$ rpki-client -vvf repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.mft File: 338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.mft (raw, json) Hash identifier: Z00djJ6wcTDyMEPhQB6XExKSxlnAurq0Z6mpX0+BN7s= Subject key identifier: 28:B4:AF:EE:0F:E9:34:18:87:9A:B3:26:F2:F9:4E:C8:31:60:2D:00 Authority key identifier: 33:8D:EB:8D:70:51:C6:3F:C6:CC:D7:B1:A5:DD:8C:9E:3C:93:B9:6B Certificate issuer: /CN=338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B Certificate serial: 5983786D5761A310240E5949F018259D69454828 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.mft Manifest number: 04C4 Signing time: Thu 07 Aug 2025 10:02:06 +0000 Manifest this update: Thu 07 Aug 2025 09:57:06 +0000 Manifest next update: Sun 10 Aug 2025 14:04:06 +0000 Files and hashes: 1: 338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.crl (hash: SJNoPlPiyaK2jHUzgMMATV1/bczEpIgMNBo/NlE5HxM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.crl rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 14:04:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:83:78:6d:57:61:a3:10:24:0e:59:49:f0:18:25:9d:69:45:48:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B Validity Not Before: Aug 7 09:57:06 2025 GMT Not After : Aug 10 14:04:06 2025 GMT Subject: CN=28B4AFEE0FE93418879AB326F2F94EC831602D00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4c:64:f9:8f:ff:7c:8f:3a:3e:a2:6f:6d:50: 97:2a:51:25:50:1b:1e:9b:63:04:a6:cc:91:e7:83: 4b:61:65:14:44:18:a6:c2:ee:bd:9a:03:ff:83:f4: 14:db:68:c5:9f:f4:1c:51:87:d1:24:2e:20:ac:24: b4:42:7d:c4:3d:70:8b:7c:d4:3e:4f:95:ee:a5:f3: dd:f7:9c:05:73:3e:b2:d5:01:bc:12:39:00:9b:9f: b2:56:5c:c6:93:1c:4f:c5:18:49:e6:d5:73:3c:41: f5:c9:dd:3a:dc:a8:be:3f:8c:4d:c8:8a:56:3d:ac: 9a:7e:2e:60:a0:47:b0:9c:79:1c:18:93:4c:64:2e: 62:68:2c:c5:87:39:fc:8e:ec:3d:b9:5e:53:48:65: 84:b0:e0:ec:79:66:ed:cc:7a:05:ce:84:6e:85:3b: a8:57:2f:29:07:35:3a:f0:1b:b8:70:b3:d4:45:a3: f1:b6:79:0f:81:cb:f7:db:1c:6e:41:e0:5c:23:37: 41:29:6c:51:6c:1f:b3:12:5a:b0:2d:10:bd:63:58: 3c:1a:29:df:37:b5:77:03:0c:80:10:06:8a:ae:cd: 2c:de:b1:c0:e8:9d:4d:6d:54:41:67:8e:0d:bb:dc: 8e:05:01:21:85:fc:43:92:97:d6:03:16:59:12:83: af:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B4:AF:EE:0F:E9:34:18:87:9A:B3:26:F2:F9:4E:C8:31:60:2D:00 X509v3 Authority Key Identifier: keyid:33:8D:EB:8D:70:51:C6:3F:C6:CC:D7:B1:A5:DD:8C:9E:3C:93:B9:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:44:74:54:7b:3c:56:96:10:f4:d2:3e:45:5c:a9:8d:21:66: 