$ rpki-client -vvf repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft File: C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft (raw, json) Hash identifier: kPHqTitEEL4+Opxa97nIII9uzsn3Au45IFDXQVQGltE= Subject key identifier: 92:E3:B6:FF:57:A5:55:6A:78:35:97:24:D5:5F:FC:1F:2F:C3:45:FC Authority key identifier: C1:66:91:03:D8:70:A3:90:C5:6C:8D:FD:3C:1B:FE:23:E4:8B:05:40 Certificate issuer: /CN=C1669103D870A390C56C8DFD3C1BFE23E48B0540 Certificate serial: 6AC43B9F0DE7CD04F001E10E854BB8A8045794F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1669103D870A390C56C8DFD3C1BFE23E48B0540.cer Subject info access: rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft Manifest number: 93 Signing time: Sun 27 Apr 2025 22:31:19 +0000 Manifest this update: Sun 27 Apr 2025 22:26:19 +0000 Manifest next update: Thu 01 May 2025 09:07:19 +0000 Files and hashes: 1: C1669103D870A390C56C8DFD3C1BFE23E48B0540.crl (hash: bRQBlSMkinLh5wWpHSENCQvl3oAbtzPxco6QcdeDkIQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.crl rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1669103D870A390C56C8DFD3C1BFE23E48B0540.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 09:07:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:c4:3b:9f:0d:e7:cd:04:f0:01:e1:0e:85:4b:b8:a8:04:57:94:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1669103D870A390C56C8DFD3C1BFE23E48B0540 Validity Not Before: Apr 27 22:26:19 2025 GMT Not After : May 1 09:07:19 2025 GMT Subject: CN=92E3B6FF57A5556A78359724D55FFC1F2FC345FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ef:c6:3a:c9:93:ea:64:35:88:6e:aa:e1:c0: b1:8f:20:6b:e4:95:05:2d:c9:4e:fc:69:06:c4:b0: f5:45:f0:a3:86:a4:b2:38:aa:c2:72:16:03:fd:20: 08:8a:cf:3f:d2:cb:e6:b4:61:f1:a7:21:e2:84:7e: 6c:ad:88:9d:fe:62:25:d2:bf:6e:94:7e:35:67:b9: 34:02:e3:2f:a8:9d:e4:6e:19:36:24:4e:60:0b:e0: 11:49:c6:90:86:3c:ec:32:f0:81:41:31:73:70:6a: bf:26:61:d6:e4:51:e7:0c:31:7b:3b:22:25:38:26: 90:88:d1:a7:3c:b0:58:60:85:b0:bc:63:74:f1:80: 44:03:fc:0d:87:62:9d:ea:12:64:60:6a:b4:6e:c0: 19:2a:39:31:0b:68:c6:eb:e5:d6:e3:d0:ff:a7:00: 23:79:60:17:d0:ca:9c:0f:2b:f9:bf:ed:04:fa:fe: 90:73:2e:e1:d5:36:46:47:0a:cc:a8:b7:d0:65:ee: 2b:31:7b:d1:50:db:c8:f2:b3:51:a2:7f:76:fa:75: 46:5f:bc:24:cd:4b:2e:9f:5b:70:cb:dd:27:77:d3: 77:db:01:be:1f:b9:04:fa:a8:ee:47:a2:ae:78:be: 91:e9:f7:e3:76:de:f9:a5:de:ea:ec:21:b9:aa:97: bd:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:E3:B6:FF:57:A5:55:6A:78:35:97:24:D5:5F:FC:1F:2F:C3:45:FC X509v3 Authority Key Identifier: keyid:C1:66:91:03:D8:70:A3:90:C5:6C:8D:FD:3C:1B:FE:23:E4:8B:05:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1669103D870A390C56C8DFD3C1BFE23E48B0540.