$ rpki-client -vvf repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.mft File: A349D07CAB13BF067B13D95E99981C2BA84B9A6B.mft (raw, json) Hash identifier: SDI0r7I76J9QFtzX564FZlOQellPDoQntbgT4nX9U78= Subject key identifier: E1:4D:D6:FD:F6:22:DE:63:47:79:78:54:CC:DF:3E:DC:69:6E:A9:B2 Authority key identifier: A3:49:D0:7C:AB:13:BF:06:7B:13:D9:5E:99:98:1C:2B:A8:4B:9A:6B Certificate issuer: /CN=A349D07CAB13BF067B13D95E99981C2BA84B9A6B Certificate serial: 6FA516DCBE4D3141EFF570E9A92914F3F98A5EC4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.mft Manifest number: 04A7 Signing time: Wed 06 Aug 2025 05:30:37 +0000 Manifest this update: Wed 06 Aug 2025 05:25:37 +0000 Manifest next update: Sat 09 Aug 2025 14:23:37 +0000 Files and hashes: 1: A349D07CAB13BF067B13D95E99981C2BA84B9A6B.crl (hash: 9Hwt5Uyb+gsE5OWeUFFO1cgfDa/6+L/m3keO1fe8oZ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.crl rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 14:23:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:a5:16:dc:be:4d:31:41:ef:f5:70:e9:a9:29:14:f3:f9:8a:5e:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A349D07CAB13BF067B13D95E99981C2BA84B9A6B Validity Not Before: Aug 6 05:25:37 2025 GMT Not After : Aug 9 14:23:37 2025 GMT Subject: CN=E14DD6FDF622DE6347797854CCDF3EDC696EA9B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c8:c1:fb:96:92:cc:eb:2e:22:81:9e:22:cc: e2:2a:d7:7f:70:ad:e0:ba:f9:1d:80:fa:b8:0e:c3: c9:2e:e0:45:61:61:69:c5:52:7a:d0:6a:77:59:47: 3b:cd:c3:b4:b3:ab:cb:b6:65:98:3e:db:a2:30:c0: 02:43:43:f4:58:9c:aa:e2:1f:49:ee:44:13:53:6b: 55:b6:05:90:47:1e:0f:4f:2e:14:b5:c5:cb:2f:6b: 87:32:fa:27:ae:e1:11:8a:07:e4:e6:79:6e:aa:0b: 28:29:c5:b5:13:85:c3:4a:bc:e0:d4:35:49:40:3e: b9:ae:d1:c9:c5:9a:82:9a:ad:f9:de:0e:ce:e2:95: 79:6e:08:d9:04:84:9f:68:1e:d4:6c:2a:6a:bb:88: 48:7b:11:50:0e:cb:25:2c:95:d8:59:78:99:b6:5a: aa:aa:66:d4:81:18:a9:a7:05:48:7a:05:2e:14:36: 3b:14:48:da:92:05:f0:39:53:a3:32:14:19:21:a7: db:7e:bb:d4:75:24:83:87:76:73:99:f8:4d:0b:1f: 88:19:cb:9b:d6:5d:0c:80:fd:a3:cd:ad:c8:d8:9f: 39:cd:a0:2b:6a:28:fa:b7:5e:83:32:a0:3b:6b:9e: 34:12:41:76:63:bf:67:b0:16:0a:64:fc:80:4b:51: 9a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:4D:D6:FD:F6:22:DE:63:47:79:78:54:CC:DF:3E:DC:69:6E:A9:B2 X509v3 Authority Key Identifier: keyid:A3:49:D0:7C:AB:13:BF:06:7B:13:D9:5E:99:98:1C:2B:A8:4B:9A:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:10:8b:62:c2:49:bb:b2:69:72:5c:2b:db:d1:87:28:94:f7: ed:bb:39:12:43:7e:c6:1a:f7:0d:86:de:f3:0c:21:c7:ec:d6: ce:9e:5b:8e:6a:74:ee:41:39:b9:2f:5a:e4:12:38:e4:7c:d1: ef:26:f8:4a:2f:3b:47:83:df:bf:21:e4:05:e2:33:be:ec:cf: e2:04:0e:9a:25:da:5f:13:7d:6d:ad:3f:e8:bd:32:3f:54:94: 76:a4:63:8d:89:2e:24:0d:2d:9d:17:b5:d3:7c:8a:ea:5c:86: 96:d9:0b:28:84:b7:24:2d:f5:4f:d4:a7:3b:c6:f0:38:d6:32: e4:ae:86:28:c8:20:36:55:d4:0a:aa:cc:ba:0b:b4:82:10:0f: 75:c8:d8:40:9b:31:cf:33:95:10:9e:47:3a:5c:ac:f2:50:48: c3:7d:49:77:c6:f6:7c:c2:8f:9f:5e:72:b9:72:7c:27:bd:fd: 47:bf:21:e9:3d:69:6d:6b:4c:0c:47:6a:73:e2:0a:80:ce:db: 53:94:e2:e5:f4:ff:84:bc:29:5c:73:6e:d1:82:49:98:6e:c5: 0a:d0:09:1e:3d:e6:13:05:4d:14:af:43:a2:ea:21:da:0c:7e: 4e:aa:5c:34:43:e2:c7:8a:66:19:3f:f6:78:42:15:1a:e8:8f: 52:b9:97:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb6UW3L5NMUHv9XDpqSkU8/mKXsQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM0OUQwN0NBQjEzQkYwNjdCMTNEOTVFOTk5ODFDMkJB ODRCOUE2QjAeFw0yNTA4MDYwNTI1MzdaFw0yNTA4MDkxNDIzMzdaMDMxMTAvBgNV BAMTKEUxNERENkZERjYyMkRFNjM0Nzc5Nzg1NENDREYzRURDNjk2RUE5QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJyMH7lpLM6y4igZ4izOIq139w reC6+R2A+rgOw8ku4EVhYWnFUnrQandZRzvNw7Szq8u2ZZg+26IwwAJDQ/RYnKri H0nuRBNTa1W2BZBHHg9PLhS1xcsva4cy+ieu4RGKB+TmeW6qCygpxbUThcNKvODU NUlAPrmu0cnFmoKarfneDs7ilXluCNkEhJ9oHtRsKmq7iEh7EVAOyyUsldhZeJm2 WqqqZtSBGKmnBUh6BS4UNjsUSNqSBfA5U6MyFBkhp9t+u9R1JIOHdnOZ+E0LH4gZ y5vWXQyA/aPNrcjYnznNoCtqKPq3XoMyoDtrnjQSQXZjv2ewFgpk/IBLUZr5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4U3W/fYi3mNHeXhUzN8+3GluqbIwHwYDVR0j BBgwFoAUo0nQfKsTvwZ7E9lemZgcK6hLmmswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YWRmY2I0NC1hZTdhLTQ0MjMtYWU3ZC0wODY0OGJmMWRlYjEvMC9BMzQ5RDA3Q0FC MTNCRjA2N0IxM0Q5NUU5OTk4MUMyQkE4NEI5QTZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTM0OUQwN0NBQjEzQkYwNjdCMTNEOTVFOTk5ODFDMkJBODRC OUE2Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmFkZmNiNDQtYWU3YS00NDIzLWFl N2QtMDg2NDhiZjFkZWIxLzAvQTM0OUQwN0NBQjEzQkYwNjdCMTNEOTVFOTk5ODFD MkJBODRCOUE2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACwQi2LCSbuyaXJcK9vRhyiU9+27ORJDfsYa 9w2G3vMMIcfs1s6eW45qdO5BObkvWuQSOOR80e8m+EovO0eD378h5AXiM77sz+IE Dpol2l8TfW2tP+i9Mj9UlHakY42JLiQNLZ0XtdN8iupchpbZCyiEtyQt9U/UpzvG 8DjWMuSuhijIIDZV1AqqzLoLtIIQD3XI2ECbMc8zlRCeRzpcrPJQSMN9SXfG9nzC j59ecrlyfCe9/Ue/Iek9aW1rTAxHanPiCoDO21OU4uX0/4S8KVxzbtGCSZhuxQrQ CR495hMFTRSvQ6LqIdoMfk6qXDRD4seKZhk/9nhCFRroj1K5l64= -----END CERTIFICATE-----Generated at Thu Aug 7 03:24:43 2025 by rpki-client