$ rpki-client -vvf repo-rpki.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/C2759C8490CBC757371078D2CA604D6FF8EE4C19.mft File: C2759C8490CBC757371078D2CA604D6FF8EE4C19.mft (raw, json) Hash identifier: r2ugJl9vUelnVjMDqLx6TH3s9P4YdWtJ8FPmCSVQRXs= Subject key identifier: D9:84:9F:5B:8E:2D:AE:99:65:85:8F:9A:5E:53:00:CD:36:D5:F5:81 Authority key identifier: C2:75:9C:84:90:CB:C7:57:37:10:78:D2:CA:60:4D:6F:F8:EE:4C:19 Certificate issuer: /CN=C2759C8490CBC757371078D2CA604D6FF8EE4C19 Certificate serial: 771999153056FA391E9135BD6F8210EB288403CC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2759C8490CBC757371078D2CA604D6FF8EE4C19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/C2759C8490CBC757371078D2CA604D6FF8EE4C19.mft Manifest number: 3A Signing time: Mon 04 Aug 2025 15:40:35 +0000 Manifest this update: Mon 04 Aug 2025 15:35:35 +0000 Manifest next update: Fri 08 Aug 2025 02:17:35 +0000 Files and hashes: 1: C2759C8490CBC757371078D2CA604D6FF8EE4C19.crl (hash: ux11bud9W5EF2wyo73cKMWvasEQmSI+AmGDbpp9zbTg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/C2759C8490CBC757371078D2CA604D6FF8EE4C19.crl rsync://repo-rpki.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/C2759C8490CBC757371078D2CA604D6FF8EE4C19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2759C8490CBC757371078D2CA604D6FF8EE4C19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 02:17:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:19:99:15:30:56:fa:39:1e:91:35:bd:6f:82:10:eb:28:84:03:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2759C8490CBC757371078D2CA604D6FF8EE4C19 Validity Not Before: Aug 4 15:35:35 2025 GMT Not After : Aug 8 02:17:35 2025 GMT Subject: CN=D9849F5B8E2DAE9965858F9A5E5300CD36D5F581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:05:02:94:75:06:17:5f:78:99:52:39:18:76: f2:77:0b:58:ac:7a:f3:43:b8:3b:60:63:c5:97:78: eb:50:3e:54:15:cd:f0:b8:15:e1:7c:7f:56:4f:fe: b7:0d:87:39:21:7d:53:14:74:1c:7b:c3:89:68:3d: ba:53:1f:67:9e:be:c8:bb:ac:4d:66:a5:06:e8:c5: 01:3b:d4:b6:38:bd:56:45:29:1b:54:8d:48:28:81: f2:c7:5e:21:43:75:6d:68:e9:b7:b5:38:c2:c1:09: 37:a3:1a:60:3c:82:23:e9:b0:f0:ea:03:94:81:c2: 9b:14:d3:8f:7e:9f:7f:d8:4c:86:fa:83:6f:21:28: 81:ed:82:be:37:43:66:f2:b9:39:5c:9c:38:28:cf: 2c:86:12:ef:d8:5e:fa:33:5c:90:67:95:53:36:7b: 96:32:22:f1:25:a6:5b:70:2f:4a:77:81:0e:1b:48: ea:63:72:bf:38:b0:53:bf:f2:02:96:a1:9d:25:3c: 58:c4:18:5a:9a:71:44:60:1f:30:45:c0:5d:05:52: 19:09:b2:9e:53:6e:d7:a3:31:ea:46:69:3c:4a:a9: 6d:40:2b:b3:b1:b6:bd:76:a6:97:24:23:cd:bb:77: c1:d2:e5:5f:19:f7:a8:17:da:fd:85:da:c5:d7:44: 9e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:84:9F:5B:8E:2D:AE:99:65:85:8F:9A:5E:53:00:CD:36:D5:F5:81 X509v3 Authority Key Identifier: