$ rpki-client -vvf repo-rpki.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/E810D41602DB2D5449939EA97EB71C350841BC5D.mft File: E810D41602DB2D5449939EA97EB71C350841BC5D.mft (raw, json) Hash identifier: p0mom5A0DQiref5SO3MeEas4krQc4XuU2EJ4nXg+LpY= Subject key identifier: 5C:5C:48:B1:E5:D9:67:C3:8C:EF:EB:D1:60:BE:9C:AC:AE:4C:4E:F0 Authority key identifier: E8:10:D4:16:02:DB:2D:54:49:93:9E:A9:7E:B7:1C:35:08:41:BC:5D Certificate issuer: /CN=E810D41602DB2D5449939EA97EB71C350841BC5D Certificate serial: 7EF61F5B51C9569975C4570F16225CCE455B318F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E810D41602DB2D5449939EA97EB71C350841BC5D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/E810D41602DB2D5449939EA97EB71C350841BC5D.mft Manifest number: 0218 Signing time: Fri 22 Aug 2025 20:11:07 +0000 Manifest this update: Fri 22 Aug 2025 20:06:07 +0000 Manifest next update: Tue 26 Aug 2025 01:24:07 +0000 Files and hashes: 1: E810D41602DB2D5449939EA97EB71C350841BC5D.crl (hash: pEi7CWKFbq+hLLKYjDbHjuYdt5ZnErXlTwl+qiNXShM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/E810D41602DB2D5449939EA97EB71C350841BC5D.crl rsync://repo-rpki.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/E810D41602DB2D5449939EA97EB71C350841BC5D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E810D41602DB2D5449939EA97EB71C350841BC5D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 01:24:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:f6:1f:5b:51:c9:56:99:75:c4:57:0f:16:22:5c:ce:45:5b:31:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E810D41602DB2D5449939EA97EB71C350841BC5D Validity Not Before: Aug 22 20:06:07 2025 GMT Not After : Aug 26 01:24:07 2025 GMT Subject: CN=5C5C48B1E5D967C38CEFEBD160BE9CACAE4C4EF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:36:7c:a8:90:45:2f:95:e1:70:62:59:d9:2b: 30:23:25:e3:7e:48:03:f8:7f:3d:21:a8:3e:e6:00: b6:96:a0:76:77:c3:46:4f:d9:4f:96:c7:e8:c2:f8: 0c:3d:47:a9:9c:37:f8:24:9c:d5:8a:ed:4e:71:49: ba:0b:6b:a8:dc:ed:c5:ec:b3:d0:a3:8e:a9:2e:0f: f9:1e:cf:2c:53:14:e6:6c:d4:92:1a:ae:36:dc:9c: 8d:44:fe:de:9e:70:47:54:49:6b:e5:5f:f4:ca:2b: d4:02:96:16:83:85:53:6e:d2:8d:64:b7:c0:da:d5: 9b:64:44:8b:5a:b6:df:ea:3a:cb:41:e7:4a:45:f5: 1a:ed:40:de:85:94:0e:95:3c:f4:69:99:b7:fb:d9: 7c:62:83:99:df:81:96:d0:59:3e:af:18:a4:c9:0e: 79:c0:66:94:4c:92:d9:d9:20:9d:85:36:6e:d4:44: 9c:60:fd:be:b3:fc:ca:5c:79:9c:aa:4d:c8:90:29: 0a:ad:ff:0c:cd:7a:09:8c:f0:17:3a:a5:b9:0c:d2: 12:2c:7b:f8:f2:b5:91:56:50:dd:08:15:b6:f2:2b: 1b:c5:0b:3a:f9:ba:9d:ed:d3:81:11:bb:5d:0a:95: 54:a4:3a:d0:78:a4:40:63:44:8d:8f:bc:bf:5e:22: eb:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:5C:48:B1:E5:D9:67:C3:8C:EF:EB:D1:60:BE:9C:AC:AE:4C:4E:F0 X509v3 Authority Key Identifier: keyid:E8:10:D4:16:02:DB:2D:54:49:93:9E:A9:7E:B7:1C:35:08:41:BC:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/E810D41602DB2D5449939EA97EB71C350841BC5D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E810D41602DB2D5449939EA97EB71C350841BC5D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/E810D41602DB2D5449939EA97EB71C350841BC5D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:af:0b:a9:4c:c2:c9:bc:83:09:f3:8d:ed:c1:96:f4:64:c3: ec:ee:f9:ef:b4:6c:05:0c:86:56:41:ee:c3:e5:2b:72:68:b7: f3:14:2d:81:94:97:d7:8a:6d:6f:be:da:0e:67:87:da:dd:a7: 50:d6:68:d2:54:a4:f4:18:74:11:3b:a9:16:ee:73:23:6f:1c: c7:18:01:00:c9:92:4c:7c:1c:3a:84:0d:ed:31:ca:26:7b:64: 43:7f:61:2f:6f:4c:7e:63:43:39:97:0e:7f:9e:01:b3:39:a4: b6:b4:12:bf:d8:fa:45:54:60:7b:a0:c2:fc:77:96:6b:05:1b: 02:bc:32:e4:5e:7f:f5:56:96:6d:f5:a7:aa:af:60:04:5c:09: a9:7a:e7:2f:16:98:dc:d4:8f:90:be:d6:c1:9d:f5:3f:c3:af: 1f:5c:a2:3d:bc:af:70:63:32:41:b9:a1:4a:41:f5:2f:ec:f7: cd:2d:71:f0:e3:d8:9c:1a:69:aa:6f:b5:97:e3:b2:f5:ea:e3: df:20:76:fd:ae:59:53:d7:86:af:34:b1:ad:6a:b4:88:e4:cc: 32:f8:9f:14:06:3e:52:f4:55:59:97:36:fe:3a:0a:4f:65:e3: c5:be:0b:ae:cc:b5:64:35:57:39:72:3c:0b:b1:c7:3a:36:50: 03:a2:2c:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfvYfW1HJVpl1xFcPFiJczkVbMY8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTgxMEQ0MTYwMkRCMkQ1NDQ5OTM5RUE5N0VCNzFDMzUw ODQxQkM1RDAeFw0yNTA4MjIyMDA2MDdaFw0yNTA4MjYwMTI0MDdaMDMxMTAvBgNV BAMTKDVDNUM0OEIxRTVEOTY3QzM4Q0VGRUJEMTYwQkU5Q0FDQUU0QzRFRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHNnyokEUvleFwYlnZKzAjJeN+ SAP4fz0hqD7mALaWoHZ3w0ZP2U+Wx+jC+Aw9R6mcN/gknNWK7U5xSboLa6jc7cXs s9CjjqkuD/kezyxTFOZs1JIarjbcnI1E/t6ecEdUSWvlX/TKK9QClhaDhVNu0o1k t8Da1ZtkRItatt/qOstB50pF9RrtQN6FlA6VPPRpmbf72Xxig5nfgZbQWT6vGKTJ DnnAZpRMktnZIJ2FNm7URJxg/b6z/MpceZyqTciQKQqt/wzNegmM8Bc6pbkM0hIs e/jytZFWUN0IFbbyKxvFCzr5up3t04ERu10KlVSkOtB4pEBjRI2PvL9eIutzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXFxIseXZZ8OM7+vRYL6crK5MTvAwHwYDVR0j BBgwFoAU6BDUFgLbLVRJk56pfrccNQhBvF0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTkwNWI4Zi01YzBhLTQ1NzktYjRmNy0wOTI2N2I1NTg5NjgvMC9FODEwRDQxNjAy REIyRDU0NDk5MzlFQTk3RUI3MUMzNTA4NDFCQzVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTgxMEQ0MTYwMkRCMkQ1NDQ5OTM5RUE5N0VCNzFDMzUwODQx QkM1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk5MDViOGYtNWMwYS00NTc5LWI0 ZjctMDkyNjdiNTU4OTY4LzAvRTgxMEQ0MTYwMkRCMkQ1NDQ5OTM5RUE5N0VCNzFD MzUwODQxQkM1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEWvC6lMwsm8gwnzje3BlvRkw+zu+e+0bAUM hlZB7sPlK3Jot/MULYGUl9eKbW++2g5nh9rdp1DWaNJUpPQYdBE7qRbucyNvHMcY AQDJkkx8HDqEDe0xyiZ7ZEN/YS9vTH5jQzmXDn+eAbM5pLa0Er/Y+kVUYHugwvx3 lmsFGwK8MuRef/VWlm31p6qvYARcCal65y8WmNzUj5C+1sGd9T/Drx9coj28r3Bj MkG5oUpB9S/s980tcfDj2JwaaapvtZfjsvXq498gdv2uWVPXhq80sa1qtIjkzDL4 nxQGPlL0VVmXNv46Ck9l48W+C67MtWQ1VzlyPAuxxzo2UAOiLD0= -----END CERTIFICATE-----Generated at Sat Aug 23 15:45:11 2025 by rpki-client