$ rpki-client -vvf repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.mft File: 4CC71073C4D5095D162AA86A1727D924EB83598A.mft (raw, json) Hash identifier: ZEXfKYjB9NoKIZ22ARnNI998ScJvk+gGGR1hKfrUMQs= Subject key identifier: 0E:1F:67:02:B5:7D:FD:5B:1E:63:DC:06:2C:06:3D:30:48:19:51:57 Authority key identifier: 4C:C7:10:73:C4:D5:09:5D:16:2A:A8:6A:17:27:D9:24:EB:83:59:8A Certificate issuer: /CN=4CC71073C4D5095D162AA86A1727D924EB83598A Certificate serial: 48246A3B99FB3AFB276F134B3BEBC13E57F18099 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CC71073C4D5095D162AA86A1727D924EB83598A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.mft Manifest number: 01D0 Signing time: Sat 14 Jun 2025 15:41:26 +0000 Manifest this update: Sat 14 Jun 2025 15:36:26 +0000 Manifest next update: Tue 17 Jun 2025 19:01:26 +0000 Files and hashes: 1: 4CC71073C4D5095D162AA86A1727D924EB83598A.crl (hash: f2G1M3KZOCwzUNDfEUaSuwq3cLEmwrCf52kImkdQog4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.crl rsync://repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CC71073C4D5095D162AA86A1727D924EB83598A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 19:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:24:6a:3b:99:fb:3a:fb:27:6f:13:4b:3b:eb:c1:3e:57:f1:80:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CC71073C4D5095D162AA86A1727D924EB83598A Validity Not Before: Jun 14 15:36:26 2025 GMT Not After : Jun 17 19:01:26 2025 GMT Subject: CN=0E1F6702B57DFD5B1E63DC062C063D3048195157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:59:c5:15:9e:71:0c:47:ab:5b:c7:c0:56:fa: d8:52:0f:b3:c2:c5:cf:47:33:cf:32:cd:2b:24:16: 4b:43:1f:6b:5f:0b:b0:5c:0a:1b:29:fc:04:55:5a: 48:e8:a4:28:e6:5e:e9:04:2d:72:83:d2:1d:dc:11: 50:1d:70:cc:85:ac:97:53:61:ac:21:fe:3d:68:c5: 14:82:b8:91:e3:e3:40:9f:9e:c3:62:bc:ac:ef:a7: 86:e3:88:88:be:c9:38:31:be:66:a5:7d:ea:6a:b8: 3c:8e:54:0b:4f:4d:34:cb:ab:91:8d:23:c8:bd:cc: f5:83:45:f9:7e:9a:72:85:91:d8:b4:85:68:b8:68: fc:a4:69:19:0c:95:1d:5c:89:42:da:6d:e7:78:a2: f0:02:39:02:c9:5d:c8:18:38:25:20:d6:86:ef:a7: 53:ce:e2:8b:d6:d6:14:d3:d7:b9:b5:ac:45:51:76: 17:12:19:b0:ce:c2:90:2e:bd:25:e7:69:8a:a1:5f: aa:8b:8b:d9:1b:97:68:b3:19:a1:56:7e:9a:e5:cc: 0f:c8:d4:7f:b6:5b:4e:06:a6:5a:18:ee:a1:a8:50: 16:24:0e:22:d0:e1:1b:96:35:ae:e5:59:4a:52:7b: b2:15:60:d3:f8:f0:66:56:c4:65:21:57:f0:e5:0b: cf:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:1F:67:02:B5:7D:FD:5B:1E:63:DC:06:2C:06:3D:30:48:19:51:57 X509v3 Authority Key Identifier: