$ rpki-client -vvf repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft File: 9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft (raw, json) Hash identifier: AbknR7hoO+p83ba3iA5cFyb+V9ZRlIGAtByB+y/kyJU= Subject key identifier: A5:49:A6:E5:B2:95:35:75:28:BB:DD:69:6F:54:36:1C:A6:AB:E6:B5 Authority key identifier: 94:79:B8:C5:D5:AE:8F:AB:DC:57:A9:AB:54:9A:DD:E2:0B:E8:A4:B3 Certificate issuer: /CN=9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3 Certificate serial: 118001A118694CA452B96CA33E4BC89F64E46E09 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft Manifest number: 01CA Signing time: Sat 14 Jun 2025 12:32:01 +0000 Manifest this update: Sat 14 Jun 2025 12:27:01 +0000 Manifest next update: Tue 17 Jun 2025 15:53:01 +0000 Files and hashes: 1: 9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.crl (hash: P4jcCNmndiCjWOEO4vcqBdVHmKYw/OEwuIhAgPlQJ9s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.crl rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 15:53:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:80:01:a1:18:69:4c:a4:52:b9:6c:a3:3e:4b:c8:9f:64:e4:6e:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3 Validity Not Before: Jun 14 12:27:01 2025 GMT Not After : Jun 17 15:53:01 2025 GMT Subject: CN=A549A6E5B295357528BBDD696F54361CA6ABE6B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ce:5d:9e:96:a0:df:f7:6e:03:f2:d9:10:11: b7:d0:55:58:28:03:46:e3:a9:49:b6:5b:94:e7:40: 7b:8f:8c:cf:96:47:f7:e4:dd:29:b5:b1:8e:62:76: d5:84:23:64:18:42:78:4a:03:64:49:08:32:73:c5: 51:0c:bb:1f:fd:bc:c3:1e:81:4c:8e:2f:7b:35:1f: 9b:bf:79:39:d1:9c:cc:4e:3f:4a:b8:42:c2:a6:90: 17:22:18:67:ec:ae:ad:cc:64:87:51:a9:d5:63:e2: a3:61:7d:48:14:d3:98:e7:83:4a:49:2f:60:08:07: 45:7a:aa:51:8c:19:39:e6:14:c4:e3:19:7d:b5:e3: eb:e4:2d:16:0b:d8:2b:77:5a:54:fe:9b:4a:fa:e8: 19:94:16:22:6b:de:df:53:a9:d6:7e:e4:bd:0e:0b: dc:19:ea:75:b3:84:77:ab:63:a9:fa:32:69:fc:b8: 4e:25:66:84:44:33:fc:09:67:41:ac:67:be:81:74: 1a:9e:89:47:a1:ac:e2:64:b3:5e:4d:3a:c7:2d:a5: f7:0f:7c:59:41:9f:34:38:ab:9e:c1:0d:4c:27:53: 20:2e:ec:f6:9f:cf:fa:16:7c:a9:eb:c5:47:9c:61: 2c:dd:66:2d:5e:8a:b6:52:43:36:52:30:e7:dd:a8: 02:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:49:A6:E5:B2:95:35:75:28:BB:DD:69:6F:54:36:1C:A6:AB:E6:B5 X509v3 Authority Key Identifier: keyid:94:79:B8:C5:D5:AE:8F:AB:DC:57:A9:AB:54:9A:DD:E2:0B:E8:A4:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:d8:0b:51:00:01:50:af:56:26:a2:9a:a0:ac:a2:00:55:5e: 