$ rpki-client -vvf repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.mft File: 381455361E726B6ECCDAF271673BD59B1555336E.mft (raw, json) Hash identifier: z3j7X3U14nZF4h4WTP0HKrUXrF8b5F+6480yiaaoJog= Subject key identifier: 8E:D0:B2:5C:23:63:4C:6D:1D:55:2C:C9:ED:0F:BE:56:74:FB:8C:01 Authority key identifier: 38:14:55:36:1E:72:6B:6E:CC:DA:F2:71:67:3B:D5:9B:15:55:33:6E Certificate issuer: /CN=381455361E726B6ECCDAF271673BD59B1555336E Certificate serial: 618F185FCF1009517D38A14C11CB8C5C1A8E4530 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/381455361E726B6ECCDAF271673BD59B1555336E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.mft Manifest number: 0361 Signing time: Fri 08 Aug 2025 18:21:40 +0000 Manifest this update: Fri 08 Aug 2025 18:16:40 +0000 Manifest next update: Tue 12 Aug 2025 03:24:40 +0000 Files and hashes: 1: 381455361E726B6ECCDAF271673BD59B1555336E.crl (hash: p3Jn6vgr+7jDDKlOfk4CqKNIrX14HA+/rgTJh57Cybk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.crl rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/381455361E726B6ECCDAF271673BD59B1555336E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 03:24:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:8f:18:5f:cf:10:09:51:7d:38:a1:4c:11:cb:8c:5c:1a:8e:45:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=381455361E726B6ECCDAF271673BD59B1555336E Validity Not Before: Aug 8 18:16:40 2025 GMT Not After : Aug 12 03:24:40 2025 GMT Subject: CN=8ED0B25C23634C6D1D552CC9ED0FBE5674FB8C01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:36:32:e8:84:13:75:63:85:de:75:df:96:11: 69:93:25:8e:70:fb:aa:3a:0d:a5:77:73:be:57:8e: 3e:cc:6f:b1:c5:3f:f9:88:61:2a:61:b7:19:08:05: bb:94:ab:b7:72:f4:c7:79:78:40:0a:b9:16:e5:2c: d1:1b:8a:5b:02:cf:2f:0b:db:02:20:05:49:04:33: 14:2e:da:50:ac:aa:4a:ac:d6:24:ea:59:5d:8d:51: 6d:6b:bb:6e:dc:03:1b:61:e5:d0:38:ca:f2:b1:28: 02:92:c5:a3:1e:c6:eb:37:1a:2c:5d:d8:2d:37:90: 36:e6:4b:f5:14:57:8f:2c:3c:b0:b9:d8:53:e3:f2: e9:31:1c:f2:90:bd:3d:28:22:fe:4a:56:cd:37:89: be:91:af:8a:bf:e8:3d:56:c4:d9:0f:44:e6:e5:46: 5b:fb:4c:a1:78:9e:2e:a1:19:4e:a9:62:68:d7:ea: 8b:c9:82:d3:3b:b6:44:49:3d:f9:ea:7b:0a:a5:77: e5:c6:ee:a5:dd:0a:f0:14:31:42:0a:69:20:f4:f2: ef:c8:ee:ce:f3:e6:d1:84:37:1e:83:4f:50:53:3a: 6e:3f:4d:01:1a:3b:b4:7b:e1:78:e1:a7:c6:8a:68: 8d:ca:87:d9:73:c0:5f:25:26:ac:f8:d4:1a:a6:e4: 5e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:D0:B2:5C:23:63:4C:6D:1D:55:2C:C9:ED:0F:BE:56:74:FB:8C:01 X509v3 Authority Key Identifier: keyid:38:14:55:36:1E:72:6B:6E:CC:DA:F2:71:67:3B:D5:9B:15:55:33:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/381455361E726B6ECCDAF271673BD59B1555336E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:aa:c2:c3:c7:23:ab:94:7f:98:fe:20:f7:30:f9:da:e1:87: 0b:85:60:b0:87:1f:75:e3:1e:43:fc:50:1b:4b:af:e2:3b:a7: 43:24:83:84:48:5e:4b:48:3e:70:45:ff:c9:05:32:72:da:b4: 53:dc:08:6c:50:a0:3a:09:a9:b6:25:4b:02:83:a8:cc:7b:fc: 71:a4:4f:3c:d8:51:e7:a8:0d:e1:fb:7c:14:5d:e7:a0:06:8f: ed:2c:3d:05:02:c8:84:e6:1b:25:a6:05:8a:f9:ee:f0:cd:2f: 37:f2:2f:35:4d:a9:f9:34:12:97:73:c6:e8:a6:97:f7:db:16: 46:a0:91:7b:a2:c3:dd:a7:ca:2d:45:81:82:2f:8f:33:e6:7c: 0b:fa:67:36:d0:05:21:15:b7:11:57:36:eb:e2:71:68:00:10: 6c:2c:33:1a:26:91:e1:ae:c7:63:e1:aa:b9:e4:97:0e:82:6f: 2d:3f:96:2e:c9:83:7a:9c:63:bc:04:05:01:6b:91:36:a8:80: 6a:b1:b8:c5:cb:70:a0:e9:7a:59:5f:a6:14:4f:24:56:d1:7d: 47:e5:e8:c9:92:bf:58:d6:17:d4:2f:2b:38:5b:9e:7e:cd:51: 46:26:46:95:e1:9c:5a:d7:43:c2:41:a0:b5:e6:08:a9:3e:e3: 20:3e:f8:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYY8YX88QCVF9OKFMEcuMXBqORTAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzgxNDU1MzYxRTcyNkI2RUNDREFGMjcxNjczQkQ1OUIx NTU1MzM2RTAeFw0yNTA4MDgxODE2NDBaFw0yNTA4MTIwMzI0NDBaMDMxMTAvBgNV BAMTKDhFRDBCMjVDMjM2MzRDNkQxRDU1MkNDOUVEMEZCRTU2NzRGQjhDMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/NjLohBN1Y4Xedd+WEWmTJY5w +6o6DaV3c75Xjj7Mb7HFP/mIYSphtxkIBbuUq7dy9Md5eEAKuRblLNEbilsCzy8L 2wIgBUkEMxQu2lCsqkqs1iTqWV2NUW1ru27cAxth5dA4yvKxKAKSxaMexus3Gixd 2C03kDbmS/UUV48sPLC52FPj8ukxHPKQvT0oIv5KVs03ib6Rr4q/6D1WxNkPRObl Rlv7TKF4ni6hGU6pYmjX6ovJgtM7tkRJPfnqewqld+XG7qXdCvAUMUIKaSD08u/I 7s7z5tGENx6DT1BTOm4/TQEaO7R74Xjhp8aKaI3Kh9lzwF8lJqz41Bqm5F6rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjtCyXCNjTG0dVSzJ7Q++VnT7jAEwHwYDVR0j BBgwFoAUOBRVNh5ya27M2vJxZzvVmxVVM24wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzE5ODc0Yy1hNmIyLTRiMGItOWNjNi01NTlhNGU3Y2Q5NWEvMC8zODE0NTUzNjFF NzI2QjZFQ0NEQUYyNzE2NzNCRDU5QjE1NTUzMzZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzgxNDU1MzYxRTcyNkI2RUNDREFGMjcxNjczQkQ1OUIxNTU1 MzM2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMxOTg3NGMtYTZiMi00YjBiLTlj YzYtNTU5YTRlN2NkOTVhLzAvMzgxNDU1MzYxRTcyNkI2RUNDREFGMjcxNjczQkQ1 OUIxNTU1MzM2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABKqwsPHI6uUf5j+IPcw+drhhwuFYLCHH3Xj HkP8UBtLr+I7p0Mkg4RIXktIPnBF/8kFMnLatFPcCGxQoDoJqbYlSwKDqMx7/HGk TzzYUeeoDeH7fBRd56AGj+0sPQUCyITmGyWmBYr57vDNLzfyLzVNqfk0Epdzxuim l/fbFkagkXuiw92nyi1FgYIvjzPmfAv6ZzbQBSEVtxFXNuvicWgAEGwsMxomkeGu x2Phqrnklw6Cby0/li7Jg3qcY7wEBQFrkTaogGqxuMXLcKDpellfphRPJFbRfUfl 6MmSv1jWF9QvKzhbnn7NUUYmRpXhnFrXQ8JBoLXmCKk+4yA++G0= -----END CERTIFICATE-----Generated at Sat Aug 9 20:45:43 2025 by rpki-client