$ rpki-client -vvf repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.mft File: AD2137BA5758D926364E9E038F19A65DC3F1846E.mft (raw, json) Hash identifier: cep/2T8osTmXtHTEVwTj4KF1kn0Em4jZciV0ll7BUHs= Subject key identifier: CC:DC:FE:62:AB:58:33:09:85:DC:3B:B1:B2:51:B5:A7:25:A1:F7:9B Authority key identifier: AD:21:37:BA:57:58:D9:26:36:4E:9E:03:8F:19:A6:5D:C3:F1:84:6E Certificate issuer: /CN=AD2137BA5758D926364E9E038F19A65DC3F1846E Certificate serial: 7CFCE2046B63B1EC8E17FBB01CFCCFB0B03D0452 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2137BA5758D926364E9E038F19A65DC3F1846E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.mft Manifest number: 0229 Signing time: Mon 30 Jun 2025 03:32:02 +0000 Manifest this update: Mon 30 Jun 2025 03:27:02 +0000 Manifest next update: Thu 03 Jul 2025 08:16:02 +0000 Files and hashes: 1: AD2137BA5758D926364E9E038F19A65DC3F1846E.crl (hash: 5mDi/JAoW165p6PeTIBr50DyhL1pjzhjRfzXDKOLhgk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.crl rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2137BA5758D926364E9E038F19A65DC3F1846E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 08:16:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:fc:e2:04:6b:63:b1:ec:8e:17:fb:b0:1c:fc:cf:b0:b0:3d:04:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD2137BA5758D926364E9E038F19A65DC3F1846E Validity Not Before: Jun 30 03:27:02 2025 GMT Not After : Jul 3 08:16:02 2025 GMT Subject: CN=CCDCFE62AB58330985DC3BB1B251B5A725A1F79B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:81:3d:8c:66:b9:9c:ac:13:30:0f:f1:65:3c: 87:73:1f:1a:9c:e6:f1:4c:9d:49:df:21:5e:0d:de: a0:e0:90:a7:af:87:66:2b:65:e7:a3:9d:c2:55:af: c1:a1:1b:80:e0:7e:cb:70:3a:4c:cb:1b:fa:79:cb: d2:c6:8f:90:c0:1e:26:0f:61:02:c2:99:d6:94:ea: f9:67:6f:65:aa:09:07:4e:58:aa:d2:eb:31:c8:fa: c5:78:df:37:b2:ce:d0:ba:46:2b:ed:f0:a8:d9:df: 64:c4:17:b9:62:fe:19:2d:05:f4:4d:04:ed:47:6d: 16:b5:cb:1c:44:05:d3:43:c8:a6:3e:68:76:91:6d: f6:c5:8f:89:45:6e:04:dc:aa:5a:63:5b:c3:55:74: ae:2f:e7:18:c8:69:43:56:14:1e:88:a6:51:f3:7c: de:1f:47:da:b4:bc:4f:3b:54:2b:6a:80:e8:21:f0: 8d:85:5c:ff:31:7c:87:43:59:ae:92:67:c6:db:4c: c6:c3:a5:34:22:6f:f2:b8:f1:a8:e2:8f:99:c8:72: b7:14:58:3b:7e:15:57:21:f8:02:98:81:1b:37:bc: fd:99:1c:47:b1:f0:2a:d3:7a:37:51:28:da:43:bc: 0b:ee:a8:ab:6c:fb:b0:f4:2b:a9:99:63:35:45:c9: e6:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:DC:FE:62:AB:58:33:09:85:DC:3B:B1:B2:51:B5:A7:25:A1:F7:9B X509v3 Authority Key Identifier: