$ rpki-client -vvf repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft File: 96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft (raw, json) Hash identifier: xLoP9nyj+acS6y8J9ogc0hSjthvGngOzfDc5vpdLLmE= Subject key identifier: AC:05:63:0D:99:2F:7B:AB:64:98:0F:86:93:30:51:3E:A7:0E:FE:68 Authority key identifier: 96:FB:31:74:E7:1D:4C:E9:BB:1C:57:29:5C:2F:55:E7:46:41:F8:EE Certificate issuer: /CN=96FB3174E71D4CE9BB1C57295C2F55E74641F8EE Certificate serial: 428FD5F48E22F68B70FAF7099A7AE894D9C205C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft Manifest number: 50 Signing time: Sun 15 Jun 2025 01:02:10 +0000 Manifest this update: Sun 15 Jun 2025 00:57:10 +0000 Manifest next update: Wed 18 Jun 2025 01:57:10 +0000 Files and hashes: 1: 96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.crl (hash: KU/0lw/fD4JOxTNYvP1nRQqbZImTLtPlhE6zJnZXeP8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.crl rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 01:57:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:8f:d5:f4:8e:22:f6:8b:70:fa:f7:09:9a:7a:e8:94:d9:c2:05:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96FB3174E71D4CE9BB1C57295C2F55E74641F8EE Validity Not Before: Jun 15 00:57:10 2025 GMT Not After : Jun 18 01:57:10 2025 GMT Subject: CN=AC05630D992F7BAB64980F869330513EA70EFE68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7d:d1:44:1a:3f:04:1b:1c:52:d2:e6:7a:24: ca:10:f0:31:2d:e7:f5:a8:08:d1:32:96:f8:85:8a: a5:22:d7:73:78:29:b2:a5:4a:76:bc:e9:3d:fb:16: 78:27:46:47:51:dc:d2:7b:2d:2b:c2:8b:9b:64:6a: 50:c8:86:0f:3a:7c:d7:c2:bb:46:9c:d4:80:07:d9: 52:0f:07:9b:fa:36:e9:ab:17:d7:3a:e0:fb:0c:42: 7c:98:ff:c9:c8:fb:e6:c2:63:56:63:16:85:6a:ef: 89:30:76:b8:f6:01:4d:d1:60:b7:07:61:10:db:29: 2f:ef:bb:61:64:8d:d5:65:38:a8:8a:21:53:68:b3: ab:c2:5f:48:27:f3:01:f5:60:90:43:07:2a:9f:87: 5d:2c:0b:57:c3:8f:d6:87:ab:12:26:e1:8c:89:02: 5e:8f:f9:e3:ce:91:dc:93:16:ab:5c:dc:71:70:d6: 90:8d:2b:75:41:39:44:3f:19:58:5c:a3:31:08:c2: e1:35:ff:89:00:d4:c6:9e:de:d2:81:bb:65:b6:23: 1e:56:3a:fb:e6:7f:ee:64:ed:de:42:80:39:0a:00: 37:98:12:7b:18:da:0b:f6:bc:c6:9c:63:34:2e:ce: bb:a2:c5:9e:d6:65:d6:e2:64:c4:cd:54:8c:5e:38: c9:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:05:63:0D:99:2F:7B:AB:64:98:0F:86:93:30:51:3E:A7:0E:FE:68 X509v3 Authority Key Identifier: keyid:96:FB:31:74:E7:1D:4C:E9:BB:1C:57:29:5C:2F:55:E7:46:41:F8:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e38f9b6b-027a-4be6-ab02-28d551c39819/0/96FB3174E71D4CE9BB1C57295C2F55E74641F8EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:11:6f:08:b0:85:3c:5a:af:93:8b:5c:fc:bb:88:f5:da:3f: 