$ rpki-client -vvf repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.mft File: 338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.mft (raw, json) Hash identifier: P1m8Ej+wB1VIit1FzDp1bK7MxDpAwPMmMdKQ8ZTrWTA= Subject key identifier: 4D:25:58:F0:85:56:59:B9:F3:86:71:51:04:68:E9:95:07:96:3B:50 Authority key identifier: 33:8D:EB:8D:70:51:C6:3F:C6:CC:D7:B1:A5:DD:8C:9E:3C:93:B9:6B Certificate issuer: /CN=338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B Certificate serial: 58D1E98B7B1203BC8420F19429CA1A766E56A57C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.mft Manifest number: 04EC Signing time: Tue 04 Nov 2025 15:02:04 +0000 Manifest this update: Tue 04 Nov 2025 14:57:04 +0000 Manifest next update: Fri 07 Nov 2025 22:07:04 +0000 Files and hashes: 1: 338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.crl (hash: yPrd4ra0tdVoC3ws+vlDlByv+8g9mdWWcfWiYThHX3w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.crl rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:d1:e9:8b:7b:12:03:bc:84:20:f1:94:29:ca:1a:76:6e:56:a5:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B Validity Not Before: Nov 4 14:57:04 2025 GMT Not After : Nov 7 22:07:04 2025 GMT Subject: CN=4D2558F0855659B9F38671510468E99507963B50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:51:ec:1f:e4:32:1f:e3:eb:bb:fa:80:ab:c9: 4c:5d:cd:db:4b:bf:c4:e8:f4:0a:6c:74:2d:13:33: d4:cf:ae:e2:45:06:89:b0:55:e1:94:b8:0a:7f:25: 56:53:14:d5:70:c5:92:b9:1b:5e:7f:8a:60:c7:1d: c5:8f:cd:06:f3:42:09:cc:b5:c5:7b:a2:5f:b3:6c: fe:72:73:56:6a:37:97:51:8d:a5:c6:c5:f4:94:92: af:d4:74:30:80:62:77:cf:9d:df:0b:2a:48:20:e3: b4:b0:46:b5:db:35:e9:d2:04:77:6c:2a:b6:8f:46: 42:75:92:0d:6a:50:21:42:d3:37:a7:4d:60:d4:0a: dc:73:f5:35:7d:61:1c:33:67:4a:62:07:1f:a7:7a: 41:1f:9a:86:5f:8a:55:ca:53:a1:3a:7c:58:ca:20: 79:65:be:ac:23:8f:32:10:8b:b8:f2:7d:68:de:44: f2:4d:be:28:65:2b:2b:36:e2:14:ed:fa:9e:46:d2: 44:29:e1:5a:50:53:4b:08:ce:63:d3:c4:d9:63:e1: 3c:9a:29:4f:01:0f:77:28:b0:f7:83:e4:7d:86:c1: ed:8a:32:61:dd:90:62:45:df:bb:72:ac:ca:af:f4: f1:8a:ac:1d:02:76:28:3a:c5:c6:a2:ab:db:b6:5e: 04:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:25:58:F0:85:56:59:B9:F3:86:71:51:04:68:E9:95:07:96:3B:50 X509v3 Authority Key Identifier: keyid:33:8D:EB:8D:70:51:C6:3F:C6:CC:D7:B1:A5:DD:8C:9E:3C:93:B9:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:35:92:7b:cc:58:ff:a5:fc:34:f7:03:0f:19:96:5e:99:ac: 