$ rpki-client -vvf repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft File: 02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft (raw, json) Hash identifier: bJsaIgq3QAOaQ64MdN9rYDb9gliXR/H26sUYR7wq918= Subject key identifier: 13:8E:D1:66:C7:3F:A6:97:87:E8:B1:F0:57:26:91:3A:C5:22:47:8A Authority key identifier: 02:23:69:13:B4:6A:90:03:C0:64:5E:6C:C8:58:EA:54:D6:D7:F4:AC Certificate issuer: /CN=02236913B46A9003C0645E6CC858EA54D6D7F4AC Certificate serial: 3326E91796B090EC26DC206ACFA9941858EED87C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02236913B46A9003C0645E6CC858EA54D6D7F4AC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft Manifest number: ED Signing time: Sat 09 Aug 2025 20:21:04 +0000 Manifest this update: Sat 09 Aug 2025 20:16:04 +0000 Manifest next update: Wed 13 Aug 2025 04:52:04 +0000 Files and hashes: 1: 02236913B46A9003C0645E6CC858EA54D6D7F4AC.crl (hash: VPeO39QrUsBi4REbR1FeJTG0eKHt8bgQDdcLKTUGvNk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.crl rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02236913B46A9003C0645E6CC858EA54D6D7F4AC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 04:52:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:26:e9:17:96:b0:90:ec:26:dc:20:6a:cf:a9:94:18:58:ee:d8:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02236913B46A9003C0645E6CC858EA54D6D7F4AC Validity Not Before: Aug 9 20:16:04 2025 GMT Not After : Aug 13 04:52:04 2025 GMT Subject: CN=138ED166C73FA69787E8B1F05726913AC522478A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c1:57:ac:74:ce:04:1b:dc:99:60:fc:ab:80: 35:f0:d3:91:2b:21:2d:bb:a5:a0:a9:6e:0a:4b:f1: fa:38:e3:df:af:5b:35:31:92:79:57:cb:36:d8:d3: 06:1a:9d:5f:f9:60:58:94:d4:31:53:74:54:a7:32: c0:16:66:fc:b8:6e:2b:e2:e7:80:9d:c6:83:28:ba: 43:20:6a:e7:85:23:8a:91:00:d5:d3:61:86:d4:31: e6:da:cc:62:e8:2c:e5:96:fd:1e:3c:ff:ca:dd:96: 39:97:db:b2:c3:e4:45:90:04:6b:32:df:c5:13:50: 53:e5:f2:fa:33:d1:b1:af:f6:fb:e3:5a:0e:26:af: 4c:97:a5:ee:fb:b1:f6:b9:2d:6c:90:28:ea:25:30: 32:d2:23:76:c1:d3:90:61:af:10:e8:8e:21:5f:e8: b4:e4:eb:86:50:a5:91:0f:f9:f9:b9:4b:24:14:df: b1:27:65:f3:fe:30:ac:7b:b1:20:e7:e1:d6:0b:17: c2:df:e7:77:f7:52:36:35:bb:fd:1d:a1:66:f7:65: e6:d2:9d:fb:ed:02:0e:4e:b8:54:79:37:a6:89:7e: e5:4a:32:83:8f:9a:3e:ad:a2:03:25:06:3a:a2:34: f4:c9:63:84:ad:d3:48:99:66:b5:82:72:ee:37:c0: ac:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:8E:D1:66:C7:3F:A6:97:87:E8:B1:F0:57:26:91:3A:C5:22:47:8A X509v3 Authority Key Identifier: keyid:02:23:69:13:B4:6A:90:03:C0:64:5E:6C:C8:58:EA:54:D6:D7:F4:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02236913B46A9003C0645E6CC858EA54D6D7F4AC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:30:06:af:94:29:af:cc:21:59:66:c1:0f:0f:d8:45:ff:ea: e3:e6:75:12:39:d0:f7:79:1f:b6:56:37:55:52:d1:8c:71:b8: 64:8d:33:f1:c1:be:6f:5a:ab:5a:15:86:22:47:a6:9c:42:e9: db:08:34:40:8f:38:c3:98:1e:23:11:88:66:25:ba:b1:68:a8: a0:bf:43:79:a8:f1:fb:95:4f:83:89:31:85:91:9f:2d:34:26: be:e1:75:6b:49:38:97:00:9a:c4:c9:4a:8b:11:8b:fa:43:d5: df:19:9b:d7:9b:1a:77:a6:af:2e:0f:96:c6:52:93:fe:49:b8: ca:f0:fa:82:1d:be:2e:0e:6c:27:70:7b:07:92:82:00:25:e2: 9b:91:7c:9b:98:22:b5:3f:cb:87:ca:c2:90:49:21:e7:fc:0f: 3b:a5:57:a6:20:5c:a8:70:22:2b:1e:fc:e2:eb:79:2b:0a:13: 6d:05:e6:76:89:1c:60:75:5a:5c:a1:a6:49:42:3d:c0:30:96: 7c:1c:d3:f5:3c:bf:8e:a8:5a:37:7f:b0:79:cd:82:d7:9c:76: 1a:52:14:fb:14:fd:ed:6f:3b:cd:dd:a6:b2:b4:6f:7b:1e:d1: c7:6f:0a:76:3c:b7:6d:65:39:2c:27:9d:8d:55:86:eb:47:98: a6:9a:77:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMybpF5awkOwm3CBqz6mUGFju2HwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIyMzY5MTNCNDZBOTAwM0MwNjQ1RTZDQzg1OEVBNTRE NkQ3RjRBQzAeFw0yNTA4MDkyMDE2MDRaFw0yNTA4MTMwNDUyMDRaMDMxMTAvBgNV BAMTKDEzOEVEMTY2QzczRkE2OTc4N0U4QjFGMDU3MjY5MTNBQzUyMjQ3OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBwVesdM4EG9yZYPyrgDXw05Er IS27paCpbgpL8fo449+vWzUxknlXyzbY0wYanV/5YFiU1DFTdFSnMsAWZvy4bivi 54CdxoMoukMgaueFI4qRANXTYYbUMebazGLoLOWW/R48/8rdljmX27LD5EWQBGsy 38UTUFPl8voz0bGv9vvjWg4mr0yXpe77sfa5LWyQKOolMDLSI3bB05BhrxDojiFf 6LTk64ZQpZEP+fm5SyQU37EnZfP+MKx7sSDn4dYLF8Lf53f3UjY1u/0doWb3ZebS nfvtAg5OuFR5N6aJfuVKMoOPmj6togMlBjqiNPTJY4St00iZZrWCcu43wKwjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE47RZsc/ppeH6LHwVyaROsUiR4owHwYDVR0j BBgwFoAUAiNpE7RqkAPAZF5syFjqVNbX9KwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YjcyZjcxYS1iOWMyLTQwMzMtOTY3NS1kNzcwNzYwM2E4MmMvMC8wMjIzNjkxM0I0 NkE5MDAzQzA2NDVFNkNDODU4RUE1NEQ2RDdGNEFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDIyMzY5MTNCNDZBOTAwM0MwNjQ1RTZDQzg1OEVBNTRENkQ3 RjRBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI3MmY3MWEtYjljMi00MDMzLTk2 NzUtZDc3MDc2MDNhODJjLzAvMDIyMzY5MTNCNDZBOTAwM0MwNjQ1RTZDQzg1OEVB NTRENkQ3RjRBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE0wBq+UKa/MIVlmwQ8P2EX/6uPmdRI50Pd5 H7ZWN1VS0YxxuGSNM/HBvm9aq1oVhiJHppxC6dsINECPOMOYHiMRiGYlurFoqKC/ Q3mo8fuVT4OJMYWRny00Jr7hdWtJOJcAmsTJSosRi/pD1d8Zm9ebGnemry4PlsZS k/5JuMrw+oIdvi4ObCdweweSggAl4puRfJuYIrU/y4fKwpBJIef8DzulV6YgXKhw Iise/OLreSsKE20F5naJHGB1WlyhpklCPcAwlnwc0/U8v46oWjd/sHnNgtecdhpS FPsU/e1vO83dprK0b3se0cdvCnY8t21lOSwnnY1VhutHmKaadzA= -----END CERTIFICATE-----Generated at Mon Aug 11 09:52:22 2025 by rpki-client