$ rpki-client -vvf repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft File: 114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft (raw, json) Hash identifier: E6fnXITIU9bpIJrdq4l+vh5QpDd4ULWQlTnJIHWKKmo= Subject key identifier: A5:69:1A:36:C5:2F:94:D0:0C:F4:2E:7A:E5:12:4C:33:FD:72:F5:6F Authority key identifier: 11:4C:9E:7E:A9:1F:63:87:C2:CB:F1:D1:6E:A8:24:58:0C:D6:85:87 Certificate issuer: /CN=114C9E7EA91F6387C2CBF1D16EA824580CD68587 Certificate serial: 4C417B07C401493D6DC5E9391AB7C045786E4637 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/114C9E7EA91F6387C2CBF1D16EA824580CD68587.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft Manifest number: 04FC Signing time: Fri 22 Aug 2025 23:32:02 +0000 Manifest this update: Fri 22 Aug 2025 23:27:02 +0000 Manifest next update: Tue 26 Aug 2025 07:21:02 +0000 Files and hashes: 1: 114C9E7EA91F6387C2CBF1D16EA824580CD68587.crl (hash: zqXffMGqlWank5FJc0efaTDe9Vf25NOLI6abyQSbvHg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.crl rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/114C9E7EA91F6387C2CBF1D16EA824580CD68587.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 07:21:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:41:7b:07:c4:01:49:3d:6d:c5:e9:39:1a:b7:c0:45:78:6e:46:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=114C9E7EA91F6387C2CBF1D16EA824580CD68587 Validity Not Before: Aug 22 23:27:02 2025 GMT Not After : Aug 26 07:21:02 2025 GMT Subject: CN=A5691A36C52F94D00CF42E7AE5124C33FD72F56F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:76:ef:47:f7:e7:21:03:e8:6d:bf:a6:22:38: e5:0c:bb:90:df:0a:76:bd:b6:cf:a6:05:35:1d:70: 6b:88:08:fa:b3:95:b3:02:44:3c:a9:db:03:a7:c1: 48:41:20:ca:a0:d3:4e:0e:67:5b:fb:b3:7f:88:3e: 92:ac:47:ec:8a:59:11:05:55:b7:72:70:86:92:07: 2c:90:83:14:1a:64:60:73:35:5b:c1:8f:56:1c:d2: de:a6:c9:85:e4:20:8d:09:9f:16:fa:ab:74:ab:f9: 10:c6:51:30:da:1e:46:f8:3a:dc:5c:dd:6a:5a:1e: ca:31:3b:a6:38:d7:d0:25:d1:fb:b8:90:80:78:b9: 64:50:8d:c4:86:87:74:d1:58:b6:04:8b:60:fa:a7: a3:fc:0f:2f:fb:45:8b:a4:0f:d1:00:e2:f7:73:bb: 20:09:bb:bf:db:9f:96:a0:6d:07:c8:d0:8f:a4:4c: 4f:36:20:8c:fd:fd:e5:a7:d2:30:74:70:5d:88:2d: b6:1f:1d:fe:3a:33:f2:01:c0:2c:1e:55:61:1c:93: b9:c4:33:be:fa:a6:76:c8:0a:af:03:03:04:ba:d0: ff:bf:11:92:e6:bf:8a:06:95:8d:06:1e:51:c2:3c: 4d:45:a9:78:ba:9f:68:b9:66:4c:1d:c9:dd:c3:39: 89:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:69:1A:36:C5:2F:94:D0:0C:F4:2E:7A:E5:12:4C:33:FD:72:F5:6F X509v3 Authority Key Identifier: keyid:11:4C:9E:7E:A9:1F:63:87:C2:CB:F1:D1:6E:A8:24:58:0C:D6:85:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/114C9E7EA91F6387C2CBF1D16EA824580CD68587.