$ rpki-client -vvf repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/1/C07911838F3BCDBB76B01070E127AA00CC27F991.mft File: C07911838F3BCDBB76B01070E127AA00CC27F991.mft (raw, json) Hash identifier: XC/ir3Ul0vWCs8tPaa8vheUi0scLP0Lbio5LckuWK5Y= Subject key identifier: 58:9D:E8:BC:96:28:43:09:52:12:0A:A2:C8:A0:63:F0:6F:81:87:1E Authority key identifier: C0:79:11:83:8F:3B:CD:BB:76:B0:10:70:E1:27:AA:00:CC:27:F9:91 Certificate issuer: /CN=C07911838F3BCDBB76B01070E127AA00CC27F991 Certificate serial: 2E90463AABCB70A768DC6EAF51E2E7E27F310B1D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07911838F3BCDBB76B01070E127AA00CC27F991.cer Subject info access: rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/1/C07911838F3BCDBB76B01070E127AA00CC27F991.mft Manifest number: D2 Signing time: Mon 20 Oct 2025 10:52:10 +0000 Manifest this update: Mon 20 Oct 2025 10:47:10 +0000 Manifest next update: Thu 23 Oct 2025 20:48:10 +0000 Files and hashes: 1: C07911838F3BCDBB76B01070E127AA00CC27F991.crl (hash: vEvBIRj9culbz4EyoC3PcDMI+Qcke7wyRupGMpC3kW8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/1/C07911838F3BCDBB76B01070E127AA00CC27F991.crl rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/1/C07911838F3BCDBB76B01070E127AA00CC27F991.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07911838F3BCDBB76B01070E127AA00CC27F991.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:90:46:3a:ab:cb:70:a7:68:dc:6e:af:51:e2:e7:e2:7f:31:0b:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C07911838F3BCDBB76B01070E127AA00CC27F991 Validity Not Before: Oct 20 10:47:10 2025 GMT Not After : Oct 23 20:48:10 2025 GMT Subject: CN=589DE8BC9628430952120AA2C8A063F06F81871E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:a9:ad:59:34:33:26:78:e9:d2:32:8e:67:b7: 4b:2a:80:3d:e1:29:05:bf:98:17:e3:07:89:5d:d2: be:86:40:c8:4f:b6:df:84:35:10:c2:fe:72:92:6d: 8c:cc:86:0d:4c:02:21:08:02:51:fb:3c:fe:32:9e: 53:82:c5:cd:63:9f:8c:44:15:50:3e:59:e0:3f:34: 7f:98:e0:30:b4:61:44:c6:43:fe:e1:28:ff:e1:78: d8:fc:d7:c5:50:5d:7d:4e:a0:2e:89:cc:25:c1:04: 47:ca:e6:e2:ed:03:8a:49:5f:b4:2a:b4:be:b2:3d: 63:82:17:73:83:33:e5:06:e1:5f:31:28:67:cf:17: 44:2b:14:7d:90:32:d8:e3:67:71:20:b1:d0:81:bf: c7:12:af:e7:56:a3:11:6e:7f:a6:33:57:92:fe:c8: a8:95:6f:41:5b:c7:d7:ca:5e:8f:94:1f:d3:36:af: 24:81:32:0d:0f:95:4b:00:a6:43:e9:36:3c:47:c1: 1d:2e:8b:22:9b:39:fe:56:59:3a:43:d6:33:85:6d: 13:51:e8:33:00:61:1d:91:d3:38:61:e4:cc:69:fe: dc:43:a2:db:ea:3a:b1:cc:3c:2b:07:f3:f7:c6:5c: 1d:81:37:9f:ab:06:59:60:66:27:46:db:f0:0f:10: 80:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:9D:E8:BC:96:28:43:09:52:12:0A:A2:C8:A0:63:F0:6F:81:87:1E X509v3 Authority Key Identifier: keyid:C0:79:11:83:8F:3B:CD:BB:76:B0:10:70:E1:27:AA:00:CC:27:F9:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/1/C07911838F3BCDBB76B01070E127AA00CC27F991.