft File: C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft (raw, json) Hash identifier: 826XgYqlpK8uYI5AQC4DbXWIRFW66YxcMy4lD6jW7OU= Subject key identifier: E4:21:46:C3:62:3E:D3:1B:EE:27:05:38:B9:0F:66:C8:6D:7C:42:5B Authority key identifier: C1:66:91:03:D8:70:A3:90:C5:6C:8D:FD:3C:1B:FE:23:E4:8B:05:40 Certificate issuer: /CN=C1669103D870A390C56C8DFD3C1BFE23E48B0540 Certificate serial: 40C64B2170322CAF64A7CC3F1A9DCF2A57DF1322 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1669103D870A390C56C8DFD3C1BFE23E48B0540.cer Subject info access: rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft Manifest number: A9 Signing time: Sun 15 Jun 2025 22:21:23 +0000 Manifest this update: Sun 15 Jun 2025 22:16:23 +0000 Manifest next update: Thu 19 Jun 2025 04:10:23 +0000 Files and hashes: 1: C1669103D870A390C56C8DFD3C1BFE23E48B0540.crl (hash: jWsbp60llgfND+Tf0rQhgtu0+1QsOXp/UNGEm4AVXqg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.crl rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1669103D870A390C56C8DFD3C1BFE23E48B0540.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 04:10:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:c6:4b:21:70:32:2c:af:64:a7:cc:3f:1a:9d:cf:2a:57:df:13:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1669103D870A390C56C8DFD3C1BFE23E48B0540 Validity Not Before: Jun 15 22:16:23 2025 GMT Not After : Jun 19 04:10:23 2025 GMT Subject: CN=E42146C3623ED31BEE270538B90F66C86D7C425B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:48:b3:43:b1:80:69:f8:65:09:cf:86:51:43: fe:9e:2c:62:d8:0f:7e:6a:17:49:b8:70:a9:7e:69: c7:ad:9a:e0:75:64:96:6a:6c:16:ae:d4:40:f8:e1: 07:0d:f9:a5:8f:00:d6:54:09:2e:bb:a2:a2:8d:8e: b6:97:a5:e8:e9:dd:05:28:00:7a:31:82:26:66:4a: d3:07:fd:6c:3f:8e:4e:54:86:41:01:59:23:ec:d1: 69:36:23:e3:dc:c8:ba:5d:ab:27:1c:89:ef:6f:cf: 65:15:1d:2e:95:7a:a7:67:ed:e5:a9:73:f6:c0:19: c5:88:5e:f7:ff:bc:63:66:d3:92:68:91:12:c8:39: 2f:33:8b:f8:a9:e8:57:d7:c0:b1:e4:63:85:c1:7b: ca:57:78:41:55:81:42:44:b5:98:27:85:59:ac:1a: c8:da:6c:89:8d:dd:9c:b5:f2:73:ec:12:3d:4d:af: d0:9f:fe:b3:82:40:58:f8:6f:0a:95:d5:f4:c3:4b: 94:f8:3b:80:19:c6:8e:f4:cf:16:88:f9:37:8f:3f: 3c:86:31:ba:4c:46:e7:0b:2b:b7:4c:00:43:7a:2b: 44:17:9f:ce:ab:15:5d:1e:55:3a:0f:79:9f:36:7c: d6:ef:c8:72:74:c0:20:d2:50:2f:f2:99:16:86:b8: 02:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:21:46:C3:62:3E:D3:1B:EE:27:05:38:B9:0F:66:C8:6D:7C:42:5B X509v3 Authority Key Identifier: keyid:C1:66:91:03:D8:70:A3:90:C5:6C:8D:FD:3C:1B:FE:23:E4:8B:05:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1669103D870A390C56C8DFD3C1BFE23E48B0540.