$ rpki-client -vvf repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft File: C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft (raw, json) Hash identifier: 7QBzuLbyWoNcAzBQwD8NoKMA7LH0znRImgDfkPK9S7I= Subject key identifier: D1:EE:C3:00:7A:F3:CE:20:70:85:45:A1:5D:5C:33:AD:EA:9B:A9:87 Authority key identifier: C1:66:91:03:D8:70:A3:90:C5:6C:8D:FD:3C:1B:FE:23:E4:8B:05:40 Certificate issuer: /CN=C1669103D870A390C56C8DFD3C1BFE23E48B0540 Certificate serial: 3CF0D00AA406A3C9559762AA46A29D4D3DCBBF94 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1669103D870A390C56C8DFD3C1BFE23E48B0540.cer Subject info access: rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft Manifest number: C7 Signing time: Fri 22 Aug 2025 10:21:24 +0000 Manifest this update: Fri 22 Aug 2025 10:16:24 +0000 Manifest next update: Mon 25 Aug 2025 13:07:24 +0000 Files and hashes: 1: C1669103D870A390C56C8DFD3C1BFE23E48B0540.crl (hash: rwbPmDqFfrqedgnS8t/r8/yhAG5PmrU+LpejZoHNzLc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.crl rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1669103D870A390C56C8DFD3C1BFE23E48B0540.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 13:07:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:f0:d0:0a:a4:06:a3:c9:55:97:62:aa:46:a2:9d:4d:3d:cb:bf:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1669103D870A390C56C8DFD3C1BFE23E48B0540 Validity Not Before: Aug 22 10:16:24 2025 GMT Not After : Aug 25 13:07:24 2025 GMT Subject: CN=D1EEC3007AF3CE20708545A15D5C33ADEA9BA987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8a:85:9b:5b:0a:f4:c4:9e:e1:12:53:03:03: 86:c5:37:aa:67:5f:6e:76:26:6e:6d:85:7d:38:91: c7:fe:0e:a2:22:34:bc:7b:c6:2a:2d:aa:6f:96:19: 03:56:f7:b7:b2:a2:be:38:59:59:d6:70:df:6b:2c: da:03:08:8d:4d:d7:11:74:0e:86:0c:49:03:3a:a7: 80:e3:b0:3d:19:e4:67:34:cd:59:34:8c:40:3b:46: 87:1b:58:91:09:66:40:44:80:4f:32:11:d3:aa:08: 98:53:a5:5d:af:82:e5:e0:52:a3:0f:28:1a:76:63: 87:5b:55:6e:0f:78:e5:38:71:e2:5a:e2:df:e4:a1: 19:dc:d4:66:c9:6b:7d:2f:d9:af:f8:d1:79:8d:8d: b5:35:dd:7b:a7:9d:d5:0f:6f:fa:8a:9e:fa:4d:c8: 7c:b0:2c:b0:d4:f5:8c:ca:7d:98:d9:7a:af:6d:e7: 15:7f:63:00:36:51:1a:c6:da:93:fb:42:60:8d:6f: 06:54:b5:c7:b5:43:1d:5f:05:1d:c6:b3:7b:3e:b8: 4c:c2:d7:4a:73:8f:f9:cf:4e:b1:ce:a9:d2:dd:ed: 25:9b:71:63:c6:73:a5:1d:21:06:4b:7a:6f:24:d6: 2b:1b:0a:cf:b4:3d:11:1f:4f:c6:94:3c:61:44:ca: 67:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:EE:C3:00:7A:F3:CE:20:70:85:45:A1:5D:5C:33:AD:EA:9B:A9:87 X509v3 Authority Key Identifier: keyid:C1:66:91:03:D8:70:A3:90:C5:6C:8D:FD:3C:1B:FE:23:E4:8B:05:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1669103D870A390C56C8DFD3C1BFE23E48B0540.