$ rpki-client -vvf repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.mft File: 2244AB179BDE031980D325EEBEAFEC994CA8B419.mft (raw, json) Hash identifier: acrxYL8VSdyroEQSCrVZ72Ibi9vCsnoS3F9uGVhM92Q= Subject key identifier: BB:15:AB:3C:BD:B9:60:E0:04:DE:47:EC:11:B5:0E:14:63:C3:23:35 Authority key identifier: 22:44:AB:17:9B:DE:03:19:80:D3:25:EE:BE:AF:EC:99:4C:A8:B4:19 Certificate issuer: /CN=2244AB179BDE031980D325EEBEAFEC994CA8B419 Certificate serial: 7DE7196CD337BE73304F28504923E818108485EF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2244AB179BDE031980D325EEBEAFEC994CA8B419.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.mft Manifest number: A1 Signing time: Fri 22 Aug 2025 15:30:59 +0000 Manifest this update: Fri 22 Aug 2025 15:25:59 +0000 Manifest next update: Mon 25 Aug 2025 15:35:59 +0000 Files and hashes: 1: 2244AB179BDE031980D325EEBEAFEC994CA8B419.crl (hash: eomRytWfJLR+ph3vpU7itl6q+wy86zS2t0CCeELgRxo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.crl rsync://repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2244AB179BDE031980D325EEBEAFEC994CA8B419.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 15:35:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:e7:19:6c:d3:37:be:73:30:4f:28:50:49:23:e8:18:10:84:85:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2244AB179BDE031980D325EEBEAFEC994CA8B419 Validity Not Before: Aug 22 15:25:59 2025 GMT Not After : Aug 25 15:35:59 2025 GMT Subject: CN=BB15AB3CBDB960E004DE47EC11B50E1463C32335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4f:26:b9:76:b0:83:9d:04:c7:e3:f7:fa:90: bf:12:a6:4e:65:6b:d7:b5:d8:12:03:b3:42:c6:3f: 5c:5a:ac:65:89:82:54:40:a8:b0:d4:16:a5:a6:6f: 3c:fe:89:27:24:d5:35:d3:46:33:89:9b:1e:ae:21: 53:c4:b3:21:18:93:3b:4c:9f:b0:d8:7a:70:0d:36: e0:8f:e8:f0:d4:86:2f:9b:a0:78:e3:c4:d3:c7:07: 47:fb:14:08:f0:f6:a8:bf:3a:32:41:1d:5f:a6:f7: 96:06:f9:26:2b:10:3a:3a:5b:08:3c:23:34:89:52: a9:3b:0d:d6:ec:45:41:cd:0c:8f:d3:e5:9a:b3:38: 28:95:4f:eb:e7:d9:4a:b3:34:ad:a7:de:80:83:8a: 7c:02:9d:57:86:da:1e:07:98:d9:b4:ec:d5:1e:38: 03:24:27:b6:05:e8:da:a3:3f:3e:16:ad:cd:58:15: 82:df:31:97:4e:9b:06:af:16:99:63:1c:62:4d:19: 2a:8a:19:fe:66:74:95:45:8c:b0:43:c9:fb:64:7e: d3:09:6f:dd:c6:1f:2d:87:56:a5:fa:ed:4d:25:16: 4f:54:59:7a:73:4e:28:4b:d7:98:30:a2:86:e8:fc: 51:3a:48:9e:26:57:b0:19:70:ef:41:3d:3a:66:93: be:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:15:AB:3C:BD:B9:60:E0:04:DE:47:EC:11:B5:0E:14:63:C3:23:35 X509v3 Authority Key Identifier: keyid:22:44:AB:17:9B:DE:03:19:80:D3:25:EE:BE:AF:EC:99:4C:A8:B4:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2244AB179BDE031980D325EEBEAFEC994CA8B419.