$ rpki-client -vvf repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft File: 42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft (raw, json) Hash identifier: y9a83Eohy1hquU17Q0HYpB4doWhnMg/WylI8SUOnBAs= Subject key identifier: 87:BA:5B:A7:5A:D5:10:67:4E:97:E8:49:DD:A4:CD:B4:7A:E5:0D:A7 Authority key identifier: 42:19:91:69:94:4E:D2:2D:1F:EA:CF:CC:40:8F:AE:E5:36:FB:B6:AF Certificate issuer: /CN=42199169944ED22D1FEACFCC408FAEE536FBB6AF Certificate serial: 74844B91DC6E33E631587366D4A9B1963EDF8CD8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42199169944ED22D1FEACFCC408FAEE536FBB6AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft Manifest number: 0173 Signing time: Sun 15 Jun 2025 06:51:12 +0000 Manifest this update: Sun 15 Jun 2025 06:46:12 +0000 Manifest next update: Wed 18 Jun 2025 06:56:12 +0000 Files and hashes: 1: 42199169944ED22D1FEACFCC408FAEE536FBB6AF.crl (hash: /oDGZOScd64HOA8SmVUms7CUxxQlj2Qqrr7bejSvXps=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.crl rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42199169944ED22D1FEACFCC408FAEE536FBB6AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 06:56:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:84:4b:91:dc:6e:33:e6:31:58:73:66:d4:a9:b1:96:3e:df:8c:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42199169944ED22D1FEACFCC408FAEE536FBB6AF Validity Not Before: Jun 15 06:46:12 2025 GMT Not After : Jun 18 06:56:12 2025 GMT Subject: CN=87BA5BA75AD510674E97E849DDA4CDB47AE50DA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b1:bb:00:35:fe:24:7a:63:35:55:b6:69:82: dd:40:0a:ac:78:36:cc:7f:33:c1:64:5b:e6:14:31: f6:c6:63:bb:2c:5f:f8:50:9c:03:c2:17:c9:62:6b: 5c:c0:1b:f2:f1:cd:04:9c:dd:9c:ce:49:87:2d:a1: 90:1f:81:ff:b1:61:b8:42:20:1a:c2:41:41:71:e2: 8b:08:60:5a:b4:46:69:d9:4a:c8:e4:fd:27:f9:16: d6:b2:00:5e:d4:4b:17:61:18:06:62:bc:ec:a7:4c: 92:fe:c1:51:11:0e:b6:7e:a4:a3:3d:21:d5:8c:63: 71:85:93:33:5f:63:69:6d:8d:af:97:15:30:e4:3b: 54:bc:09:a8:1e:75:e2:50:02:b2:37:56:40:e0:cf: ea:1f:35:39:5f:d9:5e:d5:cc:53:62:35:b2:bd:fe: 9d:78:2f:58:8a:c6:85:2c:b3:d1:96:2e:57:68:74: 3a:a6:d1:5e:e2:92:51:3c:95:d2:71:54:d1:7e:da: 68:85:80:0c:8e:d5:61:d6:47:fa:c6:46:22:1a:dc: 6d:75:81:9a:9e:95:b4:ae:ea:b8:54:6b:a6:d9:14: 2c:7c:55:ec:59:9f:97:23:4c:d6:c2:45:97:8d:25: c5:d1:3c:3c:35:92:40:f8:95:ca:ae:5f:c5:53:57: 98:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:BA:5B:A7:5A:D5:10:67:4E:97:E8:49:DD:A4:CD:B4:7A:E5:0D:A7 X509v3 Authority Key Identifier: