$ rpki-client -vvf repo-rpki.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.mft File: 2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.mft (raw, json) Hash identifier: 5VBPKEcYaaXEXQteKcWdDELxdjU5Kd03Pq2R5i8rvaI= Subject key identifier: AD:B8:03:98:76:A0:B4:18:9A:09:89:29:74:0B:AD:70:46:B3:B5:9F Authority key identifier: 26:64:CB:E1:0F:2B:9F:F1:BE:C5:0A:6A:85:DC:7A:A5:2B:9F:17:FA Certificate issuer: /CN=2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA Certificate serial: 08758A4784EE082FCFCD83CD99D2543BC5C3481E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.mft Manifest number: 03A7 Signing time: Wed 06 Aug 2025 14:12:10 +0000 Manifest this update: Wed 06 Aug 2025 14:07:10 +0000 Manifest next update: Sat 09 Aug 2025 19:22:10 +0000 Files and hashes: 1: 2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.crl (hash: rUBZ28/xKzq64U5CXfQCo3rgHr/GH9ehHwint9NNYOE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.crl rsync://repo-rpki.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 19:22:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:75:8a:47:84:ee:08:2f:cf:cd:83:cd:99:d2:54:3b:c5:c3:48:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA Validity Not Before: Aug 6 14:07:10 2025 GMT Not After : Aug 9 19:22:10 2025 GMT Subject: CN=ADB8039876A0B4189A098929740BAD7046B3B59F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:94:5c:71:1c:80:f3:c8:06:7b:02:9e:30:28: b1:a0:e2:83:d2:9f:ee:6f:37:d0:dd:a0:3f:37:49: 5a:48:b8:1d:36:77:fc:a8:5e:71:81:b5:a2:75:60: 1c:89:fc:1f:b8:6c:ac:79:36:2d:a2:41:15:f6:37: 91:e3:a8:81:af:4d:1c:cb:ac:6c:2b:b5:08:17:e2: 46:cf:62:9f:82:cc:a1:d2:26:0a:ed:46:ee:5d:8a: 26:4f:60:78:9f:27:be:35:4e:71:07:1d:af:af:31: cc:e2:3e:8f:2e:f9:5d:64:68:3c:8f:8a:85:af:1a: 85:18:ba:43:9c:3e:d2:a7:70:11:02:c3:59:58:fa: 1d:e3:fb:5d:95:4d:56:f9:e3:70:cc:c0:50:53:1a: a9:a2:d9:aa:0b:f4:1a:04:af:4e:ab:a9:0e:12:7e: 58:62:62:02:71:0a:2c:d6:c1:0d:49:dc:1a:1f:65: e7:3f:95:69:c4:2f:f5:36:58:68:76:14:89:d9:9d: 6f:1c:2f:26:64:d9:f1:d8:8f:af:73:0f:79:54:e7: f0:b0:91:97:e8:d8:0c:6b:64:1e:5d:ff:da:f9:fb: 3e:c9:40:63:53:5d:54:41:13:ed:c7:dd:b7:70:11: 75:32:d1:69:66:d2:cc:9f:f3:43:df:43:a0:b7:d6: 18:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:B8:03:98:76:A0:B4:18:9A:09:89:29:74:0B:AD:70:46:B3:B5:9F X509v3 Authority Key Identifier: keyid:26:64:CB:E1:0F:2B:9F:F1:BE:C5:0A:6A:85:DC:7A:A5:2B:9F:17:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:e9:30:bb:f8:eb:0a:57:77:da:ba:45:96:0d:c8:97:f4:a4: 