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:22:a2:f8:cf:d5:0e:80:01:8a:3b:3d:73:86:9c:e0:67:35: f1:90:05:46:05:45:50:1d:ef:99:c2:71:77:ae:c8:24:fe:3e: 68:33:38:80:cb:10:7d:5b:34:da:5f:bb:e7:90:a1:af:ac:b8: 89:6a:f5:6d:e8:ee:eb:ec:b5:bf:72:0f:6c:26:ac:ff:cc:e0: ed:59:9f:91:88:fa:4f:f5:e0:88:57:06:e4:60:2f:53:fc:27: 24:17:0a:c0:60:7c:82:d4:c7:a2:8a:f1:a3:4c:16:9c:57:6e: ee:d5:77:68:42:43:64:6f:48:5c:45:22:86:20:e0:0f:f2:20: aa:52:7c:d6:4a:8d:6b:6f:e8:5c:7e:62:fe:cc:95:42:cf:65: f8:04:ab:de:e8:38:8f:ae:da:21:1b:3b:1a:a7:c3:ef:a5:91: 10:5f:b3:55:2f:44:7b:5d:69:80:27:f6:08:b1:95:8b:ab:9e: a0:d9:60:ab:b0:78:26:2a:bb:9e:ca:20:75:05:c2:a5:ba:90: bf:7c:4b:df:b4:9b:d1:a4:de:b5:d6:5d:29:e5:f5:ed:75:7e: f4:34:ac:a7:00:65:35:92:e3:d5:5b:10:e5:ab:85:d6:4d:5b: a3:cf:5e:b7:83:bb:98:f6:d2:81:c8:a2:c6:79:b4:87:da:90: da:6e:f9:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfecZbNM3vnMwTyhQSSPoGBCEhe8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI0NEFCMTc5QkRFMDMxOTgwRDMyNUVFQkVBRkVDOTk0 Q0E4QjQxOTAeFw0yNTA4MjIxNTI1NTlaFw0yNTA4MjUxNTM1NTlaMDMxMTAvBgNV BAMTKEJCMTVBQjNDQkRCOTYwRTAwNERFNDdFQzExQjUwRTE0NjNDMzIzMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsTya5drCDnQTH4/f6kL8Spk5l a9e12BIDs0LGP1xarGWJglRAqLDUFqWmbzz+iSck1TXTRjOJmx6uIVPEsyEYkztM n7DYenANNuCP6PDUhi+boHjjxNPHB0f7FAjw9qi/OjJBHV+m95YG+SYrEDo6Wwg8 IzSJUqk7DdbsRUHNDI/T5ZqzOCiVT+vn2UqzNK2n3oCDinwCnVeG2h4HmNm07NUe OAMkJ7YF6NqjPz4Wrc1YFYLfMZdOmwavFpljHGJNGSqKGf5mdJVFjLBDyftkftMJ b93GHy2HVqX67U0lFk9UWXpzTihL15gwoobo/FE6SJ4mV7AZcO9BPTpmk771AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuxWrPL25YOAE3kfsEbUOFGPDIzUwHwYDVR0j BBgwFoAUIkSrF5veAxmA0yXuvq/smUyotBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZGEwY2RkOS03ZjMxLTRmMWYtYWIwOS1hNjBjYzA4NTljZGEvMC8yMjQ0QUIxNzlC REUwMzE5ODBEMzI1RUVCRUFGRUM5OTRDQThCNDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI0NEFCMTc5QkRFMDMxOTgwRDMyNUVFQkVBRkVDOTk0Q0E4 QjQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmRhMGNkZDktN2YzMS00ZjFmLWFi MDktYTYwY2MwODU5Y2RhLzAvMjI0NEFCMTc5QkRFMDMxOTgwRDMyNUVFQkVBRkVD OTk0Q0E4QjQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEUiovjP1Q6AAYo7PXOGnOBnNfGQBUYFRVAd 75nCcXeuyCT+PmgzOIDLEH1bNNpfu+eQoa+suIlq9W3o7uvstb9yD2wmrP/M4O1Z n5GI+k/14IhXBuRgL1P8JyQXCsBgfILUx6KK8aNMFpxXbu7Vd2hCQ2RvSFxFIoYg 4A/yIKpSfNZKjWtv6Fx+Yv7MlULPZfgEq97oOI+u2iEbOxqnw++lkRBfs1UvRHtd aYAn9gixlYurnqDZYKuweCYqu57KIHUFwqW6kL98S9+0m9Gk3rXWXSnl9e11fvQ0 rKcAZTWS49VbEOWrhdZNW6PPXreDu5j20oHIosZ5tIfakNpu+fo= -----END CERTIFICATE-----Generated at Sat Aug 23 10:35:35 2025 by rpki-client