keyid:AD:21:37:BA:57:58:D9:26:36:4E:9E:03:8F:19:A6:5D:C3:F1:84:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2137BA5758D926364E9E038F19A65DC3F1846E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:14:91:6e:48:83:49:3d:f3:75:cd:fa:fa:5d:e1:f4:b8:27: 40:51:1c:cd:e5:68:2e:81:40:17:b6:ca:b7:41:d0:9d:9b:3d: a9:78:18:29:7f:a3:d9:72:eb:07:8e:0c:f1:66:4e:77:7d:63: 98:e7:20:45:a7:46:fd:80:a2:44:70:28:86:12:a2:9a:e4:96: 28:ca:85:2e:39:a3:16:d1:8c:85:62:b1:47:99:f2:89:24:47: da:03:0d:73:1a:20:06:3d:7f:e4:ea:81:a9:17:3c:20:94:61: d1:cf:4b:c9:3e:88:a7:e8:20:07:63:43:ff:88:e9:d1:90:27: 7f:d0:62:35:26:db:f9:e5:10:97:cf:47:8e:5b:ce:1b:6d:6e: b9:cf:73:62:4a:aa:67:fa:bb:1e:11:ac:a4:bd:2a:1f:c2:18: 43:61:ce:5a:9c:3c:b2:a1:bf:e3:cf:13:8c:87:4c:2f:16:08: dc:55:54:24:d0:f6:e6:ee:e3:b2:ad:45:41:8c:6a:94:12:a1: bc:1e:79:f6:b4:d2:4c:65:64:38:92:de:78:55:fc:d0:d4:c3: b1:b4:e1:90:59:f6:7e:51:3b:1a:ce:21:39:0c:86:ae:c4:13: b2:f5:e2:8a:ab:ae:ae:0b:bc:4f:43:e1:10:aa:75:92:13:ec: 33:85:a4:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfPziBGtjseyOF/uwHPzPsLA9BFIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQyMTM3QkE1NzU4RDkyNjM2NEU5RTAzOEYxOUE2NURD M0YxODQ2RTAeFw0yNTA2MzAwMzI3MDJaFw0yNTA3MDMwODE2MDJaMDMxMTAvBgNV BAMTKENDRENGRTYyQUI1ODMzMDk4NURDM0JCMUIyNTFCNUE3MjVBMUY3OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkgT2MZrmcrBMwD/FlPIdzHxqc 5vFMnUnfIV4N3qDgkKevh2YrZeejncJVr8GhG4DgfstwOkzLG/p5y9LGj5DAHiYP YQLCmdaU6vlnb2WqCQdOWKrS6zHI+sV43zeyztC6Rivt8KjZ32TEF7li/hktBfRN BO1HbRa1yxxEBdNDyKY+aHaRbfbFj4lFbgTcqlpjW8NVdK4v5xjIaUNWFB6IplHz fN4fR9q0vE87VCtqgOgh8I2FXP8xfIdDWa6SZ8bbTMbDpTQib/K48ajij5nIcrcU WDt+FVch+AKYgRs3vP2ZHEex8CrTejdRKNpDvAvuqKts+7D0K6mZYzVFyeaNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzNz+YqtYMwmF3DuxslG1pyWh95swHwYDVR0j BBgwFoAUrSE3uldY2SY2Tp4DjxmmXcPxhG4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzRkMjBhMy0zZDgzLTRjNGYtOTEzOC03NmJjN2M1MTBlYjkvMC9BRDIxMzdCQTU3 NThEOTI2MzY0RTlFMDM4RjE5QTY1REMzRjE4NDZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQyMTM3QkE1NzU4RDkyNjM2NEU5RTAzOEYxOUE2NURDM0Yx ODQ2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTc0ZDIwYTMtM2Q4My00YzRmLTkx MzgtNzZiYzdjNTEwZWI5LzAvQUQyMTM3QkE1NzU4RDkyNjM2NEU5RTAzOEYxOUE2 NURDM0YxODQ2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGgUkW5Ig0k983XN+vpd4fS4J0BRHM3laC6B QBe2yrdB0J2bPal4GCl/o9ly6weODPFmTnd9Y5jnIEWnRv2AokRwKIYSoprklijK hS45oxbRjIVisUeZ8okkR9oDDXMaIAY9f+TqgakXPCCUYdHPS8k+iKfoIAdjQ/+I 6dGQJ3/QYjUm2/nlEJfPR45bzhttbrnPc2JKqmf6ux4RrKS9Kh/CGENhzlqcPLKh v+PPE4yHTC8WCNxVVCTQ9ubu47KtRUGMapQSobweefa00kxlZDiS3nhV/NDUw7G0 4ZBZ9n5ROxrOITkMhq7EE7L14oqrrq4LvE9D4RCqdZIT7DOFpHI= -----END CERTIFICATE-----Generated at Tue Jul 1 08:31:26 2025 by rpki-client