$ rpki-client -vvf repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft File: C00606846C7D0E540F5703EC90A0C331460D7ECA.mft (raw, json) Hash identifier: wH0HHHFgEU6uiV55BTcF8kWCo7HdFtslovrx8OPNNGw= Subject key identifier: E3:A9:6F:17:9D:C9:4D:22:FF:33:11:EE:F9:BF:FB:21:4C:A9:FD:24 Authority key identifier: C0:06:06:84:6C:7D:0E:54:0F:57:03:EC:90:A0:C3:31:46:0D:7E:CA Certificate issuer: /CN=C00606846C7D0E540F5703EC90A0C331460D7ECA Certificate serial: 0B4E4D286B30B87627DE3A92058B923ABBB7FE2B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00606846C7D0E540F5703EC90A0C331460D7ECA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft Manifest number: B8 Signing time: Thu 21 Aug 2025 16:41:18 +0000 Manifest this update: Thu 21 Aug 2025 16:36:18 +0000 Manifest next update: Sun 24 Aug 2025 21:56:18 +0000 Files and hashes: 1: C00606846C7D0E540F5703EC90A0C331460D7ECA.crl (hash: IfFnkQ8aAlzzJ8FqkaLdYFa6R4uHb82U612BjTA/Z8k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.crl rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00606846C7D0E540F5703EC90A0C331460D7ECA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 21:56:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:4e:4d:28:6b:30:b8:76:27:de:3a:92:05:8b:92:3a:bb:b7:fe:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C00606846C7D0E540F5703EC90A0C331460D7ECA Validity Not Before: Aug 21 16:36:18 2025 GMT Not After : Aug 24 21:56:18 2025 GMT Subject: CN=E3A96F179DC94D22FF3311EEF9BFFB214CA9FD24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:8a:b7:a5:55:9c:0f:e5:45:e8:93:88:68:dd: 06:37:22:c9:ca:e2:3b:94:0f:43:8a:36:17:fb:7a: 24:8d:54:be:60:d3:d5:29:76:37:af:5f:4f:13:49: b9:b4:22:d1:83:de:53:cd:69:2f:00:ee:c0:3c:7c: bd:09:fc:10:46:ab:49:36:31:84:8f:d7:b6:ac:78: 73:1f:29:9a:ba:95:f5:ab:03:74:6f:db:ab:8c:22: 24:88:fe:1d:d1:b8:2e:59:6e:f4:c0:68:70:e3:44: 9d:61:cc:ce:8f:82:4c:94:75:24:92:04:f6:f0:76: da:3e:15:ff:db:41:2c:ef:09:d6:7e:48:66:48:df: 59:06:bc:21:d2:0f:dd:a0:de:46:bc:b4:a5:ff:e3: 9f:77:ab:ef:db:f2:5e:04:02:6f:0c:53:47:03:5a: 12:2a:dc:5b:10:25:00:9d:3a:f3:a2:7c:ae:76:31: f3:c3:b2:77:0b:68:8a:9e:a9:0d:1e:b6:12:2e:3c: ec:93:f7:af:45:c8:3f:28:96:e3:49:2b:f9:fc:e6: c1:6f:7a:a9:61:0b:11:77:9e:39:e3:3d:4f:50:f5: 42:17:00:87:fd:d5:70:7a:ad:d0:18:f9:ea:7f:2a: 43:5c:08:7f:c5:98:e7:39:f6:2e:49:03:81:64:99: 80:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:A9:6F:17:9D:C9:4D:22:FF:33:11:EE:F9:BF:FB:21:4C:A9:FD:24 X509v3 Authority Key Identifier: keyid:C0:06:06:84:6C:7D:0E:54:0F:57:03:EC:90:A0:C3:31:46:0D:7E:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C00606846C7D0E540F5703EC90A0C331460D7ECA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21334d03-eae4-4d20-ba54-b1889d9247ac/0/C00606846C7D0E540F5703EC90A0C331460D7ECA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:05:37:37:9e:47:c1:ea:1b:0f:ac:23:19:6e:8f:b4:8e:53: 28:3e:c8:95:80:50:da:b2:33:63:ad:d6:a4:cc:42:66:a9:f2: 8e:e2:44:ad:e1:44:98:a5:8e:3f:16:8e:e9:2c:aa:de:f7:6e: 32:bd:ac:12:ca:28:f4:8b:7b:ff:cf:42:26:4b:20:23:3e:ce: ad:6e:a2:6f:27:10:eb:7f:65:0b:bc:2b:31:a0:5c:98:1e:e9: 96:72:b9:f1:84:f7:6f:fd:85:b7:1d:f0:9b:f4:ac:da:21:4e: a3:42:a4:b2:c9:76:e5:12:a6:30:c5:cb:62:16:47:ad:3e:ff: 99:8d:5a:85:67:69:1d:06:57:db:ec:7f:85:a8:6b:b0:75:1f: 1a:a4:55:9a:7d:4c:25:3c:4c:be:bc:7d:79:2e:99:3d:d7:dd: 2c:e9:76:76:55:b9:04:d8:db:7a:d2:9d:12:68:d6:bc:f2:fb: f3:d3:72:0b:59:3c:ce:cd:09:6d:6b:02:73:79:44:9b:ca:20: 35:10:a6:98:de:68:8e:95:0e:77:d2:4e:a2:ac:a0:a4:98:3a: 6a:cf:f7:32:c8:1d:40:e3:9e:d6:8f:4e:63:13:d2:c8:23:01: bf:3f:9b:90:44:0a:29:39:0b:d0:27:00:37:52:ee:45:ae:96: 18:75:c8:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC05NKGswuHYn3jqSBYuSOru3/iswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzAwNjA2ODQ2QzdEMEU1NDBGNTcwM0VDOTBBMEMzMzE0 NjBEN0VDQTAeFw0yNTA4MjExNjM2MThaFw0yNTA4MjQyMTU2MThaMDMxMTAvBgNV BAMTKEUzQTk2RjE3OURDOTREMjJGRjMzMTFFRUY5QkZGQjIxNENBOUZEMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQirelVZwP5UXok4ho3QY3IsnK 4juUD0OKNhf7eiSNVL5g09UpdjevX08TSbm0ItGD3lPNaS8A7sA8fL0J/BBGq0k2 MYSP17aseHMfKZq6lfWrA3Rv26uMIiSI/h3RuC5ZbvTAaHDjRJ1hzM6PgkyUdSSS BPbwdto+Ff/bQSzvCdZ+SGZI31kGvCHSD92g3ka8tKX/4593q+/b8l4EAm8MU0cD WhIq3FsQJQCdOvOifK52MfPDsncLaIqeqQ0ethIuPOyT969FyD8oluNJK/n85sFv eqlhCxF3njnjPU9Q9UIXAIf91XB6rdAY+ep/KkNcCH/FmOc59i5JA4FkmYBbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU46lvF53JTSL/MxHu+b/7IUyp/SQwHwYDVR0j BBgwFoAUwAYGhGx9DlQPVwPskKDDMUYNfsowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MTMzNGQwMy1lYWU0LTRkMjAtYmE1NC1iMTg4OWQ5MjQ3YWMvMC9DMDA2MDY4NDZD N0QwRTU0MEY1NzAzRUM5MEEwQzMzMTQ2MEQ3RUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzAwNjA2ODQ2QzdEMEU1NDBGNTcwM0VDOTBBMEMzMzE0NjBE N0VDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjEzMzRkMDMtZWFlNC00ZDIwLWJh NTQtYjE4ODlkOTI0N2FjLzAvQzAwNjA2ODQ2QzdEMEU1NDBGNTcwM0VDOTBBMEMz MzE0NjBEN0VDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMoFNzeeR8HqGw+sIxluj7SOUyg+yJWAUNqy M2Ot1qTMQmap8o7iRK3hRJiljj8Wjuksqt73bjK9rBLKKPSLe//PQiZLICM+zq1u om8nEOt/ZQu8KzGgXJge6ZZyufGE92/9hbcd8Jv0rNohTqNCpLLJduUSpjDFy2IW R60+/5mNWoVnaR0GV9vsf4Woa7B1HxqkVZp9TCU8TL68fXkumT3X3SzpdnZVuQTY 23rSnRJo1rzy+/PTcgtZPM7NCW1rAnN5RJvKIDUQppjeaI6VDnfSTqKsoKSYOmrP 9zLIHUDjntaPTmMT0sgjAb8/m5BECik5C9AnADdS7kWulhh1yGY= -----END CERTIFICATE-----Generated at Sat Aug 23 10:36:18 2025 by rpki-client