$ rpki-client -vvf repo-rpki.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.mft File: B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.mft (raw, json) Hash identifier: gebt9wpkJxS6ExUTOzG1OgiY94WbFoUwKXJzzX4OhK0= Subject key identifier: 18:C1:FE:A4:24:EB:89:62:6A:B5:C7:23:5A:98:7A:FE:02:9E:37:35 Authority key identifier: B0:D5:A0:53:40:C5:5C:7E:2C:DC:83:AD:CE:47:74:AF:0C:C1:84:C1 Certificate issuer: /CN=B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1 Certificate serial: 46EA590CA34B24059EEA29D50BBB08FBD1B142BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.mft Manifest number: 02EE Signing time: Wed 06 Aug 2025 19:51:04 +0000 Manifest this update: Wed 06 Aug 2025 19:46:04 +0000 Manifest next update: Sat 09 Aug 2025 22:22:04 +0000 Files and hashes: 1: B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.crl (hash: /nrbGCxObw0HMbBGiaaBC2+JN5vbJ+WR2mXJkTe1nng=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.crl rsync://repo-rpki.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 22:22:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:ea:59:0c:a3:4b:24:05:9e:ea:29:d5:0b:bb:08:fb:d1:b1:42:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1 Validity Not Before: Aug 6 19:46:04 2025 GMT Not After : Aug 9 22:22:04 2025 GMT Subject: CN=18C1FEA424EB89626AB5C7235A987AFE029E3735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:28:41:20:1e:62:4f:e6:9b:fa:fd:0b:5f:88: ec:1f:fb:0e:f9:b9:f4:06:bc:25:13:e0:6c:97:60: fa:92:cf:cd:b1:55:f3:cd:28:42:b1:f9:ce:02:16: e4:8c:1f:80:65:ef:cf:ca:21:25:05:9f:48:c1:f3: d5:e6:76:92:b6:12:71:93:45:b3:12:83:5e:a9:d1: 61:dd:62:b2:ca:79:a6:7a:b3:2f:56:bf:e1:ba:3a: c6:06:0b:10:ef:49:37:27:bc:8a:a4:a5:7a:0a:2d: 90:b1:9e:f4:9b:a7:d2:9a:0a:7b:f3:43:84:bb:23: 93:03:c9:7c:29:2d:79:c3:7e:d3:38:50:b2:e9:83: 14:b2:e5:9d:8a:7f:13:fa:dd:af:bc:46:95:8c:0b: b5:e8:c8:35:41:77:cd:d3:46:1a:02:79:db:d1:8b: ca:7b:75:f9:43:35:1a:6b:89:b1:e5:3e:f0:b2:b5: e5:8a:ac:05:de:26:35:ae:85:1e:66:04:b1:70:6d: 09:cd:35:ba:dd:d9:4b:13:f2:64:17:0c:89:6d:73: 21:27:37:30:84:07:df:4d:c2:3e:13:57:94:f7:a6: 36:ff:9d:ca:b6:6e:24:fd:1e:89:88:ee:05:fd:68: 04:6b:f9:62:ed:b5:a9:06:aa:70:63:a7:8f:80:2d: 9a:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:C1:FE:A4:24:EB:89:62:6A:B5:C7:23:5A:98:7A:FE:02:9E:37:35 X509v3 Authority Key Identifier: keyid:B0:D5:A0:53:40:C5:5C:7E:2C:DC:83:AD:CE:47:74:AF:0C:C1:84:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:ba:b9:c4:12:d0:d6:48:c3:1a:7d:73:83:cf:67:5a:eb:fb: 