$ rpki-client -vvf repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft File: 114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft (raw, json) Hash identifier: NXr07kLCKMC8iikfG5PWq6qQ8Fv3Ccq5cQrUvL5+ryc= Subject key identifier: 27:65:76:F0:B0:09:D2:A6:16:DD:C8:8F:B0:EE:6D:CE:5E:FC:D4:EF Authority key identifier: 11:4C:9E:7E:A9:1F:63:87:C2:CB:F1:D1:6E:A8:24:58:0C:D6:85:87 Certificate issuer: /CN=114C9E7EA91F6387C2CBF1D16EA824580CD68587 Certificate serial: 4DC5918593F347101EDCBFA03E0C073D64995017 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/114C9E7EA91F6387C2CBF1D16EA824580CD68587.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft Manifest number: 04F6 Signing time: Sat 09 Aug 2025 05:22:01 +0000 Manifest this update: Sat 09 Aug 2025 05:17:01 +0000 Manifest next update: Tue 12 Aug 2025 11:35:01 +0000 Files and hashes: 1: 114C9E7EA91F6387C2CBF1D16EA824580CD68587.crl (hash: 5RBrswXkvzQxl7PN8Qg3EBa0WoIpibpSEidmE9olkj4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.crl rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/114C9E7EA91F6387C2CBF1D16EA824580CD68587.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 07:45:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:c5:91:85:93:f3:47:10:1e:dc:bf:a0:3e:0c:07:3d:64:99:50:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=114C9E7EA91F6387C2CBF1D16EA824580CD68587 Validity Not Before: Aug 9 05:17:01 2025 GMT Not After : Aug 12 11:35:01 2025 GMT Subject: CN=276576F0B009D2A616DDC88FB0EE6DCE5EFCD4EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:fa:24:0a:64:18:a8:ea:ec:79:b2:21:7e:25: 5f:fc:85:8f:f2:78:0d:61:c2:58:c6:c3:3b:a5:a0: 18:77:39:cd:da:c7:7b:b5:db:4a:ab:00:0d:c3:8e: ff:2d:e6:c9:6c:f8:c7:0f:70:92:40:ef:9a:50:a5: 5e:fa:c6:b9:e1:03:65:b9:4c:7b:c4:6b:a9:47:ea: 8c:65:f8:ad:99:bf:96:a0:c8:68:18:ad:76:6e:2e: fe:93:04:06:69:d8:c4:9d:20:02:0f:a3:e8:cd:31: 93:82:f2:56:38:1f:b6:8e:96:a8:f4:f5:b1:ac:50: 86:72:f8:62:ed:ca:5c:d3:5b:9c:56:7e:70:1f:46: b0:22:f2:af:ac:87:1f:bb:06:85:db:6f:32:71:b1: 9a:76:ca:7a:a9:04:bd:3f:89:d4:c7:cb:2c:46:57: 7c:65:ac:ca:f0:f9:c6:25:1b:3c:35:7e:0e:d1:2d: a9:40:16:0e:8c:ff:06:9b:a1:77:ce:d7:85:42:74: 21:0f:50:2c:d4:46:87:f1:ab:54:d9:3d:20:85:08: 9c:c9:ba:31:35:c3:74:9f:1b:c2:f4:29:b6:a3:26: 89:7f:75:b1:e8:f2:80:a7:fa:02:8b:ce:12:1f:d0: 28:73:f0:5f:d6:bb:44:11:38:23:4f:50:4a:ff:b0: 95:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:65:76:F0:B0:09:D2:A6:16:DD:C8:8F:B0:EE:6D:CE:5E:FC:D4:EF X509v3 Authority Key Identifier: keyid:11:4C:9E:7E:A9:1F:63:87:C2:CB:F1:D1:6E:A8:24:58:0C:D6:85:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/114C9E7EA91F6387C2CBF1D16EA824580CD68587.