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07911838F3BCDBB76B01070E127AA00CC27F991.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/1/C07911838F3BCDBB76B01070E127AA00CC27F991.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:3b:06:37:ce:4e:dc:c7:0f:c4:94:d1:82:90:a6:4b:9f:65: 57:2c:a9:77:15:de:b3:6b:05:f9:7c:20:18:a8:1a:da:0c:d7: f0:8f:78:22:b7:ee:27:bf:21:5b:ea:a6:32:0d:bc:ea:fa:2f: c8:10:99:ba:c0:52:50:a9:e0:93:ba:a1:17:fc:5d:01:f9:6b: fe:12:8f:3d:a3:25:eb:1e:72:ae:8f:68:4a:28:ae:5f:1a:bd: 37:2e:77:5d:a2:e0:51:ae:9d:9b:93:a9:94:02:ff:7c:53:29: 10:09:ed:e0:56:ae:3b:06:bc:3d:c8:b9:be:72:91:7b:66:00: de:0c:94:b0:dc:0e:b9:03:cd:b1:8c:9e:97:1e:a2:a9:10:36: 44:92:4e:4e:d5:ac:2e:e5:4f:be:18:6b:9b:05:52:86:88:a3: 29:4f:f3:df:0c:f3:7a:04:cc:87:b8:45:d6:ad:4f:d0:6d:ff: 3c:6d:c9:4b:bd:df:ed:66:e2:33:66:d1:3c:d6:34:e9:9d:e2: a3:5b:3b:82:48:5b:2a:30:d4:f0:de:4c:f2:2e:f5:e5:4e:e1: 07:00:c3:92:62:6b:35:5d:e9:42:6e:7d:46:f8:7c:f3:66:98: 46:cd:df:cc:62:05:5e:34:76:6b:d6:d8:a7:38:4b:30:c8:e4: 37:63:24:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULpBGOqvLcKdo3G6vUeLn4n8xCx0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA3OTExODM4RjNCQ0RCQjc2QjAxMDcwRTEyN0FBMDBD QzI3Rjk5MTAeFw0yNTEwMjAxMDQ3MTBaFw0yNTEwMjMyMDQ4MTBaMDMxMTAvBgNV BAMTKDU4OURFOEJDOTYyODQzMDk1MjEyMEFBMkM4QTA2M0YwNkY4MTg3MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrqa1ZNDMmeOnSMo5nt0sqgD3h KQW/mBfjB4ld0r6GQMhPtt+ENRDC/nKSbYzMhg1MAiEIAlH7PP4ynlOCxc1jn4xE FVA+WeA/NH+Y4DC0YUTGQ/7hKP/heNj818VQXX1OoC6JzCXBBEfK5uLtA4pJX7Qq tL6yPWOCF3ODM+UG4V8xKGfPF0QrFH2QMtjjZ3EgsdCBv8cSr+dWoxFuf6YzV5L+ yKiVb0Fbx9fKXo+UH9M2rySBMg0PlUsApkPpNjxHwR0uiyKbOf5WWTpD1jOFbRNR 6DMAYR2R0zhh5Mxp/txDotvqOrHMPCsH8/fGXB2BN5+rBllgZidG2/APEIDDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWJ3ovJYoQwlSEgqiyKBj8G+Bhx4wHwYDVR0j BBgwFoAUwHkRg487zbt2sBBw4SeqAMwn+ZEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzQ0NjU2My0wOWJjLTQ5MWItOGZiOS1mZDM5ZjA5MTY2OWQvMS9DMDc5MTE4MzhG M0JDREJCNzZCMDEwNzBFMTI3QUEwMENDMjdGOTkxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzA3OTExODM4RjNCQ0RCQjc2QjAxMDcwRTEyN0FBMDBDQzI3 Rjk5MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzc0NDY1NjMtMDliYy00OTFiLThm YjktZmQzOWYwOTE2NjlkLzEvQzA3OTExODM4RjNCQ0RCQjc2QjAxMDcwRTEyN0FB MDBDQzI3Rjk5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAk7BjfOTtzHD8SU0YKQpkufZVcsqXcV3rNr Bfl8IBioGtoM1/CPeCK37ie/IVvqpjINvOr6L8gQmbrAUlCp4JO6oRf8XQH5a/4S jz2jJesecq6PaEoorl8avTcud12i4FGunZuTqZQC/3xTKRAJ7eBWrjsGvD3Iub5y kXtmAN4MlLDcDrkDzbGMnpceoqkQNkSSTk7VrC7lT74Ya5sFUoaIoylP898M83oE zIe4RdatT9Bt/zxtyUu93+1m4jNm0TzWNOmd4qNbO4JIWyow1PDeTPIu9eVO4QcA w5JiazVd6UJufUb4fPNmmEbN38xiBV40dmvW2Kc4SzDI5DdjJIY= -----END CERTIFICATE-----Generated at Mon Oct 20 18:19:04 2025 by rpki-client