70:93:8c:4c:4b:3c:a1:ed:ee:45:cd:f1:d1:a0:e8:b5:ca:f0: b0:c9:85:0b:9c:4e:6b:33:c9:d3:e3:57:42:a2:10:d6:4a:76: 75:fe:dc:54:9d:7e:dc:bb:0a:0f:56:f2:78:61:a5:ad:94:4d: bf:21:a8:d0:aa:64:ef:1f:f5:fb:0c:9a:90:9f:74:2a:aa:b4: e0:de:24:da:ba:8d:4b:55:2f:07:04:a2:e8:81:73:a6:d6:da: 5b:54:49:7c:a0:fe:8b:8a:10:a6:18:78:0d:cd:6d:9f:8b:1c: 3e:47:e6:84:0a:c2:c7:a2:85:81:8a:e3:6d:93:03:d9:a6:3a: 24:60:e0:df:c0:12:c6:8c:83:ca:0a:83:cc:99:79:d9:10:46: e4:22:08:f2:bd:3b:44:14:4e:6d:60:41:b5:e6:86:8b:c4:a1: f9:db:a0:98:9b:23:b9:7e:1d:af:7a:b1:ed:ea:fa:48:11:a3: 15:17:f2:71:11:05:37:78:43:f4:e4:35:16:fd:43:6a:dc:46: 82:20:95:37:df:c2:e7:dc:e3:42:aa:26:cf:4b:39:58:a3:25: 28:4f:54:de:a8:1e:29:fa:1e:c3:8f:fc:2f:27:30:2c:65:08: ca:d9:a8:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEYABoRhpTKRSuWyjPkvIn2TkbgkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ3OUI4QzVENUFFOEZBQkRDNTdBOUFCNTQ5QURERTIw QkU4QTRCMzAeFw0yNTA2MTQxMjI3MDFaFw0yNTA2MTcxNTUzMDFaMDMxMTAvBgNV BAMTKEE1NDlBNkU1QjI5NTM1NzUyOEJCREQ2OTZGNTQzNjFDQTZBQkU2QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOzl2elqDf924D8tkQEbfQVVgo A0bjqUm2W5TnQHuPjM+WR/fk3Sm1sY5idtWEI2QYQnhKA2RJCDJzxVEMux/9vMMe gUyOL3s1H5u/eTnRnMxOP0q4QsKmkBciGGfsrq3MZIdRqdVj4qNhfUgU05jng0pJ L2AIB0V6qlGMGTnmFMTjGX214+vkLRYL2Ct3WlT+m0r66BmUFiJr3t9TqdZ+5L0O C9wZ6nWzhHerY6n6Mmn8uE4lZoREM/wJZ0GsZ76BdBqeiUehrOJks15NOsctpfcP fFlBnzQ4q57BDUwnUyAu7Pafz/oWfKnrxUecYSzdZi1eirZSQzZSMOfdqAK3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpUmm5bKVNXUou91pb1Q2HKar5rUwHwYDVR0j BBgwFoAUlHm4xdWuj6vcV6mrVJrd4gvopLMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTBhYTE1OC02NTgxLTRjYmUtYjZjZS1kODcyMWM3MTlmYTAvMC85NDc5QjhDNUQ1 QUU4RkFCREM1N0E5QUI1NDlBRERFMjBCRThBNEIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTQ3OUI4QzVENUFFOEZBQkRDNTdBOUFCNTQ5QURERTIwQkU4 QTRCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTkwYWExNTgtNjU4MS00Y2JlLWI2 Y2UtZDg3MjFjNzE5ZmEwLzAvOTQ3OUI4QzVENUFFOEZBQkRDNTdBOUFCNTQ5QURE RTIwQkU4QTRCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEbYC1EAAVCvViaimqCsogBVXnCTjExLPKHt 7kXN8dGg6LXK8LDJhQucTmszydPjV0KiENZKdnX+3FSdfty7Cg9W8nhhpa2UTb8h qNCqZO8f9fsMmpCfdCqqtODeJNq6jUtVLwcEouiBc6bW2ltUSXyg/ouKEKYYeA3N bZ+LHD5H5oQKwseihYGK422TA9mmOiRg4N/AEsaMg8oKg8yZedkQRuQiCPK9O0QU Tm1gQbXmhovEofnboJibI7l+Ha96se3q+kgRoxUX8nERBTd4Q/TkNRb9Q2rcRoIg lTffwufc40KqJs9LOVijJShPVN6oHin6HsOP/C8nMCxlCMrZqDQ= -----END CERTIFICATE-----Generated at Sun Jun 15 16:45:30 2025 by rpki-client