$ rpki-client -vvf repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft File: 02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft (raw, json) Hash identifier: owF5PnesfpqiBuNPBJIslEnNfhGiHJaUqBIxhd2FOIU= Subject key identifier: 8B:D1:82:60:F4:E0:08:0B:3B:09:80:D4:A6:4F:C0:05:38:7C:92:55 Authority key identifier: 02:23:69:13:B4:6A:90:03:C0:64:5E:6C:C8:58:EA:54:D6:D7:F4:AC Certificate issuer: /CN=02236913B46A9003C0645E6CC858EA54D6D7F4AC Certificate serial: 2892D6BFA6DC5A413D7B110D20BD5489B420A309 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02236913B46A9003C0645E6CC858EA54D6D7F4AC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft Manifest number: F3 Signing time: Sat 23 Aug 2025 06:01:01 +0000 Manifest this update: Sat 23 Aug 2025 05:56:01 +0000 Manifest next update: Tue 26 Aug 2025 16:06:01 +0000 Files and hashes: 1: 02236913B46A9003C0645E6CC858EA54D6D7F4AC.crl (hash: 5rJJJqU3zilQJY43qEbRKDTOplV9NDSah7ouE3iZUCU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.crl rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02236913B46A9003C0645E6CC858EA54D6D7F4AC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 16:06:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:92:d6:bf:a6:dc:5a:41:3d:7b:11:0d:20:bd:54:89:b4:20:a3:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02236913B46A9003C0645E6CC858EA54D6D7F4AC Validity Not Before: Aug 23 05:56:01 2025 GMT Not After : Aug 26 16:06:01 2025 GMT Subject: CN=8BD18260F4E0080B3B0980D4A64FC005387C9255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:24:f9:0d:d0:17:3f:2e:7d:51:2b:13:23:5a: ae:af:94:76:d5:f2:30:69:4a:31:23:c2:cd:4e:5d: e9:c7:e4:19:4b:5d:7e:2a:d7:c1:98:bd:8d:66:f5: 96:16:8c:6e:3c:d5:9d:8f:7b:26:a3:87:29:6c:99: 29:51:c5:d9:4c:f6:2a:ed:95:6f:ca:10:c9:40:1c: 6f:3d:67:d3:88:03:0b:40:31:7a:b7:f1:ca:a8:02: ce:85:3e:e1:c3:67:14:50:01:e0:37:07:c7:d2:1a: be:80:ce:c7:07:8d:78:0b:f4:2f:83:3d:1d:27:35: da:6c:6a:5f:af:a9:60:c5:03:8a:62:55:b8:25:ed: c1:c5:47:7f:2a:78:27:18:ad:1f:cb:56:da:d8:1e: af:77:9a:28:23:49:a6:59:70:ca:21:e6:23:a2:85: 2a:8a:c0:db:9f:79:5e:9d:c9:4e:1b:2f:1e:a0:c5: 12:d2:4b:93:70:19:90:25:83:f3:e9:4f:00:ea:a8: d1:db:05:11:4a:ad:fc:40:64:2a:70:36:c3:77:2a: 9d:f6:27:29:e1:90:a6:83:40:fb:ee:1a:b7:3b:9a: b4:9f:61:2b:f6:cc:d7:5b:b2:fa:6e:7d:d5:5f:4f: 1f:c0:65:d5:55:99:fd:e6:4d:d4:be:40:d0:53:92: ac:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:D1:82:60:F4:E0:08:0B:3B:09:80:D4:A6:4F:C0:05:38:7C:92:55 X509v3 Authority Key Identifier: keyid:02:23:69:13:B4:6A:90:03:C0:64:5E:6C:C8:58:EA:54:D6:D7:F4:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02236913B46A9003C0645E6CC858EA54D6D7F4AC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:c7:10:1c:15:06:8a:81:35:d2:a4:9e:58:1f:c5:ca:d6:32: f8:5e:f9:cf:40:b2:c4:46:ac:d9:5b:d3:50:fa:b8:ae:c6:ad: a7:de:f0:ca:79:75:08:f3:92:e5:72:4b:de:c0:7e:f0:7c:dc: 28:e1:b6:13:06:b5:47:9d:85:c0:07:22:26:1f:8f:b8:28:87: 2e:21:e8:d7:a5:20:f7:0e:13:e7:e3:fb:db:9e:24:b2:23:da: ed:8d:a8:c0:e5:02:83:f0:93:c1:8a:c3:11:23:0e:b4:d7:72: 4e:da:4a:db:17:6b:30:a8:14:d0:87:93:dc:b8:cd:db:f4:ac: a5:92:2c:96:e8:b8:53:48:7e:21:92:23:33:55:5e:31:84:46: f4:cb:e1:64:bb:2b:79:73:58:43:cf:95:e0:4d:9e:a9:04:7c: d2:94:3a:f7:9b:99:db:fe:53:da:86:b1:05:64:e0:0c:76:57: 2c:ad:cc:04:a3:a7:39:9e:62:27:9b:97:cb:89:d4:b6:4f:85: f9:27:6a:25:44:6b:0b:5e:e3:2f:40:54:73:cb:ee:35:a8:b6: 66:95:85:dd:33:65:1d:a1:f4:fb:71:44:13:86:04:ef:42:b6: d6:12:c8:7f:1f:6c:dd:b3:e3:84:c4:56:53:70:e4:89:c5:68: 12:40:e3:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKJLWv6bcWkE9exENIL1UibQgowkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIyMzY5MTNCNDZBOTAwM0MwNjQ1RTZDQzg1OEVBNTRE NkQ3RjRBQzAeFw0yNTA4MjMwNTU2MDFaFw0yNTA4MjYxNjA2MDFaMDMxMTAvBgNV BAMTKDhCRDE4MjYwRjRFMDA4MEIzQjA5ODBENEE2NEZDMDA1Mzg3QzkyNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4JPkN0Bc/Ln1RKxMjWq6vlHbV 8jBpSjEjws1OXenH5BlLXX4q18GYvY1m9ZYWjG481Z2PeyajhylsmSlRxdlM9irt lW/KEMlAHG89Z9OIAwtAMXq38cqoAs6FPuHDZxRQAeA3B8fSGr6AzscHjXgL9C+D PR0nNdpsal+vqWDFA4piVbgl7cHFR38qeCcYrR/LVtrYHq93migjSaZZcMoh5iOi hSqKwNufeV6dyU4bLx6gxRLSS5NwGZAlg/PpTwDqqNHbBRFKrfxAZCpwNsN3Kp32 JynhkKaDQPvuGrc7mrSfYSv2zNdbsvpufdVfTx/AZdVVmf3mTdS+QNBTkqwVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi9GCYPTgCAs7CYDUpk/ABTh8klUwHwYDVR0j BBgwFoAUAiNpE7RqkAPAZF5syFjqVNbX9KwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YjcyZjcxYS1iOWMyLTQwMzMtOTY3NS1kNzcwNzYwM2E4MmMvMC8wMjIzNjkxM0I0 NkE5MDAzQzA2NDVFNkNDODU4RUE1NEQ2RDdGNEFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDIyMzY5MTNCNDZBOTAwM0MwNjQ1RTZDQzg1OEVBNTRENkQ3 RjRBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI3MmY3MWEtYjljMi00MDMzLTk2 NzUtZDc3MDc2MDNhODJjLzAvMDIyMzY5MTNCNDZBOTAwM0MwNjQ1RTZDQzg1OEVB NTRENkQ3RjRBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMrHEBwVBoqBNdKknlgfxcrWMvhe+c9AssRG rNlb01D6uK7Grafe8Mp5dQjzkuVyS97AfvB83CjhthMGtUedhcAHIiYfj7gohy4h 6NelIPcOE+fj+9ueJLIj2u2NqMDlAoPwk8GKwxEjDrTXck7aStsXazCoFNCHk9y4 zdv0rKWSLJbouFNIfiGSIzNVXjGERvTL4WS7K3lzWEPPleBNnqkEfNKUOvebmdv+ U9qGsQVk4Ax2VyytzASjpzmeYiebl8uJ1LZPhfknaiVEawte4y9AVHPL7jWotmaV hd0zZR2h9PtxRBOGBO9CttYSyH8fbN2z44TEVlNw5InFaBJA4yI= -----END CERTIFICATE-----Generated at Sat Aug 23 10:37:27 2025 by rpki-client