$ rpki-client -vvf repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.mft File: D4D0F3E6E684847D602FC73758893CE2BB05D399.mft (raw, json) Hash identifier: 6fDA87bMCrqJbZuUlKtDyBky+Lk0tHR4BL9uzVtwrZs= Subject key identifier: 8B:8D:28:33:FB:DF:73:64:C7:5A:45:EB:54:6C:80:E7:9D:7F:D7:DD Authority key identifier: D4:D0:F3:E6:E6:84:84:7D:60:2F:C7:37:58:89:3C:E2:BB:05:D3:99 Certificate issuer: /CN=D4D0F3E6E684847D602FC73758893CE2BB05D399 Certificate serial: 58E2CB5E5C7C50601FB1D2F2B0C33F04CB248C42 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4D0F3E6E684847D602FC73758893CE2BB05D399.cer Subject info access: rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.mft Manifest number: 019B Signing time: Tue 05 Aug 2025 18:00:44 +0000 Manifest this update: Tue 05 Aug 2025 17:55:44 +0000 Manifest next update: Sat 09 Aug 2025 04:31:44 +0000 Files and hashes: 1: D4D0F3E6E684847D602FC73758893CE2BB05D399.crl (hash: n8Xlr43oPsjLZt7ddI0ySiqtmHf5hw5ni/gf7K4zToc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.crl rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4D0F3E6E684847D602FC73758893CE2BB05D399.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 04:31:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:e2:cb:5e:5c:7c:50:60:1f:b1:d2:f2:b0:c3:3f:04:cb:24:8c:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4D0F3E6E684847D602FC73758893CE2BB05D399 Validity Not Before: Aug 5 17:55:44 2025 GMT Not After : Aug 9 04:31:44 2025 GMT Subject: CN=8B8D2833FBDF7364C75A45EB546C80E79D7FD7DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f4:56:b4:6f:9c:7a:0a:8b:78:e1:45:a8:5f: 91:17:62:5f:d8:e3:13:53:a9:e0:07:7a:a9:38:fc: a4:af:35:97:72:09:12:6d:71:55:85:6a:61:e1:0d: 84:3c:08:37:c2:66:19:62:3d:ac:0a:82:94:43:07: 30:f0:10:08:07:b4:46:56:62:d6:51:a2:eb:0e:c9: 98:1d:6b:5b:94:9e:33:9d:4b:9d:c3:05:65:27:d7: 8c:bc:6d:67:f3:55:50:72:cf:ba:13:e1:4c:e7:37: 0f:13:d8:ac:7c:9e:0f:d1:78:aa:10:ed:22:99:86: b8:c2:5f:67:7e:07:b6:76:99:65:e2:1b:20:ef:08: fe:5b:00:be:a7:54:3c:dc:7a:37:05:e9:7d:57:c0: a7:e1:6d:37:5d:38:5f:26:f7:af:1b:23:a3:e9:36: 14:cf:c0:28:25:48:63:76:0d:ea:6e:82:ed:05:ee: 81:fe:9b:91:3e:2b:d6:33:6a:3a:3b:32:b7:24:bf: e6:ee:a3:02:de:e0:f9:b5:07:fb:93:ad:d9:8c:b2: 0a:22:72:da:e2:ad:d3:ed:df:1b:fc:83:c6:76:7f: 9d:ed:51:13:b0:ae:e6:a4:04:67:22:25:4b:95:a4: 7d:30:16:61:28:3f:55:f2:79:bb:1b:b7:ee:84:ff: 04:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:8D:28:33:FB:DF:73:64:C7:5A:45:EB:54:6C:80:E7:9D:7F:D7:DD X509v3 Authority Key Identifier: keyid:D4:D0:F3:E6:E6:84:84:7D:60:2F:C7:37:58:89:3C:E2:BB:05:D3:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4D0F3E6E684847D602FC73758893CE2BB05D399.