$ rpki-client -vvf repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft File: 1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft (raw, json) Hash identifier: 26PrnAN+R0ZCeHb+vmIOE67D603mcrOPyWg2SNJsqjw= Subject key identifier: 0C:28:BA:40:13:B5:76:66:F1:DD:1B:D2:11:2B:A2:6E:D3:23:6A:B4 Authority key identifier: 10:07:D1:5C:BB:EA:AB:DE:19:9A:EF:BC:2A:3F:E3:17:B7:57:BD:23 Certificate issuer: /CN=1007D15CBBEAABDE199AEFBC2A3FE317B757BD23 Certificate serial: 177C140217C14C0870104FDCDCCE8C2A4D27A791 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft Manifest number: 01F0 Signing time: Sat 09 Aug 2025 11:01:58 +0000 Manifest this update: Sat 09 Aug 2025 10:56:58 +0000 Manifest next update: Tue 12 Aug 2025 18:34:58 +0000 Files and hashes: 1: 1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.crl (hash: 9ECyMtuFind/orIb1e+AvtiBH847c4ixSb2hnSEtwU0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.crl rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 18:34:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:7c:14:02:17:c1:4c:08:70:10:4f:dc:dc:ce:8c:2a:4d:27:a7:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1007D15CBBEAABDE199AEFBC2A3FE317B757BD23 Validity Not Before: Aug 9 10:56:58 2025 GMT Not After : Aug 12 18:34:58 2025 GMT Subject: CN=0C28BA4013B57666F1DD1BD2112BA26ED3236AB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2a:94:4b:83:9d:13:7f:83:ca:d7:8a:a8:56: ca:be:2f:3f:a0:51:96:6c:27:21:5d:6a:a6:a5:ec: 8a:4c:3e:24:70:6b:ea:35:be:22:1b:31:98:64:c6: e5:1d:e4:2b:07:35:a2:3d:24:5f:71:d0:36:47:a0: 95:96:6a:8b:e6:11:98:aa:f6:da:7e:e9:5b:21:c9: 74:08:69:94:af:7a:55:af:71:34:c2:4c:51:42:d7: 1c:aa:cc:2a:84:f0:bf:04:48:17:ce:4c:d4:b8:f1: 2a:14:cc:93:2a:be:c1:38:46:0f:99:d9:7c:49:4f: cc:33:c5:46:87:01:d0:d7:8f:b8:30:f7:8e:39:23: f0:74:94:d5:06:02:d1:b8:4b:4d:40:ec:0c:f1:82: 2d:40:c1:c9:6f:ee:13:cc:46:a8:2d:46:fc:df:8e: 77:dd:dc:a4:62:28:88:e3:00:17:1e:b3:6b:2e:3b: 1a:9c:f3:ca:30:a6:09:e3:43:32:50:f0:4b:12:2e: 9e:71:c4:01:64:32:7b:c6:2e:5f:92:f3:dd:34:eb: d4:47:97:f2:de:a0:b4:38:57:49:f3:e3:c6:ec:2d: 07:15:b1:42:1a:32:16:ae:e1:1c:1a:4b:6b:f2:39: 82:f8:e9:a7:a4:a6:87:b6:89:ee:7e:2f:e2:d7:bb: 41:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:28:BA:40:13:B5:76:66:F1:DD:1B:D2:11:2B:A2:6E:D3:23:6A:B4 X509v3 Authority Key Identifier: keyid:10:07:D1:5C:BB:EA:AB:DE:19:9A:EF:BC:2A:3F:E3:17:B7:57:BD:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:a9:aa:dc:b9:ad:e6:1d:6b:e4:b0:46:85:c2:3c:71:63:20: e3:e5:c8:71:0e:5d:90:8e:b6:bd:60:c2:ec:53:56:9a:87:27: ad:56:34:c7:01:d1:a7:df:ee:4e:7e:0d:d6:9b:d7:20:b7:58: 89:31:b6:9c:46:c7:d8:d0:70:52:95:6e:2c:9e:94:f5:92:1a: 0b:47:d9:b2:08:7f:fb:40:74:13:66:01:03:84:b1:49:1c:8b: 9e:08:2f:9a:73:8a:4f:d4:25:87:7b:b1:37:9e:ef:19:e9:00: 41:85:ed:a4:f5:3e:fd:3b:e6:4c:11:a4:75:7c:b7:87:66:05: db:74:93:f2:d0:ea:29:16:f9:09:93:8a:59:b3:db:66:99:e5: 0f:93:41:1e:34:53:46:18:be:7e:08:5d:64:7c:82:64:fe:6b: 63:b7:3f:84:65:d5:4c:7e:d7:c1:69:09:a4:e7:55:de:98:84: 87:25:ca:c4:72:7b:bd:9c:b2:d6:06:35:2a:14:08:61:68:c1: 69:76:bd:da:2a:9b:13:81:a3:55:3f:39:c4:52:6a:82:bb:24: 7c:44:32:61:96:55:07:a1:4e:39:ce:c0:93:2e:1f:d5:59:6f: 49:c6:f5:ff:02:e1:20:41:aa:a0:d7:81:ce:8c:bd:ec:f9:5b: b6:cb:ab:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF3wUAhfBTAhwEE/c3M6MKk0np5EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTAwN0QxNUNCQkVBQUJERTE5OUFFRkJDMkEzRkUzMTdC NzU3QkQyMzAeFw0yNTA4MDkxMDU2NThaFw0yNTA4MTIxODM0NThaMDMxMTAvBgNV BAMTKDBDMjhCQTQwMTNCNTc2NjZGMUREMUJEMjExMkJBMjZFRDMyMzZBQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3KpRLg50Tf4PK14qoVsq+Lz+g UZZsJyFdaqal7IpMPiRwa+o1viIbMZhkxuUd5CsHNaI9JF9x0DZHoJWWaovmEZiq 9tp+6VshyXQIaZSvelWvcTTCTFFC1xyqzCqE8L8ESBfOTNS48SoUzJMqvsE4Rg+Z 2XxJT8wzxUaHAdDXj7gw9445I/B0lNUGAtG4S01A7Azxgi1Awclv7hPMRqgtRvzf jnfd3KRiKIjjABces2suOxqc88owpgnjQzJQ8EsSLp5xxAFkMnvGLl+S890069RH l/LeoLQ4V0nz48bsLQcVsUIaMhau4RwaS2vyOYL46aekpoe2ie5+L+LXu0EtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDCi6QBO1dmbx3RvSESuibtMjarQwHwYDVR0j BBgwFoAUEAfRXLvqq94Zmu+8Kj/jF7dXvSMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWExNmVjNS01ODdlLTQ3YTQtOGFmZS1kMWJlY2Y1NmI2MTQvMC8xMDA3RDE1Q0JC RUFBQkRFMTk5QUVGQkMyQTNGRTMxN0I3NTdCRDIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTAwN0QxNUNCQkVBQUJERTE5OUFFRkJDMkEzRkUzMTdCNzU3 QkQyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFhMTZlYzUtNTg3ZS00N2E0LThh ZmUtZDFiZWNmNTZiNjE0LzAvMTAwN0QxNUNCQkVBQUJERTE5OUFFRkJDMkEzRkUz MTdCNzU3QkQyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABapqty5reYda+SwRoXCPHFjIOPlyHEOXZCO tr1gwuxTVpqHJ61WNMcB0aff7k5+Ddab1yC3WIkxtpxGx9jQcFKVbiyelPWSGgtH 2bIIf/tAdBNmAQOEsUkci54IL5pzik/UJYd7sTee7xnpAEGF7aT1Pv075kwRpHV8 t4dmBdt0k/LQ6ikW+QmTilmz22aZ5Q+TQR40U0YYvn4IXWR8gmT+a2O3P4Rl1Ux+ 18FpCaTnVd6YhIclysRye72cstYGNSoUCGFowWl2vdoqmxOBo1U/OcRSaoK7JHxE MmGWVQehTjnOwJMuH9VZb0nG9f8C4SBBqqDXgc6Mvez5W7bLqw8= -----END CERTIFICATE-----Generated at Sun Aug 10 13:44:55 2025 by rpki-client