86:62:23:72:4d:46:58:9b:f8:59:71:c8:c5:42:41:1d:f8:54: 5c:d5:d6:cc:e1:40:6a:e9:4e:3c:c9:2a:91:6e:0a:75:4f:0a: bc:99:6f:2f:c6:40:a3:5f:be:4f:fc:42:2a:3b:0b:d8:28:48: 80:e6:d9:28:45:ab:7b:8e:2a:82:4e:6e:1b:ca:de:1d:fa:db: e0:33:2c:70:e4:08:1b:6b:e2:22:aa:65:b1:bb:57:4a:02:3a: 47:ff:88:52:fd:23:7e:45:51:e4:9c:bb:98:99:64:a8:f5:11: 37:4b:79:9b:57:c5:b2:ad:9a:77:02:3c:18:36:14:b5:56:e6: 08:7c:04:21:a9:28:5c:b3:ca:0a:3d:8c:31:cf:f3:a5:aa:bf: fc:43:5b:6b:ac:b2:50:d5:7a:32:ea:d6:3b:a4:0a:c2:2b:94: 5c:06:4c:30:ca:72:c2:df:02:37:58:2b:8d:a0:68:7b:9d:06: e4:6a:b5:c9:47:b8:f9:a1:3d:bb:fe:0c:b4:e4:48:2d:ee:dd: e6:75:13:08:77:58:2e:0f:b3:2e:7c:4e:83:dc:52:69:a4:3b: 15:c0:8d:17:1b:3d:29:49:68:d9:0d:f9:16:ca:bb:2a:c6:23: b0:85:ff:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCHWKR4TuCC/PzYPNmdJUO8XDSB4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjY2NENCRTEwRjJCOUZGMUJFQzUwQTZBODVEQzdBQTUy QjlGMTdGQTAeFw0yNTA4MDYxNDA3MTBaFw0yNTA4MDkxOTIyMTBaMDMxMTAvBgNV BAMTKEFEQjgwMzk4NzZBMEI0MTg5QTA5ODkyOTc0MEJBRDcwNDZCM0I1OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChlFxxHIDzyAZ7Ap4wKLGg4oPS n+5vN9DdoD83SVpIuB02d/yoXnGBtaJ1YByJ/B+4bKx5Ni2iQRX2N5HjqIGvTRzL rGwrtQgX4kbPYp+CzKHSJgrtRu5diiZPYHifJ741TnEHHa+vMcziPo8u+V1kaDyP ioWvGoUYukOcPtKncBECw1lY+h3j+12VTVb543DMwFBTGqmi2aoL9BoEr06rqQ4S flhiYgJxCizWwQ1J3BofZec/lWnEL/U2WGh2FInZnW8cLyZk2fHYj69zD3lU5/Cw kZfo2AxrZB5d/9r5+z7JQGNTXVRBE+3H3bdwEXUy0Wlm0syf80PfQ6C31hjLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrbgDmHagtBiaCYkpdAutcEaztZ8wHwYDVR0j BBgwFoAUJmTL4Q8rn/G+xQpqhdx6pSufF/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Y2YzYzIxMS0wNjQ1LTQ4ODItYTRmMS00NmJlODY3Yjc5ODMvMC8yNjY0Q0JFMTBG MkI5RkYxQkVDNTBBNkE4NURDN0FBNTJCOUYxN0ZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjY2NENCRTEwRjJCOUZGMUJFQzUwQTZBODVEQzdBQTUyQjlG MTdGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGNmM2MyMTEtMDY0NS00ODgyLWE0 ZjEtNDZiZTg2N2I3OTgzLzAvMjY2NENCRTEwRjJCOUZGMUJFQzUwQTZBODVEQzdB QTUyQjlGMTdGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE/pMLv46wpXd9q6RZYNyJf0pIZiI3JNRlib +FlxyMVCQR34VFzV1szhQGrpTjzJKpFuCnVPCryZby/GQKNfvk/8Qio7C9goSIDm 2ShFq3uOKoJObhvK3h362+AzLHDkCBtr4iKqZbG7V0oCOkf/iFL9I35FUeScu5iZ ZKj1ETdLeZtXxbKtmncCPBg2FLVW5gh8BCGpKFyzygo9jDHP86Wqv/xDW2usslDV ejLq1jukCsIrlFwGTDDKcsLfAjdYK42gaHudBuRqtclHuPmhPbv+DLTkSC3u3eZ1 Ewh3WC4Psy58ToPcUmmkOxXAjRcbPSlJaNkN+RbKuyrGI7CF/1g= -----END CERTIFICATE-----Generated at Thu Aug 7 00:30:29 2025 by rpki-client