$ rpki-client -vvf repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.mft File: D018BF43793F56145B87233DD668DE3BDEEFFE13.mft (raw, json) Hash identifier: WsguYI521HQaFeehASUZ58IfagNbGjj0ZicieJdCxIA= Subject key identifier: F1:5E:1C:62:69:96:93:95:9B:40:05:05:37:8F:8E:1F:85:6F:BC:41 Authority key identifier: D0:18:BF:43:79:3F:56:14:5B:87:23:3D:D6:68:DE:3B:DE:EF:FE:13 Certificate issuer: /CN=D018BF43793F56145B87233DD668DE3BDEEFFE13 Certificate serial: 2569183ABDB11CFD87FD6EA724E60E47B220D82D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D018BF43793F56145B87233DD668DE3BDEEFFE13.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.mft Manifest number: 4C Signing time: Fri 08 Aug 2025 13:11:14 +0000 Manifest this update: Fri 08 Aug 2025 13:06:14 +0000 Manifest next update: Mon 11 Aug 2025 17:27:14 +0000 Files and hashes: 1: D018BF43793F56145B87233DD668DE3BDEEFFE13.crl (hash: sO7EEyTR8hZwkT3cFUqV5nPuYCXgh3FR6JHuqyL9p1M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.crl rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D018BF43793F56145B87233DD668DE3BDEEFFE13.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 17:27:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:69:18:3a:bd:b1:1c:fd:87:fd:6e:a7:24:e6:0e:47:b2:20:d8:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D018BF43793F56145B87233DD668DE3BDEEFFE13 Validity Not Before: Aug 8 13:06:14 2025 GMT Not After : Aug 11 17:27:14 2025 GMT Subject: CN=F15E1C62699693959B400505378F8E1F856FBC41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8c:fe:ff:e5:e1:4a:33:9a:e9:a9:e8:27:07: 50:2e:2f:41:38:ac:e5:4f:11:4a:92:16:ad:38:cb: 48:0b:c6:42:b1:df:bd:43:50:cb:db:d8:e4:f2:f3: a0:03:f2:1b:4d:f0:72:9a:b3:79:72:9c:bd:c4:85: 6e:05:d7:f0:0f:34:f9:76:cc:6f:7d:50:93:8a:da: 1f:c6:29:e7:53:3b:83:f8:9e:c4:22:5a:f1:21:b2: 87:03:1f:e3:bc:70:dc:35:3e:2b:09:30:4d:ac:3b: 9a:84:d1:ec:c1:6d:11:d1:55:29:76:04:d4:02:bb: 8f:82:ed:ee:31:9d:73:6e:1b:79:25:67:34:ef:cf: 1e:02:23:12:d4:3c:5a:14:05:c1:54:67:9f:e7:af: d1:aa:21:6d:49:40:84:bd:e8:69:35:13:d1:12:65: 31:77:0d:d7:01:65:0b:6e:2e:74:3f:e5:57:08:94: 0f:67:93:cb:c4:85:b4:29:04:64:e2:08:7c:cd:c5: ef:59:10:b8:d1:7a:e0:d2:80:b3:d2:72:7e:0b:23: d4:4b:2c:25:24:28:fe:fc:55:f1:c0:c9:e0:b9:c9: 6b:d4:5f:3d:b8:de:c9:8a:53:43:97:a1:6d:42:f8: 35:d6:56:83:f2:ad:30:41:23:b0:a6:9e:c6:1e:44: b0:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:5E:1C:62:69:96:93:95:9B:40:05:05:37:8F:8E:1F:85:6F:BC:41 X509v3 Authority Key Identifier: keyid:D0:18:BF:43:79:3F:56:14:5B:87:23:3D:D6:68:DE:3B:DE:EF:FE:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D018BF43793F56145B87233DD668DE3BDEEFFE13.