$ rpki-client -vvf repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.mft File: 381455361E726B6ECCDAF271673BD59B1555336E.mft (raw, json) Hash identifier: 7Ze2qfQSxGEpCavrTH7Nru4S6ZaCJX0uvfJbn8isNzs= Subject key identifier: 85:53:71:00:2A:EB:50:3C:DE:0E:43:F0:09:FE:44:15:D0:1A:C6:95 Authority key identifier: 38:14:55:36:1E:72:6B:6E:CC:DA:F2:71:67:3B:D5:9B:15:55:33:6E Certificate issuer: /CN=381455361E726B6ECCDAF271673BD59B1555336E Certificate serial: 0D7350973A09ED5B243BD19CF82FFCF3D8CB24AC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/381455361E726B6ECCDAF271673BD59B1555336E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.mft Manifest number: 0367 Signing time: Fri 22 Aug 2025 09:54:06 +0000 Manifest this update: Fri 22 Aug 2025 09:49:06 +0000 Manifest next update: Mon 25 Aug 2025 12:05:06 +0000 Files and hashes: 1: 381455361E726B6ECCDAF271673BD59B1555336E.crl (hash: sKDuPpkRiQLoqiblblpMIN3zUz5iRuXu6bIPRcDTH+c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.crl rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/381455361E726B6ECCDAF271673BD59B1555336E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 12:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:73:50:97:3a:09:ed:5b:24:3b:d1:9c:f8:2f:fc:f3:d8:cb:24:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=381455361E726B6ECCDAF271673BD59B1555336E Validity Not Before: Aug 22 09:49:06 2025 GMT Not After : Aug 25 12:05:06 2025 GMT Subject: CN=855371002AEB503CDE0E43F009FE4415D01AC695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:fb:1d:7f:cb:9e:c9:72:46:15:92:26:a2:83: 84:85:6f:a3:61:48:5c:d4:38:2f:28:04:a7:4d:89: 60:3a:c8:82:66:76:3f:8e:4a:44:61:f5:9e:09:a9: a1:3d:65:c0:7d:a0:84:63:9a:a2:8a:93:56:7a:86: 8e:a6:c5:5d:4d:5d:98:ab:71:5a:ef:65:5e:19:fc: 3a:02:33:12:33:48:f0:e5:4d:35:d7:d1:dc:1e:fe: 25:fd:db:05:cb:c2:a8:16:8f:0b:df:f3:46:f0:11: 5b:e3:d4:3e:e6:92:fa:fe:2b:bb:6b:9f:29:53:6e: c1:76:58:3f:1a:23:de:f5:f7:89:72:eb:18:16:8d: 0a:89:61:23:f6:c7:64:82:8f:1c:55:20:1a:72:ae: 0f:37:5c:01:46:f1:2f:d7:ef:27:40:31:f7:15:0a: 4f:15:cb:26:77:46:6e:aa:66:72:e2:b6:ab:93:2f: b7:37:e2:e4:a8:4d:7f:07:87:b8:1f:ef:38:b4:5d: 14:2c:90:1d:d1:e7:60:d3:c0:21:d6:e2:e9:48:d9: b8:b9:4f:8c:4b:6d:7a:9b:3b:e7:fe:8e:3e:a8:7f: 55:7e:19:c1:99:e8:48:84:c4:76:3c:c8:cc:8c:c5: 84:be:a5:fc:5e:f0:43:6d:01:56:da:4c:cd:9d:5a: 5d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:53:71:00:2A:EB:50:3C:DE:0E:43:F0:09:FE:44:15:D0:1A:C6:95 X509v3 Authority Key Identifier: keyid:38:14:55:36:1E:72:6B:6E:CC:DA:F2:71:67:3B:D5:9B:15:55:33:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/381455361E726B6ECCDAF271673BD59B1555336E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:43:b4:0e:05:8f:a0:b9:9c:a1:62:96:08:b4:1c:33:9e:7d: 80:a8:37:a4:32:a8:0a:43:eb:ce:c7:97:15:e4:3e:6e:e8:66: 81:52:4f:46:61:a9:e5:ab:26:83:a6:3c:55:76:ad:30:7a:b3: 23:15:88:55:03:45:02:d7:c2:ca:ec:f7:33:69:9e:70:1f:fb: bc:e5:f1:fb:6f:7b:c0:26:57:e8:c8:3a:72:32:7a:1e:02:a7: b0:d8:21:9c:c3:72:64:14:e3:b4:96:32:a4:21:f0:dc:e4:1e: 4f:b7:8e:8a:88:2d:a4:f1:3e:29:c4:a2:e0:2a:fc:bf:e3:f5: 2f:ef:31:20:20:1c:15:44:22:42:00:d6:b8:d1:5e:13:8d:1e: 9b:a2:07:bb:60:6b:8e:ca:e5:df:76:17:0a:5c:6c:62:cf:89: 2d:0c:4c:08:7e:e1:0a:d9:0b:b2:aa:5a:50:e8:0c:23:aa:46: b5:a3:66:93:8d:d2:0c:dc:be:01:25:27:8f:df:de:eb:91:f3: 5d:ef:27:d9:14:e3:7e:0a:b1:57:4a:6b:ab:10:54:3a:fd:93: 0d:d5:17:63:ff:9b:1b:06:6c:ed:0b:a0:b8:28:0d:ae:47:32: 45:8e:a5:43:92:99:40:08:45:e1:40:bf:c5:e5:62:92:e0:1a: 7c:3f:a2:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDXNQlzoJ7VskO9Gc+C/889jLJKwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzgxNDU1MzYxRTcyNkI2RUNDREFGMjcxNjczQkQ1OUIx NTU1MzM2RTAeFw0yNTA4MjIwOTQ5MDZaFw0yNTA4MjUxMjA1MDZaMDMxMTAvBgNV BAMTKDg1NTM3MTAwMkFFQjUwM0NERTBFNDNGMDA5RkU0NDE1RDAxQUM2OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU+x1/y57JckYVkiaig4SFb6Nh SFzUOC8oBKdNiWA6yIJmdj+OSkRh9Z4JqaE9ZcB9oIRjmqKKk1Z6ho6mxV1NXZir cVrvZV4Z/DoCMxIzSPDlTTXX0dwe/iX92wXLwqgWjwvf80bwEVvj1D7mkvr+K7tr nylTbsF2WD8aI97194ly6xgWjQqJYSP2x2SCjxxVIBpyrg83XAFG8S/X7ydAMfcV Ck8VyyZ3Rm6qZnLitquTL7c34uSoTX8Hh7gf7zi0XRQskB3R52DTwCHW4ulI2bi5 T4xLbXqbO+f+jj6of1V+GcGZ6EiExHY8yMyMxYS+pfxe8ENtAVbaTM2dWl3BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhVNxACrrUDzeDkPwCf5EFdAaxpUwHwYDVR0j BBgwFoAUOBRVNh5ya27M2vJxZzvVmxVVM24wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzE5ODc0Yy1hNmIyLTRiMGItOWNjNi01NTlhNGU3Y2Q5NWEvMC8zODE0NTUzNjFF NzI2QjZFQ0NEQUYyNzE2NzNCRDU5QjE1NTUzMzZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzgxNDU1MzYxRTcyNkI2RUNDREFGMjcxNjczQkQ1OUIxNTU1 MzM2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMxOTg3NGMtYTZiMi00YjBiLTlj YzYtNTU5YTRlN2NkOTVhLzAvMzgxNDU1MzYxRTcyNkI2RUNDREFGMjcxNjczQkQ1 OUIxNTU1MzM2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAZDtA4Fj6C5nKFilgi0HDOefYCoN6QyqApD 687HlxXkPm7oZoFST0ZhqeWrJoOmPFV2rTB6syMViFUDRQLXwsrs9zNpnnAf+7zl 8ftve8AmV+jIOnIyeh4Cp7DYIZzDcmQU47SWMqQh8NzkHk+3joqILaTxPinEouAq /L/j9S/vMSAgHBVEIkIA1rjRXhONHpuiB7tga47K5d92FwpcbGLPiS0MTAh+4QrZ C7KqWlDoDCOqRrWjZpON0gzcvgElJ4/f3uuR813vJ9kU434KsVdKa6sQVDr9kw3V F2P/mxsGbO0LoLgoDa5HMkWOpUOSmUAIReFAv8XlYpLgGnw/oiQ= -----END CERTIFICATE-----Generated at Sat Aug 23 12:09:03 2025 by rpki-client