$ rpki-client -vvf repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft File: 0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft (raw, json) Hash identifier: p4TkUEChYZffXmyuHYEQXBzd9PL9RX5rnylIhxoivdw= Subject key identifier: E1:82:B4:4A:3F:C2:59:4B:E8:33:B3:0F:CE:62:82:1F:E4:65:BA:0B Authority key identifier: 0F:44:BF:25:8D:75:F2:D1:C4:45:D5:29:C3:01:5F:9F:E5:1B:28:0F Certificate issuer: /CN=0F44BF258D75F2D1C445D529C3015F9FE51B280F Certificate serial: 1A80D7296BF6646B4B98F7CC6AD721A0EF2B8BA0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0F44BF258D75F2D1C445D529C3015F9FE51B280F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft Manifest number: 75 Signing time: Sat 23 Aug 2025 15:01:18 +0000 Manifest this update: Sat 23 Aug 2025 14:56:18 +0000 Manifest next update: Wed 27 Aug 2025 02:57:18 +0000 Files and hashes: 1: 0F44BF258D75F2D1C445D529C3015F9FE51B280F.crl (hash: 0DWM3LgShP3fh9xY4lxPl3lrFtNztThRL9B70oYibTQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.crl rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0F44BF258D75F2D1C445D529C3015F9FE51B280F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:80:d7:29:6b:f6:64:6b:4b:98:f7:cc:6a:d7:21:a0:ef:2b:8b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F44BF258D75F2D1C445D529C3015F9FE51B280F Validity Not Before: Aug 23 14:56:18 2025 GMT Not After : Aug 27 02:57:18 2025 GMT Subject: CN=E182B44A3FC2594BE833B30FCE62821FE465BA0B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a8:19:df:4c:88:a4:c1:c5:5b:14:b8:2b:dc: ce:8e:cc:8d:91:00:5c:5b:b2:a2:9a:39:5d:ff:78: 0d:d3:86:3a:d3:89:44:25:bf:93:4b:75:ff:56:81: 88:fa:ab:16:f8:03:85:3d:8f:a8:16:bc:3e:ed:bc: 33:2b:ce:76:f5:95:44:cd:35:c3:e4:63:48:5d:3c: 50:b6:f4:da:c6:97:fe:18:69:10:e5:2b:27:62:7c: 84:ed:54:7d:f2:b8:44:82:4c:62:08:03:e5:5c:86: 90:36:90:91:4a:5f:01:0d:f2:da:0d:e9:38:f4:ca: 3f:63:a1:66:7b:d6:d7:4a:49:c4:6c:fd:38:89:b2: d4:38:48:36:a6:c1:e6:98:21:bf:2f:b9:08:ca:cf: 04:10:c1:d2:26:f8:4b:4a:dc:82:df:1a:20:81:00: 2b:ba:a5:68:99:72:04:bd:a2:44:6a:24:86:7f:89: 2b:bc:91:d7:83:41:c2:46:ad:51:e3:43:7e:a2:65: 5e:18:b7:20:aa:e0:00:ee:f6:b9:36:d8:a4:46:c3: 19:4f:36:1b:02:72:fb:a4:ee:98:f2:33:e5:de:b0: 7e:19:99:c0:cc:e4:de:61:93:28:22:84:1b:61:53: 89:f1:49:1a:8a:a0:81:2f:88:61:5b:c2:18:e4:32: 0e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:82:B4:4A:3F:C2:59:4B:E8:33:B3:0F:CE:62:82:1F:E4:65:BA:0B X509v3 Authority Key Identifier: keyid:0F:44:BF:25:8D:75:F2:D1:C4:45:D5:29:C3:01:5F:9F:E5:1B:28:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0F44BF258D75F2D1C445D529C3015F9FE51B280F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:06:9e:69:62:c0:7a:9c:17:3e:06:ed:6a:f3:b7:61:d2:76: e7:f5:f5:c0:a2:a1:f9:c9:67:30:52:60:7a:58:86:7c:8a:44: 2c:24:ae:45:06:4d:6f:8c:08:e4:07:98:10:69:ed:94:31:2f: bb:e3:1b:44:01:7a:f3:cc:55:4e:c6:91:58:be:c0:85:d6:92: c8:df:4c:b6:68:df:76:c7:ac:e2:e0:64:7a:f6:29:b8:95:7b: 30:36:d5:e2:12:f2:ed:b5:4d:de:23:7b:3d:7f:2b:86:eb:39: 62:88:7f:e0:d1:5d:55:4c:86:d7:c5:7d:d4:f8:df:39:a7:9d: 69:d6:61:8b:e1:21:fc:de:f5:6b:f4:f7:2e:61:7b:6f:7b:fe: d6:78:68:37:7b:80:e9:a7:20:3d:c6:7e:5b:00:84:32:5c:dd: 78:64:45:9f:30:2c:22:12:a2:32:a0:80:15:29:21:eb:0a:57: 05:a5:8c:b8:e6:7b:ab:a6:f9:06:62:1b:fe:02:bb:c9:59:cf: c6:b3:75:fb:2d:d8:e8:5e:a4:83:02:4f:11:d1:fe:0e:4a:1f: 63:fa:a9:1d:7c:7a:c4:b1:df:51:9e:03:78:53:d0:1d:f5:d7: 1f:f8:46:ec:b1:e6:c2:a2:08:a2:37:97:b4:f5:e8:2d:fd:9d: 9f:d8:66:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGoDXKWv2ZGtLmPfMatchoO8ri6AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEY0NEJGMjU4RDc1RjJEMUM0NDVENTI5QzMwMTVGOUZF NTFCMjgwRjAeFw0yNTA4MjMxNDU2MThaFw0yNTA4MjcwMjU3MThaMDMxMTAvBgNV BAMTKEUxODJCNDRBM0ZDMjU5NEJFODMzQjMwRkNFNjI4MjFGRTQ2NUJBMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1qBnfTIikwcVbFLgr3M6OzI2R AFxbsqKaOV3/eA3ThjrTiUQlv5NLdf9WgYj6qxb4A4U9j6gWvD7tvDMrznb1lUTN NcPkY0hdPFC29NrGl/4YaRDlKydifITtVH3yuESCTGIIA+VchpA2kJFKXwEN8toN 6Tj0yj9joWZ71tdKScRs/TiJstQ4SDamweaYIb8vuQjKzwQQwdIm+EtK3ILfGiCB ACu6pWiZcgS9okRqJIZ/iSu8kdeDQcJGrVHjQ36iZV4YtyCq4ADu9rk22KRGwxlP NhsCcvuk7pjyM+XesH4ZmcDM5N5hkygihBthU4nxSRqKoIEviGFbwhjkMg53AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4YK0Sj/CWUvoM7MPzmKCH+RlugswHwYDVR0j BBgwFoAUD0S/JY118tHERdUpwwFfn+UbKA8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTNkZTNlYy00ZDNjLTQ0MDItYTdiOC04YTFiOTYyMjZlNzUvMC8wRjQ0QkYyNThE NzVGMkQxQzQ0NUQ1MjlDMzAxNUY5RkU1MUIyODBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMEY0NEJGMjU4RDc1RjJEMUM0NDVENTI5QzMwMTVGOUZFNTFC MjgwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTEzZGUzZWMtNGQzYy00NDAyLWE3 YjgtOGExYjk2MjI2ZTc1LzAvMEY0NEJGMjU4RDc1RjJEMUM0NDVENTI5QzMwMTVG OUZFNTFCMjgwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJwGnmliwHqcFz4G7Wrzt2HSduf19cCiofnJ ZzBSYHpYhnyKRCwkrkUGTW+MCOQHmBBp7ZQxL7vjG0QBevPMVU7GkVi+wIXWksjf TLZo33bHrOLgZHr2KbiVezA21eIS8u21Td4jez1/K4brOWKIf+DRXVVMhtfFfdT4 3zmnnWnWYYvhIfze9Wv09y5he297/tZ4aDd7gOmnID3GflsAhDJc3XhkRZ8wLCIS ojKggBUpIesKVwWljLjme6um+QZiG/4Cu8lZz8azdfst2OhepIMCTxHR/g5KH2P6 qR18esSx31GeA3hT0B311x/4Ruyx5sKiCKI3l7T16C39nZ/YZj4= -----END CERTIFICATE-----Generated at Sun Aug 24 01:18:49 2025 by rpki-client