$ rpki-client -vvf repo-rpki.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.mft File: 0690815B5E9C2228263F17C9B3F5F99DD6882F9C.mft (raw, json) Hash identifier: lgRo+miTrFkZ0Ii7QJ6WIOk4sjvjpYTNvDbNHMWC9Tw= Subject key identifier: 87:1E:FD:46:1F:AB:F1:0E:C2:44:AA:79:8D:81:5E:32:1D:4B:19:4E Authority key identifier: 06:90:81:5B:5E:9C:22:28:26:3F:17:C9:B3:F5:F9:9D:D6:88:2F:9C Certificate issuer: /CN=0690815B5E9C2228263F17C9B3F5F99DD6882F9C Certificate serial: 4A7B809E699141BFE4F0CFB61C69605B68206A1E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.mft Manifest number: 0172 Signing time: Fri 22 Aug 2025 17:31:11 +0000 Manifest this update: Fri 22 Aug 2025 17:26:11 +0000 Manifest next update: Mon 25 Aug 2025 18:56:11 +0000 Files and hashes: 1: 0690815B5E9C2228263F17C9B3F5F99DD6882F9C.crl (hash: kIOCArR9NS4H6TDbaQB94Il9RngtzpF+JBMsXhK23Yk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.crl rsync://repo-rpki.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 18:56:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:7b:80:9e:69:91:41:bf:e4:f0:cf:b6:1c:69:60:5b:68:20:6a:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0690815B5E9C2228263F17C9B3F5F99DD6882F9C Validity Not Before: Aug 22 17:26:11 2025 GMT Not After : Aug 25 18:56:11 2025 GMT Subject: CN=871EFD461FABF10EC244AA798D815E321D4B194E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8a:5c:f2:e6:fb:91:75:67:3a:08:29:7f:6b: ad:59:cf:9b:57:36:96:c8:00:cc:f5:18:62:12:3a: 1d:88:86:03:48:cd:0e:b1:2d:c5:a6:83:ff:12:4a: 36:39:27:de:b5:b6:9c:39:a6:9e:4e:b4:52:a4:f1: f0:45:8f:85:99:ad:4f:a8:39:4c:39:4a:76:a4:e1: 9d:f4:52:0d:a8:9e:41:d7:37:75:94:e8:4e:2a:50: 11:aa:0c:17:43:ce:5c:90:6f:9f:72:a8:92:35:01: 54:b3:49:dc:53:2e:2e:d4:fe:8d:cf:4f:81:c2:0f: 49:bc:30:00:fd:eb:41:d5:0a:5a:4c:54:64:6a:57: ea:7a:21:15:71:d2:c1:09:04:76:f8:21:70:88:bb: 3f:ad:8b:ab:14:76:bb:fa:a0:ba:49:9c:1b:a7:5a: 48:f5:0b:01:90:05:18:56:60:53:89:f8:2f:b6:3e: 6e:f8:c2:0c:fe:ae:ec:54:ed:89:6d:1b:32:af:ef: d1:f2:6c:fd:9d:f1:74:7a:54:de:9b:09:6f:99:bb: fd:11:9c:36:0d:e9:5b:88:75:9c:51:e8:34:0f:34: 71:b4:ef:ee:85:32:4b:e5:50:5a:8b:26:41:ca:55: 91:a2:81:cb:d6:47:f7:2b:f5:9d:df:8c:58:d1:7a: d1:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:1E:FD:46:1F:AB:F1:0E:C2:44:AA:79:8D:81:5E:32:1D:4B:19:4E X509v3 Authority Key Identifier: keyid:06:90:81:5B:5E:9C:22:28:26:3F:17:C9:B3:F5:F9:9D:D6:88:2F:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:3a:f6:bf:4b:c2:d9:00:ae:16:c3:ba:46:bd:c2:e9:fd:72: 