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:06:0e:1e:be:2a:b6:1f:a0:db:63:59:fa:c4:82:a0:b6:ce: dc:58:28:69:12:ad:2d:b0:03:ad:cc:0e:33:d3:dc:e8:5d:ef: c7:ec:c0:2b:21:32:d5:34:e3:92:e5:66:da:05:08:b2:e7:f8: 0e:ea:eb:6a:5d:bb:73:6b:24:5f:3e:0e:b3:29:74:c5:59:3a: c6:79:8c:e3:29:cc:81:b3:80:53:18:7f:22:6d:f9:fe:55:01: 70:55:cf:89:ef:7a:5e:f0:c2:47:fc:13:98:a7:8b:4f:f7:44: 6c:f6:9f:74:1d:71:1e:72:a1:34:fa:1e:04:c7:57:fc:77:da: ed:a7:c7:f0:68:aa:94:f4:f5:60:36:f2:9e:61:d7:71:34:31: fb:a5:48:be:b7:ed:1d:d8:96:fb:cc:22:f3:39:7a:b6:c3:4b: 41:90:f2:fa:c0:4b:80:21:ad:4c:23:4f:a3:5c:d1:c6:e6:d6: 9e:1c:dc:1c:2d:88:6c:e3:e0:c2:22:6c:64:4f:d4:01:f6:f4: e6:b0:fe:67:b6:3b:21:90:fc:eb:35:12:30:bc:53:bd:37:e0: 93:de:23:97:3a:54:f2:dd:bd:12:7a:b0:03:ba:fa:51:6c:bc: ed:26:8f:7a:5e:00:ed:7a:d9:c7:78:f6:7d:6e:e3:0f:40:f9: c0:73:83:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWOLLXlx8UGAfsdLysMM/BMskjEIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDREMEYzRTZFNjg0ODQ3RDYwMkZDNzM3NTg4OTNDRTJC QjA1RDM5OTAeFw0yNTA4MDUxNzU1NDRaFw0yNTA4MDkwNDMxNDRaMDMxMTAvBgNV BAMTKDhCOEQyODMzRkJERjczNjRDNzVBNDVFQjU0NkM4MEU3OUQ3RkQ3REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc9Fa0b5x6Cot44UWoX5EXYl/Y 4xNTqeAHeqk4/KSvNZdyCRJtcVWFamHhDYQ8CDfCZhliPawKgpRDBzDwEAgHtEZW YtZRousOyZgda1uUnjOdS53DBWUn14y8bWfzVVByz7oT4UznNw8T2Kx8ng/ReKoQ 7SKZhrjCX2d+B7Z2mWXiGyDvCP5bAL6nVDzcejcF6X1XwKfhbTddOF8m968bI6Pp NhTPwCglSGN2Depugu0F7oH+m5E+K9Yzajo7Mrckv+buowLe4Pm1B/uTrdmMsgoi ctrirdPt3xv8g8Z2f53tUROwruakBGciJUuVpH0wFmEoP1Xyebsbt+6E/wTtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi40oM/vfc2THWkXrVGyA551/190wHwYDVR0j BBgwFoAU1NDz5uaEhH1gL8c3WIk84rsF05kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MjM1MzBlYy05OTBlLTQxZDctOWQ3OC1iNzdlMjBkNzZiY2QvMC9ENEQwRjNFNkU2 ODQ4NDdENjAyRkM3Mzc1ODg5M0NFMkJCMDVEMzk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDREMEYzRTZFNjg0ODQ3RDYwMkZDNzM3NTg4OTNDRTJCQjA1 RDM5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODIzNTMwZWMtOTkwZS00MWQ3LTlk NzgtYjc3ZTIwZDc2YmNkLzAvRDREMEYzRTZFNjg0ODQ3RDYwMkZDNzM3NTg4OTND RTJCQjA1RDM5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFAGDh6+KrYfoNtjWfrEgqC2ztxYKGkSrS2w A63MDjPT3Ohd78fswCshMtU045LlZtoFCLLn+A7q62pdu3NrJF8+DrMpdMVZOsZ5 jOMpzIGzgFMYfyJt+f5VAXBVz4nvel7wwkf8E5ini0/3RGz2n3QdcR5yoTT6HgTH V/x32u2nx/BoqpT09WA28p5h13E0MfulSL637R3YlvvMIvM5erbDS0GQ8vrAS4Ah rUwjT6Nc0cbm1p4c3BwtiGzj4MIibGRP1AH29Oaw/me2OyGQ/Os1EjC8U7034JPe I5c6VPLdvRJ6sAO6+lFsvO0mj3peAO162cd49n1u4w9A+cBzg1Q= -----END CERTIFICATE-----Generated at Thu Aug 7 07:17:41 2025 by rpki-client