$ rpki-client -vvf repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.mft File: 115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.mft (raw, json) Hash identifier: kkioUCXj4ebLYmmHLuODIyvGiR/Ksmqhf2+JY1ftSPw= Subject key identifier: 0D:B2:0E:D3:7D:69:20:06:59:C1:D5:A6:1C:4D:8D:79:83:58:94:4C Authority key identifier: 11:5F:DA:5F:36:D9:1E:E9:38:FA:B5:D4:B2:AB:88:42:2A:3D:4B:BF Certificate issuer: /CN=115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF Certificate serial: 7D5A7910877F26581DE359FD42A7C9ACDF7A24EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.mft Manifest number: 01BF Signing time: Thu 07 Aug 2025 22:41:49 +0000 Manifest this update: Thu 07 Aug 2025 22:36:49 +0000 Manifest next update: Mon 11 Aug 2025 01:45:49 +0000 Files and hashes: 1: 115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.crl (hash: GI8QuNkQ1tnSXtclTboGruAAyCPOm9L3uKmh5ZH5X64=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.crl rsync://repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 22:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:5a:79:10:87:7f:26:58:1d:e3:59:fd:42:a7:c9:ac:df:7a:24:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF Validity Not Before: Aug 7 22:36:49 2025 GMT Not After : Aug 11 01:45:49 2025 GMT Subject: CN=0DB20ED37D69200659C1D5A61C4D8D798358944C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:59:00:f0:09:b2:00:2d:de:15:ae:23:cb:2f: 7c:03:1e:22:4f:9a:bd:27:9b:f1:30:f2:cc:7b:f5: 41:64:76:ba:bc:de:cd:05:02:d3:2c:16:a0:3b:64: d8:07:47:18:c9:34:66:96:47:ce:dd:5c:ad:69:53: 07:5b:2c:fd:cf:3c:3a:0c:5c:8f:2f:1c:7e:d5:82: 7c:88:6b:b4:7f:70:c5:6d:9a:e7:95:3a:5c:fc:6e: 5f:ab:b0:ef:aa:68:36:d0:24:2b:fa:fc:49:e1:47: f1:a3:51:2e:17:cb:50:b5:32:76:c5:45:84:54:d1: 28:0d:18:0d:8b:2b:51:5a:8b:77:fc:b6:5a:00:93: 6c:62:ba:f4:ab:0f:5f:ba:fa:bd:15:8c:12:ca:d1: 0b:38:a3:62:c9:49:22:78:50:28:25:4a:bf:11:46: ce:b5:12:66:64:4f:6b:1e:7a:e0:77:99:61:54:b1: 09:25:0a:15:41:2d:85:e0:8c:44:f7:12:75:11:29: 18:71:ee:8c:b1:97:03:9c:a0:a4:ed:3c:78:f2:56: 74:a6:1e:d0:96:bd:31:f8:83:82:a0:18:9e:52:40: e5:b1:d1:06:bd:2a:68:c5:e1:61:3b:eb:24:d9:5c: 5e:47:3c:da:9d:42:57:7a:52:85:f6:be:c8:ae:7f: 1f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:B2:0E:D3:7D:69:20:06:59:C1:D5:A6:1C:4D:8D:79:83:58:94:4C X509v3 Authority Key Identifier: keyid:11:5F:DA:5F:36:D9:1E:E9:38:FA:B5:D4:B2:AB:88:42:2A:3D:4B:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:9c:c8:94:b6:c8:12:fd:f9:a4:7d:00:1d:cf:59:c0:4e:e1: 