35:72:91:c6:c3:fc:db:5a:8a:db:aa:02:1d:36:0d:b7:61:ae: 25:a8:5f:38:9d:70:3f:d2:eb:69:9f:29:ae:ad:3f:2c:3b:00: 88:eb:51:47:f3:73:3e:d0:93:3e:c8:e3:64:c8:6d:9c:37:e6: f8:1f:5f:0f:7d:82:ba:ec:77:51:8e:95:6a:ac:88:60:59:e9: bd:59:e2:01:92:55:a6:06:22:07:07:97:0b:e5:8b:77:e8:83: 20:cb:ad:1a:b6:84:44:9e:49:f9:9b:72:71:17:49:d8:3e:4f: 49:00:af:7d:6c:4b:ae:ac:f3:b3:af:2f:ec:1b:01:26:44:0e: 12:e2:0c:0e:dd:f9:09:b8:40:50:22:d5:be:26:ac:80:fb:13: 5e:10:8e:51:7e:3e:df:a0:50:40:01:3b:5e:a6:ea:2d:fc:72: d2:42:97:0e:b4:3c:51:8e:75:b9:dc:37:80:22:55:83:b6:b5: 29:3a:fa:01:fd:f3:74:c0:9b:06:2b:d4:ee:00:30:6b:2e:ae: 61:2b:31:8e:c3:46:30:2b:3d:38:ef:a4:c2:66:85:73:bc:96: b0:5a:58:40:93:e7:7c:fc:65:ba:2a:c9:16:33:7a:00:bc:72: 53:49:fa:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSnuAnmmRQb/k8M+2HGlgW2ggah4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY5MDgxNUI1RTlDMjIyODI2M0YxN0M5QjNGNUY5OURE Njg4MkY5QzAeFw0yNTA4MjIxNzI2MTFaFw0yNTA4MjUxODU2MTFaMDMxMTAvBgNV BAMTKDg3MUVGRDQ2MUZBQkYxMEVDMjQ0QUE3OThEODE1RTMyMUQ0QjE5NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0ilzy5vuRdWc6CCl/a61Zz5tX NpbIAMz1GGISOh2IhgNIzQ6xLcWmg/8SSjY5J961tpw5pp5OtFKk8fBFj4WZrU+o OUw5Snak4Z30Ug2onkHXN3WU6E4qUBGqDBdDzlyQb59yqJI1AVSzSdxTLi7U/o3P T4HCD0m8MAD960HVClpMVGRqV+p6IRVx0sEJBHb4IXCIuz+ti6sUdrv6oLpJnBun Wkj1CwGQBRhWYFOJ+C+2Pm74wgz+ruxU7YltGzKv79HybP2d8XR6VN6bCW+Zu/0R nDYN6VuIdZxR6DQPNHG07+6FMkvlUFqLJkHKVZGigcvWR/cr9Z3fjFjRetF5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhx79Rh+r8Q7CRKp5jYFeMh1LGU4wHwYDVR0j BBgwFoAUBpCBW16cIigmPxfJs/X5ndaIL5wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x M2ZhN2Q1Yy0zNjhkLTRhZjMtYjhlNy0xNzg2MjQ2ZGQ2MmYvMC8wNjkwODE1QjVF OUMyMjI4MjYzRjE3QzlCM0Y1Rjk5REQ2ODgyRjlDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDY5MDgxNUI1RTlDMjIyODI2M0YxN0M5QjNGNUY5OURENjg4 MkY5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTNmYTdkNWMtMzY4ZC00YWYzLWI4 ZTctMTc4NjI0NmRkNjJmLzAvMDY5MDgxNUI1RTlDMjIyODI2M0YxN0M5QjNGNUY5 OURENjg4MkY5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFo69r9LwtkArhbDuka9wun9cjVykcbD/Nta ituqAh02DbdhriWoXzidcD/S62mfKa6tPyw7AIjrUUfzcz7Qkz7I42TIbZw35vgf Xw99grrsd1GOlWqsiGBZ6b1Z4gGSVaYGIgcHlwvli3fogyDLrRq2hESeSfmbcnEX Sdg+T0kAr31sS66s87OvL+wbASZEDhLiDA7d+Qm4QFAi1b4mrID7E14QjlF+Pt+g UEABO16m6i38ctJClw60PFGOdbncN4AiVYO2tSk6+gH983TAmwYr1O4AMGsurmEr MY7DRjArPTjvpMJmhXO8lrBaWECT53z8ZboqyRYzegC8clNJ+jE= -----END CERTIFICATE-----Generated at Sat Aug 23 10:09:37 2025 by rpki-client