$ rpki-client -vvf repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.mft File: 2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.mft (raw, json) Hash identifier: /cC5xmjNAHstfwC5Q6EhJw6q6MT+EHpme+E2aWnwNxk= Subject key identifier: 14:D5:BC:29:F8:0D:32:58:C9:F1:37:B2:6F:2F:BA:BA:15:7A:03:99 Authority key identifier: 25:66:F4:DF:5C:09:FF:A8:E4:F4:D6:99:99:41:B9:AB:A2:B7:22:8B Certificate issuer: /CN=2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B Certificate serial: 1F3F6B017FC86B984ECF73A30A9712094C28D77E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.mft Manifest number: E4 Signing time: Fri 13 Jun 2025 23:21:59 +0000 Manifest this update: Fri 13 Jun 2025 23:16:59 +0000 Manifest next update: Tue 17 Jun 2025 10:55:59 +0000 Files and hashes: 1: 2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.crl (hash: 0rpsL2WaUZQMExYNQooI8ksVD5EF107n9t23h5v+BIw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.crl rsync://repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 10:55:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:3f:6b:01:7f:c8:6b:98:4e:cf:73:a3:0a:97:12:09:4c:28:d7:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B Validity Not Before: Jun 13 23:16:59 2025 GMT Not After : Jun 17 10:55:59 2025 GMT Subject: CN=14D5BC29F80D3258C9F137B26F2FBABA157A0399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b6:b9:99:78:8f:40:1d:21:fe:32:75:68:76: bc:c5:09:9b:90:74:f9:97:26:b6:78:c4:b0:44:53: c7:84:84:ce:cf:c4:13:a5:ea:ca:69:88:4b:8b:31: f1:7f:1b:57:83:29:76:7f:00:ea:0f:93:0f:0c:a1: 42:9c:1a:11:be:56:0c:b8:c0:ef:a8:d4:46:d6:38: d4:70:75:b0:dd:37:6d:37:88:47:8a:6c:07:54:04: 45:0e:31:fa:f9:10:c6:dd:38:06:97:8a:43:d2:19: 72:14:e8:b5:55:d2:3b:16:19:73:2e:14:e6:03:06: 9f:7a:cb:fc:db:13:24:8b:12:61:80:58:20:64:dc: 51:ba:01:ae:e4:e3:2f:92:77:db:ee:fa:81:ba:4b: 87:3f:ff:04:5a:fc:62:8e:b4:cc:d7:72:7a:c6:af: 0b:7b:8f:54:84:76:8c:86:4b:60:dd:97:c6:6f:32: 2b:c1:b2:b5:45:6d:4d:52:f8:78:ae:3c:95:e1:e0: 6f:90:17:1d:47:a8:3c:63:32:d7:b8:5f:dc:43:91: f7:26:87:12:4d:e4:0c:71:85:6d:87:1c:af:2d:0a: 08:8e:8a:0a:3a:92:63:bc:26:f2:6c:1d:72:dc:4e: 30:57:18:c3:2c:fd:63:a9:74:2a:a9:56:c6:95:bd: bd:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:D5:BC:29:F8:0D:32:58:C9:F1:37:B2:6F:2F:BA:BA:15:7A:03:99 X509v3 Authority Key Identifier: keyid:25:66:F4:DF:5C:09:FF:A8:E4:F4:D6:99:99:41:B9:AB:A2:B7:22:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:3c:b6:20:3f:e0:82:fb:c5:8b:2f:79:ec:f6:ca:60:ea:c4: 