$ rpki-client -vvf repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft File: C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft (raw, json) Hash identifier: rVnLkJzAlrrOMI36xmgOc4l6jdwPju9oEA5LHImbUPk= Subject key identifier: D0:12:64:80:80:23:22:8A:45:A8:6B:90:F9:3F:8E:48:57:2A:18:C0 Authority key identifier: C1:93:44:D0:F4:EF:3C:AD:E2:A7:71:14:81:E3:D1:45:2C:62:1D:62 Certificate issuer: /CN=C19344D0F4EF3CADE2A7711481E3D1452C621D62 Certificate serial: 02CFE2D05534D3BF5954F8FF345ADCA988CC3708 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19344D0F4EF3CADE2A7711481E3D1452C621D62.cer Subject info access: rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft Manifest number: 01E3 Signing time: Tue 05 Aug 2025 17:41:57 +0000 Manifest this update: Tue 05 Aug 2025 17:36:57 +0000 Manifest next update: Sat 09 Aug 2025 01:06:57 +0000 Files and hashes: 1: C19344D0F4EF3CADE2A7711481E3D1452C621D62.crl (hash: +54X/8jFdfPV7SGkEUXW8yfTmVtH0al6RBwEhEwxGX0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.crl rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19344D0F4EF3CADE2A7711481E3D1452C621D62.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 01:06:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:cf:e2:d0:55:34:d3:bf:59:54:f8:ff:34:5a:dc:a9:88:cc:37:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C19344D0F4EF3CADE2A7711481E3D1452C621D62 Validity Not Before: Aug 5 17:36:57 2025 GMT Not After : Aug 9 01:06:57 2025 GMT Subject: CN=D01264808023228A45A86B90F93F8E48572A18C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:8f:0b:16:14:bc:25:29:ef:34:45:94:d4:39: 3b:3a:04:93:23:18:e2:b1:f7:96:a8:74:a7:10:de: 6a:7c:54:93:ec:57:7d:76:39:ca:c4:db:52:00:f2: 30:84:ed:7f:53:19:b8:b2:31:64:27:ca:13:97:88: af:fe:51:96:0e:6c:cc:ae:7d:ce:ec:9b:21:03:97: 5e:96:b9:06:51:b2:ea:ed:a6:9f:15:69:d5:15:53: 82:f6:99:28:0e:df:05:5f:f4:54:c5:fe:c8:3f:b3: 8a:d4:d1:9b:83:0b:79:04:82:4e:34:0b:b9:0a:32: a4:51:dc:84:46:e6:9c:2f:91:c2:82:66:23:ac:86: 94:87:48:fc:b1:08:d7:09:94:a8:df:2d:e7:09:2f: 44:80:5e:a9:47:4d:01:ce:c1:2a:8f:04:1c:4f:23: c2:9c:1d:8a:c1:07:1a:18:c7:69:b7:71:95:b8:60: a6:e4:60:d9:6f:48:d6:33:56:56:fb:7c:76:d8:9c: fd:1f:0d:3a:66:23:50:b8:e7:f9:be:5c:09:e8:60: 75:23:fd:fe:ad:55:94:c0:49:cc:0c:b7:13:8b:89: e2:7a:c8:54:ba:d9:2d:cb:ba:f0:43:3e:9e:31:dc: c4:55:5f:cf:09:ec:28:1e:4a:6d:01:19:eb:d3:17: 90:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:12:64:80:80:23:22:8A:45:A8:6B:90:F9:3F:8E:48:57:2A:18:C0 X509v3 Authority Key Identifier: keyid:C1:93:44:D0:F4:EF:3C:AD:E2:A7:71:14:81:E3:D1:45:2C:62:1D:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19344D0F4EF3CADE2A7711481E3D1452C621D62.