$ rpki-client -vvf repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.mft File: C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.mft (raw, json) Hash identifier: aAN1g30pONB8NuQK7iHl4BagYcyti0Rcc6dFbd0GqLA= Subject key identifier: 90:1C:0F:33:55:C4:A7:EF:95:3A:E6:38:E1:2A:80:7D:FC:0F:23:5B Authority key identifier: C4:47:AF:C4:54:7D:CF:16:A2:4E:96:FF:B3:A2:FD:98:CA:42:79:6A Certificate issuer: /CN=C447AFC4547DCF16A24E96FFB3A2FD98CA42796A Certificate serial: 08ED5C6FA645011E469C9B719F021B929B357A57 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.mft Manifest number: A1 Signing time: Fri 13 Jun 2025 20:01:23 +0000 Manifest this update: Fri 13 Jun 2025 19:56:23 +0000 Manifest next update: Tue 17 Jun 2025 07:12:23 +0000 Files and hashes: 1: C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.crl (hash: XXPEnOGv5e2f4wBodu1Vy4pbhQ7+yIJ1Rd6bMa9EJ0Q=) 2: 3130332e3138362e3139322e302f32342d3234203d3e20313439393238.roa (hash: t+CPpE2TC/5JImEcRiXdAKKegyxY7qwMPfKY4AYQh6I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.crl rsync://repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 07:12:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:ed:5c:6f:a6:45:01:1e:46:9c:9b:71:9f:02:1b:92:9b:35:7a:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C447AFC4547DCF16A24E96FFB3A2FD98CA42796A Validity Not Before: Jun 13 19:56:23 2025 GMT Not After : Jun 17 07:12:23 2025 GMT Subject: CN=901C0F3355C4A7EF953AE638E12A807DFC0F235B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:22:82:48:c5:89:f9:df:66:bf:c6:39:43:4b: 8c:d4:9f:19:1d:68:67:07:9e:17:88:1e:9d:b5:65: 12:13:bf:ac:ef:bb:4f:a9:27:35:5e:11:bb:3a:c4: 73:2f:5c:19:c6:93:fe:95:2d:ab:be:d7:07:3e:d0: f6:38:5b:40:08:3b:d2:01:29:4b:2e:b3:a3:16:bd: 12:20:17:3f:3b:03:b4:c2:5d:b5:19:c0:8e:68:8a: 6f:90:af:8c:fa:6d:92:ad:d7:b6:86:1a:59:b2:8b: b3:2b:90:8a:c4:92:bb:ac:95:36:d0:1a:2b:5b:88: 0f:f4:dc:51:57:b4:8d:eb:e6:e9:19:8c:38:ea:60: 1f:b0:7b:ca:86:b1:c6:ca:90:d1:6b:f8:a5:65:4a: af:84:0f:1f:4e:b9:09:95:0b:a8:28:08:94:64:df: 34:39:4d:de:97:87:ed:f7:a7:2f:4b:ac:c7:3d:4a: 96:4a:bc:96:e9:6d:e8:23:f5:19:7b:d9:28:aa:98: 8f:9b:5a:50:79:60:02:d0:53:97:bb:af:09:50:bf: f2:23:ae:4c:8a:2b:a8:74:b1:f0:4f:d0:86:5f:7d: d6:60:9f:9c:fa:fe:75:11:4a:d4:b9:3c:a2:2a:39: bf:85:2c:82:4c:f7:fd:75:b2:99:4a:bd:22:da:dc: b0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:1C:0F:33:55:C4:A7:EF:95:3A:E6:38:E1:2A:80:7D:FC:0F:23:5B X509v3 Authority Key Identifier: keyid:C4:47:AF:C4:54:7D:CF:16:A2:4E:96:FF:B3:A2:FD:98:CA:42:79:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:2e:a3:72:b0:81:3d:6c:86:23:91:f8:26:d2:e1:98:aa:77: e5:fc:3e:ee:b2:e7:a0:b9:49:6a:cd:1f:9a:9d:f5:79:08:49: 03:16:ef:9a:ea:31:1c:31:ac:19:08:28:5a:9e:a8:6b:2d:a4: 62:f6:73:32:70:50:85:92:06:b6:e2:1b:ff:79:f0:e2:d1:4f: d7:1e:5f:a0:ad:f6:0e:d8:b6:c3:cb:7f:59:c5:c5:30:e2:95: a0:64:dd:ff:34:53:22:8b:da:a7:3e:84:2d:d7:12:61:10:61: c3:87:43:e1:fc:7e:39:52:1f:7d:ea:8c:7a:36:ae:fe:7c:4e: 8d:52:69:10:7e:3f:1c:c5:f3:54:0c:a4:b6:07:dd:a5:77:65: f5:61:bd:3d:51:d0:42:2a:e4:e4:2c:f2:6a:d1:15:24:64:af: 99:f9:d4:07:76:28:aa:fa:e4:d3:3b:9e:83:63:85:d1:2b:ed: 0f:13:d6:02:4a:7a:c3:31:87:4e:cf:f4:1f:95:49:1d:ba:4a: 66:d9:b2:7b:02:8c:45:e6:11:06:f6:69:19:d2:a2:63:9a:66: d9:c1:2c:56:23:50:d1:a8:a2:be:d7:27:67:ed:72:fa:fe:81: 76:94:52:db:b7:dc:71:f0:8f:71:a2:a8:85:40:6b:02:86:b2: da:a6:3c:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCO1cb6ZFAR5GnJtxnwIbkps1elcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ0N0FGQzQ1NDdEQ0YxNkEyNEU5NkZGQjNBMkZEOThD QTQyNzk2QTAeFw0yNTA2MTMxOTU2MjNaFw0yNTA2MTcwNzEyMjNaMDMxMTAvBgNV BAMTKDkwMUMwRjMzNTVDNEE3RUY5NTNBRTYzOEUxMkE4MDdERkMwRjIzNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6IoJIxYn532a/xjlDS4zUnxkd aGcHnheIHp21ZRITv6zvu0+pJzVeEbs6xHMvXBnGk/6VLau+1wc+0PY4W0AIO9IB KUsus6MWvRIgFz87A7TCXbUZwI5oim+Qr4z6bZKt17aGGlmyi7MrkIrEkruslTbQ GitbiA/03FFXtI3r5ukZjDjqYB+we8qGscbKkNFr+KVlSq+EDx9OuQmVC6goCJRk 3zQ5Td6Xh+33py9LrMc9SpZKvJbpbegj9Rl72SiqmI+bWlB5YALQU5e7rwlQv/Ij rkyKK6h0sfBP0IZffdZgn5z6/nURStS5PKIqOb+FLIJM9/11splKvSLa3LBXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkBwPM1XEp++VOuY44SqAffwPI1swHwYDVR0j BBgwFoAUxEevxFR9zxaiTpb/s6L9mMpCeWowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzVhOWRkZi1jMTA5LTRmYzEtYTMwZC04ZjA0YjgzMzgxYmUvMC9DNDQ3QUZDNDU0 N0RDRjE2QTI0RTk2RkZCM0EyRkQ5OENBNDI3OTZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzQ0N0FGQzQ1NDdEQ0YxNkEyNEU5NkZGQjNBMkZEOThDQTQy Nzk2QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzM1YTlkZGYtYzEwOS00ZmMxLWEz MGQtOGYwNGI4MzM4MWJlLzAvQzQ0N0FGQzQ1NDdEQ0YxNkEyNEU5NkZGQjNBMkZE OThDQTQyNzk2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALUuo3KwgT1shiOR+CbS4Ziqd+X8Pu6y56C5 SWrNH5qd9XkISQMW75rqMRwxrBkIKFqeqGstpGL2czJwUIWSBrbiG/958OLRT9ce X6Ct9g7YtsPLf1nFxTDilaBk3f80UyKL2qc+hC3XEmEQYcOHQ+H8fjlSH33qjHo2 rv58To1SaRB+PxzF81QMpLYH3aV3ZfVhvT1R0EIq5OQs8mrRFSRkr5n51Ad2KKr6 5NM7noNjhdEr7Q8T1gJKesMxh07P9B+VSR26SmbZsnsCjEXmEQb2aRnSomOaZtnB LFYjUNGoor7XJ2ftcvr+gXaUUtu33HHwj3GiqIVAawKGstqmPIk= -----END CERTIFICATE-----Generated at Sun Jun 15 15:20:13 2025 by rpki-client