$ rpki-client -vvf repo-rpki.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.mft File: 7271655D6318ECB0B797B46C6ECFBC3DD2E32504.mft (raw, json) Hash identifier: TH8JHQBIb/FIb8GgMJ/Pb0xAAjxKCDtSboj1ToVyPME= Subject key identifier: 4B:E5:64:A4:D6:E5:97:4A:A1:07:2B:92:5D:D2:EC:8D:A8:D3:69:8C Authority key identifier: 72:71:65:5D:63:18:EC:B0:B7:97:B4:6C:6E:CF:BC:3D:D2:E3:25:04 Certificate issuer: /CN=7271655D6318ECB0B797B46C6ECFBC3DD2E32504 Certificate serial: 7CEE75B5D7B96E01C61139E9B5779DD68675CA6E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.cer Subject info access: rsync://repo-rpki.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.mft Manifest number: 05 Signing time: Sat 23 Aug 2025 07:31:25 +0000 Manifest this update: Sat 23 Aug 2025 07:26:25 +0000 Manifest next update: Tue 26 Aug 2025 09:43:25 +0000 Files and hashes: 1: 7271655D6318ECB0B797B46C6ECFBC3DD2E32504.crl (hash: BbAsEleDjTu1o4iOr2eBMlvrWc860J9s0ikDm9zyQGc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.crl rsync://repo-rpki.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 09:43:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:ee:75:b5:d7:b9:6e:01:c6:11:39:e9:b5:77:9d:d6:86:75:ca:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7271655D6318ECB0B797B46C6ECFBC3DD2E32504 Validity Not Before: Aug 23 07:26:25 2025 GMT Not After : Aug 26 09:43:25 2025 GMT Subject: CN=4BE564A4D6E5974AA1072B925DD2EC8DA8D3698C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:84:e9:2a:f4:50:e5:1c:3f:39:47:09:9c:55: 2e:d0:90:f7:d0:d2:55:1c:df:09:6c:cb:e5:c6:ba: 03:b4:56:92:89:4d:1b:01:e9:e3:99:09:3c:4f:ba: 99:96:66:12:51:24:33:eb:61:2b:21:8f:4e:fe:ed: 16:92:9f:84:f0:5e:6e:6d:ad:70:cc:34:83:a1:6d: 9f:36:ac:ce:45:54:03:79:4b:b0:ca:46:5b:e8:f2: 98:b4:d5:db:26:e1:4a:e9:4f:34:93:20:c1:0d:01: 91:06:b4:eb:19:fc:c1:bc:bc:69:dd:68:b0:95:df: 2e:1f:0b:c2:a0:d7:f8:ea:a0:cc:97:dc:0f:a8:67: 0b:ad:7b:3d:03:7b:7e:de:89:31:37:e9:75:5c:87: be:10:34:b2:14:e4:99:c2:04:0b:cf:31:01:ed:35: b4:e4:9c:85:6b:86:59:ab:66:23:d3:f0:f7:92:f1: 52:e4:d3:fa:85:78:d2:2a:50:ba:82:7e:73:95:a1: 8f:ca:3d:41:99:8e:83:8c:47:9a:db:bc:c6:23:ff: d5:68:e4:2d:05:39:69:7d:2e:8a:e9:a6:8d:3d:62: df:91:4a:51:c3:8f:c1:3c:c1:8f:6c:f0:11:09:84: 1d:ab:62:72:ec:c1:b3:59:f8:40:b6:f7:50:1e:fb: 58:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:E5:64:A4:D6:E5:97:4A:A1:07:2B:92:5D:D2:EC:8D:A8:D3:69:8C X509v3 Authority Key Identifier: keyid:72:71:65:5D:63:18:EC:B0:B7:97:B4:6C:6E:CF:BC:3D:D2:E3:25:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:6f:bf:ed:8d:fc:e7:db:85:33:6c:e3:17:81:29:26:39:5c: 