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:9a:07:22:40:52:fa:9f:8f:52:a5:6e:7e:79:39:13:5a:3f: ff:7b:c9:bf:86:6a:42:fd:5c:0e:ce:53:85:63:e0:be:34:d5: e9:46:6a:4e:a9:81:04:55:54:bd:17:f0:ef:2b:46:8b:f6:59: 77:a5:e0:26:da:54:7a:40:68:fd:81:4a:13:99:1c:ee:ea:00: 8c:b8:fd:8f:71:02:8c:83:21:b1:f4:9b:69:96:d2:5a:8d:81: fa:07:04:23:79:12:bb:1c:5c:34:5c:6e:91:ec:62:2e:d3:00: e3:94:39:61:a0:25:f8:e3:ce:d0:97:c7:15:e2:5e:e3:5c:74: 5c:11:ce:63:ba:ed:07:4a:ab:05:88:e6:9c:e8:de:66:e6:33: a8:99:c4:c2:32:a5:b5:66:b5:20:81:77:e2:87:88:b5:d0:8f: 3a:89:8c:07:29:dd:eb:47:d3:20:d2:7f:01:94:54:d6:18:da: 6f:90:40:cb:cf:7e:23:50:46:ed:ca:16:9e:e3:d5:b3:27:38: 6f:1a:9b:b1:52:bb:ec:68:a3:b8:02:62:42:e1:f4:12:b9:2c: d4:f2:a0:2a:72:4d:a8:9b:04:0c:b5:a3:4f:14:84:b1:25:31: 47:8f:8e:02:40:c7:38:6e:aa:04:5c:76:f7:8a:7d:4b:c0:37: 49:b0:b8:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAs/i0FU0079ZVPj/NFrcqYjMNwgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE5MzQ0RDBGNEVGM0NBREUyQTc3MTE0ODFFM0QxNDUy QzYyMUQ2MjAeFw0yNTA4MDUxNzM2NTdaFw0yNTA4MDkwMTA2NTdaMDMxMTAvBgNV BAMTKEQwMTI2NDgwODAyMzIyOEE0NUE4NkI5MEY5M0Y4RTQ4NTcyQTE4QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4jwsWFLwlKe80RZTUOTs6BJMj GOKx95aodKcQ3mp8VJPsV312OcrE21IA8jCE7X9TGbiyMWQnyhOXiK/+UZYObMyu fc7smyEDl16WuQZRsurtpp8VadUVU4L2mSgO3wVf9FTF/sg/s4rU0ZuDC3kEgk40 C7kKMqRR3IRG5pwvkcKCZiOshpSHSPyxCNcJlKjfLecJL0SAXqlHTQHOwSqPBBxP I8KcHYrBBxoYx2m3cZW4YKbkYNlvSNYzVlb7fHbYnP0fDTpmI1C45/m+XAnoYHUj /f6tVZTAScwMtxOLieJ6yFS62S3LuvBDPp4x3MRVX88J7CgeSm0BGevTF5CrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0BJkgIAjIopFqGuQ+T+OSFcqGMAwHwYDVR0j BBgwFoAUwZNE0PTvPK3ip3EUgePRRSxiHWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MWI2ZGQ5Yi1kMTUyLTRjOGYtODdiNy02MjllYjgwOGY5MTEvMC9DMTkzNDREMEY0 RUYzQ0FERTJBNzcxMTQ4MUUzRDE0NTJDNjIxRDYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE5MzQ0RDBGNEVGM0NBREUyQTc3MTE0ODFFM0QxNDUyQzYy MUQ2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDFiNmRkOWItZDE1Mi00YzhmLTg3 YjctNjI5ZWI4MDhmOTExLzAvQzE5MzQ0RDBGNEVGM0NBREUyQTc3MTE0ODFFM0Qx NDUyQzYyMUQ2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHeaByJAUvqfj1Klbn55ORNaP/97yb+GakL9 XA7OU4Vj4L401elGak6pgQRVVL0X8O8rRov2WXel4CbaVHpAaP2BShOZHO7qAIy4 /Y9xAoyDIbH0m2mW0lqNgfoHBCN5ErscXDRcbpHsYi7TAOOUOWGgJfjjztCXxxXi XuNcdFwRzmO67QdKqwWI5pzo3mbmM6iZxMIypbVmtSCBd+KHiLXQjzqJjAcp3etH 0yDSfwGUVNYY2m+QQMvPfiNQRu3KFp7j1bMnOG8am7FSu+xoo7gCYkLh9BK5LNTy oCpyTaibBAy1o08UhLElMUePjgJAxzhuqgRcdveKfUvAN0mwuLA= -----END CERTIFICATE-----Generated at Thu Aug 7 05:02:08 2025 by rpki-client