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:55:89:0a:23:b1:63:9b:ba:61:54:53:43:ac:6b:3d:ff:33: 74:94:45:e3:33:99:c0:3d:b3:f5:6b:dd:4c:2c:5f:0e:2a:74: f9:42:3d:49:9b:24:b3:ac:74:62:bc:49:e9:42:b4:eb:b5:ac: b5:d3:ba:12:52:43:4d:71:15:f8:4f:df:98:da:30:7a:e0:5f: 2f:75:5f:98:7a:d3:69:90:84:c1:94:1b:fa:e8:b6:58:75:e4: 63:da:6f:46:2d:25:d1:c1:c3:2d:51:89:db:5b:d5:27:8e:fe: ad:78:ab:74:92:60:c1:f7:fe:5a:1d:36:c3:37:cb:1d:39:de: 57:56:ae:fb:06:91:a4:e0:59:54:a3:67:a4:13:57:04:76:b3: 34:8b:c6:9c:65:b1:b2:c3:b6:65:9b:0e:40:6a:75:7e:14:62: 65:06:d7:b1:f8:60:43:3c:c7:c1:51:4c:88:cb:92:4f:b4:eb: 37:f6:5f:ef:f8:fa:d4:67:eb:d8:6d:df:94:84:1b:84:7a:2a: 1e:d6:19:a3:4f:40:c5:04:76:c6:12:87:7e:f3:d7:72:07:8e: a7:4c:68:21:3e:2d:d3:45:ac:29:76:57:e8:73:8c:cc:a0:bd: 3d:24:16:9f:6d:47:2b:36:a0:f4:a1:18:28:aa:2f:1d:a4:40: 4c:e5:3c:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPPDQCqQGo8lVl2KqRqKdTT3Lv5QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE2NjkxMDNEODcwQTM5MEM1NkM4REZEM0MxQkZFMjNF NDhCMDU0MDAeFw0yNTA4MjIxMDE2MjRaFw0yNTA4MjUxMzA3MjRaMDMxMTAvBgNV BAMTKEQxRUVDMzAwN0FGM0NFMjA3MDg1NDVBMTVENUMzM0FERUE5QkE5ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChioWbWwr0xJ7hElMDA4bFN6pn X252Jm5thX04kcf+DqIiNLx7xiotqm+WGQNW97eyor44WVnWcN9rLNoDCI1N1xF0 DoYMSQM6p4DjsD0Z5Gc0zVk0jEA7RocbWJEJZkBEgE8yEdOqCJhTpV2vguXgUqMP KBp2Y4dbVW4PeOU4ceJa4t/koRnc1GbJa30v2a/40XmNjbU13XunndUPb/qKnvpN yHywLLDU9YzKfZjZeq9t5xV/YwA2URrG2pP7QmCNbwZUtce1Qx1fBR3Gs3s+uEzC 10pzj/nPTrHOqdLd7SWbcWPGc6UdIQZLem8k1isbCs+0PREfT8aUPGFEymcLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0e7DAHrzziBwhUWhXVwzreqbqYcwHwYDVR0j BBgwFoAUwWaRA9hwo5DFbI39PBv+I+SLBUAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ODhkMGI2ZS1iMmVkLTQ5YzgtYTQ5OC04ZmQyOTlhZmI3MDEvMC9DMTY2OTEwM0Q4 NzBBMzkwQzU2QzhERkQzQzFCRkUyM0U0OEIwNTQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE2NjkxMDNEODcwQTM5MEM1NkM4REZEM0MxQkZFMjNFNDhC MDU0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODg4ZDBiNmUtYjJlZC00OWM4LWE0 OTgtOGZkMjk5YWZiNzAxLzAvQzE2NjkxMDNEODcwQTM5MEM1NkM4REZEM0MxQkZF MjNFNDhCMDU0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACZViQojsWObumFUU0Osaz3/M3SUReMzmcA9 s/Vr3UwsXw4qdPlCPUmbJLOsdGK8SelCtOu1rLXTuhJSQ01xFfhP35jaMHrgXy91 X5h602mQhMGUG/rotlh15GPab0YtJdHBwy1Ridtb1SeO/q14q3SSYMH3/lodNsM3 yx053ldWrvsGkaTgWVSjZ6QTVwR2szSLxpxlsbLDtmWbDkBqdX4UYmUG17H4YEM8 x8FRTIjLkk+06zf2X+/4+tRn69ht35SEG4R6Kh7WGaNPQMUEdsYSh37z13IHjqdM aCE+LdNFrCl2V+hzjMygvT0kFp9tRys2oPShGCiqLx2kQEzlPFg= -----END CERTIFICATE-----Generated at Sat Aug 23 15:26:22 2025 by rpki-client