46:e8:65:15:0e:f8:54:96:f4:86:2a:9b:d2:05:0e:55:12:55: d1:b8:8f:92:8e:0e:3e:b0:a5:1d:2e:fd:1a:4d:e6:6a:9a:2c: fc:aa:cb:de:53:26:bb:cc:6d:d6:86:29:56:43:c5:fd:49:26: 79:65:4a:d6:3a:80:c7:9b:90:f8:ee:2b:42:28:d1:0d:2a:1f: 8f:ce:ce:38:ae:05:48:49:4c:99:6c:56:9e:2c:26:1c:45:a1: 3a:ff:1b:69:5f:39:d0:cc:ae:5e:a3:84:40:15:ea:ae:f1:50: 95:a0:57:04:c5:c2:39:82:79:af:66:e0:50:9e:99:0c:09:ba: db:1e:22:23:e1:a4:e0:86:54:aa:5b:95:ff:0b:a4:36:07:ca: d2:a4:41:ec:a4:66:8f:f0:3f:12:5f:58:1d:0d:f7:67:39:57: 8b:f7:23:6a:5d:23:cf:2b:7c:90:23:aa:00:de:93:35:79:19: 0e:3f:bb:dc:f0:39:a4:7f:f5:af:42:9a:17:6f:bb:a0:6b:b3: 74:75:25:27:a2:dd:18:d1:75:4b:57:40:f1:95:15:10:c8:15: 34:01:80:39:c7:75:52:18:0e:4a:5e:ff:3d:75:96:18:62:99: c3:9a:49:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfO51tde5bgHGETnptXed1oZ1ym4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI3MTY1NUQ2MzE4RUNCMEI3OTdCNDZDNkVDRkJDM0RE MkUzMjUwNDAeFw0yNTA4MjMwNzI2MjVaFw0yNTA4MjYwOTQzMjVaMDMxMTAvBgNV BAMTKDRCRTU2NEE0RDZFNTk3NEFBMTA3MkI5MjVERDJFQzhEQThEMzY5OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyhOkq9FDlHD85RwmcVS7QkPfQ 0lUc3wlsy+XGugO0VpKJTRsB6eOZCTxPupmWZhJRJDPrYSshj07+7RaSn4TwXm5t rXDMNIOhbZ82rM5FVAN5S7DKRlvo8pi01dsm4UrpTzSTIMENAZEGtOsZ/MG8vGnd aLCV3y4fC8Kg1/jqoMyX3A+oZwutez0De37eiTE36XVch74QNLIU5JnCBAvPMQHt NbTknIVrhlmrZiPT8PeS8VLk0/qFeNIqULqCfnOVoY/KPUGZjoOMR5rbvMYj/9Vo 5C0FOWl9Lorppo09Yt+RSlHDj8E8wY9s8BEJhB2rYnLswbNZ+EC291Ae+1gdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS+VkpNbll0qhByuSXdLsjajTaYwwHwYDVR0j BBgwFoAUcnFlXWMY7LC3l7Rsbs+8PdLjJQQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NjhkZTkxYi02MzZiLTRkYTQtYjFkMC03MjYzMmNmY2YyMzUvMC83MjcxNjU1RDYz MThFQ0IwQjc5N0I0NkM2RUNGQkMzREQyRTMyNTA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzI3MTY1NUQ2MzE4RUNCMEI3OTdCNDZDNkVDRkJDM0REMkUz MjUwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDY4ZGU5MWItNjM2Yi00ZGE0LWIx ZDAtNzI2MzJjZmNmMjM1LzAvNzI3MTY1NUQ2MzE4RUNCMEI3OTdCNDZDNkVDRkJD M0REMkUzMjUwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC1vv+2N/OfbhTNs4xeBKSY5XEboZRUO+FSW 9IYqm9IFDlUSVdG4j5KODj6wpR0u/RpN5mqaLPyqy95TJrvMbdaGKVZDxf1JJnll StY6gMebkPjuK0Io0Q0qH4/OzjiuBUhJTJlsVp4sJhxFoTr/G2lfOdDMrl6jhEAV 6q7xUJWgVwTFwjmCea9m4FCemQwJutseIiPhpOCGVKpblf8LpDYHytKkQeykZo/w PxJfWB0N92c5V4v3I2pdI88rfJAjqgDekzV5GQ4/u9zwOaR/9a9Cmhdvu6Brs3R1 JSei3RjRdUtXQPGVFRDIFTQBgDnHdVIYDkpe/z11lhhimcOaSYo= -----END CERTIFICATE-----Generated at Sat Aug 23 14:13:12 2025 by rpki-client