$ rpki-client -vvf repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.mft File: D018BF43793F56145B87233DD668DE3BDEEFFE13.mft (raw, json) Hash identifier: VIsXtRjwIbZN/XvYbDhgw8ybUUyM5q+Qi9wENp7m/Dg= Subject key identifier: DE:A8:46:A7:88:36:6A:E9:CD:5E:2A:B0:54:6B:98:4D:0A:4F:3F:06 Authority key identifier: D0:18:BF:43:79:3F:56:14:5B:87:23:3D:D6:68:DE:3B:DE:EF:FE:13 Certificate issuer: /CN=D018BF43793F56145B87233DD668DE3BDEEFFE13 Certificate serial: 50BC083AAFA869F12A97BE507FCB926C941485AF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D018BF43793F56145B87233DD668DE3BDEEFFE13.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.mft Manifest number: 52 Signing time: Thu 21 Aug 2025 18:11:14 +0000 Manifest this update: Thu 21 Aug 2025 18:06:14 +0000 Manifest next update: Sun 24 Aug 2025 18:57:14 +0000 Files and hashes: 1: D018BF43793F56145B87233DD668DE3BDEEFFE13.crl (hash: FUoOyaejuVblPM92lfWZGIpcPrmENbTHOJYDyPe/8S4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.crl rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D018BF43793F56145B87233DD668DE3BDEEFFE13.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 18:57:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:bc:08:3a:af:a8:69:f1:2a:97:be:50:7f:cb:92:6c:94:14:85:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D018BF43793F56145B87233DD668DE3BDEEFFE13 Validity Not Before: Aug 21 18:06:14 2025 GMT Not After : Aug 24 18:57:14 2025 GMT Subject: CN=DEA846A788366AE9CD5E2AB0546B984D0A4F3F06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:28:73:9e:8c:9a:b5:bd:8c:70:8f:c3:1b:b0: f1:07:9d:f9:b8:ee:43:8b:f7:4a:cf:56:e1:f1:57: dd:d0:88:0d:4d:87:5c:ca:ae:58:a9:7d:1a:21:f9: 7f:6d:9b:bc:4a:e9:1e:e5:b9:c4:f4:89:10:79:21: f5:53:d9:32:f5:77:e2:91:9f:38:3b:53:f7:ff:0e: 67:f2:69:fd:9a:66:cb:26:5c:a7:35:41:23:cb:9a: 23:54:56:3d:71:90:c4:6e:ae:93:eb:66:38:1b:76: 68:75:6a:84:61:3a:f5:ec:78:bc:5d:e3:3b:ec:d1: 5a:7e:4d:df:77:eb:2b:b4:4a:35:c9:39:0b:bb:86: 31:a4:f9:da:9d:6a:18:88:ed:12:21:e2:fc:c2:e8: 4e:7d:bc:a2:de:d1:97:d5:7d:6b:20:17:88:f0:89: ac:ea:6f:ba:98:74:df:06:66:40:6c:49:fc:84:a1: ac:37:54:25:39:e6:1d:ff:53:ec:d4:f7:19:e6:e6: b1:d9:bc:c2:cb:21:c8:64:18:1d:b6:2a:85:88:56: 45:31:0d:26:25:c3:a2:dd:7a:46:c2:62:c5:57:b3: 04:e9:88:15:2e:4a:9c:dc:03:ac:0d:df:b0:da:2a: c9:b0:ee:ec:26:1d:13:f1:0a:96:bd:2d:23:8d:f7: af:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:A8:46:A7:88:36:6A:E9:CD:5E:2A:B0:54:6B:98:4D:0A:4F:3F:06 X509v3 Authority Key Identifier: keyid:D0:18:BF:43:79:3F:56:14:5B:87:23:3D:D6:68:DE:3B:DE:EF:FE:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D018BF43793F56145B87233DD668DE3BDEEFFE13.