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:bb:e6:4f:1a:44:4c:ec:8c:81:c4:2d:24:9b:e6:3d:b4:ea: be:8a:a3:21:1c:35:0b:47:6f:23:65:0c:1a:6c:0f:5b:38:00: 3d:36:97:5d:2d:1a:d1:a6:7c:d3:d2:c3:ee:eb:08:3d:b1:b2: fd:8b:bb:9e:56:46:ba:8d:20:33:1f:2b:c8:42:d7:79:66:93: 2c:0d:e6:94:fa:bb:69:34:d8:59:cf:2b:95:ea:8e:62:47:a5: 97:e2:23:ce:24:d1:53:4b:fa:04:db:37:37:91:cb:6c:6c:03: f7:2d:f2:33:d5:52:d4:b7:aa:38:3c:ca:f4:10:03:66:3a:f1: b9:e6:e2:5c:86:ce:75:f8:79:bf:ac:bd:68:de:5d:54:44:b4: 57:ae:07:6d:72:1b:e6:57:37:d0:1b:84:08:a3:d6:c0:31:5a: 8c:b9:5b:2e:20:f4:21:dd:27:b5:3c:7c:d0:03:3a:01:3e:bc: 53:17:2c:46:59:c1:32:d6:f6:be:95:c3:d9:87:08:61:10:79: 5e:7b:1d:10:c4:dd:07:50:4e:df:8f:39:1b:d2:81:89:da:18: 9f:23:e2:94:a6:a4:1a:6e:8b:b8:84:d6:bf:ac:8a:12:0f:76: 7b:19:12:c9:59:ae:8d:d6:7a:a2:49:51:aa:e2:67:ed:60:ba: c4:43:3c:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTEF7B8QBST1txek5GrfARXhuRjcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE0QzlFN0VBOTFGNjM4N0MyQ0JGMUQxNkVBODI0NTgw Q0Q2ODU4NzAeFw0yNTA4MjIyMzI3MDJaFw0yNTA4MjYwNzIxMDJaMDMxMTAvBgNV BAMTKEE1NjkxQTM2QzUyRjk0RDAwQ0Y0MkU3QUU1MTI0QzMzRkQ3MkY1NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDddu9H9+chA+htv6YiOOUMu5Df Cna9ts+mBTUdcGuICPqzlbMCRDyp2wOnwUhBIMqg004OZ1v7s3+IPpKsR+yKWREF VbdycIaSByyQgxQaZGBzNVvBj1Yc0t6myYXkII0Jnxb6q3Sr+RDGUTDaHkb4Otxc 3WpaHsoxO6Y419Al0fu4kIB4uWRQjcSGh3TRWLYEi2D6p6P8Dy/7RYukD9EA4vdz uyAJu7/bn5agbQfI0I+kTE82IIz9/eWn0jB0cF2ILbYfHf46M/IBwCweVWEck7nE M776pnbICq8DAwS60P+/EZLmv4oGlY0GHlHCPE1FqXi6n2i5Zkwdyd3DOYlxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpWkaNsUvlNAM9C565RJMM/1y9W8wHwYDVR0j BBgwFoAUEUyefqkfY4fCy/HRbqgkWAzWhYcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDNlYzg0ZS02MGVmLTQ0ZDQtOWY0My04NWI2Zjk2YjI2Y2YvMC8xMTRDOUU3RUE5 MUY2Mzg3QzJDQkYxRDE2RUE4MjQ1ODBDRDY4NTg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE0QzlFN0VBOTFGNjM4N0MyQ0JGMUQxNkVBODI0NTgwQ0Q2 ODU4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQzZWM4NGUtNjBlZi00NGQ0LTlm NDMtODViNmY5NmIyNmNmLzAvMTE0QzlFN0VBOTFGNjM4N0MyQ0JGMUQxNkVBODI0 NTgwQ0Q2ODU4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG675k8aREzsjIHELSSb5j206r6KoyEcNQtH byNlDBpsD1s4AD02l10tGtGmfNPSw+7rCD2xsv2Lu55WRrqNIDMfK8hC13lmkywN 5pT6u2k02FnPK5XqjmJHpZfiI84k0VNL+gTbNzeRy2xsA/ct8jPVUtS3qjg8yvQQ A2Y68bnm4lyGznX4eb+svWjeXVREtFeuB21yG+ZXN9AbhAij1sAxWoy5Wy4g9CHd J7U8fNADOgE+vFMXLEZZwTLW9r6Vw9mHCGEQeV57HRDE3QdQTt+PORvSgYnaGJ8j 4pSmpBpui7iE1r+sihIPdnsZEslZro3WeqJJUariZ+1gusRDPMs= -----END CERTIFICATE-----Generated at Sat Aug 23 10:21:57 2025 by rpki-client