$ rpki-client -vvf repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.mft File: AD2137BA5758D926364E9E038F19A65DC3F1846E.mft (raw, json) Hash identifier: UlXVngHQckQFlFCodUoClKTsfUQVf0DTwemUsFqJ+nU= Subject key identifier: 9B:85:79:78:D4:A1:8C:D0:CE:87:B5:69:A5:3C:00:3E:C2:A8:CF:EA Authority key identifier: AD:21:37:BA:57:58:D9:26:36:4E:9E:03:8F:19:A6:5D:C3:F1:84:6E Certificate issuer: /CN=AD2137BA5758D926364E9E038F19A65DC3F1846E Certificate serial: 4D970AECD9C14555CF97B73A958463E404006612 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2137BA5758D926364E9E038F19A65DC3F1846E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.mft Manifest number: 0241 Signing time: Sat 23 Aug 2025 03:22:07 +0000 Manifest this update: Sat 23 Aug 2025 03:17:07 +0000 Manifest next update: Tue 26 Aug 2025 10:12:07 +0000 Files and hashes: 1: AD2137BA5758D926364E9E038F19A65DC3F1846E.crl (hash: k7rNmc+eGqaNBMgnrkco7V48mlS9zF7CIJbaccjzZAw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.crl rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2137BA5758D926364E9E038F19A65DC3F1846E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:12:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:97:0a:ec:d9:c1:45:55:cf:97:b7:3a:95:84:63:e4:04:00:66:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD2137BA5758D926364E9E038F19A65DC3F1846E Validity Not Before: Aug 23 03:17:07 2025 GMT Not After : Aug 26 10:12:07 2025 GMT Subject: CN=9B857978D4A18CD0CE87B569A53C003EC2A8CFEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:3e:ff:47:92:76:cc:b1:e8:2e:18:f0:4b:ab: cd:19:6a:f1:52:71:a6:22:d2:db:f4:91:ae:39:5b: 31:fc:cf:82:81:f6:04:73:a6:46:db:52:ee:88:12: 25:1a:06:cf:ea:3c:d5:f8:33:2d:6c:c1:42:dc:41: f7:01:92:48:81:14:72:a5:f2:c9:3f:9c:76:d8:fa: 01:09:1a:12:2e:7a:25:80:d8:0d:f0:38:e3:fa:aa: 4f:dd:ca:45:24:98:9d:31:9f:48:d6:f7:fd:ff:ce: 61:8e:d9:dd:1a:2e:df:a9:3c:c3:6e:4f:f3:19:4a: 8a:a5:cc:3b:27:83:38:81:14:db:df:80:d9:4e:cf: 5f:10:97:77:58:a8:7f:de:9b:49:ae:93:33:2d:75: d7:fb:c5:6c:66:54:c3:6b:a1:ce:4f:9f:eb:8e:ac: 64:f5:ed:02:fb:0a:4a:52:b0:f0:d8:d3:8a:f4:35: 06:5f:f9:72:bb:b7:62:28:8e:4b:a8:ab:d6:49:96: ff:58:c5:9b:92:64:39:0f:e8:7f:0a:54:93:2d:8e: 93:8e:55:e4:65:e2:b2:73:9c:21:b4:a1:56:5d:80: 38:5e:bb:1a:cd:a6:52:32:e2:08:98:0d:ce:09:f3: 21:a8:93:63:a6:ac:b1:58:4a:8d:8d:2e:e3:c1:41: a6:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:85:79:78:D4:A1:8C:D0:CE:87:B5:69:A5:3C:00:3E:C2:A8:CF:EA X509v3 Authority Key Identifier: keyid:AD:21:37:BA:57:58:D9:26:36:4E:9E:03:8F:19:A6:5D:C3:F1:84:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2137BA5758D926364E9E038F19A65DC3F1846E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:1e:1e:73:ca:27:54:4a:af:3b:26:b4:97:b8:55:46:c3:e0: 54:e7:c3:95:40:57:c2:d1:4f:68:3a:54:2c:d0:bc:63:2c:7f: 31:86:61:3a:ef:a8:30:f5:44:86:91:97:28:b7:c6:c6:67:1a: 57:2e:99:a0:51:18:a7:c6:3a:90:ba:03:97:fc:92:6c:f4:51: 85:80:eb:2c:0d:3f:36:f1:22:99:5d:52:6f:fc:ff:96:8a:10: e3:e4:2a:34:8e:76:15:4b:e6:4c:3e:9e:ce:e3:27:d2:4e:a6: 56:47:af:e6:7a:80:7a:65:0e:d1:50:25:84:33:c5:5f:9c:b5: e4:0f:52:13:1e:20:f7:8c:97:ef:15:05:f1:85:26:a4:e3:f8: 05:6a:f5:ae:9a:9b:bb:b6:2f:db:76:aa:06:05:55:da:07:3b: cb:23:d8:95:82:64:75:06:d5:85:5b:05:bd:de:93:f4:2b:e3: c6:28:a7:97:2b:9e:d5:97:0c:8c:43:04:bc:8a:1f:73:db:6f: 23:17:30:11:1e:db:19:37:24:d9:d3:84:e9:6f:8e:9a:c2:31: 72:7f:9c:89:aa:3d:0f:10:4a:bb:b6:c7:59:e7:ef:78:28:6b: a3:48:d0:74:8b:59:54:a9:fa:93:0e:03:88:a8:af:13:77:ae: cb:93:95:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTZcK7NnBRVXPl7c6lYRj5AQAZhIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQyMTM3QkE1NzU4RDkyNjM2NEU5RTAzOEYxOUE2NURD M0YxODQ2RTAeFw0yNTA4MjMwMzE3MDdaFw0yNTA4MjYxMDEyMDdaMDMxMTAvBgNV BAMTKDlCODU3OTc4RDRBMThDRDBDRTg3QjU2OUE1M0MwMDNFQzJBOENGRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDePv9HknbMseguGPBLq80ZavFS caYi0tv0ka45WzH8z4KB9gRzpkbbUu6IEiUaBs/qPNX4My1swULcQfcBkkiBFHKl 8sk/nHbY+gEJGhIueiWA2A3wOOP6qk/dykUkmJ0xn0jW9/3/zmGO2d0aLt+pPMNu T/MZSoqlzDsngziBFNvfgNlOz18Ql3dYqH/em0mukzMtddf7xWxmVMNroc5Pn+uO rGT17QL7CkpSsPDY04r0NQZf+XK7t2Iojkuoq9ZJlv9YxZuSZDkP6H8KVJMtjpOO VeRl4rJznCG0oVZdgDheuxrNplIy4giYDc4J8yGok2OmrLFYSo2NLuPBQabfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm4V5eNShjNDOh7VppTwAPsKoz+owHwYDVR0j BBgwFoAUrSE3uldY2SY2Tp4DjxmmXcPxhG4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzRkMjBhMy0zZDgzLTRjNGYtOTEzOC03NmJjN2M1MTBlYjkvMC9BRDIxMzdCQTU3 NThEOTI2MzY0RTlFMDM4RjE5QTY1REMzRjE4NDZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQyMTM3QkE1NzU4RDkyNjM2NEU5RTAzOEYxOUE2NURDM0Yx ODQ2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTc0ZDIwYTMtM2Q4My00YzRmLTkx MzgtNzZiYzdjNTEwZWI5LzAvQUQyMTM3QkE1NzU4RDkyNjM2NEU5RTAzOEYxOUE2 NURDM0YxODQ2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI0eHnPKJ1RKrzsmtJe4VUbD4FTnw5VAV8LR T2g6VCzQvGMsfzGGYTrvqDD1RIaRlyi3xsZnGlcumaBRGKfGOpC6A5f8kmz0UYWA 6ywNPzbxIpldUm/8/5aKEOPkKjSOdhVL5kw+ns7jJ9JOplZHr+Z6gHplDtFQJYQz xV+cteQPUhMeIPeMl+8VBfGFJqTj+AVq9a6am7u2L9t2qgYFVdoHO8sj2JWCZHUG 1YVbBb3ek/Qr48Yop5crntWXDIxDBLyKH3PbbyMXMBEe2xk3JNnThOlvjprCMXJ/ nImqPQ8QSru2x1nn73goa6NI0HSLWVSp+pMOA4iorxN3rsuTlXk= -----END CERTIFICATE-----Generated at Sat Aug 23 12:21:17 2025 by rpki-client