$ rpki-client -vvf repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft File: C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft (raw, json) Hash identifier: rBNVixuXdFTwnpiUvQM3xy/MgGA+GCawpoU1HPuo+Rs= Subject key identifier: 96:D1:C0:14:7D:B8:EA:E9:A1:BA:3A:6A:09:CE:F6:98:10:46:B9:49 Authority key identifier: C1:93:44:D0:F4:EF:3C:AD:E2:A7:71:14:81:E3:D1:45:2C:62:1D:62 Certificate issuer: /CN=C19344D0F4EF3CADE2A7711481E3D1452C621D62 Certificate serial: 29EB01819E1F3D6AF6B1946FAA1A35ED096CDB9F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19344D0F4EF3CADE2A7711481E3D1452C621D62.cer Subject info access: rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft Manifest number: 01EA Signing time: Thu 21 Aug 2025 09:12:01 +0000 Manifest this update: Thu 21 Aug 2025 09:07:01 +0000 Manifest next update: Sun 24 Aug 2025 11:14:01 +0000 Files and hashes: 1: C19344D0F4EF3CADE2A7711481E3D1452C621D62.crl (hash: byxxEytDWI+2gJNxmp0mETzeu2OMo3YIuxJD4W1g+Xk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.crl rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19344D0F4EF3CADE2A7711481E3D1452C621D62.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 11:14:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:eb:01:81:9e:1f:3d:6a:f6:b1:94:6f:aa:1a:35:ed:09:6c:db:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C19344D0F4EF3CADE2A7711481E3D1452C621D62 Validity Not Before: Aug 21 09:07:01 2025 GMT Not After : Aug 24 11:14:01 2025 GMT Subject: CN=96D1C0147DB8EAE9A1BA3A6A09CEF6981046B949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:93:e2:6d:07:ee:aa:80:eb:86:85:dd:33:f3: ce:ee:7f:0e:c6:d0:c4:ab:ea:4b:9f:01:d9:94:70: 7b:5c:12:a3:26:2d:f8:34:0b:58:8a:a8:0b:0b:b0: 0e:3a:40:63:a9:d2:fb:5e:90:6e:1c:51:32:1c:e7: 57:1c:ff:e5:11:bf:36:e8:3a:b8:95:f8:36:eb:b9: 59:00:43:f6:04:4d:89:81:55:2f:30:3c:5f:50:8f: aa:71:36:4d:31:59:32:1c:80:0e:20:f9:f5:59:1d: 08:48:07:95:08:67:38:fe:02:01:4b:34:30:ae:d4: d7:0e:ee:e6:96:49:99:11:b5:db:00:88:a2:71:2b: 43:7a:2c:26:16:29:bf:86:87:0f:1c:c1:91:65:af: 65:07:ab:3d:04:54:4a:e7:23:7c:e5:5e:67:b7:82: ab:ff:18:1c:a0:52:a5:79:d1:2c:02:4b:a0:22:57: e1:e6:25:c3:3b:39:e8:76:6d:41:c8:7d:8e:24:17: 29:84:b0:4e:4f:ed:a8:f2:5a:33:10:c9:2d:0b:34: 2b:6e:ba:d3:e4:7c:4a:ea:a7:79:60:c2:e9:d1:d2: 3f:89:0e:05:5c:5b:a0:c7:32:09:cf:0b:17:21:79: f2:c3:3e:e5:b8:9d:9c:26:d6:21:ce:2f:73:2e:91: 42:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:D1:C0:14:7D:B8:EA:E9:A1:BA:3A:6A:09:CE:F6:98:10:46:B9:49 X509v3 Authority Key Identifier: keyid:C1:93:44:D0:F4:EF:3C:AD:E2:A7:71:14:81:E3:D1:45:2C:62:1D:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19344D0F4EF3CADE2A7711481E3D1452C621D62.