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:d0:77:a1:ca:8d:2f:c4:d2:66:41:cb:c8:ff:93:3d:82:06: 47:f4:48:61:b3:1f:ff:ee:e5:7e:69:be:78:e1:9f:d9:8c:26: 70:9a:6a:82:e4:a7:7a:d3:57:a3:27:8d:66:ae:08:3d:3b:ed: be:49:c1:00:41:a9:1d:16:2e:5e:1b:f5:2f:b7:e7:67:df:4d: 8f:1a:b7:2a:4c:32:32:ea:f5:a9:d3:51:35:dc:cc:1c:20:7e: f2:9d:87:a8:bb:38:94:63:ba:12:e6:95:f8:c2:dd:f2:ca:d4: 90:4b:3f:cc:0c:0e:42:91:b4:96:32:d7:b7:42:4c:d1:af:f4: b4:22:03:2b:df:e3:18:a8:e9:87:09:4b:7f:82:03:14:ab:0f: b6:9c:e1:6d:3a:1e:f7:ba:99:fe:a8:1f:2b:f2:2d:7b:e3:3c: c1:c2:16:66:96:7c:bf:c5:fb:52:b2:37:97:43:be:a8:06:f6: 0a:6c:b4:da:5e:90:6c:aa:b9:24:38:f7:d8:13:cf:79:27:55: 13:f7:ea:81:e0:27:cd:cd:a9:3c:a0:6d:e6:bf:5f:df:df:65: 1e:ff:50:be:08:c6:a8:16:45:f2:c6:f8:15:c3:31:a6:96:5d: ca:02:7b:36:22:dc:7b:95:80:b1:5e:2b:7c:44:1b:db:0b:58: 97:f6:63:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJWkYOr2xHP2H/W6nJOYOR7Ig2C0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDAxOEJGNDM3OTNGNTYxNDVCODcyMzNERDY2OERFM0JE RUVGRkUxMzAeFw0yNTA4MDgxMzA2MTRaFw0yNTA4MTExNzI3MTRaMDMxMTAvBgNV BAMTKEYxNUUxQzYyNjk5NjkzOTU5QjQwMDUwNTM3OEY4RTFGODU2RkJDNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9jP7/5eFKM5rpqegnB1AuL0E4 rOVPEUqSFq04y0gLxkKx371DUMvb2OTy86AD8htN8HKas3lynL3EhW4F1/APNPl2 zG99UJOK2h/GKedTO4P4nsQiWvEhsocDH+O8cNw1PisJME2sO5qE0ezBbRHRVSl2 BNQCu4+C7e4xnXNuG3klZzTvzx4CIxLUPFoUBcFUZ5/nr9GqIW1JQIS96Gk1E9ES ZTF3DdcBZQtuLnQ/5VcIlA9nk8vEhbQpBGTiCHzNxe9ZELjReuDSgLPScn4LI9RL LCUkKP78VfHAyeC5yWvUXz243smKU0OXoW1C+DXWVoPyrTBBI7CmnsYeRLAZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8V4cYmmWk5WbQAUFN4+OH4VvvEEwHwYDVR0j BBgwFoAU0Bi/Q3k/VhRbhyM91mjeO97v/hMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWFkMzE0YS03NjU3LTQ5MDEtYjdkZC0zYjlhOWJmYzZlOWMvMC9EMDE4QkY0Mzc5 M0Y1NjE0NUI4NzIzM0RENjY4REUzQkRFRUZGRTEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDAxOEJGNDM3OTNGNTYxNDVCODcyMzNERDY2OERFM0JERUVG RkUxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODlhZDMxNGEtNzY1Ny00OTAxLWI3 ZGQtM2I5YTliZmM2ZTljLzAvRDAxOEJGNDM3OTNGNTYxNDVCODcyMzNERDY2OERF M0JERUVGRkUxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGrQd6HKjS/E0mZBy8j/kz2CBkf0SGGzH//u 5X5pvnjhn9mMJnCaaoLkp3rTV6MnjWauCD077b5JwQBBqR0WLl4b9S+352ffTY8a typMMjLq9anTUTXczBwgfvKdh6i7OJRjuhLmlfjC3fLK1JBLP8wMDkKRtJYy17dC TNGv9LQiAyvf4xio6YcJS3+CAxSrD7ac4W06Hve6mf6oHyvyLXvjPMHCFmaWfL/F +1KyN5dDvqgG9gpstNpekGyquSQ499gTz3knVRP36oHgJ83NqTygbea/X9/fZR7/ UL4IxqgWRfLG+BXDMaaWXcoCezYi3HuVgLFeK3xEG9sLWJf2Y4Q= -----END CERTIFICATE-----Generated at Sat Aug 9 01:00:49 2025 by rpki-client