$ rpki-client -vvf repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft File: ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft (raw, json) Hash identifier: 2tZUhtfPaWuf4XLsnSR0TyTTIKRyta4SqDtZHBvuvZQ= Subject key identifier: 50:C0:37:24:C8:C0:63:F4:8E:C5:24:02:35:D9:8C:10:29:C0:94:56 Authority key identifier: ED:7A:48:EA:D1:0D:1F:E9:7C:7E:F2:3A:A6:EA:2A:D6:55:BF:B0:AF Certificate issuer: /CN=ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF Certificate serial: 197E47693E049E4CF5E67E96118967AB2079ADFC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft Manifest number: 0215 Signing time: Tue 05 Aug 2025 16:11:31 +0000 Manifest this update: Tue 05 Aug 2025 16:06:31 +0000 Manifest next update: Fri 08 Aug 2025 21:40:31 +0000 Files and hashes: 1: ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.crl (hash: TJuPRlgg1nvl+8o9DxyhNwI3t1B7VDerfoHGNRF4PRc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.crl rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 21:40:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:7e:47:69:3e:04:9e:4c:f5:e6:7e:96:11:89:67:ab:20:79:ad:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF Validity Not Before: Aug 5 16:06:31 2025 GMT Not After : Aug 8 21:40:31 2025 GMT Subject: CN=50C03724C8C063F48EC5240235D98C1029C09456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5d:55:07:dc:e4:5e:65:47:85:06:8a:64:dc: 5c:d6:2b:92:51:c2:38:f4:46:19:1f:8d:32:49:ee: c6:ad:e3:46:52:05:d5:a6:3d:f9:ec:b6:2e:41:9f: b6:80:1e:63:58:dd:89:0c:b4:0e:b6:b0:99:2f:62: 90:72:1c:04:cd:30:cb:dc:70:cb:2c:5c:2e:57:87: 6f:28:32:ee:38:b9:40:18:84:ea:ce:0b:d0:34:a5: 30:69:d1:9e:13:a3:33:e3:a3:66:5c:75:fe:d3:65: c1:cd:e4:0a:18:88:13:1f:7d:82:07:64:68:19:14: f4:a7:e0:05:a6:22:49:e2:17:c4:2d:ce:15:3e:6b: 95:74:39:07:37:a3:c2:36:10:ed:e7:e9:f3:88:e4: 6a:e9:b0:cc:9d:c4:2d:6c:49:b1:19:03:32:fc:7b: a6:7b:79:ff:be:69:23:51:41:62:86:fc:76:9f:dd: d9:a3:43:de:2c:46:d1:1d:c2:7c:a8:62:5e:26:c7: dd:3a:9c:04:35:79:cc:c1:52:52:c0:66:7e:05:3e: e3:38:4f:43:ef:de:7f:71:89:74:90:b4:44:11:85: 48:6f:40:6c:60:c5:f4:72:94:ed:6a:ae:a4:ed:99: f0:67:4f:bb:f5:f7:fa:83:3d:3d:b4:a5:5b:58:08: bc:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:C0:37:24:C8:C0:63:F4:8E:C5:24:02:35:D9:8C:10:29:C0:94:56 X509v3 Authority Key Identifier: keyid:ED:7A:48:EA:D1:0D:1F:E9:7C:7E:F2:3A:A6:EA:2A:D6:55:BF:B0:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:3f:e1:25:de:49:7e:5b:64:3c:2b:95:64:1d:3b:40:c1:47: 