$ rpki-client -vvf repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft File: D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft (raw, json) Hash identifier: 2+THW3qTsu062yWrdT/afIvkPD00ehiC5LxccHBdg74= Subject key identifier: 12:0C:CA:D8:C0:B5:8C:5C:86:72:87:88:5D:B9:22:75:FE:46:A9:78 Authority key identifier: D2:89:2B:AB:EE:5F:3B:29:8F:67:4D:48:B1:A6:A8:D6:38:54:6C:DF Certificate issuer: /CN=D2892BABEE5F3B298F674D48B1A6A8D638546CDF Certificate serial: 1482F37C10F9B766882AC95CA809EB773D548E3E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft Manifest number: 04E4 Signing time: Tue 05 Aug 2025 11:32:11 +0000 Manifest this update: Tue 05 Aug 2025 11:27:11 +0000 Manifest next update: Fri 08 Aug 2025 14:23:11 +0000 Files and hashes: 1: D2892BABEE5F3B298F674D48B1A6A8D638546CDF.crl (hash: 6471eDtE94pa4P+7FqAxGiS/EzkgvkhV1pzMk/g+6PE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.crl rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 14:23:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:82:f3:7c:10:f9:b7:66:88:2a:c9:5c:a8:09:eb:77:3d:54:8e:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2892BABEE5F3B298F674D48B1A6A8D638546CDF Validity Not Before: Aug 5 11:27:11 2025 GMT Not After : Aug 8 14:23:11 2025 GMT Subject: CN=120CCAD8C0B58C5C867287885DB92275FE46A978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b1:95:1f:1f:7a:32:24:58:e3:42:7e:7e:89: 44:3f:79:31:b3:68:1c:8a:86:ad:18:2c:40:19:c8: ea:d7:44:f6:b2:1c:f5:fd:2a:06:0d:e5:b7:dd:c0: 99:60:30:e2:10:92:43:5f:19:08:69:a3:fd:39:26: 2a:72:17:d2:f6:d9:e1:37:06:d4:37:46:bd:34:ea: a5:e1:82:1f:da:7c:40:4f:6f:a0:46:c9:0f:12:67: ef:6d:f9:ef:78:7b:f7:a6:2b:63:7b:63:0a:db:bb: 3c:bc:28:ee:f1:63:91:d9:0e:27:33:8b:6b:ce:6a: 39:d5:81:99:06:40:0e:70:fb:8b:c1:b9:d4:33:77: b7:cb:30:8e:2d:59:a3:86:11:b9:4f:ef:ef:0e:7e: b6:96:b6:13:0d:c5:f3:cf:79:15:cd:9c:1b:96:44: bd:a4:2e:ba:a5:2e:b8:77:a8:bf:b0:59:06:ed:26: 94:b5:03:26:58:62:c8:0c:b3:3f:42:07:64:de:21: c9:a6:9d:d8:0b:33:cd:9b:f3:3a:00:44:fc:27:ad: c2:60:f7:9a:64:94:6d:76:2e:a1:1d:c8:ea:2d:39: 36:57:36:1e:2b:05:e2:d5:4d:db:3e:d9:c0:18:b9: 59:12:54:1b:06:14:76:1b:82:c0:a0:e3:e0:3c:d2: e8:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:0C:CA:D8:C0:B5:8C:5C:86:72:87:88:5D:B9:22:75:FE:46:A9:78 X509v3 Authority Key Identifier: keyid:D2:89:2B:AB:EE:5F:3B:29:8F:67:4D:48:B1:A6:A8:D6:38:54:6C:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:2e:3c:62:48:80:69:d2:5a:a0:ea:31:4c:ab:d1:ac:f7:12: