$ rpki-client -vvf repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.mft File: C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.mft (raw, json) Hash identifier: +fhnZ7VP37EnmTCLrIlq5ANZnbsafZHSeEXM4VIfTAM= Subject key identifier: B0:49:8B:87:4C:89:C3:85:19:2E:02:A8:FE:CB:0B:09:27:6C:BD:6F Authority key identifier: C9:27:69:FD:5D:97:A4:67:70:E3:A1:0F:9D:57:AE:93:1F:9A:9F:C2 Certificate issuer: /CN=C92769FD5D97A46770E3A10F9D57AE931F9A9FC2 Certificate serial: 605B662F770777DE95F2B8FCE734827E469D2BEA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.mft Manifest number: 014A Signing time: Wed 06 Aug 2025 01:22:22 +0000 Manifest this update: Wed 06 Aug 2025 01:17:22 +0000 Manifest next update: Sat 09 Aug 2025 08:46:22 +0000 Files and hashes: 1: C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.crl (hash: ukRO24T8XQM5RzTIbWlEiCdfavyzH7zjMc2F5am58gA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.crl rsync://repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 08:46:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:5b:66:2f:77:07:77:de:95:f2:b8:fc:e7:34:82:7e:46:9d:2b:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C92769FD5D97A46770E3A10F9D57AE931F9A9FC2 Validity Not Before: Aug 6 01:17:22 2025 GMT Not After : Aug 9 08:46:22 2025 GMT Subject: CN=B0498B874C89C385192E02A8FECB0B09276CBD6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:5a:14:64:0f:18:a1:62:23:4e:b3:f7:53:34: 43:77:cf:aa:d6:74:17:fa:d5:93:90:ad:a8:4f:fc: 73:21:20:47:73:ee:01:89:69:89:75:49:8b:9b:33: 2a:36:b1:5c:a8:76:d6:d0:11:b8:a2:fe:2a:a6:0d: c6:4e:bc:d8:5b:8d:7c:b2:01:c7:a6:52:e0:1a:a3: 32:68:a0:bc:9c:a3:1b:7b:2b:99:d9:2c:08:50:40: 83:be:cb:e6:ad:08:92:9e:5a:68:b2:49:dc:80:08: 0c:76:88:e9:77:25:a7:4a:14:6a:74:73:e9:09:f1: 2a:e6:fd:7c:62:06:ed:80:4a:6f:6e:b0:3a:76:ca: 60:f6:34:cd:0b:2d:b1:3d:fb:45:1f:0a:f3:61:91: 46:34:2b:10:d6:6a:33:0e:1f:8f:f8:55:df:fd:ed: 99:99:bf:1a:ed:6a:0c:b8:6b:4f:b5:cd:13:2a:6c: f3:e0:3c:ab:e7:d3:bb:ff:c3:be:f2:5e:36:82:dc: ac:05:7e:5b:c0:ef:49:c9:eb:fa:b4:40:cb:25:a2: 4a:3a:69:85:1e:f9:5f:0a:51:ed:1b:9a:8b:84:f4: 06:bd:ea:c6:e9:87:19:a9:b4:d3:59:ac:68:b3:17: 2e:5a:8d:74:33:30:1a:e7:bb:0a:70:5b:6a:9a:84: 80:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:49:8B:87:4C:89:C3:85:19:2E:02:A8:FE:CB:0B:09:27:6C:BD:6F X509v3 Authority Key Identifier: keyid:C9:27:69:FD:5D:97:A4:67:70:E3:A1:0F:9D:57:AE:93:1F:9A:9F:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:6e:02:53:25:8f:06:f8:e2:d4:34:78:a0:a3:c0:66:ac:1c: e0:e8:ff:ac:9e:94:eb:c0:4f:0b:7b:8e:26:93:f6:ce:20:7e: 95:27:5c:8d:fa:74:1b:10:ad:84:f3:2c:a5:a3:f0:d3:42:15: 5e:e1:7d:df:ac:53:88:ad:16:14:a0:0e:2d:ef:7b:eb:6d:ee: c6:91:af:c9:26:92:cd:6a:30:93:56:cf:4c:1f:a4:c5:2c:05: 06:c7:4f:7d:f6:42:ab:32:40:bc:49:69:8e:cd:ef:82:01:8a: b8:d2:cc:b7:1c:ee:e5:51:d0:a7:99:5e:39:d6:7c:d2:73:4d: 2a:f7:ef:74:e7:3e:ef:9a:73:02:b8:19:0d:11:d3:a8:dd:62: 73:c9:dc:9e:38:4d:db:fe:c6:b7:33:4c:cb:a0:35:2e:e3:da: 33:74:84:ea:41:f5:d3:18:28:06:58:dc:68:ec:93:3a:d3:e9: ba:10:07:7d:7c:73:93:0c:ac:86:45:c4:d4:a7:48:ae:64:e2: 24:de:0f:1b:98:8c:59:a5:50:75:7a:4f:de:51:07:84:18:62: 48:c4:5a:ac:57:11:2d:96:57:d8:6c:28:29:9e:fb:e5:3e:56: 92:ae:0b:50:e3:05:08:ac:5a:6b:72:85:a5:7c:d4:93:d2:7a: 62:3a:16:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYFtmL3cHd96V8rj85zSCfkadK+owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzkyNzY5RkQ1RDk3QTQ2NzcwRTNBMTBGOUQ1N0FFOTMx RjlBOUZDMjAeFw0yNTA4MDYwMTE3MjJaFw0yNTA4MDkwODQ2MjJaMDMxMTAvBgNV BAMTKEIwNDk4Qjg3NEM4OUMzODUxOTJFMDJBOEZFQ0IwQjA5Mjc2Q0JENkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtWhRkDxihYiNOs/dTNEN3z6rW dBf61ZOQrahP/HMhIEdz7gGJaYl1SYubMyo2sVyodtbQEbii/iqmDcZOvNhbjXyy AcemUuAaozJooLycoxt7K5nZLAhQQIO+y+atCJKeWmiySdyACAx2iOl3JadKFGp0 c+kJ8Srm/XxiBu2ASm9usDp2ymD2NM0LLbE9+0UfCvNhkUY0KxDWajMOH4/4Vd/9 7ZmZvxrtagy4a0+1zRMqbPPgPKvn07v/w77yXjaC3KwFflvA70nJ6/q0QMsloko6 aYUe+V8KUe0bmouE9Aa96sbphxmptNNZrGizFy5ajXQzMBrnuwpwW2qahIBxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsEmLh0yJw4UZLgKo/ssLCSdsvW8wHwYDVR0j BBgwFoAUySdp/V2XpGdw46EPnVeukx+an8IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NWQ3Nzg0MC02MDhlLTQ0OWEtYjIyZi0zNmE2ZTI1MmZiMjMvMC9DOTI3NjlGRDVE OTdBNDY3NzBFM0ExMEY5RDU3QUU5MzFGOUE5RkMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzkyNzY5RkQ1RDk3QTQ2NzcwRTNBMTBGOUQ1N0FFOTMxRjlB OUZDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjVkNzc4NDAtNjA4ZS00NDlhLWIy MmYtMzZhNmUyNTJmYjIzLzAvQzkyNzY5RkQ1RDk3QTQ2NzcwRTNBMTBGOUQ1N0FF OTMxRjlBOUZDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADZuAlMljwb44tQ0eKCjwGasHODo/6yelOvA Twt7jiaT9s4gfpUnXI36dBsQrYTzLKWj8NNCFV7hfd+sU4itFhSgDi3ve+tt7saR r8kmks1qMJNWz0wfpMUsBQbHT332QqsyQLxJaY7N74IBirjSzLcc7uVR0KeZXjnW fNJzTSr373TnPu+acwK4GQ0R06jdYnPJ3J44Tdv+xrczTMugNS7j2jN0hOpB9dMY KAZY3GjskzrT6boQB318c5MMrIZFxNSnSK5k4iTeDxuYjFmlUHV6T95RB4QYYkjE WqxXES2WV9hsKCme++U+VpKuC1DjBQisWmtyhaV81JPSemI6Fvs= -----END CERTIFICATE-----Generated at Thu Aug 7 00:36:00 2025 by rpki-client