$ rpki-client -vvf repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft File: 2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft (raw, json) Hash identifier: BRYAmJhwFJLivCZQSbG+z18rTZXOvsP+jAnQIoi8xRg= Subject key identifier: E9:D7:08:51:CD:A0:EB:E0:99:29:F8:C6:A5:9C:79:58:94:91:F9:1D Authority key identifier: 25:96:AD:9D:A9:03:31:FB:33:6D:C5:2C:5B:72:F9:92:D7:D4:9D:37 Certificate issuer: /CN=2596AD9DA90331FB336DC52C5B72F992D7D49D37 Certificate serial: 2FF72F2E258C42BF939B72D5ACE47767C0DEC423 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2596AD9DA90331FB336DC52C5B72F992D7D49D37.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft Manifest number: B9 Signing time: Tue 05 Aug 2025 13:52:25 +0000 Manifest this update: Tue 05 Aug 2025 13:47:25 +0000 Manifest next update: Fri 08 Aug 2025 14:47:25 +0000 Files and hashes: 1: 2596AD9DA90331FB336DC52C5B72F992D7D49D37.crl (hash: vkBeug/quv5wJHnAE0Q/pS9Pnb7BnZikR7M3MzOBeDU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.crl rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2596AD9DA90331FB336DC52C5B72F992D7D49D37.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 14:47:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:f7:2f:2e:25:8c:42:bf:93:9b:72:d5:ac:e4:77:67:c0:de:c4:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2596AD9DA90331FB336DC52C5B72F992D7D49D37 Validity Not Before: Aug 5 13:47:25 2025 GMT Not After : Aug 8 14:47:25 2025 GMT Subject: CN=E9D70851CDA0EBE09929F8C6A59C79589491F91D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2f:cc:6f:cc:79:79:10:8e:cf:c6:37:27:b1: 9a:e4:6e:1c:9b:58:ac:23:13:ed:73:6b:b4:7a:14: 3c:08:7a:95:ac:e4:cf:25:c1:79:79:d7:ec:df:66: b1:c1:38:c2:10:5c:94:4b:5f:74:44:32:d5:9b:cd: b2:35:33:64:ff:7c:1c:17:4f:d8:ac:c8:03:a9:47: 46:de:cf:1d:cd:e9:0b:0c:91:70:d0:8e:34:e6:89: 04:f1:d5:4d:18:de:da:13:97:5b:8a:67:79:9e:32: 58:ef:45:23:52:89:c2:2d:e9:12:e3:9d:e3:52:00: 74:04:5b:67:49:55:0f:08:91:bf:76:3e:fc:44:37: 4d:d3:9e:f7:f2:4e:57:2f:52:1d:dc:c0:28:df:18: f5:be:da:e7:82:55:3e:b8:b8:b1:39:c9:98:ec:31: 14:f7:12:02:90:07:1e:a1:11:a3:51:e7:ec:de:fb: 9f:7d:31:e8:12:65:c9:fa:3f:09:8b:08:18:c4:91: ac:c3:d1:cb:1f:0a:ac:26:82:c5:58:2e:98:de:7e: 88:a1:5b:c9:f6:4e:32:f5:6d:96:b9:1e:8f:6d:5e: 08:f0:ce:b2:95:fa:a5:cf:06:22:67:aa:0a:b1:ed: 79:6e:56:47:c5:d6:96:01:d9:28:86:41:af:7e:96: 39:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:D7:08:51:CD:A0:EB:E0:99:29:F8:C6:A5:9C:79:58:94:91:F9:1D X509v3 Authority Key Identifier: keyid:25:96:AD:9D:A9:03:31:FB:33:6D:C5:2C:5B:72:F9:92:D7:D4:9D:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2596AD9DA90331FB336DC52C5B72F992D7D49D37.