$ rpki-client -vvf repo-rpki.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.mft File: 2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.mft (raw, json) Hash identifier: hcaX+b8Kd0YqXTnq8QU2xf68364OSxG649H4SiIDhEQ= Subject key identifier: 6A:37:24:6C:98:B7:2E:2F:A9:6D:19:3B:1C:D3:88:F0:66:D6:4D:B0 Authority key identifier: 26:64:CB:E1:0F:2B:9F:F1:BE:C5:0A:6A:85:DC:7A:A5:2B:9F:17:FA Certificate issuer: /CN=2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA Certificate serial: 71BB78595C8005BE564525451E4BE98A238DB6E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.mft Manifest number: 0390 Signing time: Sun 15 Jun 2025 22:22:11 +0000 Manifest this update: Sun 15 Jun 2025 22:17:11 +0000 Manifest next update: Thu 19 Jun 2025 02:16:11 +0000 Files and hashes: 1: 2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.crl (hash: woj1i9jthgR1jYtQiLySWUCZm7xJRR2Q1zF2mBLpRmc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.crl rsync://repo-rpki.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 02:16:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:bb:78:59:5c:80:05:be:56:45:25:45:1e:4b:e9:8a:23:8d:b6:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA Validity Not Before: Jun 15 22:17:11 2025 GMT Not After : Jun 19 02:16:11 2025 GMT Subject: CN=6A37246C98B72E2FA96D193B1CD388F066D64DB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f9:42:00:44:cd:70:b2:fb:85:9c:54:52:ca: 1e:c3:99:36:16:3e:ea:85:d6:94:91:1b:49:4d:76: 69:d8:55:33:71:21:37:07:5c:6c:81:e7:57:15:8a: 73:80:83:c3:cb:65:a7:e8:0a:1b:a4:71:c6:2c:52: 3e:2d:89:d9:0a:69:2c:14:a7:48:14:f9:0d:c9:6e: 37:4e:69:1d:f2:73:84:73:63:be:53:01:28:89:39: 07:81:c9:28:0d:ce:52:9f:2f:6d:ba:45:39:5e:c9: bd:6e:16:d9:9d:c4:f2:d6:2b:9f:a1:69:44:fe:36: ab:ff:79:6a:5d:b2:31:26:dd:b8:a3:26:c7:5e:90: 14:cd:e4:3f:76:73:fd:09:65:94:e7:f0:4f:86:ba: 6c:9b:70:32:9a:9f:cb:09:d6:65:aa:14:99:6f:df: c7:17:06:a7:d3:4f:9d:96:34:74:7b:68:52:71:1f: e3:8c:11:b7:ac:5e:b2:bf:44:d4:83:62:21:15:07: 3b:da:d8:4b:6f:b4:8d:07:9c:cb:b1:34:af:0a:67: 4f:45:b4:7e:fa:ce:4f:1a:7d:88:6b:64:41:c5:53: 3a:be:f4:48:80:73:68:d9:07:58:2b:6d:42:1f:0c: 3a:7a:99:47:29:cb:b6:26:7b:20:a7:0b:12:f6:90: a2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:37:24:6C:98:B7:2E:2F:A9:6D:19:3B:1C:D3:88:F0:66:D6:4D:B0 X509v3 Authority Key Identifier: keyid:26:64:CB:E1:0F:2B:9F:F1:BE:C5:0A:6A:85:DC:7A:A5:2B:9F:17:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:a3:43:f5:fc:37:3a:5f:59:65:d6:1b:c6:d3:39:0e:72:04: 