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:92:d7:57:9e:12:9d:68:1f:3c:96:70:a1:35:33:66:fd:80: 15:7e:8a:c8:09:7d:4f:25:33:00:03:d0:10:aa:a2:ae:c9:29: 66:03:e5:3a:8e:36:09:6d:04:8b:ff:fb:55:67:d4:bb:c0:43: d3:57:e7:6c:75:bc:8e:a4:f8:34:fe:53:75:9c:a2:ef:ec:77: 76:cb:e7:ea:f9:fa:5b:66:73:a6:cb:81:73:b2:b1:7e:e0:94: 22:5e:d4:69:8d:bc:51:16:c4:16:b7:b4:e8:5d:db:11:ef:eb: 3b:26:e0:ab:46:33:92:22:75:4c:8b:e3:b2:4b:df:7f:d7:a6: 0f:7e:0e:f4:76:c0:20:a1:ce:df:5f:37:ee:d8:a7:b2:fb:15: 57:56:19:d4:c8:7c:ab:29:20:c9:50:a2:de:89:da:6b:1f:39: a3:33:2f:7c:46:b1:70:69:fe:c6:7a:50:40:7b:c2:18:82:97: 6a:a0:94:56:a6:bf:7f:a3:42:80:6c:d7:29:75:46:1d:16:b4: e7:ab:92:aa:b4:89:9b:39:aa:64:f8:c9:50:c1:2a:29:69:28: 31:cd:08:71:ed:31:32:35:48:75:aa:d2:31:3e:ce:26:a6:ee: ae:5c:86:26:b2:f3:c0:ee:8f:9a:93:50:d7:ad:0b:8c:82:e8: d0:29:04:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUULwIOq+oafEql75Qf8uSbJQUha8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDAxOEJGNDM3OTNGNTYxNDVCODcyMzNERDY2OERFM0JE RUVGRkUxMzAeFw0yNTA4MjExODA2MTRaFw0yNTA4MjQxODU3MTRaMDMxMTAvBgNV BAMTKERFQTg0NkE3ODgzNjZBRTlDRDVFMkFCMDU0NkI5ODREMEE0RjNGMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoKHOejJq1vYxwj8MbsPEHnfm4 7kOL90rPVuHxV93QiA1Nh1zKrlipfRoh+X9tm7xK6R7lucT0iRB5IfVT2TL1d+KR nzg7U/f/Dmfyaf2aZssmXKc1QSPLmiNUVj1xkMRurpPrZjgbdmh1aoRhOvXseLxd 4zvs0Vp+Td936yu0SjXJOQu7hjGk+dqdahiI7RIh4vzC6E59vKLe0ZfVfWsgF4jw iazqb7qYdN8GZkBsSfyEoaw3VCU55h3/U+zU9xnm5rHZvMLLIchkGB22KoWIVkUx DSYlw6LdekbCYsVXswTpiBUuSpzcA6wN37DaKsmw7uwmHRPxCpa9LSON968ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3qhGp4g2aunNXiqwVGuYTQpPPwYwHwYDVR0j BBgwFoAU0Bi/Q3k/VhRbhyM91mjeO97v/hMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWFkMzE0YS03NjU3LTQ5MDEtYjdkZC0zYjlhOWJmYzZlOWMvMC9EMDE4QkY0Mzc5 M0Y1NjE0NUI4NzIzM0RENjY4REUzQkRFRUZGRTEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDAxOEJGNDM3OTNGNTYxNDVCODcyMzNERDY2OERFM0JERUVG RkUxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODlhZDMxNGEtNzY1Ny00OTAxLWI3 ZGQtM2I5YTliZmM2ZTljLzAvRDAxOEJGNDM3OTNGNTYxNDVCODcyMzNERDY2OERF M0JERUVGRkUxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANKS11eeEp1oHzyWcKE1M2b9gBV+isgJfU8l MwAD0BCqoq7JKWYD5TqONgltBIv/+1Vn1LvAQ9NX52x1vI6k+DT+U3Wcou/sd3bL 5+r5+ltmc6bLgXOysX7glCJe1GmNvFEWxBa3tOhd2xHv6zsm4KtGM5IidUyL47JL 33/Xpg9+DvR2wCChzt9fN+7Yp7L7FVdWGdTIfKspIMlQot6J2msfOaMzL3xGsXBp /sZ6UEB7whiCl2qglFamv3+jQoBs1yl1Rh0WtOerkqq0iZs5qmT4yVDBKilpKDHN CHHtMTI1SHWq0jE+ziam7q5chiay88Duj5qTUNetC4yC6NApBMk= -----END CERTIFICATE-----Generated at Sat Aug 23 10:20:51 2025 by rpki-client