8a:82:f7:09:a3:f3:f0:ca:90:11:ab:4c:07:23:95:4d:59:b4: 72:84:37:96:43:0f:d8:63:c3:ec:bf:0c:4e:93:2e:8a:23:37: 7f:66:12:2f:43:ef:7c:b4:b9:1f:03:23:fc:59:a6:7e:ba:b3: de:5e:85:e7:69:4c:7c:46:b1:d3:13:5f:df:e6:82:fc:db:d2: a4:91:c0:89:17:9d:7c:e1:88:f0:35:a1:89:5e:87:4c:e0:10: 5b:46:05:49:8b:cf:cf:ef:d3:3f:31:d1:52:99:f5:c2:a5:f9: 43:d3:dc:50:c0:2c:17:50:b2:bf:aa:3e:3b:6c:df:96:a6:9b: 46:55:86:a5:c8:ad:a1:ac:30:b6:fd:e9:d4:84:1e:03:00:0c: 55:00:98:49:5e:24:eb:18:b7:07:30:1f:74:a8:5b:ac:c3:67: 3c:3f:9b:3a:1b:22:13:7c:68:16:6b:9d:93:96:49:87:96:4f: d8:48:db:df:21:61:0f:ee:8f:10:cf:1a:8c:f8:9f:1f:f0:85: a3:6b:04:8b:b2:5a:e2:6c:c2:2f:f2:ab:0b:ed:d8:0c:89:4c: 0b:ef:cf:e9:5f:c9:72:52:3b:70:e1:b7:bc:a8:79:8f:74:ad: d5:bf:8c:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGX5HaT4Enkz15n6WEYlnqyB5rfwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQ3QTQ4RUFEMTBEMUZFOTdDN0VGMjNBQTZFQTJBRDY1 NUJGQjBBRjAeFw0yNTA4MDUxNjA2MzFaFw0yNTA4MDgyMTQwMzFaMDMxMTAvBgNV BAMTKDUwQzAzNzI0QzhDMDYzRjQ4RUM1MjQwMjM1RDk4QzEwMjlDMDk0NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1XVUH3OReZUeFBopk3FzWK5JR wjj0RhkfjTJJ7sat40ZSBdWmPfnsti5Bn7aAHmNY3YkMtA62sJkvYpByHATNMMvc cMssXC5Xh28oMu44uUAYhOrOC9A0pTBp0Z4TozPjo2Zcdf7TZcHN5AoYiBMffYIH ZGgZFPSn4AWmIkniF8QtzhU+a5V0OQc3o8I2EO3n6fOI5GrpsMydxC1sSbEZAzL8 e6Z7ef++aSNRQWKG/Haf3dmjQ94sRtEdwnyoYl4mx906nAQ1eczBUlLAZn4FPuM4 T0Pv3n9xiXSQtEQRhUhvQGxgxfRylO1qrqTtmfBnT7v19/qDPT20pVtYCLx9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUMA3JMjAY/SOxSQCNdmMECnAlFYwHwYDVR0j BBgwFoAU7XpI6tENH+l8fvI6puoq1lW/sK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NDMzZTM0NC1lODE5LTQ0MzgtYjhjYS0xZjU4YzNkNTI3Y2IvMC9FRDdBNDhFQUQx MEQxRkU5N0M3RUYyM0FBNkVBMkFENjU1QkZCMEFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUQ3QTQ4RUFEMTBEMUZFOTdDN0VGMjNBQTZFQTJBRDY1NUJG QjBBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzQzM2UzNDQtZTgxOS00NDM4LWI4 Y2EtMWY1OGMzZDUyN2NiLzAvRUQ3QTQ4RUFEMTBEMUZFOTdDN0VGMjNBQTZFQTJB RDY1NUJGQjBBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANM/4SXeSX5bZDwrlWQdO0DBR4qC9wmj8/DK kBGrTAcjlU1ZtHKEN5ZDD9hjw+y/DE6TLoojN39mEi9D73y0uR8DI/xZpn66s95e hedpTHxGsdMTX9/mgvzb0qSRwIkXnXzhiPA1oYleh0zgEFtGBUmLz8/v0z8x0VKZ 9cKl+UPT3FDALBdQsr+qPjts35amm0ZVhqXIraGsMLb96dSEHgMADFUAmEleJOsY twcwH3SoW6zDZzw/mzobIhN8aBZrnZOWSYeWT9hI298hYQ/ujxDPGoz4nx/whaNr BIuyWuJswi/yqwvt2AyJTAvvz+lfyXJSO3Dht7yoeY90rdW/jIw= -----END CERTIFICATE-----Generated at Thu Aug 7 07:16:58 2025 by rpki-client