$ rpki-client -vvf repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft File: C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft (raw, json) Hash identifier: K1iBe740wtPUJgT7wAmpzjdK7msxiZ9Sb2zOcg5VOaM= Subject key identifier: 39:02:4A:3C:74:14:96:45:96:8C:88:74:E1:F8:E9:59:1F:A4:72:B9 Authority key identifier: C1:66:91:03:D8:70:A3:90:C5:6C:8D:FD:3C:1B:FE:23:E4:8B:05:40 Certificate issuer: /CN=C1669103D870A390C56C8DFD3C1BFE23E48B0540 Certificate serial: 53A68B887B0A5F098B91C7B5A3E6899B3FA69CB6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1669103D870A390C56C8DFD3C1BFE23E48B0540.cer Subject info access: rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft Manifest number: C0 Signing time: Wed 06 Aug 2025 06:11:24 +0000 Manifest this update: Wed 06 Aug 2025 06:06:24 +0000 Manifest next update: Sat 09 Aug 2025 10:30:24 +0000 Files and hashes: 1: C1669103D870A390C56C8DFD3C1BFE23E48B0540.crl (hash: Ol8Zr5zZwVi+sd/D0paKSZFizF5ZufFPq6Bt5ljLRJU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.crl rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1669103D870A390C56C8DFD3C1BFE23E48B0540.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 10:30:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:a6:8b:88:7b:0a:5f:09:8b:91:c7:b5:a3:e6:89:9b:3f:a6:9c:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1669103D870A390C56C8DFD3C1BFE23E48B0540 Validity Not Before: Aug 6 06:06:24 2025 GMT Not After : Aug 9 10:30:24 2025 GMT Subject: CN=39024A3C74149645968C8874E1F8E9591FA472B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:03:cc:46:a6:09:3c:2d:78:42:51:db:be:65: c1:c7:ed:da:59:92:35:ac:75:fd:87:4d:e4:b3:ac: 94:62:75:d3:75:8d:4e:3c:ad:05:a2:db:7d:8c:d0: 06:41:48:25:e8:48:7b:4b:fd:c2:ca:2c:a2:97:95: 3f:7d:94:e0:63:41:c1:7e:d1:53:b5:d1:1c:1d:ed: 4c:a5:5f:95:47:e8:88:62:7f:f5:80:47:e0:69:89: 48:c5:d6:c4:93:0e:b0:ea:33:b0:5e:50:9f:be:58: 2b:ab:c4:a6:55:64:5c:57:08:d2:0b:6f:e9:ca:07: 79:bb:fe:e5:f1:f1:37:ed:5f:f3:09:2f:4c:26:d8: 4f:d5:b4:e9:42:c1:5e:b1:8a:53:71:59:c9:73:89: 5e:45:d9:69:f5:0b:f7:b2:c5:51:e1:61:15:1f:50: d6:c5:03:d7:26:03:a4:08:1d:fa:da:46:50:d6:a9: 32:20:dd:f7:f1:da:81:a9:99:1c:fb:90:8e:59:4f: 36:b4:8e:47:f7:56:42:46:51:5e:f6:3d:da:f8:62: c7:30:a9:83:b2:12:7c:0e:02:d7:e1:38:22:21:22: b5:a3:aa:d7:42:f0:8b:5c:65:6b:0f:d1:68:4c:25: 79:a6:a4:4c:b4:f6:8c:23:21:83:d8:b8:bb:07:ad: d5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:02:4A:3C:74:14:96:45:96:8C:88:74:E1:F8:E9:59:1F:A4:72:B9 X509v3 Authority Key Identifier: keyid:C1:66:91:03:D8:70:A3:90:C5:6C:8D:FD:3C:1B:FE:23:E4:8B:05:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1669103D870A390C56C8DFD3C1BFE23E48B0540.