21:f5:2a:c3:ed:3d:79:aa:59:61:d8:bc:8b:4d:60:f9:9f:d0: 85:e1:0f:02:ca:ba:12:57:79:5c:23:a1:2d:c8:99:3d:58:b0: 4a:c2:ae:30:bd:6d:97:70:2f:46:45:61:ce:4f:df:17:69:b7: 5d:17:3e:9c:6c:79:6e:59:49:fb:d2:97:c0:bb:5b:5f:8c:df: d7:dc:48:fd:e1:ac:7c:bd:2a:85:c4:74:c6:5d:7e:15:4a:90: 74:c8:39:06:9c:67:62:5f:df:6c:c5:1f:79:42:32:07:d7:df: ce:ac:7c:17:11:fb:c8:0d:8b:85:65:c3:95:7d:ef:df:89:e6: 3e:6e:be:36:2e:30:7d:68:b7:88:c9:b5:ad:de:85:05:04:93: 09:f9:ac:86:78:94:2f:18:36:db:d2:bd:c9:48:bb:4c:b9:97: ca:91:35:0f:d1:ae:bd:3e:3c:8b:01:ea:7c:e3:bd:3a:94:ca: 06:a9:63:ae:95:60:eb:81:da:0d:18:d4:2b:43:23:68:0f:e6: e9:b3:5d:28:f4:b8:10:83:37:bc:07:fa:c7:82:fb:23:86:50: 82:c7:1f:9b:98:b8:b2:8e:1d:21:75:ca:92:21:6c:36:9d:a7: 01:c0:71:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcbt4WVyABb5WRSVFHkvpiiONtuEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjY2NENCRTEwRjJCOUZGMUJFQzUwQTZBODVEQzdBQTUy QjlGMTdGQTAeFw0yNTA2MTUyMjE3MTFaFw0yNTA2MTkwMjE2MTFaMDMxMTAvBgNV BAMTKDZBMzcyNDZDOThCNzJFMkZBOTZEMTkzQjFDRDM4OEYwNjZENjREQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF+UIARM1wsvuFnFRSyh7DmTYW PuqF1pSRG0lNdmnYVTNxITcHXGyB51cVinOAg8PLZafoChukccYsUj4tidkKaSwU p0gU+Q3JbjdOaR3yc4RzY75TASiJOQeBySgNzlKfL226RTleyb1uFtmdxPLWK5+h aUT+Nqv/eWpdsjEm3bijJsdekBTN5D92c/0JZZTn8E+GumybcDKan8sJ1mWqFJlv 38cXBqfTT52WNHR7aFJxH+OMEbesXrK/RNSDYiEVBzva2EtvtI0HnMuxNK8KZ09F tH76zk8afYhrZEHFUzq+9EiAc2jZB1grbUIfDDp6mUcpy7YmeyCnCxL2kKKdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUajckbJi3Li+pbRk7HNOI8GbWTbAwHwYDVR0j BBgwFoAUJmTL4Q8rn/G+xQpqhdx6pSufF/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Y2YzYzIxMS0wNjQ1LTQ4ODItYTRmMS00NmJlODY3Yjc5ODMvMC8yNjY0Q0JFMTBG MkI5RkYxQkVDNTBBNkE4NURDN0FBNTJCOUYxN0ZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjY2NENCRTEwRjJCOUZGMUJFQzUwQTZBODVEQzdBQTUyQjlG MTdGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGNmM2MyMTEtMDY0NS00ODgyLWE0 ZjEtNDZiZTg2N2I3OTgzLzAvMjY2NENCRTEwRjJCOUZGMUJFQzUwQTZBODVEQzdB QTUyQjlGMTdGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ+jQ/X8NzpfWWXWG8bTOQ5yBCH1KsPtPXmq WWHYvItNYPmf0IXhDwLKuhJXeVwjoS3ImT1YsErCrjC9bZdwL0ZFYc5P3xdpt10X PpxseW5ZSfvSl8C7W1+M39fcSP3hrHy9KoXEdMZdfhVKkHTIOQacZ2Jf32zFH3lC MgfX386sfBcR+8gNi4Vlw5V979+J5j5uvjYuMH1ot4jJta3ehQUEkwn5rIZ4lC8Y NtvSvclIu0y5l8qRNQ/Rrr0+PIsB6nzjvTqUygapY66VYOuB2g0Y1CtDI2gP5umz XSj0uBCDN7wH+seC+yOGUILHH5uYuLKOHSF1ypIhbDadpwHAcVg= -----END CERTIFICATE-----Generated at Tue Jun 17 19:12:16 2025 by rpki-client