$ rpki-client -vvf repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.mft File: D018BF43793F56145B87233DD668DE3BDEEFFE13.mft (raw, json) Hash identifier: GPD8RiG8cPCcu46ucirCQ7G13lfDeMvOxob7VIm591M= Subject key identifier: E1:DB:4E:B2:FB:92:54:0D:4A:99:07:EE:3E:4E:90:16:DE:8E:AA:61 Authority key identifier: D0:18:BF:43:79:3F:56:14:5B:87:23:3D:D6:68:DE:3B:DE:EF:FE:13 Certificate issuer: /CN=D018BF43793F56145B87233DD668DE3BDEEFFE13 Certificate serial: 595D8751186C6188FB62698DC6A71C19D1410324 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D018BF43793F56145B87233DD668DE3BDEEFFE13.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.mft Manifest number: 33 Signing time: Fri 13 Jun 2025 22:21:13 +0000 Manifest this update: Fri 13 Jun 2025 22:16:13 +0000 Manifest next update: Tue 17 Jun 2025 01:05:13 +0000 Files and hashes: 1: D018BF43793F56145B87233DD668DE3BDEEFFE13.crl (hash: z0CnvETl3dQeouERHSWhIa8CtC4hVh0Ls9A9igUv/4o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.crl rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D018BF43793F56145B87233DD668DE3BDEEFFE13.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 01:05:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:5d:87:51:18:6c:61:88:fb:62:69:8d:c6:a7:1c:19:d1:41:03:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D018BF43793F56145B87233DD668DE3BDEEFFE13 Validity Not Before: Jun 13 22:16:13 2025 GMT Not After : Jun 17 01:05:13 2025 GMT Subject: CN=E1DB4EB2FB92540D4A9907EE3E4E9016DE8EAA61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3e:ea:bd:c9:f5:fa:3e:74:cb:20:c0:0c:f9: db:27:95:5b:cb:95:55:1d:df:56:c5:8d:b8:fe:9c: 3d:fb:bc:8a:72:9b:0b:81:84:75:1f:a8:9d:4d:ae: 26:cb:68:2b:2d:cb:0a:9f:63:c9:be:b9:52:6b:f9: 04:34:73:a2:47:25:4b:d3:9f:7c:87:f2:34:3c:15: f4:1c:e5:74:68:2d:b6:9d:40:90:62:1b:cf:de:c0: c1:98:ff:5d:d0:2f:a2:da:ac:cf:1f:3f:3c:f1:0f: a5:cb:46:03:ff:70:34:d6:f4:26:58:9a:31:72:49: 9a:cf:83:8f:c7:57:0e:c3:00:5b:ca:ad:ea:d4:0a: f4:7f:fe:d3:93:52:40:03:42:3b:8b:f2:cc:85:0e: fd:f1:75:ed:b2:86:34:ba:de:1a:b6:94:19:d9:29: 8e:5c:a4:77:1e:2c:b8:2d:c6:35:36:65:67:d9:3a: a6:85:0d:d3:de:89:69:7a:c7:39:72:c2:0f:04:1d: 03:d2:3a:1f:0c:eb:d4:33:d8:88:d2:6a:8f:65:15: 08:a0:80:02:79:e8:8d:5d:2b:29:b3:47:6d:0f:a0: 41:97:9d:64:67:41:f5:af:8e:f6:38:26:c5:68:b5: 46:6e:00:d4:95:6d:a9:5d:68:9f:0e:dc:d9:6b:84: 07:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:DB:4E:B2:FB:92:54:0D:4A:99:07:EE:3E:4E:90:16:DE:8E:AA:61 X509v3 Authority Key Identifier: keyid:D0:18:BF:43:79:3F:56:14:5B:87:23:3D:D6:68:DE:3B:DE:EF:FE:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D018BF43793F56145B87233DD668DE3BDEEFFE13.