$ rpki-client -vvf repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft File: ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft (raw, json) Hash identifier: PwOsZbp9mxX5gfhGNa0Xu0KPY8gqSkBnxuTGQqoFA3w= Subject key identifier: 44:A7:9C:5A:B3:AF:79:4F:2B:23:76:8C:57:2D:83:02:56:1C:66:5F Authority key identifier: ED:7A:48:EA:D1:0D:1F:E9:7C:7E:F2:3A:A6:EA:2A:D6:55:BF:B0:AF Certificate issuer: /CN=ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF Certificate serial: 44D02C40F70DCA977C39FDC128CC66A6B0510F2E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft Manifest number: 021C Signing time: Thu 21 Aug 2025 14:01:36 +0000 Manifest this update: Thu 21 Aug 2025 13:56:36 +0000 Manifest next update: Sun 24 Aug 2025 22:12:36 +0000 Files and hashes: 1: ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.crl (hash: gpaW+aXsNJLKs3zAto4Kadu+u2kgflvuXsrTRbCmlJk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.crl rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 22:12:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:d0:2c:40:f7:0d:ca:97:7c:39:fd:c1:28:cc:66:a6:b0:51:0f:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF Validity Not Before: Aug 21 13:56:36 2025 GMT Not After : Aug 24 22:12:36 2025 GMT Subject: CN=44A79C5AB3AF794F2B23768C572D8302561C665F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:bb:56:98:60:99:90:46:03:1d:22:c4:e3:3d: d3:dd:c6:24:30:ee:33:a6:ed:b1:76:ce:97:0f:1a: ef:33:b6:7e:94:d9:03:13:7b:07:33:36:dd:c1:7b: 5c:ea:50:49:2e:78:a2:ec:a5:00:8a:66:8a:1b:e3: c6:06:e8:74:45:60:61:a2:32:22:d2:1d:b6:9f:90: 51:5e:a1:f6:9a:85:06:13:da:61:b3:79:d7:50:49: e5:e3:0c:18:71:f8:4e:2f:59:dc:e8:a2:d5:b3:37: 08:81:4c:7b:aa:00:3f:ad:6a:17:58:ec:97:48:1e: a4:52:1c:f5:bc:38:3e:30:cc:99:64:a3:d5:e0:68: 59:ca:27:a0:a3:d3:40:c7:da:7f:9e:fd:4d:4c:d5: 34:a5:df:e8:d2:01:a7:50:48:81:19:3a:da:90:dc: e7:1e:3d:c2:1e:ef:a4:13:e6:11:df:4d:88:47:05: c0:ec:d2:33:b8:58:32:41:c6:7c:c5:f1:c3:10:ea: d6:1a:dd:2e:65:f6:71:e9:88:f6:e6:01:fc:aa:ae: e2:d5:81:67:f0:51:6c:de:d4:51:3c:b4:2b:68:60: e0:c5:6e:20:b4:d9:a8:2a:2c:f8:7d:9b:ae:56:8b: 6c:5b:66:da:55:5c:ac:0a:c9:30:e9:eb:3a:9b:f2: e5:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:A7:9C:5A:B3:AF:79:4F:2B:23:76:8C:57:2D:83:02:56:1C:66:5F X509v3 Authority Key Identifier: keyid:ED:7A:48:EA:D1:0D:1F:E9:7C:7E:F2:3A:A6:EA:2A:D6:55:BF:B0:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:fb:f3:62:f2:12:8a:a3:24:f3:ae:6a:ef:b4:53:0f:f8:be: 