$ rpki-client -vvf repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft File: 1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft (raw, json) Hash identifier: oQqb8x8v8F/xTdm2qRvIkofNmFM3Urm6+z6FkREkKl0= Subject key identifier: 7E:79:DB:1C:47:85:D0:A7:5E:ED:55:85:13:B4:B5:55:5F:BB:E6:81 Authority key identifier: 10:07:D1:5C:BB:EA:AB:DE:19:9A:EF:BC:2A:3F:E3:17:B7:57:BD:23 Certificate issuer: /CN=1007D15CBBEAABDE199AEFBC2A3FE317B757BD23 Certificate serial: 1E7D43CF2C44E5B58A74A4F18772FDA63D0A5FC1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft Manifest number: 01F6 Signing time: Fri 22 Aug 2025 18:11:58 +0000 Manifest this update: Fri 22 Aug 2025 18:06:58 +0000 Manifest next update: Mon 25 Aug 2025 18:16:58 +0000 Files and hashes: 1: 1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.crl (hash: btOKtJroXfHZTOMAUFh59FBBQDu0wEGf3TUxbD9+heQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.crl rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 18:16:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:7d:43:cf:2c:44:e5:b5:8a:74:a4:f1:87:72:fd:a6:3d:0a:5f:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1007D15CBBEAABDE199AEFBC2A3FE317B757BD23 Validity Not Before: Aug 22 18:06:58 2025 GMT Not After : Aug 25 18:16:58 2025 GMT Subject: CN=7E79DB1C4785D0A75EED558513B4B5555FBBE681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f8:5a:14:4e:03:86:d6:7d:a6:5c:44:8e:bf: 86:51:71:fe:12:02:b8:e7:6d:10:02:7d:66:a7:97: 49:29:22:65:82:6f:58:b3:71:63:e2:00:c6:a7:92: d5:d0:ad:ee:9a:3d:21:b0:d7:22:1a:a9:68:1a:44: bc:df:77:f3:16:a4:64:56:58:a1:d8:50:da:8f:d4: 57:4d:b2:26:96:54:47:d1:e2:e3:7c:15:25:37:2a: bb:01:9e:2b:d7:d2:e2:ac:5e:d4:73:a1:7f:84:21: 22:aa:ec:99:c5:7f:d6:1b:7b:13:bc:35:bc:3f:60: 69:72:24:9f:2e:95:f6:43:10:f2:95:af:45:2f:fc: a5:7e:41:5c:1b:ca:cf:87:0f:9f:29:aa:b8:3e:b1: 15:8b:9e:1b:91:19:50:c4:4f:eb:c3:8e:3d:ef:30: aa:3e:5d:8a:fd:e5:21:28:a4:99:a0:e1:34:6e:24: 0f:96:b2:04:f8:36:cf:d7:35:9c:49:56:a1:60:c7: 86:5a:d1:f6:55:1e:c8:b3:46:6e:e3:54:cb:6f:ec: 25:2f:65:d0:f9:92:4c:78:a1:67:85:a0:17:56:24: a2:b6:18:fe:05:fe:7d:11:55:c0:01:1a:13:58:c6: 47:16:fb:1a:07:63:2c:6c:c2:38:48:1b:50:31:93: 6c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:79:DB:1C:47:85:D0:A7:5E:ED:55:85:13:B4:B5:55:5F:BB:E6:81 X509v3 Authority Key Identifier: keyid:10:07:D1:5C:BB:EA:AB:DE:19:9A:EF:BC:2A:3F:E3:17:B7:57:BD:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aaa16ec5-587e-47a4-8afe-d1becf56b614/0/1007D15CBBEAABDE199AEFBC2A3FE317B757BD23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:b3:16:be:60:34:03:fc:37:eb:23:34:f5:a7:71:3a:16:33: