$ rpki-client -vvf repo-rpki.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.mft File: B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.mft (raw, json) Hash identifier: rh5DFwqikf2cj8gbTzOm1QdBJPMTP1Gbx2dkMJMADzk= Subject key identifier: C4:70:70:4F:BA:31:C6:4C:E6:DB:E1:66:A3:F4:34:EA:55:4D:64:0C Authority key identifier: B0:D5:A0:53:40:C5:5C:7E:2C:DC:83:AD:CE:47:74:AF:0C:C1:84:C1 Certificate issuer: /CN=B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1 Certificate serial: 6BB99998B59329877BD6782F577D1F7983CC0EC2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.mft Manifest number: 02F5 Signing time: Sat 23 Aug 2025 01:41:02 +0000 Manifest this update: Sat 23 Aug 2025 01:36:02 +0000 Manifest next update: Tue 26 Aug 2025 07:52:02 +0000 Files and hashes: 1: B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.crl (hash: 7u5IFPF9h5hBJiDuOxljn59bDmPICBMIatpAjSHf2KM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.crl rsync://repo-rpki.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 07:52:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:b9:99:98:b5:93:29:87:7b:d6:78:2f:57:7d:1f:79:83:cc:0e:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1 Validity Not Before: Aug 23 01:36:02 2025 GMT Not After : Aug 26 07:52:02 2025 GMT Subject: CN=C470704FBA31C64CE6DBE166A3F434EA554D640C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:19:6c:dc:dd:25:9c:89:c2:52:15:7a:ed:1d: 62:e0:89:59:0a:6c:f8:bb:3f:b4:e4:bb:c2:36:79: a9:2c:fb:02:fd:e8:14:63:8e:4d:89:9d:7f:ac:35: f1:71:88:78:d3:77:c3:50:e8:a7:36:dd:81:10:63: 5b:21:63:5c:8e:56:ce:c8:f0:57:1d:40:48:14:92: 5e:35:5c:2a:d9:c6:de:0c:46:f1:f0:1c:57:04:82: 5e:d0:fb:49:48:ce:a6:7a:9a:e1:fa:15:5a:1c:db: 4d:78:7a:3a:d0:2c:ea:bb:97:ca:df:a5:61:a4:66: 82:ec:f0:ea:b9:55:cb:12:85:b9:76:e7:2b:e1:98: 68:5f:58:f9:df:54:ba:c0:fa:72:9f:4c:6c:f8:89: c7:af:8d:10:1b:c1:78:13:d6:b3:f2:03:56:48:cf: 5f:5a:8a:17:c3:d1:4e:94:79:97:85:db:a8:2c:d6: c9:a1:a8:59:79:68:4d:9f:18:b9:28:5f:f4:dd:ff: 6b:f5:30:1d:85:ab:63:c4:d5:f9:bd:50:d4:9f:31: 79:fd:67:e5:c8:6a:1f:e6:11:00:11:cf:f2:2b:c2: ca:cf:d4:bd:0b:89:6e:e0:9e:1d:3c:70:bc:08:50: 10:9d:a5:2c:fc:ae:1a:ab:ac:25:eb:95:c5:ae:36: 2a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:70:70:4F:BA:31:C6:4C:E6:DB:E1:66:A3:F4:34:EA:55:4D:64:0C X509v3 Authority Key Identifier: keyid:B0:D5:A0:53:40:C5:5C:7E:2C:DC:83:AD:CE:47:74:AF:0C:C1:84:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/81cf5657-ecdc-4d97-a59c-b676ce53c8a1/0/B0D5A05340C55C7E2CDC83ADCE4774AF0CC184C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:16:80:dd:36:e6:12:21:fa:ae:ba:a3:dc:d8:8d:97:e1:c8: e9:63:b8:27:b1:76:61:59:f2:dd:33:1a:19:65:0e:ce:a5:ab: ca:5b:bc:e4:f5:00:e0:55:c4:ae:79:2a:87:fa:b1:1e:6b:25: 69:52:06:9d:eb:e5:5c:69:50:fa:ea:12:dd:a1:a0:11:7d:94: 71:7c:48:bd:1f:4c:62:0e:6b:c9:b9:ae:e6:bd:1f:b6:19:24: 0f:70:de:59:f3:ee:f6:11:e9:7e:c7:ff:9e:a9:4a:bc:a9:c2: d7:34:3a:ae:b4:a4:d7:af:f2:d5:9a:d5:41:9c:17:0b:cc:4e: 15:99:4a:6d:f8:6d:c4:e0:8c:14:d4:4e:e5:5a:c0:20:c1:96: d6:2f:35:bf:5d:ca:c1:a8:54:1b:28:dd:42:71:b8:60:59:c2: 96:ff:ab:0d:cb:53:65:bd:40:ea:cb:ac:a8:fb:97:2d:87:53: ef:bb:46:e4:96:81:fa:0c:7e:30:88:f7:92:a2:a9:21:84:e8: 3f:67:61:95:66:27:66:61:f2:9f:72:e1:e1:e9:51:c9:f1:a9: b2:c4:4a:d0:6a:3b:29:dc:b2:85:bd:9b:b2:99:fd:dc:97:0f: 17:d6:07:ca:61:7c:f4:52:25:52:d4:ba:f0:ae:ce:4a:68:dc: 8b:14:07:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa7mZmLWTKYd71ngvV30feYPMDsIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBENUEwNTM0MEM1NUM3RTJDREM4M0FEQ0U0Nzc0QUYw Q0MxODRDMTAeFw0yNTA4MjMwMTM2MDJaFw0yNTA4MjYwNzUyMDJaMDMxMTAvBgNV BAMTKEM0NzA3MDRGQkEzMUM2NENFNkRCRTE2NkEzRjQzNEVBNTU0RDY0MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYGWzc3SWcicJSFXrtHWLgiVkK bPi7P7Tku8I2eaks+wL96BRjjk2JnX+sNfFxiHjTd8NQ6Kc23YEQY1shY1yOVs7I 8FcdQEgUkl41XCrZxt4MRvHwHFcEgl7Q+0lIzqZ6muH6FVoc2014ejrQLOq7l8rf pWGkZoLs8Oq5VcsShbl25yvhmGhfWPnfVLrA+nKfTGz4icevjRAbwXgT1rPyA1ZI z19aihfD0U6UeZeF26gs1smhqFl5aE2fGLkoX/Td/2v1MB2Fq2PE1fm9UNSfMXn9 Z+XIah/mEQARz/IrwsrP1L0LiW7gnh08cLwIUBCdpSz8rhqrrCXrlcWuNipnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxHBwT7oxxkzm2+Fmo/Q06lVNZAwwHwYDVR0j BBgwFoAUsNWgU0DFXH4s3IOtzkd0rwzBhMEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MWNmNTY1Ny1lY2RjLTRkOTctYTU5Yy1iNjc2Y2U1M2M4YTEvMC9CMEQ1QTA1MzQw QzU1QzdFMkNEQzgzQURDRTQ3NzRBRjBDQzE4NEMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjBENUEwNTM0MEM1NUM3RTJDREM4M0FEQ0U0Nzc0QUYwQ0Mx ODRDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODFjZjU2NTctZWNkYy00ZDk3LWE1 OWMtYjY3NmNlNTNjOGExLzAvQjBENUEwNTM0MEM1NUM3RTJDREM4M0FEQ0U0Nzc0 QUYwQ0MxODRDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKIWgN025hIh+q66o9zYjZfhyOljuCexdmFZ 8t0zGhllDs6lq8pbvOT1AOBVxK55Kof6sR5rJWlSBp3r5VxpUPrqEt2hoBF9lHF8 SL0fTGIOa8m5rua9H7YZJA9w3lnz7vYR6X7H/56pSrypwtc0Oq60pNev8tWa1UGc FwvMThWZSm34bcTgjBTUTuVawCDBltYvNb9dysGoVBso3UJxuGBZwpb/qw3LU2W9 QOrLrKj7ly2HU++7RuSWgfoMfjCI95KiqSGE6D9nYZVmJ2Zh8p9y4eHpUcnxqbLE StBqOyncsoW9m7KZ/dyXDxfWB8phfPRSJVLUuvCuzkpo3IsUB/g= -----END CERTIFICATE-----Generated at Sat Aug 23 17:37:12 2025 by rpki-client