63:ae:df:39:0f:ef:33:9b:0c:ad:4b:74:7b:2c:91:65:3e:50: dc:d9:80:d0:f3:cf:13:78:78:93:8f:56:a2:00:ac:24:64:cc: b5:57:14:06:c0:5a:45:b4:b0:8d:c3:b2:54:dc:43:40:48:6a: 85:56:fc:54:9b:bf:f9:51:f8:a5:ea:67:10:72:cb:c4:1b:c5: 14:19:54:a3:19:f3:e0:82:21:a9:fd:1c:90:01:87:db:3b:27: e4:6f:56:5a:04:b1:f5:a6:9b:be:86:8f:12:88:30:d4:af:03: 18:c9:75:54:7f:8e:30:a4:17:fb:31:e4:6b:20:38:44:6d:f3: 9f:d0:d0:74:e4:6b:3c:03:36:30:cb:c4:ec:17:56:ef:fb:f4: 75:b6:09:bb:1f:e2:79:40:b1:55:8a:16:fe:e6:da:7f:bf:43: d8:71:3c:71:d4:60:e9:7b:0c:b8:6f:8c:77:88:69:bb:e9:8b: 49:53:61:5d:5c:80:57:08:b3:e1:29:2c:44:9e:d1:79:d9:d8: 65:0e:4c:1d:b5:22:26:4f:6e:2f:0b:ac:dd:42:54:20:6c:b7: 5b:d8:c7:d6:e6:04:78:d7:e8:cb:c7:44:ae:4b:26:dd:11:13: 47:8d:0a:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURNAsQPcNypd8Of3BKMxmprBRDy4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQ3QTQ4RUFEMTBEMUZFOTdDN0VGMjNBQTZFQTJBRDY1 NUJGQjBBRjAeFw0yNTA4MjExMzU2MzZaFw0yNTA4MjQyMjEyMzZaMDMxMTAvBgNV BAMTKDQ0QTc5QzVBQjNBRjc5NEYyQjIzNzY4QzU3MkQ4MzAyNTYxQzY2NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDau1aYYJmQRgMdIsTjPdPdxiQw 7jOm7bF2zpcPGu8ztn6U2QMTewczNt3Be1zqUEkueKLspQCKZoob48YG6HRFYGGi MiLSHbafkFFeofaahQYT2mGzeddQSeXjDBhx+E4vWdzootWzNwiBTHuqAD+tahdY 7JdIHqRSHPW8OD4wzJlko9XgaFnKJ6Cj00DH2n+e/U1M1TSl3+jSAadQSIEZOtqQ 3OcePcIe76QT5hHfTYhHBcDs0jO4WDJBxnzF8cMQ6tYa3S5l9nHpiPbmAfyqruLV gWfwUWze1FE8tCtoYODFbiC02agqLPh9m65Wi2xbZtpVXKwKyTDp6zqb8uXXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURKecWrOveU8rI3aMVy2DAlYcZl8wHwYDVR0j BBgwFoAU7XpI6tENH+l8fvI6puoq1lW/sK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NDMzZTM0NC1lODE5LTQ0MzgtYjhjYS0xZjU4YzNkNTI3Y2IvMC9FRDdBNDhFQUQx MEQxRkU5N0M3RUYyM0FBNkVBMkFENjU1QkZCMEFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUQ3QTQ4RUFEMTBEMUZFOTdDN0VGMjNBQTZFQTJBRDY1NUJG QjBBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzQzM2UzNDQtZTgxOS00NDM4LWI4 Y2EtMWY1OGMzZDUyN2NiLzAvRUQ3QTQ4RUFEMTBEMUZFOTdDN0VGMjNBQTZFQTJB RDY1NUJGQjBBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAT782LyEoqjJPOuau+0Uw/4vmOu3zkP7zOb DK1LdHsskWU+UNzZgNDzzxN4eJOPVqIArCRkzLVXFAbAWkW0sI3DslTcQ0BIaoVW /FSbv/lR+KXqZxByy8QbxRQZVKMZ8+CCIan9HJABh9s7J+RvVloEsfWmm76GjxKI MNSvAxjJdVR/jjCkF/sx5GsgOERt85/Q0HTkazwDNjDLxOwXVu/79HW2Cbsf4nlA sVWKFv7m2n+/Q9hxPHHUYOl7DLhvjHeIabvpi0lTYV1cgFcIs+EpLESe0XnZ2GUO TB21IiZPbi8LrN1CVCBst1vYx9bmBHjX6MvHRK5LJt0RE0eNCnI= -----END CERTIFICATE-----Generated at Sat Aug 23 15:31:03 2025 by rpki-client