$ rpki-client -vvf repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft File: 2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft (raw, json) Hash identifier: X8C+zCiGeSxK+aGmPlllhWEAvNuszEqMYfjClrHhMAo= Subject key identifier: 0E:F6:A5:D0:C1:CA:FB:BF:BE:CF:18:20:3C:45:EE:13:C1:24:5B:2F Authority key identifier: 2A:57:5A:DD:64:4E:97:D6:1D:2E:BF:FF:2A:23:05:6B:78:EF:AE:6C Certificate issuer: /CN=2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C Certificate serial: 4AFA8D487E6B485CF0EDD48594CB8237B025E5FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft Manifest number: B4 Signing time: Fri 22 Aug 2025 04:11:41 +0000 Manifest this update: Fri 22 Aug 2025 04:06:41 +0000 Manifest next update: Mon 25 Aug 2025 09:40:41 +0000 Files and hashes: 1: 2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.crl (hash: T+/vefsCd0FbwClALxHLm34nVWvbjSpmayXuzb0KkiU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.crl rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 09:40:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:fa:8d:48:7e:6b:48:5c:f0:ed:d4:85:94:cb:82:37:b0:25:e5:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C Validity Not Before: Aug 22 04:06:41 2025 GMT Not After : Aug 25 09:40:41 2025 GMT Subject: CN=0EF6A5D0C1CAFBBFBECF18203C45EE13C1245B2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ba:24:f0:7d:ae:7f:cc:0f:8d:8f:a5:f5:29: 8b:3f:3d:40:0c:10:72:ea:cc:c4:63:45:2f:84:0c: a8:71:bf:14:ad:fd:c3:9d:f1:e8:61:b6:54:bb:2d: 85:6a:95:77:1f:68:41:56:f1:51:31:44:24:8e:02: c5:ff:59:2e:e9:f1:44:4b:ca:5d:a9:94:1e:bd:38: c3:da:25:60:ab:2b:34:03:1a:bd:13:e0:70:37:f8: 27:cb:2b:0d:22:3b:4c:df:b1:bf:15:18:c4:0a:8b: df:85:80:f7:df:4f:11:b5:64:26:b1:23:d8:28:89: cc:38:04:9c:0e:64:22:05:73:4a:ca:a8:d8:8d:35: be:44:87:68:9a:68:b7:84:fd:21:11:15:78:21:3c: 6f:39:7c:54:5f:1b:24:4f:5e:11:3c:54:3c:38:0b: 38:d1:dc:bd:09:34:0a:f3:06:61:fd:83:67:ac:b6: 46:9d:0c:74:ae:c3:e5:5b:bf:28:56:65:16:63:13: f4:c4:2f:8a:56:57:67:c4:23:31:c9:4e:22:cf:a8: 77:3d:5f:2a:0a:7e:fc:b0:e7:a2:d9:f5:62:a3:f4: eb:52:b2:c8:a5:e5:cb:3a:5e:21:cc:be:20:90:27: 9f:76:bf:54:64:ff:78:23:a0:20:ed:c8:32:7c:5a: 88:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:F6:A5:D0:C1:CA:FB:BF:BE:CF:18:20:3C:45:EE:13:C1:24:5B:2F X509v3 Authority Key Identifier: keyid:2A:57:5A:DD:64:4E:97:D6:1D:2E:BF:FF:2A:23:05:6B:78:EF:AE:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:9e:10:86:fa:72:e4:2a:e0:79:c2:e7:12:b0:61:98:fd:dd: 