9a:5b:fd:f9:6a:1a:ef:5a:f7:0a:43:a7:c5:61:6b:d6:36:d8: 61:be:0c:93:ff:60:8f:71:3f:91:76:0c:b3:1e:bf:18:08:dc: cf:31:72:ea:f8:56:8a:e4:58:28:59:d9:7a:6d:69:e1:be:cd: 5d:43:45:18:56:8f:72:4b:9a:95:13:64:b0:de:81:12:30:eb: 94:70:6e:03:9a:81:28:26:2d:78:84:7f:df:c1:79:7e:6b:af: 14:c7:78:27:1f:02:c5:fb:20:38:68:38:5f:63:cb:0f:af:51: f1:cb:d5:b7:a1:07:47:4c:6a:1d:e3:9a:fb:7f:f7:14:3b:f0: 79:62:4d:c4:bf:2c:f4:71:57:1d:52:1a:ea:92:14:46:47:f6: 32:fe:21:1e:3f:cb:a2:eb:ea:52:b7:d3:95:7e:9b:d7:cc:f6: 4c:48:a7:78:d9:c3:e3:0d:85:87:e0:80:8a:19:14:27:ec:03: 58:e7:d5:0f:bd:f2:c7:bc:32:c8:79:e1:62:4f:f5:84:a2:e6: 67:66:7d:93:69:36:25:71:34:91:c8:5e:82:39:ac:7a:a6:8b: 93:58:1b:fb:d9:a6:00:1f:ff:4a:a5:8f:3f:96:c8:0b:c0:ee: c2:a6:d7:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfVp5EId/Jlgd41n9QqfJrN96JOowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE1RkRBNUYzNkQ5MUVFOTM4RkFCNUQ0QjJBQjg4NDIy QTNENEJCRjAeFw0yNTA4MDcyMjM2NDlaFw0yNTA4MTEwMTQ1NDlaMDMxMTAvBgNV BAMTKDBEQjIwRUQzN0Q2OTIwMDY1OUMxRDVBNjFDNEQ4RDc5ODM1ODk0NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSWQDwCbIALd4VriPLL3wDHiJP mr0nm/Ew8sx79UFkdrq83s0FAtMsFqA7ZNgHRxjJNGaWR87dXK1pUwdbLP3PPDoM XI8vHH7VgnyIa7R/cMVtmueVOlz8bl+rsO+qaDbQJCv6/EnhR/GjUS4Xy1C1MnbF RYRU0SgNGA2LK1Fai3f8tloAk2xiuvSrD1+6+r0VjBLK0Qs4o2LJSSJ4UCglSr8R Rs61EmZkT2seeuB3mWFUsQklChVBLYXgjET3EnURKRhx7oyxlwOcoKTtPHjyVnSm HtCWvTH4g4KgGJ5SQOWx0Qa9KmjF4WE76yTZXF5HPNqdQld6UoX2vsiufx8nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDbIO031pIAZZwdWmHE2NeYNYlEwwHwYDVR0j BBgwFoAUEV/aXzbZHuk4+rXUsquIQio9S78wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzI2NzgyNS01MWFmLTQ1NmQtYjQ1YS1hZTkzYzVmMjcwZWUvMC8xMTVGREE1RjM2 RDkxRUU5MzhGQUI1RDRCMkFCODg0MjJBM0Q0QkJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE1RkRBNUYzNkQ5MUVFOTM4RkFCNUQ0QjJBQjg4NDIyQTNE NEJCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMyNjc4MjUtNTFhZi00NTZkLWI0 NWEtYWU5M2M1ZjI3MGVlLzAvMTE1RkRBNUYzNkQ5MUVFOTM4RkFCNUQ0QjJBQjg4 NDIyQTNENEJCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAGcyJS2yBL9+aR9AB3PWcBO4Zpb/flqGu9a 9wpDp8Vha9Y22GG+DJP/YI9xP5F2DLMevxgI3M8xcur4VorkWChZ2XptaeG+zV1D RRhWj3JLmpUTZLDegRIw65RwbgOagSgmLXiEf9/BeX5rrxTHeCcfAsX7IDhoOF9j yw+vUfHL1behB0dMah3jmvt/9xQ78HliTcS/LPRxVx1SGuqSFEZH9jL+IR4/y6Lr 6lK305V+m9fM9kxIp3jZw+MNhYfggIoZFCfsA1jn1Q+98se8Msh54WJP9YSi5mdm fZNpNiVxNJHIXoI5rHqmi5NYG/vZpgAf/0qljz+WyAvA7sKm1yI= -----END CERTIFICATE-----Generated at Fri Aug 8 00:48:26 2025 by rpki-client