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:d4:2b:46:ab:1b:f0:76:db:12:27:8c:79:f7:97:9f:28:d7: b3:0f:71:fb:d0:ae:41:b5:6f:68:93:4b:f4:bd:e1:8b:5a:c2: 2f:da:87:a0:04:7f:bd:f4:5a:34:f5:81:be:5e:3a:ae:f0:6c: 64:5c:31:1a:73:8f:78:11:70:c2:83:87:8a:f9:a9:06:7e:1a: 07:a3:4f:5c:70:42:e9:4a:68:51:28:63:f8:75:6a:a0:10:ca: 6a:5f:72:66:92:e2:8b:4b:e1:0a:f0:0c:35:aa:8f:2e:af:cc: 58:d3:7f:2b:40:0d:d8:bf:8c:54:ae:4d:50:2e:d1:5a:75:64: 69:f0:47:2a:0c:aa:08:0d:07:93:58:38:07:41:bf:6a:01:00: fd:89:c9:7b:21:45:2e:6a:b2:f4:cd:de:33:a0:ff:86:6d:01: 24:e6:1a:bb:22:a8:09:4b:c7:51:21:2e:82:48:fd:ad:04:ac: 10:a7:72:e2:06:87:a7:32:9a:d2:0c:63:de:b5:c8:2c:9e:44: 70:a4:24:17:9b:89:c8:bf:68:9f:fc:2e:14:ce:00:b0:9b:33: 37:ce:33:00:41:c3:a3:aa:1a:2e:54:2c:a9:e9:bc:2c:cd:89: 32:d0:60:c9:a5:3a:ce:5a:cd:e5:cf:29:33:2c:9a:e1:53:69: 69:ab:a9:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTcWRhZPzRxAe3L+gPgwHPWSZUBcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE0QzlFN0VBOTFGNjM4N0MyQ0JGMUQxNkVBODI0NTgw Q0Q2ODU4NzAeFw0yNTA4MDkwNTE3MDFaFw0yNTA4MTIxMTM1MDFaMDMxMTAvBgNV BAMTKDI3NjU3NkYwQjAwOUQyQTYxNkREQzg4RkIwRUU2RENFNUVGQ0Q0RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm+iQKZBio6ux5siF+JV/8hY/y eA1hwljGwzuloBh3Oc3ax3u120qrAA3Djv8t5sls+McPcJJA75pQpV76xrnhA2W5 THvEa6lH6oxl+K2Zv5agyGgYrXZuLv6TBAZp2MSdIAIPo+jNMZOC8lY4H7aOlqj0 9bGsUIZy+GLtylzTW5xWfnAfRrAi8q+shx+7BoXbbzJxsZp2ynqpBL0/idTHyyxG V3xlrMrw+cYlGzw1fg7RLalAFg6M/waboXfO14VCdCEPUCzURofxq1TZPSCFCJzJ ujE1w3SfG8L0KbajJol/dbHo8oCn+gKLzhIf0Chz8F/Wu0QROCNPUEr/sJXDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ2V28LAJ0qYW3ciPsO5tzl781O8wHwYDVR0j BBgwFoAUEUyefqkfY4fCy/HRbqgkWAzWhYcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDNlYzg0ZS02MGVmLTQ0ZDQtOWY0My04NWI2Zjk2YjI2Y2YvMC8xMTRDOUU3RUE5 MUY2Mzg3QzJDQkYxRDE2RUE4MjQ1ODBDRDY4NTg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE0QzlFN0VBOTFGNjM4N0MyQ0JGMUQxNkVBODI0NTgwQ0Q2 ODU4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQzZWM4NGUtNjBlZi00NGQ0LTlm NDMtODViNmY5NmIyNmNmLzAvMTE0QzlFN0VBOTFGNjM4N0MyQ0JGMUQxNkVBODI0 NTgwQ0Q2ODU4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD7UK0arG/B22xInjHn3l58o17MPcfvQrkG1 b2iTS/S94Ytawi/ah6AEf730WjT1gb5eOq7wbGRcMRpzj3gRcMKDh4r5qQZ+Ggej T1xwQulKaFEoY/h1aqAQympfcmaS4otL4QrwDDWqjy6vzFjTfytADdi/jFSuTVAu 0Vp1ZGnwRyoMqggNB5NYOAdBv2oBAP2JyXshRS5qsvTN3jOg/4ZtASTmGrsiqAlL x1EhLoJI/a0ErBCncuIGh6cymtIMY961yCyeRHCkJBebici/aJ/8LhTOALCbMzfO MwBBw6OqGi5ULKnpvCzNiTLQYMmlOs5azeXPKTMsmuFTaWmrqdQ= -----END CERTIFICATE-----Generated at Sat Aug 9 10:32:38 2025 by rpki-client