$ rpki-client -vvf repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft File: D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft (raw, json) Hash identifier: PfA9Qmhcp+2dDZCOAYm4kUOg7LseHHTXan32HCEvEw8= Subject key identifier: F5:9C:78:C3:A0:BC:B9:F1:9E:49:53:0F:37:10:B7:39:BF:BD:13:E4 Authority key identifier: D2:89:2B:AB:EE:5F:3B:29:8F:67:4D:48:B1:A6:A8:D6:38:54:6C:DF Certificate issuer: /CN=D2892BABEE5F3B298F674D48B1A6A8D638546CDF Certificate serial: 7B73BBAF02B4A3DF45FDDAE85B4B8F382CC998F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft Manifest number: 04EC Signing time: Fri 22 Aug 2025 22:12:06 +0000 Manifest this update: Fri 22 Aug 2025 22:07:06 +0000 Manifest next update: Tue 26 Aug 2025 09:49:06 +0000 Files and hashes: 1: D2892BABEE5F3B298F674D48B1A6A8D638546CDF.crl (hash: a6m1/TQNRe5N1J4eZde6m+kamq9mKmg+aAqoPf0RbSY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.crl rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 09:49:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:73:bb:af:02:b4:a3:df:45:fd:da:e8:5b:4b:8f:38:2c:c9:98:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2892BABEE5F3B298F674D48B1A6A8D638546CDF Validity Not Before: Aug 22 22:07:06 2025 GMT Not After : Aug 26 09:49:06 2025 GMT Subject: CN=F59C78C3A0BCB9F19E49530F3710B739BFBD13E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:35:3d:7f:5d:b9:2a:b7:5f:74:5b:46:61:43: 8b:45:f5:0a:1c:d1:d2:46:17:81:d2:be:64:c0:bb: 68:68:39:1c:90:e8:74:a8:ec:90:6c:b9:a5:8c:20: 28:dd:3c:93:dd:c0:47:3d:36:bd:c6:fc:03:a5:8d: cd:50:19:c0:b6:1f:d4:a2:9f:64:c1:16:c1:ef:5c: 49:b6:7e:c7:22:9d:4a:c6:d7:96:5c:b9:4b:b0:3a: c2:b0:d1:9d:9f:0f:c8:2f:c3:14:42:81:bb:82:32: 66:30:ad:a8:ea:62:b0:41:68:5a:91:db:58:80:08: d8:52:fd:f7:7d:ed:7b:88:ac:4e:e3:9d:b4:85:70: 50:0c:d7:0f:b2:e5:f7:77:73:1d:2d:f2:84:7f:b6: 4e:80:51:c1:da:29:53:ba:7b:bf:28:3a:10:c1:ba: 4a:74:e9:32:47:ec:43:76:86:1a:ba:86:bf:a5:82: 2f:c3:35:04:f8:c4:6f:6f:20:60:a2:49:f2:7e:9b: 8b:99:82:f5:64:23:9f:93:4f:fe:12:39:f9:75:4e: 2e:c8:9a:16:26:ab:37:19:78:66:84:b1:a0:b3:11: 9d:cd:f2:cd:57:75:a7:a9:1c:61:c5:2e:e9:61:60: 16:b5:9f:72:f8:ef:46:2b:9a:e6:ac:50:0c:5a:18: 69:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:9C:78:C3:A0:BC:B9:F1:9E:49:53:0F:37:10:B7:39:BF:BD:13:E4 X509v3 Authority Key Identifier: keyid:D2:89:2B:AB:EE:5F:3B:29:8F:67:4D:48:B1:A6:A8:D6:38:54:6C:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:e2:71:20:09:7a:d5:ea:fc:b0:d6:b7:b0:a4:62:cb:3f:94: 