4f:16:b5:9a:18:42:f1:fb:83:46:d8:04:ed:1a:88:b6:9f:13: 65:a2:dd:cf:6c:07:ce:c4:1e:10:f0:c6:bf:c5:35:64:d5:12: 0f:40:1b:a8:a6:90:65:1e:7c:55:21:69:55:54:e5:76:64:e4: 41:0c:68:fc:47:8a:f1:dd:e5:a9:66:68:af:bd:be:27:24:03: 6e:07:42:1d:10:c5:e9:18:db:0d:f3:c5:e2:4c:a8:91:2c:53: 0a:c9:24:a1:4f:42:9e:c8:3a:9f:1e:3e:39:5c:7f:29:8d:41: 77:67:70:30:10:71:22:52:a3:24:7e:4a:bc:f4:2c:80:5e:48: ac:47:dd:8a:02:dc:77:99:07:8c:c8:82:11:b2:bf:ea:eb:cf: 08:e0:f2:b1:06:33:0f:58:a5:bf:34:6a:bf:36:dd:9a:56:4e: 28:72:0a:22:51:94:82:47:2a:8c:a1:98:07:da:b7:63:af:43: 95:cb:5c:cc:4c:d3:cd:8c:0d:51:89:69:98:f2:be:53:9a:5e: 10:a5:76:34:c5:79:3b:55:37:e4:84:26:4e:31:ad:c7:87:b0: 0e:0a:65:2a:b0:87:39:b9:52:b8:bc:8d:fc:fb:59:71:e2:29: 5b:36:c3:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURupZDKNLJAWe6inVC7sI+9GxQrswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBENUEwNTM0MEM1NUM3RTJDREM4M0FEQ0U0Nzc0QUYw Q0MxODRDMTAeFw0yNTA4MDYxOTQ2MDRaFw0yNTA4MDkyMjIyMDRaMDMxMTAvBgNV BAMTKDE4QzFGRUE0MjRFQjg5NjI2QUI1QzcyMzVBOTg3QUZFMDI5RTM3MzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBKEEgHmJP5pv6/QtfiOwf+w75 ufQGvCUT4GyXYPqSz82xVfPNKEKx+c4CFuSMH4Bl78/KISUFn0jB89XmdpK2EnGT RbMSg16p0WHdYrLKeaZ6sy9Wv+G6OsYGCxDvSTcnvIqkpXoKLZCxnvSbp9KaCnvz Q4S7I5MDyXwpLXnDftM4ULLpgxSy5Z2KfxP63a+8RpWMC7XoyDVBd83TRhoCedvR i8p7dflDNRpribHlPvCyteWKrAXeJjWuhR5mBLFwbQnNNbrd2UsT8mQXDIltcyEn NzCEB99Nwj4TV5T3pjb/ncq2biT9HomI7gX9aARr+WLttakGqnBjp4+ALZqfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGMH+pCTriWJqtccjWph6/gKeNzUwHwYDVR0j BBgwFoAUsNWgU0DFXH4s3IOtzkd0rwzBhMEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MWNmNTY1Ny1lY2RjLTRkOTctYTU5Yy1iNjc2Y2U1M2M4YTEvMC9CMEQ1QTA1MzQw QzU1QzdFMkNEQzgzQURDRTQ3NzRBRjBDQzE4NEMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjBENUEwNTM0MEM1NUM3RTJDREM4M0FEQ0U0Nzc0QUYwQ0Mx ODRDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODFjZjU2NTctZWNkYy00ZDk3LWE1 OWMtYjY3NmNlNTNjOGExLzAvQjBENUEwNTM0MEM1NUM3RTJDREM4M0FEQ0U0Nzc0 QUYwQ0MxODRDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJm6ucQS0NZIwxp9c4PPZ1rr+08WtZoYQvH7 g0bYBO0aiLafE2Wi3c9sB87EHhDwxr/FNWTVEg9AG6imkGUefFUhaVVU5XZk5EEM aPxHivHd5almaK+9vickA24HQh0QxekY2w3zxeJMqJEsUwrJJKFPQp7IOp8ePjlc fymNQXdncDAQcSJSoyR+Srz0LIBeSKxH3YoC3HeZB4zIghGyv+rrzwjg8rEGMw9Y pb80ar823ZpWTihyCiJRlIJHKoyhmAfat2OvQ5XLXMxM082MDVGJaZjyvlOaXhCl djTFeTtVN+SEJk4xrceHsA4KZSqwhzm5Uri8jfz7WXHiKVs2w50= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:59 2025 by rpki-client