fa:3d:da:73:10:10:13:54:69:bf:a3:70:7d:ea:33:29:5a:90: 80:5e:c0:d0:b5:f2:c6:94:73:90:b9:5a:3a:7d:2e:ec:d1:92: 11:a9:0f:96:95:3c:80:db:46:c2:dd:b7:cc:fd:95:43:2f:6c: 66:e3:11:83:a6:3c:75:19:29:60:49:aa:eb:6f:c2:b8:1d:0f: 96:67:03:f2:d9:46:55:3f:33:38:f1:6d:ae:6e:7b:b5:57:6b: 14:bf:08:b2:19:39:f6:43:e4:70:4f:65:da:c3:f5:33:62:26: f8:dd:82:e0:ce:5d:19:19:b0:a7:b3:05:5e:3b:0e:a3:85:37: d2:8a:3a:16:0d:32:e4:2a:51:4f:24:dd:7a:1c:9b:69:ed:5a: 4e:72:a0:81:38:1f:66:b9:8d:9f:d9:48:0f:e8:00:11:42:9d: 83:a3:46:9b:23:5d:76:28:e5:56:c0:00:56:2e:e8:80:65:9c: e7:dd:0b:79:38:1d:5c:3b:4a:11:07:b3:28:d4:06:dc:87:40: 20:66:92:be:ed:72:16:bc:9d:d5:f7:f7:db:5a:b6:8e:b8:d5: 05:7f:85:58:85:21:a1:93:5f:8d:36:ce:3e:3d:72:15:b7:ee: 0e:51:0b:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFILzfBD5t2aIKslcqAnrdz1Ujj4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI4OTJCQUJFRTVGM0IyOThGNjc0RDQ4QjFBNkE4RDYz ODU0NkNERjAeFw0yNTA4MDUxMTI3MTFaFw0yNTA4MDgxNDIzMTFaMDMxMTAvBgNV BAMTKDEyMENDQUQ4QzBCNThDNUM4NjcyODc4ODVEQjkyMjc1RkU0NkE5NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBsZUfH3oyJFjjQn5+iUQ/eTGz aByKhq0YLEAZyOrXRPayHPX9KgYN5bfdwJlgMOIQkkNfGQhpo/05JipyF9L22eE3 BtQ3Rr006qXhgh/afEBPb6BGyQ8SZ+9t+e94e/emK2N7Ywrbuzy8KO7xY5HZDicz i2vOajnVgZkGQA5w+4vBudQzd7fLMI4tWaOGEblP7+8OfraWthMNxfPPeRXNnBuW RL2kLrqlLrh3qL+wWQbtJpS1AyZYYsgMsz9CB2TeIcmmndgLM82b8zoARPwnrcJg 95pklG12LqEdyOotOTZXNh4rBeLVTds+2cAYuVkSVBsGFHYbgsCg4+A80uiPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEgzK2MC1jFyGcoeIXbkidf5GqXgwHwYDVR0j BBgwFoAU0okrq+5fOymPZ01Isaao1jhUbN8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmJjZjFlYy05MjJkLTRjZDctOGNhNi03MjcyNGY2NmU1ZmIvMC9EMjg5MkJBQkVF NUYzQjI5OEY2NzRENDhCMUE2QThENjM4NTQ2Q0RGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI4OTJCQUJFRTVGM0IyOThGNjc0RDQ4QjFBNkE4RDYzODU0 NkNERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjJiY2YxZWMtOTIyZC00Y2Q3LThj YTYtNzI3MjRmNjZlNWZiLzAvRDI4OTJCQUJFRTVGM0IyOThGNjc0RDQ4QjFBNkE4 RDYzODU0NkNERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFouPGJIgGnSWqDqMUyr0az3Evo92nMQEBNU ab+jcH3qMylakIBewNC18saUc5C5Wjp9LuzRkhGpD5aVPIDbRsLdt8z9lUMvbGbj EYOmPHUZKWBJqutvwrgdD5ZnA/LZRlU/Mzjxba5ue7VXaxS/CLIZOfZD5HBPZdrD 9TNiJvjdguDOXRkZsKezBV47DqOFN9KKOhYNMuQqUU8k3Xocm2ntWk5yoIE4H2a5 jZ/ZSA/oABFCnYOjRpsjXXYo5VbAAFYu6IBlnOfdC3k4HVw7ShEHsyjUBtyHQCBm kr7tcha8ndX399tato641QV/hViFIaGTX402zj49chW37g5RC14= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:22 2025 by rpki-client