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/01b6dd9b-d152-4c8f-87b7-629eb808f911/0/C19344D0F4EF3CADE2A7711481E3D1452C621D62.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:5b:11:7e:da:7b:d5:b9:05:93:ec:20:2b:1f:7a:79:60:f9: 0c:f3:30:d0:f4:d6:36:30:81:67:37:bd:d4:25:43:1c:68:5c: 26:49:1e:9a:c9:98:81:df:f6:72:7f:38:44:2e:48:37:3e:10: 55:39:91:08:f2:dc:79:48:9e:f0:63:b0:2c:bd:83:5b:42:e3: 6b:fe:6a:f4:ee:c9:d1:36:27:21:a8:37:b4:a2:56:1d:5b:84: 8f:1e:c5:ae:c1:69:c4:fd:79:ee:73:fa:77:48:8e:aa:f4:b3: 66:f6:35:b5:7d:98:62:f8:70:20:0d:a5:c8:4b:2c:05:62:b0: 74:3f:ab:3d:59:c2:94:ed:9b:16:bb:80:57:16:e1:89:eb:58: bc:82:37:4a:69:15:57:d1:db:e1:69:08:d2:2a:ca:80:ce:33: 3d:d3:98:2a:cc:83:73:15:21:10:cf:ea:b3:91:96:4c:63:77: 48:03:70:5c:3b:ba:7e:36:01:23:f8:a4:b5:78:9d:83:25:36: e3:ea:20:d3:03:aa:55:88:59:43:2f:82:c2:8c:70:f7:7e:57: 4b:e9:bd:7d:da:9b:6d:d3:9d:2d:5a:b2:d4:92:f6:a3:69:18: c0:da:28:a4:62:06:68:a7:98:d1:42:18:cf:d8:90:aa:29:40: a1:69:ec:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKesBgZ4fPWr2sZRvqho17Qls258wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE5MzQ0RDBGNEVGM0NBREUyQTc3MTE0ODFFM0QxNDUy QzYyMUQ2MjAeFw0yNTA4MjEwOTA3MDFaFw0yNTA4MjQxMTE0MDFaMDMxMTAvBgNV BAMTKDk2RDFDMDE0N0RCOEVBRTlBMUJBM0E2QTA5Q0VGNjk4MTA0NkI5NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbk+JtB+6qgOuGhd0z887ufw7G 0MSr6kufAdmUcHtcEqMmLfg0C1iKqAsLsA46QGOp0vtekG4cUTIc51cc/+URvzbo OriV+DbruVkAQ/YETYmBVS8wPF9Qj6pxNk0xWTIcgA4g+fVZHQhIB5UIZzj+AgFL NDCu1NcO7uaWSZkRtdsAiKJxK0N6LCYWKb+Ghw8cwZFlr2UHqz0EVErnI3zlXme3 gqv/GBygUqV50SwCS6AiV+HmJcM7Oeh2bUHIfY4kFymEsE5P7ajyWjMQyS0LNCtu utPkfErqp3lgwunR0j+JDgVcW6DHMgnPCxchefLDPuW4nZwm1iHOL3MukUKVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUltHAFH246umhujpqCc72mBBGuUkwHwYDVR0j BBgwFoAUwZNE0PTvPK3ip3EUgePRRSxiHWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MWI2ZGQ5Yi1kMTUyLTRjOGYtODdiNy02MjllYjgwOGY5MTEvMC9DMTkzNDREMEY0 RUYzQ0FERTJBNzcxMTQ4MUUzRDE0NTJDNjIxRDYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE5MzQ0RDBGNEVGM0NBREUyQTc3MTE0ODFFM0QxNDUyQzYy MUQ2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDFiNmRkOWItZDE1Mi00YzhmLTg3 YjctNjI5ZWI4MDhmOTExLzAvQzE5MzQ0RDBGNEVGM0NBREUyQTc3MTE0ODFFM0Qx NDUyQzYyMUQ2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACtbEX7ae9W5BZPsICsfenlg+QzzMND01jYw gWc3vdQlQxxoXCZJHprJmIHf9nJ/OEQuSDc+EFU5kQjy3HlInvBjsCy9g1tC42v+ avTuydE2JyGoN7SiVh1bhI8exa7BacT9ee5z+ndIjqr0s2b2NbV9mGL4cCANpchL LAVisHQ/qz1ZwpTtmxa7gFcW4YnrWLyCN0ppFVfR2+FpCNIqyoDOMz3TmCrMg3MV IRDP6rORlkxjd0gDcFw7un42ASP4pLV4nYMlNuPqINMDqlWIWUMvgsKMcPd+V0vp vX3am23TnS1astSS9qNpGMDaKKRiBminmNFCGM/YkKopQKFp7Bg= -----END CERTIFICATE-----Generated at Sat Aug 23 10:34:21 2025 by rpki-client