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:bb:a6:49:33:12:c6:db:7c:77:57:ef:3b:73:37:57:a3:46: 06:bd:66:a8:25:0d:87:4c:c6:f9:62:91:1c:d6:39:7e:8d:d1: 34:37:bf:30:54:cc:cc:63:2a:a0:7f:d9:12:c3:19:5b:75:c7: 2c:a2:d9:c6:ef:95:f1:e4:27:ff:d0:aa:66:58:1f:4e:4c:17: 7b:a1:b7:da:de:d9:e4:3e:25:15:ff:c9:74:17:9f:b5:68:c1: de:4d:5e:f8:ac:de:36:0d:57:fc:fa:82:68:80:bb:32:58:3e: 63:38:7d:75:53:e5:dd:1e:d7:c2:d5:dc:13:57:e0:96:b8:6d: 33:54:7d:5a:64:f6:16:75:5b:74:dc:4d:27:12:dd:95:b1:86: 19:ea:d2:8b:2a:ec:43:b6:79:cf:9b:ea:44:85:2d:2e:94:49: 37:32:52:92:0f:03:b5:1e:eb:15:74:ef:2c:74:0c:54:90:be: 8c:fa:f3:44:0e:b0:83:5f:15:8f:4c:1b:1b:52:9d:eb:66:3b: cc:4b:7e:0d:d0:23:40:18:11:dc:84:76:d2:7a:99:c1:64:ec: 31:08:fe:a4:36:49:43:47:ee:b7:81:44:20:23:67:a2:b0:e8: 88:ae:31:2d:2f:b5:76:60:2d:4e:0f:20:73:f5:a1:bd:99:81: 4a:26:76:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU6aLiHsKXwmLkce1o+aJmz+mnLYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE2NjkxMDNEODcwQTM5MEM1NkM4REZEM0MxQkZFMjNF NDhCMDU0MDAeFw0yNTA4MDYwNjA2MjRaFw0yNTA4MDkxMDMwMjRaMDMxMTAvBgNV BAMTKDM5MDI0QTNDNzQxNDk2NDU5NjhDODg3NEUxRjhFOTU5MUZBNDcyQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPA8xGpgk8LXhCUdu+ZcHH7dpZ kjWsdf2HTeSzrJRiddN1jU48rQWi232M0AZBSCXoSHtL/cLKLKKXlT99lOBjQcF+ 0VO10Rwd7UylX5VH6Ihif/WAR+BpiUjF1sSTDrDqM7BeUJ++WCurxKZVZFxXCNIL b+nKB3m7/uXx8TftX/MJL0wm2E/VtOlCwV6xilNxWclziV5F2Wn1C/eyxVHhYRUf UNbFA9cmA6QIHfraRlDWqTIg3ffx2oGpmRz7kI5ZTza0jkf3VkJGUV72Pdr4Yscw qYOyEnwOAtfhOCIhIrWjqtdC8ItcZWsP0WhMJXmmpEy09owjIYPYuLsHrdV9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOQJKPHQUlkWWjIh04fjpWR+kcrkwHwYDVR0j BBgwFoAUwWaRA9hwo5DFbI39PBv+I+SLBUAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ODhkMGI2ZS1iMmVkLTQ5YzgtYTQ5OC04ZmQyOTlhZmI3MDEvMC9DMTY2OTEwM0Q4 NzBBMzkwQzU2QzhERkQzQzFCRkUyM0U0OEIwNTQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE2NjkxMDNEODcwQTM5MEM1NkM4REZEM0MxQkZFMjNFNDhC MDU0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODg4ZDBiNmUtYjJlZC00OWM4LWE0 OTgtOGZkMjk5YWZiNzAxLzAvQzE2NjkxMDNEODcwQTM5MEM1NkM4REZEM0MxQkZF MjNFNDhCMDU0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADu7pkkzEsbbfHdX7ztzN1ejRga9ZqglDYdM xvlikRzWOX6N0TQ3vzBUzMxjKqB/2RLDGVt1xyyi2cbvlfHkJ//QqmZYH05MF3uh t9re2eQ+JRX/yXQXn7Vowd5NXvis3jYNV/z6gmiAuzJYPmM4fXVT5d0e18LV3BNX 4Ja4bTNUfVpk9hZ1W3TcTScS3ZWxhhnq0osq7EO2ec+b6kSFLS6USTcyUpIPA7Ue 6xV07yx0DFSQvoz680QOsINfFY9MGxtSnetmO8xLfg3QI0AYEdyEdtJ6mcFk7DEI /qQ2SUNH7reBRCAjZ6Kw6IiuMS0vtXZgLU4PIHP1ob2ZgUomdts= -----END CERTIFICATE-----Generated at Wed Aug 6 12:26:08 2025 by rpki-client