$ rpki-client -vvf repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.mft File: AD2137BA5758D926364E9E038F19A65DC3F1846E.mft (raw, json) Hash identifier: 855UACJ9QthTAKokbTLGK+DfJGAZga8pmQT252gNwGQ= Subject key identifier: DB:8B:DE:94:0B:03:80:02:72:C3:2D:6E:21:55:35:05:DA:5A:60:7B Authority key identifier: AD:21:37:BA:57:58:D9:26:36:4E:9E:03:8F:19:A6:5D:C3:F1:84:6E Certificate issuer: /CN=AD2137BA5758D926364E9E038F19A65DC3F1846E Certificate serial: 29B90CDE7532EEDD18D772FE506D08D2AD169BDB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2137BA5758D926364E9E038F19A65DC3F1846E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.mft Manifest number: 0239 Signing time: Mon 04 Aug 2025 20:02:09 +0000 Manifest this update: Mon 04 Aug 2025 19:57:09 +0000 Manifest next update: Thu 07 Aug 2025 20:24:09 +0000 Files and hashes: 1: AD2137BA5758D926364E9E038F19A65DC3F1846E.crl (hash: PWWNCzIfY31niqXFStyzIfyIU8Tqj/u0WXkW47L+Qhw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.crl rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2137BA5758D926364E9E038F19A65DC3F1846E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 Aug 2025 20:24:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:b9:0c:de:75:32:ee:dd:18:d7:72:fe:50:6d:08:d2:ad:16:9b:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD2137BA5758D926364E9E038F19A65DC3F1846E Validity Not Before: Aug 4 19:57:09 2025 GMT Not After : Aug 7 20:24:09 2025 GMT Subject: CN=DB8BDE940B03800272C32D6E21553505DA5A607B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:00:59:87:40:6f:92:a5:2d:81:90:60:90:c7: 64:2e:f5:55:31:f7:3a:9f:e1:84:de:f1:4b:76:82: af:13:36:c7:3b:9e:7d:a3:a1:3e:b8:29:e3:d4:5c: 8c:5d:f0:98:4d:69:6c:f2:0a:81:17:82:b7:bd:cb: b5:78:fd:71:93:31:58:a0:b5:32:45:38:c6:38:dc: 06:ef:5b:48:2a:5d:81:69:d6:b9:cd:88:cd:32:ee: dd:eb:63:13:11:d4:58:27:38:6c:76:d3:28:53:00: 0e:f2:a9:ae:49:1f:58:0d:42:94:3a:3a:63:1d:dd: 9e:ac:96:4b:59:94:c9:82:de:d2:0f:83:6e:03:61: f0:66:17:57:c3:86:70:26:f7:05:bf:b4:a1:bd:3f: 9d:36:7f:6a:32:a6:f1:c9:bb:05:c1:b5:d7:07:fe: e9:1b:cf:a0:f6:2c:f2:0d:a7:bf:3f:08:e0:d8:36: 46:79:c9:62:e4:39:16:5d:12:64:ef:3e:68:e4:65: d8:c8:cf:ae:49:cd:21:d3:4b:3c:87:01:81:14:a9: cd:4d:45:3c:34:a9:9e:d6:43:33:ec:32:f2:e0:f2: 1e:51:a8:5b:8d:27:17:eb:b9:71:97:26:f8:c1:03: 93:21:6b:c7:25:20:d8:39:a4:08:f2:88:a9:8b:97: eb:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:8B:DE:94:0B:03:80:02:72:C3:2D:6E:21:55:35:05:DA:5A:60:7B X509v3 Authority Key Identifier: keyid:AD:21:37:BA:57:58:D9:26:36:4E:9E:03:8F:19:A6:5D:C3:F1:84:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2137BA5758D926364E9E038F19A65DC3F1846E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:91:ca:1e:93:77:d1:a8:31:5b:b3:e4:b3:8e:76:27:2e:71: d4:2f:aa:3b:b7:65:df:38:c7:e8:b6:ec:ee:af:45:30:13:5c: 90:32:dc:b3:bb:93:1e:52:5a:f2:5d:7e:e6:48:61:0e:84:c4: 0d:71:c7:71:9b:9c:3a:cf:60:40:33:9f:84:1f:ac:c8:93:35: 5b:0d:9c:11:70:c4:c9:8b:c9:1a:ac:27:b6:eb:69:07:ba:95: 8d:18:5b:c1:45:16:4e:3e:b2:9c:5f:03:b2:82:95:07:ec:39: c3:cd:c1:db:fb:26:62:01:5e:7d:f8:56:f5:59:bc:3d:2a:9a: 6a:fe:1f:3a:2d:14:30:40:40:97:7f:fd:4a:52:b4:ab:dc:d1: 1e:94:af:4b:5c:39:7c:4a:0e:92:69:92:da:4b:46:83:f8:55: b3:7f:34:9c:39:d7:af:df:9a:90:b5:9b:8d:4b:5a:32:f9:cd: 1d:d4:86:54:de:a5:9d:e7:8f:9d:ab:39:11:3a:92:e1:ef:3d: 16:8d:5c:54:f2:99:3b:3a:f8:87:69:48:f4:a9:17:5d:0e:75: 3e:ad:4e:58:02:f6:a2:28:d9:ec:05:41:20:aa:69:3f:b7:d1: c8:35:5b:3e:c0:19:bf:48:e6:09:71:b9:61:78:c1:9d:a8:a0: 79:cb:ab:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKbkM3nUy7t0Y13L+UG0I0q0Wm9swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQyMTM3QkE1NzU4RDkyNjM2NEU5RTAzOEYxOUE2NURD M0YxODQ2RTAeFw0yNTA4MDQxOTU3MDlaFw0yNTA4MDcyMDI0MDlaMDMxMTAvBgNV BAMTKERCOEJERTk0MEIwMzgwMDI3MkMzMkQ2RTIxNTUzNTA1REE1QTYwN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpAFmHQG+SpS2BkGCQx2Qu9VUx 9zqf4YTe8Ut2gq8TNsc7nn2joT64KePUXIxd8JhNaWzyCoEXgre9y7V4/XGTMVig tTJFOMY43AbvW0gqXYFp1rnNiM0y7t3rYxMR1FgnOGx20yhTAA7yqa5JH1gNQpQ6 OmMd3Z6slktZlMmC3tIPg24DYfBmF1fDhnAm9wW/tKG9P502f2oypvHJuwXBtdcH /ukbz6D2LPINp78/CODYNkZ5yWLkORZdEmTvPmjkZdjIz65JzSHTSzyHAYEUqc1N RTw0qZ7WQzPsMvLg8h5RqFuNJxfruXGXJvjBA5Mha8clINg5pAjyiKmLl+t5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU24velAsDgAJywy1uIVU1BdpaYHswHwYDVR0j BBgwFoAUrSE3uldY2SY2Tp4DjxmmXcPxhG4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzRkMjBhMy0zZDgzLTRjNGYtOTEzOC03NmJjN2M1MTBlYjkvMC9BRDIxMzdCQTU3 NThEOTI2MzY0RTlFMDM4RjE5QTY1REMzRjE4NDZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQyMTM3QkE1NzU4RDkyNjM2NEU5RTAzOEYxOUE2NURDM0Yx ODQ2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTc0ZDIwYTMtM2Q4My00YzRmLTkx MzgtNzZiYzdjNTEwZWI5LzAvQUQyMTM3QkE1NzU4RDkyNjM2NEU5RTAzOEYxOUE2 NURDM0YxODQ2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMaRyh6Td9GoMVuz5LOOdicucdQvqju3Zd84 x+i27O6vRTATXJAy3LO7kx5SWvJdfuZIYQ6ExA1xx3GbnDrPYEAzn4QfrMiTNVsN nBFwxMmLyRqsJ7braQe6lY0YW8FFFk4+spxfA7KClQfsOcPNwdv7JmIBXn34VvVZ vD0qmmr+HzotFDBAQJd//UpStKvc0R6Ur0tcOXxKDpJpktpLRoP4VbN/NJw516/f mpC1m41LWjL5zR3UhlTepZ3nj52rORE6kuHvPRaNXFTymTs6+IdpSPSpF10OdT6t TlgC9qIo2ewFQSCqaT+30cg1Wz7AGb9I5glxuWF4wZ2ooHnLq4o= -----END CERTIFICATE-----Generated at Wed Aug 6 18:36:25 2025 by rpki-client