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:10:53:81:51:99:51:ce:fc:44:e8:cb:00:99:2c:af:c4:fa: a0:7e:08:b4:4a:3c:83:5d:4f:82:f0:3b:15:e4:05:2f:a4:0a: 16:96:e6:c4:db:fc:2d:13:f6:a4:69:c9:c5:a6:c7:29:52:bd: a4:a1:3e:1b:30:e9:98:c4:5e:18:25:90:d3:94:d3:d4:11:37: 7e:1a:a5:68:22:95:7f:0d:e4:f1:96:96:00:5b:54:0c:6e:7e: 35:85:c4:42:d0:c6:63:a9:58:4d:46:8c:07:db:f6:0f:5c:3c: 64:79:6e:aa:9a:42:b9:d4:70:2b:78:8f:20:98:04:f1:62:e6: 79:44:8c:f7:a2:c9:f2:fc:6d:b7:6c:68:a1:e9:39:36:ed:b9: a5:ff:bf:96:63:1e:4b:74:16:85:3e:55:00:b9:ba:f1:45:98: 0d:69:48:3b:8f:93:04:fe:a2:c0:02:af:03:44:4e:f8:23:4d: 76:d8:16:47:c2:b6:f3:95:77:09:0b:ff:ac:25:be:55:33:d7: 8c:5d:e6:46:d7:32:d2:6e:b1:aa:9b:24:8e:42:e8:c4:86:8f: 66:05:c0:27:b3:59:a2:b9:a5:c7:8c:fe:a3:6d:3a:3c:bc:5d: 04:48:d5:cd:b6:2d:0f:30:91:0d:2b:52:a3:53:7c:ac:54:95: 29:17:4d:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQMZLIXAyLK9kp8w/Gp3PKlffEyIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE2NjkxMDNEODcwQTM5MEM1NkM4REZEM0MxQkZFMjNF NDhCMDU0MDAeFw0yNTA2MTUyMjE2MjNaFw0yNTA2MTkwNDEwMjNaMDMxMTAvBgNV BAMTKEU0MjE0NkMzNjIzRUQzMUJFRTI3MDUzOEI5MEY2NkM4NkQ3QzQyNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+SLNDsYBp+GUJz4ZRQ/6eLGLY D35qF0m4cKl+acetmuB1ZJZqbBau1ED44QcN+aWPANZUCS67oqKNjraXpejp3QUo AHoxgiZmStMH/Ww/jk5UhkEBWSPs0Wk2I+PcyLpdqyccie9vz2UVHS6Veqdn7eWp c/bAGcWIXvf/vGNm05JokRLIOS8zi/ip6FfXwLHkY4XBe8pXeEFVgUJEtZgnhVms GsjabImN3Zy18nPsEj1Nr9Cf/rOCQFj4bwqV1fTDS5T4O4AZxo70zxaI+TePPzyG MbpMRucLK7dMAEN6K0QXn86rFV0eVToPeZ82fNbvyHJ0wCDSUC/ymRaGuALZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5CFGw2I+0xvuJwU4uQ9myG18QlswHwYDVR0j BBgwFoAUwWaRA9hwo5DFbI39PBv+I+SLBUAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ODhkMGI2ZS1iMmVkLTQ5YzgtYTQ5OC04ZmQyOTlhZmI3MDEvMC9DMTY2OTEwM0Q4 NzBBMzkwQzU2QzhERkQzQzFCRkUyM0U0OEIwNTQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE2NjkxMDNEODcwQTM5MEM1NkM4REZEM0MxQkZFMjNFNDhC MDU0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODg4ZDBiNmUtYjJlZC00OWM4LWE0 OTgtOGZkMjk5YWZiNzAxLzAvQzE2NjkxMDNEODcwQTM5MEM1NkM4REZEM0MxQkZF MjNFNDhCMDU0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ4QU4FRmVHO/EToywCZLK/E+qB+CLRKPINd T4LwOxXkBS+kChaW5sTb/C0T9qRpycWmxylSvaShPhsw6ZjEXhglkNOU09QRN34a pWgilX8N5PGWlgBbVAxufjWFxELQxmOpWE1GjAfb9g9cPGR5bqqaQrnUcCt4jyCY BPFi5nlEjPeiyfL8bbdsaKHpOTbtuaX/v5ZjHkt0FoU+VQC5uvFFmA1pSDuPkwT+ osACrwNETvgjTXbYFkfCtvOVdwkL/6wlvlUz14xd5kbXMtJusaqbJI5C6MSGj2YF wCezWaK5pceM/qNtOjy8XQRI1c22LQ8wkQ0rUqNTfKxUlSkXTds= -----END CERTIFICATE-----Generated at Tue Jun 17 15:35:59 2025 by rpki-client