keyid:42:19:91:69:94:4E:D2:2D:1F:EA:CF:CC:40:8F:AE:E5:36:FB:B6:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/42199169944ED22D1FEACFCC408FAEE536FBB6AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f418dea2-a891-49ef-a06f-fe7f2c83258b/0/42199169944ED22D1FEACFCC408FAEE536FBB6AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:92:62:35:0d:1a:3f:a5:3c:4a:19:71:ba:ff:2b:f2:30:5d: ce:4b:71:f6:bc:11:17:7b:7a:16:56:45:2d:9a:fc:a4:e9:18: 5d:ec:69:1e:f5:3e:7d:41:c0:6b:98:d5:4b:c8:ed:d2:c5:e2: f8:d2:9e:a9:96:78:a5:bf:5d:c2:c9:7a:48:fd:cb:dc:bb:e5: 86:f4:08:13:b7:8d:36:2c:bd:6f:2f:ba:18:a1:8f:bf:76:86: 20:ea:c9:90:b2:44:75:a3:aa:04:c5:1b:37:53:d8:53:b8:15: dc:8d:18:68:8e:00:4c:d3:75:0d:49:fb:df:17:a9:10:f7:f3: d1:1d:6f:91:e8:ba:fa:25:47:00:e3:7e:e0:34:16:11:57:49: 25:55:00:f0:42:10:f1:0d:6a:57:30:66:f2:fa:df:55:85:a0: 50:6d:ac:92:78:85:5b:f2:47:d1:e0:60:fa:d5:a1:c5:a8:61: 5b:77:d2:d7:d0:96:ed:a7:92:cb:73:4b:f2:7e:7e:d8:b3:cd: 7f:9c:64:fc:d4:a5:14:68:87:6a:e3:7e:4c:d9:a6:a0:df:6c: 39:eb:a7:da:8e:ed:ab:73:7d:17:8c:b4:44:1d:b0:15:f1:ae: c8:15:61:9b:82:b1:e0:d1:23:32:4d:f7:c5:fe:0f:c4:f8:af: 03:1a:f0:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdIRLkdxuM+YxWHNm1Kmxlj7fjNgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDIxOTkxNjk5NDRFRDIyRDFGRUFDRkNDNDA4RkFFRTUz NkZCQjZBRjAeFw0yNTA2MTUwNjQ2MTJaFw0yNTA2MTgwNjU2MTJaMDMxMTAvBgNV BAMTKDg3QkE1QkE3NUFENTEwNjc0RTk3RTg0OUREQTRDREI0N0FFNTBEQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXsbsANf4kemM1VbZpgt1ACqx4 Nsx/M8FkW+YUMfbGY7ssX/hQnAPCF8lia1zAG/LxzQSc3ZzOSYctoZAfgf+xYbhC IBrCQUFx4osIYFq0RmnZSsjk/Sf5FtayAF7USxdhGAZivOynTJL+wVERDrZ+pKM9 IdWMY3GFkzNfY2ltja+XFTDkO1S8CagedeJQArI3VkDgz+ofNTlf2V7VzFNiNbK9 /p14L1iKxoUss9GWLldodDqm0V7iklE8ldJxVNF+2miFgAyO1WHWR/rGRiIa3G11 gZqelbSu6rhUa6bZFCx8VexZn5cjTNbCRZeNJcXRPDw1kkD4lcquX8VTV5inAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh7pbp1rVEGdOl+hJ3aTNtHrlDacwHwYDVR0j BBgwFoAUQhmRaZRO0i0f6s/MQI+u5Tb7tq8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NDE4ZGVhMi1hODkxLTQ5ZWYtYTA2Zi1mZTdmMmM4MzI1OGIvMC80MjE5OTE2OTk0 NEVEMjJEMUZFQUNGQ0M0MDhGQUVFNTM2RkJCNkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDIxOTkxNjk5NDRFRDIyRDFGRUFDRkNDNDA4RkFFRTUzNkZC QjZBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjQxOGRlYTItYTg5MS00OWVmLWEw NmYtZmU3ZjJjODMyNThiLzAvNDIxOTkxNjk5NDRFRDIyRDFGRUFDRkNDNDA4RkFF RTUzNkZCQjZBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAACSYjUNGj+lPEoZcbr/K/IwXc5Lcfa8ERd7 ehZWRS2a/KTpGF3saR71Pn1BwGuY1UvI7dLF4vjSnqmWeKW/XcLJekj9y9y75Yb0 CBO3jTYsvW8vuhihj792hiDqyZCyRHWjqgTFGzdT2FO4FdyNGGiOAEzTdQ1J+98X qRD389Edb5HouvolRwDjfuA0FhFXSSVVAPBCEPENalcwZvL631WFoFBtrJJ4hVvy R9HgYPrVocWoYVt30tfQlu2nkstzS/J+ftizzX+cZPzUpRRoh2rjfkzZpqDfbDnr p9qO7atzfReMtEQdsBXxrsgVYZuCseDRIzJN98X+D8T4rwMa8D0= -----END CERTIFICATE-----Generated at Mon Jun 16 00:10:58 2025 by rpki-client