56:08:73:51:3c:4f:c2:f8:89:bb:c4:eb:91:89:cd:3d:fc:da: b2:63:bc:f7:a3:d6:74:a9:57:de:7c:7d:ab:e9:99:2a:8a:7d: 25:30:0b:1c:c9:c7:09:f5:97:69:05:c9:81:7d:ef:97:c6:fb: 2c:83:d8:28:f9:e1:4d:6e:31:c1:3d:f3:5e:59:b2:8a:9e:b7: 55:05:27:9f:d1:3d:41:8e:00:24:57:6f:59:12:44:9d:2b:3c: 52:88:17:1f:84:15:4b:d2:98:e4:f2:c8:5e:b0:77:14:64:8b: ed:f9:d7:a9:4d:d2:5a:7d:72:4e:a0:d6:17:9a:2f:bc:ff:51: f9:e3:52:16:1a:67:02:17:74:32:84:fb:fe:ae:a3:ec:c8:b4: 6f:13:f8:7b:09:b3:0d:05:49:0f:fa:e9:0f:42:ad:73:f2:39: 12:74:e3:79:d6:8d:f9:48:a6:0b:77:f9:a7:65:3c:40:28:cc: 07:9c:22:0f:1a:76:d5:68:08:1c:89:03:ed:b5:11:55:1b:9a: a4:7a:a4:40:0b:8c:68:c6:aa:2d:f5:fc:40:a3:dd:b4:db:cb: 6d:30:46:7c:ef:fe:df:3b:d5:aa:c9:71:9f:0f:e3:08:f0:7d: bf:9f:3c:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWYN4bVdhoxAkDllJ8BglnWlFSCgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM4REVCOEQ3MDUxQzYzRkM2Q0NEN0IxQTVERDhDOUUz QzkzQjk2QjAeFw0yNTA4MDcwOTU3MDZaFw0yNTA4MTAxNDA0MDZaMDMxMTAvBgNV BAMTKDI4QjRBRkVFMEZFOTM0MTg4NzlBQjMyNkYyRjk0RUM4MzE2MDJEMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwTGT5j/98jzo+om9tUJcqUSVQ Gx6bYwSmzJHng0thZRREGKbC7r2aA/+D9BTbaMWf9BxRh9EkLiCsJLRCfcQ9cIt8 1D5Ple6l8933nAVzPrLVAbwSOQCbn7JWXMaTHE/FGEnm1XM8QfXJ3TrcqL4/jE3I ilY9rJp+LmCgR7CceRwYk0xkLmJoLMWHOfyO7D25XlNIZYSw4Ox5Zu3MegXOhG6F O6hXLykHNTrwG7hws9RFo/G2eQ+By/fbHG5B4FwjN0EpbFFsH7MSWrAtEL1jWDwa Kd83tXcDDIAQBoquzSzescDonU1tVEFnjg273I4FASGF/EOSl9YDFlkSg6+lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKLSv7g/pNBiHmrMm8vlOyDFgLQAwHwYDVR0j BBgwFoAUM43rjXBRxj/GzNexpd2MnjyTuWswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MjRhNjVmNC00ZjRiLTQ0YjYtYTJlYi01OTk1N2JjNmE0ZDMvMC8zMzhERUI4RDcw NTFDNjNGQzZDQ0Q3QjFBNUREOEM5RTNDOTNCOTZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzM4REVCOEQ3MDUxQzYzRkM2Q0NEN0IxQTVERDhDOUUzQzkz Qjk2Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzI0YTY1ZjQtNGY0Yi00NGI2LWEy ZWItNTk5NTdiYzZhNGQzLzAvMzM4REVCOEQ3MDUxQzYzRkM2Q0NEN0IxQTVERDhD OUUzQzkzQjk2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAChEdFR7PFaWEPTSPkVcqY0hZlYIc1E8T8L4 ibvE65GJzT382rJjvPej1nSpV958favpmSqKfSUwCxzJxwn1l2kFyYF975fG+yyD 2Cj54U1uMcE9815Zsoqet1UFJ5/RPUGOACRXb1kSRJ0rPFKIFx+EFUvSmOTyyF6w dxRki+3516lN0lp9ck6g1heaL7z/UfnjUhYaZwIXdDKE+/6uo+zItG8T+HsJsw0F SQ/66Q9CrXPyORJ043nWjflIpgt3+adlPEAozAecIg8adtVoCByJA+21EVUbmqR6 pEALjGjGqi31/ECj3bTby20wRnzv/t871arJcZ8P4wjwfb+fPFw= -----END CERTIFICATE-----Generated at Thu Aug 7 11:12:49 2025 by rpki-client