$ rpki-client -vvf repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft File: 02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft (raw, json) Hash identifier: E5Kf9nBhx4/GeQSZCTXI8vrt7c8f+Nz0W129ainD2XE= Subject key identifier: C8:A4:72:CC:8E:E4:58:FC:DF:64:82:D2:94:AC:C3:32:EA:D0:59:81 Authority key identifier: 02:23:69:13:B4:6A:90:03:C0:64:5E:6C:C8:58:EA:54:D6:D7:F4:AC Certificate issuer: /CN=02236913B46A9003C0645E6CC858EA54D6D7F4AC Certificate serial: 6E19506E91C17E3D816885D900B40DFB655C0CE2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02236913B46A9003C0645E6CC858EA54D6D7F4AC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft Manifest number: DC Signing time: Thu 03 Jul 2025 04:01:00 +0000 Manifest this update: Thu 03 Jul 2025 03:56:00 +0000 Manifest next update: Sun 06 Jul 2025 08:58:00 +0000 Files and hashes: 1: 02236913B46A9003C0645E6CC858EA54D6D7F4AC.crl (hash: icaBjOzelARqqqxJ4AhSO8N6FTBW1EKT0KMxXpRrWeg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.crl rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02236913B46A9003C0645E6CC858EA54D6D7F4AC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 08:03:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:19:50:6e:91:c1:7e:3d:81:68:85:d9:00:b4:0d:fb:65:5c:0c:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02236913B46A9003C0645E6CC858EA54D6D7F4AC Validity Not Before: Jul 3 03:56:00 2025 GMT Not After : Jul 6 08:58:00 2025 GMT Subject: CN=C8A472CC8EE458FCDF6482D294ACC332EAD05981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:94:53:e3:f5:5f:22:77:8c:a6:f5:7c:09:76: 24:53:68:c9:ef:1e:a3:70:33:e4:5a:32:04:2f:eb: 4a:da:f1:47:b7:52:a0:33:1a:59:19:54:48:0e:a6: ab:d7:32:4e:f3:87:ae:e7:26:14:c4:b0:60:0e:a6: ee:2a:35:21:1d:ba:d5:fe:b6:d3:cd:cb:b7:9d:24: ce:5b:1a:77:de:0f:66:5c:e2:31:b0:30:a1:dc:b0: 4b:1c:8f:cc:c4:bc:d6:83:2e:d1:a9:50:bb:16:ee: 80:13:a9:87:c6:4b:f9:ad:ae:a5:a9:1d:e3:8e:28: 1a:3f:76:98:cb:5b:a2:1a:19:e4:99:c0:5d:19:6e: 26:a3:94:00:68:7a:f9:b2:6d:62:23:ca:33:9c:f0: 4c:db:38:a0:1d:c0:04:a1:88:87:39:c9:59:b7:f4: a1:d7:1d:26:a8:f5:38:5b:fe:7a:80:17:f0:a0:bc: 10:a4:e7:d2:25:4d:b8:56:f8:ea:2a:14:4e:0e:58: 6e:a6:ac:af:8b:f6:25:a0:93:2c:69:ba:3e:b0:63: 2d:05:f0:d3:8d:6e:7b:b3:f0:49:a0:22:94:48:d5: 2c:a6:43:5a:f8:97:93:b1:59:30:ab:97:bf:20:a8: 66:c3:a4:00:19:68:8f:aa:58:dc:78:5c:56:1d:47: 7e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:A4:72:CC:8E:E4:58:FC:DF:64:82:D2:94:AC:C3:32:EA:D0:59:81 X509v3 Authority Key Identifier: keyid:02:23:69:13:B4:6A:90:03:C0:64:5E:6C:C8:58:EA:54:D6:D7:F4:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02236913B46A9003C0645E6CC858EA54D6D7F4AC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:72:4f:61:bc:61:fd:6f:c7:c0:ed:c3:51:d4:56:0d:be:40: ee:fe:59:b5:e4:7b:20:f7:38:37:a5:0f:ad:34:11:14:bc:97: bf:b5:0c:ab:2a:b6:ee:e7:f6:7f:e8:a7:aa:ea:0d:54:31:9f: 08:da:b0:bd:dd:27:ea:06:82:1a:f4:cf:f8:6f:7a:31:9b:92: a3:70:95:e7:58:4f:0a:87:ae:0d:2b:7d:ff:34:5f:65:e4:ad: 28:76:61:4d:04:7e:63:df:19:09:77:b7:e2:8f:2c:1b:10:54: 42:c6:bd:72:46:b7:e0:6a:f3:b6:73:a8:62:1c:fe:81:77:25: 36:75:98:4b:ea:6b:e4:04:b0:a0:bf:09:14:03:3f:b2:53:ee: 21:10:02:6e:bf:b0:ad:d0:30:14:6a:04:57:60:9e:ec:b5:7e: 6c:85:a4:66:ae:c8:42:c1:02:48:63:c4:72:2b:70:d1:45:fd: 5f:61:19:ad:67:d5:c9:e7:ea:90:45:25:7d:12:e1:17:f9:c2: 32:e2:6d:74:68:75:9d:43:fe:f9:51:4e:eb:72:f3:4f:57:2a: 85:b8:54:0b:58:ff:08:e6:22:bc:1d:71:5d:0b:c4:b1:9c:95: 55:bd:b2:46:de:ac:59:68:82:fc:5f:61:20:8e:ac:47:6c:99: 87:da:d9:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbhlQbpHBfj2BaIXZALQN+2VcDOIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIyMzY5MTNCNDZBOTAwM0MwNjQ1RTZDQzg1OEVBNTRE NkQ3RjRBQzAeFw0yNTA3MDMwMzU2MDBaFw0yNTA3MDYwODU4MDBaMDMxMTAvBgNV BAMTKEM4QTQ3MkNDOEVFNDU4RkNERjY0ODJEMjk0QUNDMzMyRUFEMDU5ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCblFPj9V8id4ym9XwJdiRTaMnv HqNwM+RaMgQv60ra8Ue3UqAzGlkZVEgOpqvXMk7zh67nJhTEsGAOpu4qNSEdutX+ ttPNy7edJM5bGnfeD2Zc4jGwMKHcsEscj8zEvNaDLtGpULsW7oATqYfGS/mtrqWp HeOOKBo/dpjLW6IaGeSZwF0ZbiajlABoevmybWIjyjOc8EzbOKAdwAShiIc5yVm3 9KHXHSao9Thb/nqAF/CgvBCk59IlTbhW+OoqFE4OWG6mrK+L9iWgkyxpuj6wYy0F 8NONbnuz8EmgIpRI1SymQ1r4l5OxWTCrl78gqGbDpAAZaI+qWNx4XFYdR341AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyKRyzI7kWPzfZILSlKzDMurQWYEwHwYDVR0j BBgwFoAUAiNpE7RqkAPAZF5syFjqVNbX9KwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YjcyZjcxYS1iOWMyLTQwMzMtOTY3NS1kNzcwNzYwM2E4MmMvMC8wMjIzNjkxM0I0 NkE5MDAzQzA2NDVFNkNDODU4RUE1NEQ2RDdGNEFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDIyMzY5MTNCNDZBOTAwM0MwNjQ1RTZDQzg1OEVBNTRENkQ3 RjRBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI3MmY3MWEtYjljMi00MDMzLTk2 NzUtZDc3MDc2MDNhODJjLzAvMDIyMzY5MTNCNDZBOTAwM0MwNjQ1RTZDQzg1OEVB NTRENkQ3RjRBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABtyT2G8Yf1vx8Dtw1HUVg2+QO7+WbXkeyD3 ODelD600ERS8l7+1DKsqtu7n9n/op6rqDVQxnwjasL3dJ+oGghr0z/hvejGbkqNw ledYTwqHrg0rff80X2XkrSh2YU0EfmPfGQl3t+KPLBsQVELGvXJGt+Bq87ZzqGIc /oF3JTZ1mEvqa+QEsKC/CRQDP7JT7iEQAm6/sK3QMBRqBFdgnuy1fmyFpGauyELB AkhjxHIrcNFF/V9hGa1n1cnn6pBFJX0S4Rf5wjLibXRodZ1D/vlRTuty809XKoW4 VAtY/wjmIrwdcV0LxLGclVW9skberFlogvxfYSCOrEdsmYfa2bE= -----END CERTIFICATE-----Generated at Thu Jul 3 07:00:00 2025 by rpki-client