0d:56:94:d0:79:99:0d:9b:34:a2:74:8b:68:cd:c8:52:ed:33: e3:02:ad:96:43:13:89:67:c5:f7:93:0a:d0:dc:ab:e0:c5:b4: a7:23:0c:9f:8e:93:e1:ef:c8:40:2b:ee:e0:e1:59:ef:8c:3b: 39:8e:a3:aa:f4:9a:28:7a:36:11:16:08:7f:a7:fe:ea:b6:0a: 74:bb:84:f9:f0:b3:68:e9:20:1a:2f:9f:60:b5:ad:2e:40:73: 70:e8:2b:e6:bf:ee:fa:5d:dc:2a:5d:be:62:63:9e:33:6f:a9: 28:8e:95:2e:c4:9b:ac:9b:cb:f3:12:6b:4c:29:61:0c:28:44: ae:b3:b2:84:86:12:e9:bb:da:20:ce:e9:b4:70:36:30:80:ce: cb:6c:3e:74:15:2f:41:9d:9a:26:82:d3:61:75:a1:b6:35:18: 63:1b:20:d2:87:23:04:bb:b1:e2:2e:e5:16:12:9f:67:4f:8d: 76:75:6d:9e:5d:81:0a:23:73:47:84:d5:dc:5a:c9:64:60:8d: 73:af:ac:f1:c2:aa:70:66:15:ee:7c:c5:cb:34:a5:c6:ed:f9: ca:11:5c:e8:42:31:27:31:7c:52:8b:ca:07:28:82:f6:e2:39: 28:f6:cb:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe3O7rwK0o99F/droW0uPOCzJmPIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI4OTJCQUJFRTVGM0IyOThGNjc0RDQ4QjFBNkE4RDYz ODU0NkNERjAeFw0yNTA4MjIyMjA3MDZaFw0yNTA4MjYwOTQ5MDZaMDMxMTAvBgNV BAMTKEY1OUM3OEMzQTBCQ0I5RjE5RTQ5NTMwRjM3MTBCNzM5QkZCRDEzRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNNT1/Xbkqt190W0ZhQ4tF9Qoc 0dJGF4HSvmTAu2hoORyQ6HSo7JBsuaWMICjdPJPdwEc9Nr3G/AOljc1QGcC2H9Si n2TBFsHvXEm2fscinUrG15ZcuUuwOsKw0Z2fD8gvwxRCgbuCMmYwrajqYrBBaFqR 21iACNhS/fd97XuIrE7jnbSFcFAM1w+y5fd3cx0t8oR/tk6AUcHaKVO6e78oOhDB ukp06TJH7EN2hhq6hr+lgi/DNQT4xG9vIGCiSfJ+m4uZgvVkI5+TT/4SOfl1Ti7I mhYmqzcZeGaEsaCzEZ3N8s1XdaepHGHFLulhYBa1n3L470YrmuasUAxaGGl/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9Zx4w6C8ufGeSVMPNxC3Ob+9E+QwHwYDVR0j BBgwFoAU0okrq+5fOymPZ01Isaao1jhUbN8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmJjZjFlYy05MjJkLTRjZDctOGNhNi03MjcyNGY2NmU1ZmIvMC9EMjg5MkJBQkVF NUYzQjI5OEY2NzRENDhCMUE2QThENjM4NTQ2Q0RGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI4OTJCQUJFRTVGM0IyOThGNjc0RDQ4QjFBNkE4RDYzODU0 NkNERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjJiY2YxZWMtOTIyZC00Y2Q3LThj YTYtNzI3MjRmNjZlNWZiLzAvRDI4OTJCQUJFRTVGM0IyOThGNjc0RDQ4QjFBNkE4 RDYzODU0NkNERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF3icSAJetXq/LDWt7CkYss/lA1WlNB5mQ2b NKJ0i2jNyFLtM+MCrZZDE4lnxfeTCtDcq+DFtKcjDJ+Ok+HvyEAr7uDhWe+MOzmO o6r0mih6NhEWCH+n/uq2CnS7hPnws2jpIBovn2C1rS5Ac3DoK+a/7vpd3CpdvmJj njNvqSiOlS7Em6yby/MSa0wpYQwoRK6zsoSGEum72iDO6bRwNjCAzstsPnQVL0Gd miaC02F1obY1GGMbINKHIwS7seIu5RYSn2dPjXZ1bZ5dgQojc0eE1dxayWRgjXOv rPHCqnBmFe58xcs0pcbt+coRXOhCMScxfFKLygcogvbiOSj2y+g= -----END CERTIFICATE-----Generated at Sat Aug 23 13:29:18 2025 by rpki-client