2e:f3:e3:5a:3a:3c:5f:20:29:58:1b:37:1e:5e:47:34:37:aa: 29:58:df:7a:5d:7f:fc:3c:75:b1:5a:55:5b:c4:bd:67:f4:8f: 79:3e:12:ac:1d:a0:9b:49:fa:3a:ef:08:6c:32:25:32:b2:f6: 8c:ef:31:8f:dc:aa:c8:a2:de:ed:05:95:60:77:92:4b:ad:d6: be:19:3e:7b:7f:e3:a7:ec:51:a3:e4:b0:61:b0:6d:8f:b0:d3: a3:d7:a3:0e:6d:f5:b9:86:5c:5b:36:68:83:e8:48:af:2c:fc: 05:73:0d:4a:e3:a8:e3:6a:04:ae:40:69:50:a6:6d:c5:59:78: a4:3d:aa:af:f0:35:0b:16:b6:f7:a6:2e:96:0e:17:13:27:b9: d6:9c:3e:61:21:4c:d3:4b:b5:94:34:40:fd:ff:ec:da:13:a0: cb:96:b0:82:6c:3a:b7:78:0a:9a:d1:26:87:e1:fc:39:ca:55: 8b:a8:88:be:5d:99:36:6f:f0:0f:8b:b9:22:06:dd:0e:e5:7d: 86:99:9e:72:c8:05:90:05:f1:e0:00:98:96:06:99:8d:3c:f4: 09:42:fd:37:a3:0c:bc:cb:e1:20:d9:db:7a:ea:95:31:60:42: 6b:3d:30:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWNHpi3sSA7yEIPGUKcoadm5WpXwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM4REVCOEQ3MDUxQzYzRkM2Q0NEN0IxQTVERDhDOUUz QzkzQjk2QjAeFw0yNTExMDQxNDU3MDRaFw0yNTExMDcyMjA3MDRaMDMxMTAvBgNV BAMTKDREMjU1OEYwODU1NjU5QjlGMzg2NzE1MTA0NjhFOTk1MDc5NjNCNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsUewf5DIf4+u7+oCryUxdzdtL v8To9ApsdC0TM9TPruJFBomwVeGUuAp/JVZTFNVwxZK5G15/imDHHcWPzQbzQgnM tcV7ol+zbP5yc1ZqN5dRjaXGxfSUkq/UdDCAYnfPnd8LKkgg47SwRrXbNenSBHds KraPRkJ1kg1qUCFC0zenTWDUCtxz9TV9YRwzZ0piBx+nekEfmoZfilXKU6E6fFjK IHllvqwjjzIQi7jyfWjeRPJNvihlKys24hTt+p5G0kQp4VpQU0sIzmPTxNlj4Tya KU8BD3cosPeD5H2Gwe2KMmHdkGJF37tyrMqv9PGKrB0Cdig6xcaiq9u2XgTrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTSVY8IVWWbnzhnFRBGjplQeWO1AwHwYDVR0j BBgwFoAUM43rjXBRxj/GzNexpd2MnjyTuWswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MjRhNjVmNC00ZjRiLTQ0YjYtYTJlYi01OTk1N2JjNmE0ZDMvMC8zMzhERUI4RDcw NTFDNjNGQzZDQ0Q3QjFBNUREOEM5RTNDOTNCOTZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzM4REVCOEQ3MDUxQzYzRkM2Q0NEN0IxQTVERDhDOUUzQzkz Qjk2Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzI0YTY1ZjQtNGY0Yi00NGI2LWEy ZWItNTk5NTdiYzZhNGQzLzAvMzM4REVCOEQ3MDUxQzYzRkM2Q0NEN0IxQTVERDhD OUUzQzkzQjk2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACg1knvMWP+l/DT3Aw8Zll6ZrC7z41o6PF8g KVgbNx5eRzQ3qilY33pdf/w8dbFaVVvEvWf0j3k+EqwdoJtJ+jrvCGwyJTKy9ozv MY/cqsii3u0FlWB3kkut1r4ZPnt/46fsUaPksGGwbY+w06PXow5t9bmGXFs2aIPo SK8s/AVzDUrjqONqBK5AaVCmbcVZeKQ9qq/wNQsWtvemLpYOFxMnudacPmEhTNNL tZQ0QP3/7NoToMuWsIJsOrd4CprRJofh/DnKVYuoiL5dmTZv8A+LuSIG3Q7lfYaZ nnLIBZAF8eAAmJYGmY089AlC/TejDLzL4SDZ23rqlTFgQms9MOI= -----END CERTIFICATE-----Generated at Tue Nov 4 21:14:52 2025 by rpki-client