keyid:C2:75:9C:84:90:CB:C7:57:37:10:78:D2:CA:60:4D:6F:F8:EE:4C:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/C2759C8490CBC757371078D2CA604D6FF8EE4C19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2759C8490CBC757371078D2CA604D6FF8EE4C19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/C2759C8490CBC757371078D2CA604D6FF8EE4C19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:79:57:47:71:96:5a:0e:e4:87:63:66:cd:7a:52:4d:5a:6d: c8:a3:28:92:79:bf:37:a2:24:9e:10:b6:3c:08:a9:2b:ee:b8: c4:57:ca:37:7a:36:a3:20:9b:8d:b9:4a:71:d6:d8:c8:87:c7: ff:e7:06:93:86:73:22:e1:5c:b9:10:9d:60:d6:af:3e:37:34: 86:1c:2d:2f:cb:05:13:88:7c:63:60:5b:6e:08:52:b6:c9:37: 90:98:9b:84:38:24:96:19:5b:7f:cd:a2:d0:8a:53:6f:e9:45: a1:e1:ee:1a:b0:ea:6f:a1:61:26:e0:27:f8:fa:9e:b0:67:b2: d6:d4:9a:bf:25:48:ad:33:c1:af:32:55:ed:b9:88:f4:e3:d9: f5:f2:d0:c7:a2:f5:6c:b7:ec:fb:ec:c8:13:04:1c:16:c8:ab: f7:18:de:a4:ab:98:e9:ac:4a:c2:5d:c3:7c:51:7f:14:6f:c5: bc:a7:e0:6d:9a:aa:ce:54:70:cd:5b:30:f0:fd:dc:45:e0:b8: 56:32:e7:d6:60:23:8a:c9:50:e3:66:fb:4e:fe:39:51:70:eb: 9b:6f:26:f0:13:b5:27:91:14:ff:73:c5:04:ff:aa:da:de:72: 30:3a:92:ec:d2:f5:ad:85:fb:d4:f0:c1:82:d0:34:48:1b:ad: d4:83:c9:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdxmZFTBW+jkekTW9b4IQ6yiEA8wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI3NTlDODQ5MENCQzc1NzM3MTA3OEQyQ0E2MDRENkZG OEVFNEMxOTAeFw0yNTA4MDQxNTM1MzVaFw0yNTA4MDgwMjE3MzVaMDMxMTAvBgNV BAMTKEQ5ODQ5RjVCOEUyREFFOTk2NTg1OEY5QTVFNTMwMENEMzZENUY1ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1BQKUdQYXX3iZUjkYdvJ3C1is evNDuDtgY8WXeOtQPlQVzfC4FeF8f1ZP/rcNhzkhfVMUdBx7w4loPbpTH2eevsi7 rE1mpQboxQE71LY4vVZFKRtUjUgogfLHXiFDdW1o6be1OMLBCTejGmA8giPpsPDq A5SBwpsU049+n3/YTIb6g28hKIHtgr43Q2byuTlcnDgozyyGEu/YXvozXJBnlVM2 e5YyIvElpltwL0p3gQ4bSOpjcr84sFO/8gKWoZ0lPFjEGFqacURgHzBFwF0FUhkJ sp5TbtejMepGaTxKqW1AK7Oxtr12ppckI827d8HS5V8Z96gX2v2F2sXXRJ4FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2YSfW44trpllhY+aXlMAzTbV9YEwHwYDVR0j BBgwFoAUwnWchJDLx1c3EHjSymBNb/juTBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZTcxNmRlYS02NTM2LTRkNmUtYjU0Yi1iZjdmNzNjZjZiOTQvMC9DMjc1OUM4NDkw Q0JDNzU3MzcxMDc4RDJDQTYwNEQ2RkY4RUU0QzE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzI3NTlDODQ5MENCQzc1NzM3MTA3OEQyQ0E2MDRENkZGOEVF NEMxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmU3MTZkZWEtNjUzNi00ZDZlLWI1 NGItYmY3ZjczY2Y2Yjk0LzAvQzI3NTlDODQ5MENCQzc1NzM3MTA3OEQyQ0E2MDRE NkZGOEVFNEMxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIp5V0dxlloO5IdjZs16Uk1abcijKJJ5vzei JJ4QtjwIqSvuuMRXyjd6NqMgm425SnHW2MiHx//nBpOGcyLhXLkQnWDWrz43NIYc LS/LBROIfGNgW24IUrbJN5CYm4Q4JJYZW3/NotCKU2/pRaHh7hqw6m+hYSbgJ/j6 nrBnstbUmr8lSK0zwa8yVe25iPTj2fXy0Mei9Wy37PvsyBMEHBbIq/cY3qSrmOms SsJdw3xRfxRvxbyn4G2aqs5UcM1bMPD93EXguFYy59ZgI4rJUONm+07+OVFw65tv JvATtSeRFP9zxQT/qtrecjA6kuzS9a2F+9TwwYLQNEgbrdSDyTQ= -----END CERTIFICATE-----Generated at Thu Aug 7 03:15:59 2025 by rpki-client