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:d2:58:cb:cb:8c:b5:5f:2e:07:54:a2:54:e8:df:7c:01:ee: d1:37:5b:93:0b:dc:de:8b:9f:b9:3c:81:2e:bd:5f:9a:ea:a4: 80:73:bb:9c:ea:84:ef:10:50:84:09:d3:de:53:6a:1b:b1:45: 71:6f:74:22:8a:8a:b6:19:8f:09:7a:92:ca:0d:6b:fd:5a:34: fa:7e:61:c7:fd:e3:f9:a2:02:ef:bb:3b:dd:8e:50:78:a7:ba: c6:a4:58:44:b1:31:e7:e9:0d:bd:39:33:b6:97:c8:24:44:16: b7:4c:44:24:79:0d:2b:0d:43:a9:80:84:d4:70:ff:2b:12:f2: b8:85:88:41:b5:cf:73:7d:dc:a3:f1:66:ac:88:00:db:3a:76: e8:51:9a:08:a4:6a:1c:ab:98:f2:b1:9f:dd:8c:3a:99:21:32: f9:dc:5f:97:7b:5f:0a:a9:1b:a4:fe:2f:09:5f:5e:a7:95:1e: 39:51:a8:4a:30:3c:43:05:f7:2b:00:f9:8c:71:fa:10:c5:0c: 44:b0:be:d6:18:50:85:fc:10:c2:ef:1c:4f:80:c0:56:91:34: b4:22:23:bb:c9:fc:95:e5:d3:7d:35:29:26:06:b5:ba:b7:82: f4:fe:26:5e:b4:ef:39:cd:2a:0a:78:56:77:32:b8:45:52:27: e2:99:4e:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWV2HURhsYYj7YmmNxqccGdFBAyQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDAxOEJGNDM3OTNGNTYxNDVCODcyMzNERDY2OERFM0JE RUVGRkUxMzAeFw0yNTA2MTMyMjE2MTNaFw0yNTA2MTcwMTA1MTNaMDMxMTAvBgNV BAMTKEUxREI0RUIyRkI5MjU0MEQ0QTk5MDdFRTNFNEU5MDE2REU4RUFBNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMPuq9yfX6PnTLIMAM+dsnlVvL lVUd31bFjbj+nD37vIpymwuBhHUfqJ1NribLaCstywqfY8m+uVJr+QQ0c6JHJUvT n3yH8jQ8FfQc5XRoLbadQJBiG8/ewMGY/13QL6LarM8fPzzxD6XLRgP/cDTW9CZY mjFySZrPg4/HVw7DAFvKrerUCvR//tOTUkADQjuL8syFDv3xde2yhjS63hq2lBnZ KY5cpHceLLgtxjU2ZWfZOqaFDdPeiWl6xzlywg8EHQPSOh8M69Qz2IjSao9lFQig gAJ56I1dKymzR20PoEGXnWRnQfWvjvY4JsVotUZuANSVbaldaJ8O3NlrhAfZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4dtOsvuSVA1KmQfuPk6QFt6OqmEwHwYDVR0j BBgwFoAU0Bi/Q3k/VhRbhyM91mjeO97v/hMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWFkMzE0YS03NjU3LTQ5MDEtYjdkZC0zYjlhOWJmYzZlOWMvMC9EMDE4QkY0Mzc5 M0Y1NjE0NUI4NzIzM0RENjY4REUzQkRFRUZGRTEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDAxOEJGNDM3OTNGNTYxNDVCODcyMzNERDY2OERFM0JERUVG RkUxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODlhZDMxNGEtNzY1Ny00OTAxLWI3 ZGQtM2I5YTliZmM2ZTljLzAvRDAxOEJGNDM3OTNGNTYxNDVCODcyMzNERDY2OERF M0JERUVGRkUxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJfSWMvLjLVfLgdUolTo33wB7tE3W5ML3N6L n7k8gS69X5rqpIBzu5zqhO8QUIQJ095TahuxRXFvdCKKirYZjwl6ksoNa/1aNPp+ Ycf94/miAu+7O92OUHinusakWESxMefpDb05M7aXyCREFrdMRCR5DSsNQ6mAhNRw /ysS8riFiEG1z3N93KPxZqyIANs6duhRmgikahyrmPKxn92MOpkhMvncX5d7Xwqp G6T+LwlfXqeVHjlRqEowPEMF9ysA+Yxx+hDFDESwvtYYUIX8EMLvHE+AwFaRNLQi I7vJ/JXl0301KSYGtbq3gvT+Jl607znNKgp4VncyuEVSJ+KZTmA= -----END CERTIFICATE-----Generated at Sun Jun 15 17:19:13 2025 by rpki-client