5b:4c:fa:0d:2e:64:b4:5d:34:3a:70:35:03:b2:c6:e7:f1:d0: 8e:cc:71:90:7b:aa:1d:f3:f3:30:46:11:42:98:e9:fb:cf:40: 73:54:2c:6c:f1:33:e8:c7:de:5e:0a:29:5a:eb:af:b5:62:bb: a7:a7:26:27:7c:70:29:51:27:20:4e:6b:db:42:da:07:7b:4e: f1:58:a2:ac:25:9c:38:b9:a1:31:42:2a:ae:0a:16:2d:b5:f3: 2a:ce:12:fa:99:5f:c3:9d:54:35:c9:a2:8c:95:49:f3:6c:8b: a9:e6:fc:d9:7f:8a:10:5d:b9:39:d3:a2:c9:b0:41:70:c1:30: b4:e6:5c:76:74:54:43:79:f4:2c:46:ef:e5:dd:2c:c3:6b:8c: 2a:48:c8:32:77:aa:ae:9b:37:25:a6:05:86:c0:e8:f4:a5:cb: a9:34:dd:3c:96:84:f4:74:28:d6:ee:9b:c6:9a:bf:85:81:e6: ea:3e:37:d7:a3:1e:fd:a4:ce:4d:95:c2:9d:f2:ff:57:8e:81: 4b:71:7f:7d:99:1a:09:8c:74:59:ce:01:15:bd:b0:34:55:2a: fa:f0:9e:81:9f:6c:b0:cf:af:38:54:1b:bf:0d:af:a3:1a:cf: 4b:f7:0b:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQo/V9I4i9otw+vcJmnrolNnCBcYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZGQjMxNzRFNzFENENFOUJCMUM1NzI5NUMyRjU1RTc0 NjQxRjhFRTAeFw0yNTA2MTUwMDU3MTBaFw0yNTA2MTgwMTU3MTBaMDMxMTAvBgNV BAMTKEFDMDU2MzBEOTkyRjdCQUI2NDk4MEY4NjkzMzA1MTNFQTcwRUZFNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCifdFEGj8EGxxS0uZ6JMoQ8DEt 5/WoCNEylviFiqUi13N4KbKlSna86T37FngnRkdR3NJ7LSvCi5tkalDIhg86fNfC u0ac1IAH2VIPB5v6NumrF9c64PsMQnyY/8nI++bCY1ZjFoVq74kwdrj2AU3RYLcH YRDbKS/vu2FkjdVlOKiKIVNos6vCX0gn8wH1YJBDByqfh10sC1fDj9aHqxIm4YyJ Al6P+ePOkdyTFqtc3HFw1pCNK3VBOUQ/GVhcozEIwuE1/4kA1Mae3tKBu2W2Ix5W Ovvmf+5k7d5CgDkKADeYEnsY2gv2vMacYzQuzruixZ7WZdbiZMTNVIxeOMmrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrAVjDZkve6tkmA+GkzBRPqcO/mgwHwYDVR0j BBgwFoAUlvsxdOcdTOm7HFcpXC9V50ZB+O4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzhmOWI2Yi0wMjdhLTRiZTYtYWIwMi0yOGQ1NTFjMzk4MTkvMC85NkZCMzE3NEU3 MUQ0Q0U5QkIxQzU3Mjk1QzJGNTVFNzQ2NDFGOEVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTZGQjMxNzRFNzFENENFOUJCMUM1NzI5NUMyRjU1RTc0NjQx RjhFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTM4ZjliNmItMDI3YS00YmU2LWFi MDItMjhkNTUxYzM5ODE5LzAvOTZGQjMxNzRFNzFENENFOUJCMUM1NzI5NUMyRjU1 RTc0NjQxRjhFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAARbwiwhTxar5OLXPy7iPXaP1tM+g0uZLRd NDpwNQOyxufx0I7McZB7qh3z8zBGEUKY6fvPQHNULGzxM+jH3l4KKVrrr7Viu6en Jid8cClRJyBOa9tC2gd7TvFYoqwlnDi5oTFCKq4KFi218yrOEvqZX8OdVDXJooyV SfNsi6nm/Nl/ihBduTnTosmwQXDBMLTmXHZ0VEN59CxG7+XdLMNrjCpIyDJ3qq6b NyWmBYbA6PSly6k03TyWhPR0KNbum8aav4WB5uo+N9ejHv2kzk2Vwp3y/1eOgUtx f32ZGgmMdFnOARW9sDRVKvrwnoGfbLDPrzhUG78Nr6Maz0v3C7s= -----END CERTIFICATE-----Generated at Mon Jun 16 15:51:38 2025 by rpki-client