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:3d:ee:b5:e1:5f:76:a6:02:46:c2:7b:92:0a:df:11:20:9c: 59:c1:f7:50:0d:0b:c6:4d:89:5b:28:8f:7f:ef:81:1e:c7:0a: c7:ff:c7:21:28:ce:4c:2e:cd:fc:39:13:b5:9d:05:7d:e2:8c: 5a:14:70:6b:9f:30:d1:39:66:04:1c:50:eb:01:53:15:17:cc: 45:8a:8a:d0:13:62:81:fd:c2:3c:6f:af:26:83:5b:19:15:2a: ea:5e:f4:0b:4a:e4:97:f7:38:d2:dc:e2:cf:19:f8:4b:95:c4: 3c:85:6d:4c:67:e4:53:33:1d:40:12:70:ca:e9:c8:4c:11:f6: 41:c9:64:4d:b4:9e:f8:41:40:08:c5:c8:ec:97:6d:f3:1e:76: fb:35:e4:cf:84:dd:9f:0e:29:db:13:13:e4:df:57:29:4a:72: dc:4a:dc:ae:2d:16:4b:9a:d5:11:05:95:8e:9a:85:00:6a:ce: dd:ca:ae:a3:23:48:8a:c5:86:ba:9f:da:83:96:f5:2b:9a:cd: 1d:96:53:2a:bf:cb:01:9a:c9:40:db:64:3a:bf:30:29:bf:bd: 44:9d:f3:9e:f3:e9:e5:e3:b3:b5:78:9c:b3:d4:b1:ca:bc:29: c3:86:bd:ee:39:1a:b5:fc:40:81:6a:5e:bc:e2:74:56:b8:d2: 63:6a:91:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUasQ7nw3nzQTwAeEOhUu4qARXlPIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE2NjkxMDNEODcwQTM5MEM1NkM4REZEM0MxQkZFMjNF NDhCMDU0MDAeFw0yNTA0MjcyMjI2MTlaFw0yNTA1MDEwOTA3MTlaMDMxMTAvBgNV BAMTKDkyRTNCNkZGNTdBNTU1NkE3ODM1OTcyNEQ1NUZGQzFGMkZDMzQ1RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR78Y6yZPqZDWIbqrhwLGPIGvk lQUtyU78aQbEsPVF8KOGpLI4qsJyFgP9IAiKzz/Sy+a0YfGnIeKEfmytiJ3+YiXS v26UfjVnuTQC4y+oneRuGTYkTmAL4BFJxpCGPOwy8IFBMXNwar8mYdbkUecMMXs7 IiU4JpCI0ac8sFhghbC8Y3TxgEQD/A2HYp3qEmRgarRuwBkqOTELaMbr5dbj0P+n ACN5YBfQypwPK/m/7QT6/pBzLuHVNkZHCsyot9Bl7isxe9FQ28jys1Gif3b6dUZf vCTNSy6fW3DL3Sd303fbAb4fuQT6qO5Hoq54vpHp9+N23vml3ursIbmql71/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkuO2/1elVWp4NZck1V/8Hy/DRfwwHwYDVR0j BBgwFoAUwWaRA9hwo5DFbI39PBv+I+SLBUAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ODhkMGI2ZS1iMmVkLTQ5YzgtYTQ5OC04ZmQyOTlhZmI3MDEvMC9DMTY2OTEwM0Q4 NzBBMzkwQzU2QzhERkQzQzFCRkUyM0U0OEIwNTQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE2NjkxMDNEODcwQTM5MEM1NkM4REZEM0MxQkZFMjNFNDhC MDU0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODg4ZDBiNmUtYjJlZC00OWM4LWE0 OTgtOGZkMjk5YWZiNzAxLzAvQzE2NjkxMDNEODcwQTM5MEM1NkM4REZEM0MxQkZF MjNFNDhCMDU0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABc97rXhX3amAkbCe5IK3xEgnFnB91ANC8ZN iVsoj3/vgR7HCsf/xyEozkwuzfw5E7WdBX3ijFoUcGufMNE5ZgQcUOsBUxUXzEWK itATYoH9wjxvryaDWxkVKupe9AtK5Jf3ONLc4s8Z+EuVxDyFbUxn5FMzHUAScMrp yEwR9kHJZE20nvhBQAjFyOyXbfMedvs15M+E3Z8OKdsTE+TfVylKctxK3K4tFkua 1REFlY6ahQBqzt3KrqMjSIrFhrqf2oOW9SuazR2WUyq/ywGayUDbZDq/MCm/vUSd 857z6eXjs7V4nLPUscq8KcOGve45GrX8QIFqXrzidFa40mNqkUY= -----END CERTIFICATE-----Generated at Wed Apr 30 05:25:09 2025 by rpki-client