keyid:4C:C7:10:73:C4:D5:09:5D:16:2A:A8:6A:17:27:D9:24:EB:83:59:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CC71073C4D5095D162AA86A1727D924EB83598A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:9d:4f:ab:e0:85:7f:a2:c5:8b:d0:bd:cb:e9:32:e1:d3:bf: 26:f3:d8:17:2a:57:12:26:cb:32:9f:e1:28:2b:b9:99:8a:0e: 18:a6:57:47:52:87:11:31:33:6f:8c:3a:73:a7:67:38:e3:15: 5d:ea:b9:88:d4:b9:11:18:0b:66:43:ff:1a:2f:02:4e:0e:78: 15:e0:53:19:e0:fe:eb:82:5e:2c:18:d6:bf:fb:fc:fb:4e:b0: ff:70:bf:65:7d:dd:10:e6:11:66:e1:eb:57:fe:d8:d0:3b:07: 35:76:29:71:b7:94:05:de:31:b7:3d:09:84:ba:58:bd:a6:73: 7f:a4:97:ba:db:4c:3b:5a:0d:8b:eb:b5:21:ce:db:89:a4:22: eb:55:e3:1d:c3:80:f6:51:f6:41:b3:50:33:f4:b6:53:e5:d5: 9d:de:aa:c5:5c:56:74:42:3f:50:ff:4d:85:ae:a7:60:d6:9a: 3a:89:11:7e:9b:60:2f:4b:26:69:8b:95:30:f2:5e:d6:50:d4: 26:ce:51:bb:00:88:76:29:88:89:ae:3b:23:82:38:30:38:32: 6f:d0:0c:f3:1e:b8:68:c0:58:5a:f3:50:cd:09:d8:36:e2:37: 07:d7:1b:75:e0:76:83:e1:87:e4:c7:7e:01:dc:fc:4d:6a:b3: c1:9b:03:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSCRqO5n7OvsnbxNLO+vBPlfxgJkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENDNzEwNzNDNEQ1MDk1RDE2MkFBODZBMTcyN0Q5MjRF QjgzNTk4QTAeFw0yNTA2MTQxNTM2MjZaFw0yNTA2MTcxOTAxMjZaMDMxMTAvBgNV BAMTKDBFMUY2NzAyQjU3REZENUIxRTYzREMwNjJDMDYzRDMwNDgxOTUxNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoWcUVnnEMR6tbx8BW+thSD7PC xc9HM88yzSskFktDH2tfC7BcChsp/ARVWkjopCjmXukELXKD0h3cEVAdcMyFrJdT Yawh/j1oxRSCuJHj40CfnsNivKzvp4bjiIi+yTgxvmalfepquDyOVAtPTTTLq5GN I8i9zPWDRfl+mnKFkdi0hWi4aPykaRkMlR1ciULabed4ovACOQLJXcgYOCUg1obv p1PO4ovW1hTT17m1rEVRdhcSGbDOwpAuvSXnaYqhX6qLi9kbl2izGaFWfprlzA/I 1H+2W04GploY7qGoUBYkDiLQ4RuWNa7lWUpSe7IVYNP48GZWxGUhV/DlC8+DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDh9nArV9/VseY9wGLAY9MEgZUVcwHwYDVR0j BBgwFoAUTMcQc8TVCV0WKqhqFyfZJOuDWYowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MjM2ZjA2MC1lODYyLTRmMWMtYjgxYS0wMWZjYmEzZmY3N2MvMC80Q0M3MTA3M0M0 RDUwOTVEMTYyQUE4NkExNzI3RDkyNEVCODM1OThBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNENDNzEwNzNDNEQ1MDk1RDE2MkFBODZBMTcyN0Q5MjRFQjgz NTk4QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjIzNmYwNjAtZTg2Mi00ZjFjLWI4 MWEtMDFmY2JhM2ZmNzdjLzAvNENDNzEwNzNDNEQ1MDk1RDE2MkFBODZBMTcyN0Q5 MjRFQjgzNTk4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABidT6vghX+ixYvQvcvpMuHTvybz2BcqVxIm yzKf4SgruZmKDhimV0dShxExM2+MOnOnZzjjFV3quYjUuREYC2ZD/xovAk4OeBXg Uxng/uuCXiwY1r/7/PtOsP9wv2V93RDmEWbh61f+2NA7BzV2KXG3lAXeMbc9CYS6 WL2mc3+kl7rbTDtaDYvrtSHO24mkIutV4x3DgPZR9kGzUDP0tlPl1Z3eqsVcVnRC P1D/TYWup2DWmjqJEX6bYC9LJmmLlTDyXtZQ1CbOUbsAiHYpiImuOyOCODA4Mm/Q DPMeuGjAWFrzUM0J2DbiNwfXG3XgdoPhh+THfgHc/E1qs8GbA5Q= -----END CERTIFICATE-----Generated at Mon Jun 16 10:40:50 2025 by rpki-client