38:95:4e:7d:0e:e8:5a:97:e4:6d:ec:4d:72:1b:2a:81:24:f3: d3:36:d5:85:fe:da:e1:55:58:10:2d:4c:18:e6:4b:42:a3:64: 9c:49:e2:87:d7:99:65:ef:03:a1:23:ef:3e:95:12:58:19:f8: 1f:5d:17:4f:96:2b:1d:fc:bc:ef:a4:6b:75:0b:3a:6c:7c:d4: a7:5e:6a:83:ae:26:14:dd:01:f2:09:48:3c:b2:83:a1:48:26: 3a:a2:c2:79:6b:fe:16:fa:59:86:a7:b8:16:27:05:a3:3a:1d: fe:8c:71:26:e4:e5:ce:10:91:0b:c7:d1:b1:37:81:d7:27:17: 05:e4:53:01:f8:81:79:e3:7b:6f:fd:34:c7:53:84:ec:0d:29: ff:31:be:bc:26:fe:29:e1:5a:36:43:db:ad:f1:b4:15:38:b1: fd:6f:b7:5d:a1:c9:90:cb:bb:29:30:cd:82:99:10:bb:63:4d: 34:2d:9c:42:95:bd:49:36:10:41:08:1c:4c:cf:5f:45:8e:7a: 32:c2:e4:a7:7d:25:15:67:8d:72:4c:56:85:92:7d:42:5e:ed: 0d:96:1e:a1:34:8b:6c:ff:a0:c7:49:b4:5d:bf:10:92:e8:dd: 7d:a8:0a:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHz9rAX/Ia5hOz3OjCpcSCUwo134wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU2NkY0REY1QzA5RkZBOEU0RjRENjk5OTk0MUI5QUJB MkI3MjI4QjAeFw0yNTA2MTMyMzE2NTlaFw0yNTA2MTcxMDU1NTlaMDMxMTAvBgNV BAMTKDE0RDVCQzI5RjgwRDMyNThDOUYxMzdCMjZGMkZCQUJBMTU3QTAzOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCatrmZeI9AHSH+MnVodrzFCZuQ dPmXJrZ4xLBEU8eEhM7PxBOl6sppiEuLMfF/G1eDKXZ/AOoPkw8MoUKcGhG+Vgy4 wO+o1EbWONRwdbDdN203iEeKbAdUBEUOMfr5EMbdOAaXikPSGXIU6LVV0jsWGXMu FOYDBp96y/zbEySLEmGAWCBk3FG6Aa7k4y+Sd9vu+oG6S4c//wRa/GKOtMzXcnrG rwt7j1SEdoyGS2Ddl8ZvMivBsrVFbU1S+HiuPJXh4G+QFx1HqDxjMte4X9xDkfcm hxJN5AxxhW2HHK8tCgiOigo6kmO8JvJsHXLcTjBXGMMs/WOpdCqpVsaVvb1/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFNW8KfgNMljJ8Teyby+6uhV6A5kwHwYDVR0j BBgwFoAUJWb031wJ/6jk9NaZmUG5q6K3IoswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTE2NDExZi03OGNhLTQ5MTYtODkxOS0zN2MxZDk5ZWZiZDgvMC8yNTY2RjRERjVD MDlGRkE4RTRGNEQ2OTk5OTQxQjlBQkEyQjcyMjhCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjU2NkY0REY1QzA5RkZBOEU0RjRENjk5OTk0MUI5QUJBMkI3 MjI4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkxNjQxMWYtNzhjYS00OTE2LTg5 MTktMzdjMWQ5OWVmYmQ4LzAvMjU2NkY0REY1QzA5RkZBOEU0RjRENjk5OTk0MUI5 QUJBMkI3MjI4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHo8tiA/4IL7xYsveez2ymDqxDiVTn0O6FqX 5G3sTXIbKoEk89M21YX+2uFVWBAtTBjmS0KjZJxJ4ofXmWXvA6Ej7z6VElgZ+B9d F0+WKx38vO+ka3ULOmx81KdeaoOuJhTdAfIJSDyyg6FIJjqiwnlr/hb6WYanuBYn BaM6Hf6McSbk5c4QkQvH0bE3gdcnFwXkUwH4gXnje2/9NMdThOwNKf8xvrwm/inh WjZD263xtBU4sf1vt12hyZDLuykwzYKZELtjTTQtnEKVvUk2EEEIHEzPX0WOejLC 5Kd9JRVnjXJMVoWSfUJe7Q2WHqE0i2z/oMdJtF2/EJLo3X2oChA= -----END CERTIFICATE-----Generated at Mon Jun 16 04:19:33 2025 by rpki-client