$ rpki-client -vvf repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.mft File: 9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.mft (raw, json) Hash identifier: +pz2l/P1AsCGTdNa8yMMgaGtA8RzxXkVqOotw3Qirrs= Subject key identifier: DA:8F:C1:2F:D7:5C:3D:AF:97:6D:D3:4A:F1:5D:F8:BD:4C:4C:EF:66 Authority key identifier: 9F:5F:18:EC:02:2F:5E:04:65:72:CD:5F:5C:C4:21:FA:9D:AF:FA:EA Certificate issuer: /CN=9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA Certificate serial: 7D063E0AD429573EA00B20FB7B580FA53E5059E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.mft Manifest number: 4D Signing time: Sat 14 Jun 2025 22:50:03 +0000 Manifest this update: Sat 14 Jun 2025 22:45:03 +0000 Manifest next update: Wed 18 Jun 2025 10:36:03 +0000 Files and hashes: 1: 9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.crl (hash: U63M2PQsv5oC/nskOvFkdNFy3sf0Kr2Mv7ugnGtOs8A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.crl rsync://repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 10:36:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:06:3e:0a:d4:29:57:3e:a0:0b:20:fb:7b:58:0f:a5:3e:50:59:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA Validity Not Before: Jun 14 22:45:03 2025 GMT Not After : Jun 18 10:36:03 2025 GMT Subject: CN=DA8FC12FD75C3DAF976DD34AF15DF8BD4C4CEF66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0d:5a:57:8b:dc:d2:90:e5:93:8d:a0:33:12: 7a:b0:1c:5a:7a:c3:7d:4d:49:a8:8f:a2:64:d1:fe: 87:58:4b:aa:64:b1:27:0a:c4:1e:42:24:cd:3c:6a: 98:13:a8:b9:26:f9:9f:d8:da:05:f9:56:75:5f:68: aa:75:29:8e:20:49:ad:65:85:0b:b6:64:45:a1:da: 98:04:a6:9f:98:ee:0d:06:57:23:8b:aa:c3:04:80: b2:0e:61:58:50:f3:fe:78:f7:f7:70:36:cc:1e:e2: f2:64:4b:75:5e:70:d0:52:17:85:b6:75:e7:de:36: 47:06:20:61:6b:f4:6d:92:4c:eb:bf:e8:cc:46:69: de:fe:a0:da:67:2a:15:e9:3d:87:c8:d3:56:a9:97: 6f:bb:9b:96:4e:f0:fe:b7:4a:98:21:21:44:a8:d3: 0b:3d:30:9c:5f:4f:59:4e:43:be:bb:d0:46:a8:e0: e2:be:e2:e2:3c:77:c8:5c:a0:1e:86:9f:53:6b:29: 0e:45:30:b0:e5:86:9f:01:23:fc:02:19:4e:a7:0e: 5f:d5:d4:25:4b:fb:b7:d7:cb:f2:b6:01:b5:f7:e9: bc:0a:29:4b:56:74:07:71:3f:f6:e5:2d:80:c0:89: 37:6d:0a:c8:2b:fe:c0:bf:ad:2c:25:39:43:c7:68: a6:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:8F:C1:2F:D7:5C:3D:AF:97:6D:D3:4A:F1:5D:F8:BD:4C:4C:EF:66 X509v3 Authority Key Identifier: keyid:9F:5F:18:EC:02:2F:5E:04:65:72:CD:5F:5C:C4:21:FA:9D:AF:FA:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:27:57:ad:1e:cd:9d:3e:7e:dd:7d:9a:fc:3a:a8:93:20:3a: ac:fa:4a:5a:c9:dd:e0:fe:67:15:a7:c7:71:a4:88:57:6e:ff: 76:9c:c5:7e:9d:9b:d9:53:2c:3a:f7:0a:e5:28:7d:df:62:d4: 3c:8d:28:08:a0:8d:9b:57:92:cd:65:53:ce:30:50:f9:2b:46: e5:c6:6b:b1:ea:b5:ed:ae:66:d4:3e:19:17:17:4c:d0:a1:cc: 41:42:94:69:bb:18:f6:0a:71:ae:fe:be:6a:f1:46:82:33:4e: f0:ff:90:aa:22:51:5e:52:01:da:93:61:83:32:69:91:7f:18: ad:89:d3:90:34:45:25:9d:6b:83:52:6a:ea:a5:99:20:35:2e: 19:3e:5f:4f:eb:52:fb:7c:c4:ed:7e:e1:c7:da:69:19:1d:37: f7:ed:65:17:f0:ea:10:15:c6:84:1a:b6:1a:9e:a8:94:d6:8c: 06:4a:46:59:ab:e0:89:8b:49:0c:1d:d7:cf:e8:36:9e:6b:86: 02:71:5f:ea:bd:28:06:55:fb:db:4b:68:cb:9a:3d:0c:ec:50: f7:16:6e:32:e2:c1:b5:fa:4a:77:fe:1a:41:d3:28:19:3e:43: c7:59:65:14:b2:29:67:4c:5e:09:77:09:1a:d5:07:63:85:16: dd:17:cd:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfQY+CtQpVz6gCyD7e1gPpT5QWegwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY1RjE4RUMwMjJGNUUwNDY1NzJDRDVGNUNDNDIxRkE5 REFGRkFFQTAeFw0yNTA2MTQyMjQ1MDNaFw0yNTA2MTgxMDM2MDNaMDMxMTAvBgNV BAMTKERBOEZDMTJGRDc1QzNEQUY5NzZERDM0QUYxNURGOEJENEM0Q0VGNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4DVpXi9zSkOWTjaAzEnqwHFp6 w31NSaiPomTR/odYS6pksScKxB5CJM08apgTqLkm+Z/Y2gX5VnVfaKp1KY4gSa1l hQu2ZEWh2pgEpp+Y7g0GVyOLqsMEgLIOYVhQ8/549/dwNswe4vJkS3VecNBSF4W2 defeNkcGIGFr9G2STOu/6MxGad7+oNpnKhXpPYfI01apl2+7m5ZO8P63SpghIUSo 0ws9MJxfT1lOQ7670Eao4OK+4uI8d8hcoB6Gn1NrKQ5FMLDlhp8BI/wCGU6nDl/V 1CVL+7fXy/K2AbX36bwKKUtWdAdxP/blLYDAiTdtCsgr/sC/rSwlOUPHaKbjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2o/BL9dcPa+XbdNK8V34vUxM72YwHwYDVR0j BBgwFoAUn18Y7AIvXgRlcs1fXMQh+p2v+uowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MmFlNWUyMS0wOGNjLTRjYTQtYjk5Yy01ZmY1YTBkNDY0OTAvMC85RjVGMThFQzAy MkY1RTA0NjU3MkNENUY1Q0M0MjFGQTlEQUZGQUVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY1RjE4RUMwMjJGNUUwNDY1NzJDRDVGNUNDNDIxRkE5REFG RkFFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjJhZTVlMjEtMDhjYy00Y2E0LWI5 OWMtNWZmNWEwZDQ2NDkwLzAvOUY1RjE4RUMwMjJGNUUwNDY1NzJDRDVGNUNDNDIx RkE5REFGRkFFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAAnV60ezZ0+ft19mvw6qJMgOqz6SlrJ3eD+ ZxWnx3GkiFdu/3acxX6dm9lTLDr3CuUofd9i1DyNKAigjZtXks1lU84wUPkrRuXG a7Hqte2uZtQ+GRcXTNChzEFClGm7GPYKca7+vmrxRoIzTvD/kKoiUV5SAdqTYYMy aZF/GK2J05A0RSWda4NSauqlmSA1Lhk+X0/rUvt8xO1+4cfaaRkdN/ftZRfw6hAV xoQathqeqJTWjAZKRlmr4ImLSQwd18/oNp5rhgJxX+q9KAZV+9tLaMuaPQzsUPcW bjLiwbX6Snf+GkHTKBk+Q8dZZRSyKWdMXgl3CRrVB2OFFt0XzaI= -----END CERTIFICATE-----Generated at Mon Jun 16 15:40:09 2025 by rpki-client