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:34:61:90:1a:0d:04:34:45:d4:7f:d4:f6:e6:08:2b:76:18: e3:27:de:7a:76:03:2b:ed:ae:c6:5e:11:0e:16:04:b6:a6:4c: 97:17:9c:28:fb:9a:96:d0:48:bc:89:aa:ec:64:eb:a8:cd:16: ee:12:1a:87:57:94:17:67:f4:f3:c8:9e:aa:df:a6:39:18:99: 16:fc:2f:5c:5c:13:e7:8e:63:09:69:5d:a3:67:8e:f6:c5:89: 3e:32:bd:3c:37:32:45:a9:5f:61:aa:0a:de:cb:82:2b:c9:82: 00:69:df:d1:74:3a:a2:5f:28:75:45:10:af:c3:9d:b6:1f:1f: 2f:6a:bc:ff:8e:1b:69:76:96:eb:ad:ec:2b:01:10:c6:22:24: bd:27:5f:93:fa:8f:19:24:fa:a3:87:f5:5b:8b:37:f9:2b:45: 0c:02:14:67:f0:d8:e8:80:64:3a:20:72:ae:50:03:dc:08:ad: fa:d5:47:e5:a7:80:8b:e2:1c:53:9f:29:77:79:00:63:12:ce: c8:af:15:94:a5:3b:5f:e6:8b:8a:b6:a6:e5:5e:d5:28:ab:48: 1a:72:b0:a9:62:5b:a4:0a:8e:10:6f:d7:f7:a0:13:65:b8:d1: 22:ed:ee:60:56:29:22:4f:07:5b:88:a8:24:d3:04:c3:55:84: 4a:7e:a6:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL/cvLiWMQr+Tm3LVrOR3Z8DexCMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU5NkFEOURBOTAzMzFGQjMzNkRDNTJDNUI3MkY5OTJE N0Q0OUQzNzAeFw0yNTA4MDUxMzQ3MjVaFw0yNTA4MDgxNDQ3MjVaMDMxMTAvBgNV BAMTKEU5RDcwODUxQ0RBMEVCRTA5OTI5RjhDNkE1OUM3OTU4OTQ5MUY5MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQL8xvzHl5EI7PxjcnsZrkbhyb WKwjE+1za7R6FDwIepWs5M8lwXl51+zfZrHBOMIQXJRLX3REMtWbzbI1M2T/fBwX T9isyAOpR0bezx3N6QsMkXDQjjTmiQTx1U0Y3toTl1uKZ3meMljvRSNSicIt6RLj neNSAHQEW2dJVQ8Ikb92PvxEN03TnvfyTlcvUh3cwCjfGPW+2ueCVT64uLE5yZjs MRT3EgKQBx6hEaNR5+ze+599MegSZcn6PwmLCBjEkazD0csfCqwmgsVYLpjefoih W8n2TjL1bZa5Ho9tXgjwzrKV+qXPBiJnqgqx7XluVkfF1pYB2SiGQa9+ljmvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6dcIUc2g6+CZKfjGpZx5WJSR+R0wHwYDVR0j BBgwFoAUJZatnakDMfszbcUsW3L5ktfUnTcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjAzNmI3NC04YTVkLTQwYWEtOTYwYy05MjFlNjNhNzBhNGMvMC8yNTk2QUQ5REE5 MDMzMUZCMzM2REM1MkM1QjcyRjk5MkQ3RDQ5RDM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjU5NkFEOURBOTAzMzFGQjMzNkRDNTJDNUI3MkY5OTJEN0Q0 OUQzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGYwMzZiNzQtOGE1ZC00MGFhLTk2 MGMtOTIxZTYzYTcwYTRjLzAvMjU5NkFEOURBOTAzMzFGQjMzNkRDNTJDNUI3MkY5 OTJEN0Q0OUQzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAME0YZAaDQQ0RdR/1PbmCCt2GOMn3np2Ayvt rsZeEQ4WBLamTJcXnCj7mpbQSLyJquxk66jNFu4SGodXlBdn9PPInqrfpjkYmRb8 L1xcE+eOYwlpXaNnjvbFiT4yvTw3MkWpX2GqCt7LgivJggBp39F0OqJfKHVFEK/D nbYfHy9qvP+OG2l2luut7CsBEMYiJL0nX5P6jxkk+qOH9VuLN/krRQwCFGfw2OiA ZDogcq5QA9wIrfrVR+WngIviHFOfKXd5AGMSzsivFZSlO1/mi4q2puVe1SirSBpy sKliW6QKjhBv1/egE2W40SLt7mBWKSJPB1uIqCTTBMNVhEp+pvA= -----END CERTIFICATE-----Generated at Thu Aug 7 01:03:06 2025 by rpki-client