da:5b:09:0e:a0:8b:8e:b6:64:af:99:e7:3c:d8:e5:95:3c:77: 25:4b:25:44:79:61:11:4b:d2:59:d5:a9:1d:f8:73:01:8e:35: ed:1f:3c:96:b9:9e:0b:dd:a3:ef:fa:55:ba:eb:33:77:c0:82: f3:0f:b1:9a:23:13:1b:34:5e:96:f0:fc:de:96:30:fd:0d:09: 72:3e:43:4c:91:d5:ea:3c:50:0a:77:f1:1a:4b:c9:dd:09:02: ca:1a:de:f3:85:24:3f:79:f8:3d:1b:95:4d:1a:53:e6:39:f6: 73:04:35:e2:cf:b0:b5:26:14:e1:98:53:c6:15:9f:92:33:07: 3b:b0:a5:08:bc:5a:f4:b0:e2:3d:63:65:02:19:03:eb:20:e1: 5b:c6:3a:59:82:af:57:88:ff:5a:39:b5:53:6e:eb:55:15:a1: 1c:55:05:64:21:3e:e7:bf:e9:5e:e1:80:47:7e:f8:e4:27:e3: b6:63:de:45:6d:05:24:65:b3:16:89:99:69:ba:6b:9b:dc:f0: 33:da:6f:51:0a:4e:a9:67:8b:ae:44:0d:d6:56:10:2c:d0:c5: 80:33:92:19:5d:ec:62:7c:a8:fb:34:cc:c8:26:b2:5c:48:16: 5c:70:f6:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHn1DzyxE5bWKdKTxh3L9pj0KX8EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTAwN0QxNUNCQkVBQUJERTE5OUFFRkJDMkEzRkUzMTdC NzU3QkQyMzAeFw0yNTA4MjIxODA2NThaFw0yNTA4MjUxODE2NThaMDMxMTAvBgNV BAMTKDdFNzlEQjFDNDc4NUQwQTc1RUVENTU4NTEzQjRCNTU1NUZCQkU2ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG+FoUTgOG1n2mXESOv4ZRcf4S ArjnbRACfWanl0kpImWCb1izcWPiAManktXQre6aPSGw1yIaqWgaRLzfd/MWpGRW WKHYUNqP1FdNsiaWVEfR4uN8FSU3KrsBnivX0uKsXtRzoX+EISKq7JnFf9YbexO8 Nbw/YGlyJJ8ulfZDEPKVr0Uv/KV+QVwbys+HD58pqrg+sRWLnhuRGVDET+vDjj3v MKo+XYr95SEopJmg4TRuJA+WsgT4Ns/XNZxJVqFgx4Za0fZVHsizRm7jVMtv7CUv ZdD5kkx4oWeFoBdWJKK2GP4F/n0RVcABGhNYxkcW+xoHYyxswjhIG1Axk2zVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfnnbHEeF0Kde7VWFE7S1VV+75oEwHwYDVR0j BBgwFoAUEAfRXLvqq94Zmu+8Kj/jF7dXvSMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWExNmVjNS01ODdlLTQ3YTQtOGFmZS1kMWJlY2Y1NmI2MTQvMC8xMDA3RDE1Q0JC RUFBQkRFMTk5QUVGQkMyQTNGRTMxN0I3NTdCRDIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTAwN0QxNUNCQkVBQUJERTE5OUFFRkJDMkEzRkUzMTdCNzU3 QkQyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFhMTZlYzUtNTg3ZS00N2E0LThh ZmUtZDFiZWNmNTZiNjE0LzAvMTAwN0QxNUNCQkVBQUJERTE5OUFFRkJDMkEzRkUz MTdCNzU3QkQyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAISzFr5gNAP8N+sjNPWncToWM9pbCQ6gi462 ZK+Z5zzY5ZU8dyVLJUR5YRFL0lnVqR34cwGONe0fPJa5ngvdo+/6VbrrM3fAgvMP sZojExs0Xpbw/N6WMP0NCXI+Q0yR1eo8UAp38RpLyd0JAsoa3vOFJD95+D0blU0a U+Y59nMENeLPsLUmFOGYU8YVn5IzBzuwpQi8WvSw4j1jZQIZA+sg4VvGOlmCr1eI /1o5tVNu61UVoRxVBWQhPue/6V7hgEd++OQn47Zj3kVtBSRlsxaJmWm6a5vc8DPa b1EKTqlni65EDdZWECzQxYAzkhld7GJ8qPs0zMgmslxIFlxw9oQ= -----END CERTIFICATE-----Generated at Sat Aug 23 12:26:51 2025 by rpki-client