0f:2d:3d:ca:2f:10:ca:bf:69:37:9b:ca:d7:48:e5:7b:c8:a6: d3:c0:28:a9:8f:2c:5c:f9:e5:81:ea:2a:18:b4:ef:8d:ab:98: e3:a3:20:98:ce:ef:44:d4:51:7b:4e:a1:b9:90:cd:7f:16:c6: c5:13:44:8b:2e:4b:70:db:c1:09:06:aa:85:ea:ec:9e:91:e5: 61:47:3a:51:f0:6a:55:89:80:aa:f7:96:0e:77:10:67:41:b9: 32:94:6c:23:27:59:49:fc:95:1d:b1:39:8e:b8:e2:11:51:20: 23:4b:54:1d:4b:15:f5:86:a4:22:d7:0f:92:82:e4:af:1a:22: c2:0a:11:10:e1:d3:fb:32:01:c6:c7:d5:2d:25:94:b2:33:d0: 43:20:d8:71:cd:eb:77:ec:11:db:f2:16:f1:ee:a9:2c:5e:05: 9e:81:4a:72:3a:9a:07:41:14:ad:dc:52:86:3c:d8:37:6a:89: 9e:18:c8:38:78:e2:1e:e3:e8:ab:62:4d:69:6a:e6:7f:6f:ca: 0f:1b:ce:16:97:fa:a5:d9:b6:7f:34:21:00:30:99:8f:cd:84: 9a:87:32:b8:0e:da:f2:d2:f6:b8:ba:74:f3:3e:cd:e4:84:ca: 44:89:48:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSvqNSH5rSFzw7dSFlMuCN7Al5fowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE1NzVBREQ2NDRFOTdENjFEMkVCRkZGMkEyMzA1NkI3 OEVGQUU2QzAeFw0yNTA4MjIwNDA2NDFaFw0yNTA4MjUwOTQwNDFaMDMxMTAvBgNV BAMTKDBFRjZBNUQwQzFDQUZCQkZCRUNGMTgyMDNDNDVFRTEzQzEyNDVCMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5uiTwfa5/zA+Nj6X1KYs/PUAM EHLqzMRjRS+EDKhxvxSt/cOd8ehhtlS7LYVqlXcfaEFW8VExRCSOAsX/WS7p8URL yl2plB69OMPaJWCrKzQDGr0T4HA3+CfLKw0iO0zfsb8VGMQKi9+FgPffTxG1ZCax I9goicw4BJwOZCIFc0rKqNiNNb5Eh2iaaLeE/SERFXghPG85fFRfGyRPXhE8VDw4 CzjR3L0JNArzBmH9g2estkadDHSuw+VbvyhWZRZjE/TEL4pWV2fEIzHJTiLPqHc9 XyoKfvyw56LZ9WKj9OtSssil5cs6XiHMviCQJ592v1Rk/3gjoCDtyDJ8WoiXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDval0MHK+7++zxggPEXuE8EkWy8wHwYDVR0j BBgwFoAUKlda3WROl9YdLr//KiMFa3jvrmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDM1NGMxYi02NzdlLTQxZDYtYWIwZi1lOTZlZGZkOTI5NTcvMC8yQTU3NUFERDY0 NEU5N0Q2MUQyRUJGRkYyQTIzMDU2Qjc4RUZBRTZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkE1NzVBREQ2NDRFOTdENjFEMkVCRkZGMkEyMzA1NkI3OEVG QUU2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmQzNTRjMWItNjc3ZS00MWQ2LWFi MGYtZTk2ZWRmZDkyOTU3LzAvMkE1NzVBREQ2NDRFOTdENjFEMkVCRkZGMkEyMzA1 NkI3OEVGQUU2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAieEIb6cuQq4HnC5xKwYZj93Q8tPcovEMq/ aTebytdI5XvIptPAKKmPLFz55YHqKhi0742rmOOjIJjO70TUUXtOobmQzX8WxsUT RIsuS3DbwQkGqoXq7J6R5WFHOlHwalWJgKr3lg53EGdBuTKUbCMnWUn8lR2xOY64 4hFRICNLVB1LFfWGpCLXD5KC5K8aIsIKERDh0/syAcbH1S0llLIz0EMg2HHN63fs EdvyFvHuqSxeBZ6BSnI6mgdBFK3cUoY82DdqiZ4YyDh44h7j6KtiTWlq5n9vyg8b zhaX+qXZtn80IQAwmY/NhJqHMrgO2vLS9ri6dPM+zeSEykSJSA4= -----END CERTIFICATE-----Generated at Sun Aug 24 07:19:07 2025 by rpki-client