$ rpki-client -vvf repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft File: 2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft (raw, json) Hash identifier: AHvH+WcgJ8Ee7JCozjarSfh5tXBd1gSAQdS/1T4m1Ak= Subject key identifier: E7:C1:90:D0:A6:1E:EE:17:C8:3F:80:20:63:E1:71:40:02:F3:CB:F6 Authority key identifier: 25:96:AD:9D:A9:03:31:FB:33:6D:C5:2C:5B:72:F9:92:D7:D4:9D:37 Certificate issuer: /CN=2596AD9DA90331FB336DC52C5B72F992D7D49D37 Certificate serial: 731A5AE52E1B19CC369C4B5D41D4AFAFE86DB5B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2596AD9DA90331FB336DC52C5B72F992D7D49D37.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft Manifest number: A8 Signing time: Sat 28 Jun 2025 18:42:14 +0000 Manifest this update: Sat 28 Jun 2025 18:37:14 +0000 Manifest next update: Tue 01 Jul 2025 22:45:14 +0000 Files and hashes: 1: 2596AD9DA90331FB336DC52C5B72F992D7D49D37.crl (hash: SIvs9qhuLtmfzu/lFnhfnMA9jNpO4BoRTqr3emTp8R8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.crl rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2596AD9DA90331FB336DC52C5B72F992D7D49D37.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 22:45:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:1a:5a:e5:2e:1b:19:cc:36:9c:4b:5d:41:d4:af:af:e8:6d:b5:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2596AD9DA90331FB336DC52C5B72F992D7D49D37 Validity Not Before: Jun 28 18:37:14 2025 GMT Not After : Jul 1 22:45:14 2025 GMT Subject: CN=E7C190D0A61EEE17C83F802063E1714002F3CBF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a9:a1:d1:22:cf:55:3d:7a:bc:e7:cc:1e:4d: 34:d5:26:3f:2b:ee:38:2f:0f:0b:ee:57:b1:9b:b9: 79:34:07:a6:5b:56:7c:07:81:07:b9:1c:4a:07:ff: c0:cf:3d:26:fb:e4:db:d5:be:ed:bf:d8:5b:1f:b3: 33:9a:cc:15:c0:7d:a9:3a:3d:b7:55:47:fa:5a:cf: 19:c4:7b:34:11:98:91:65:34:7c:76:cb:14:7b:31: ca:1f:8a:85:ca:26:e7:82:fd:ff:c5:3e:0d:68:0a: 61:d8:f5:0b:09:ca:95:80:74:26:84:0f:60:51:8d: 66:4a:24:54:79:27:44:a5:f8:bc:dd:1f:a8:1a:1e: 8f:58:e8:46:d5:b7:dd:e2:83:54:d6:d5:79:10:48: 4c:78:2c:d5:96:5b:89:17:f8:e1:5a:cb:89:0d:da: a8:b6:95:0f:66:84:06:7b:ae:ea:e7:81:2e:d5:d6: d5:63:80:d3:2b:dc:8c:4c:04:7f:1f:33:27:06:09: e1:5b:77:07:6a:e2:23:9a:6b:4b:4a:4e:ae:cc:c8: a3:32:8d:47:29:3b:04:65:67:57:a9:39:ca:a3:33: f1:66:0c:c9:e6:02:67:81:04:a7:08:50:af:9b:7d: bd:7f:68:0b:8b:ce:16:f7:bd:83:f7:23:5f:57:37: 3d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:C1:90:D0:A6:1E:EE:17:C8:3F:80:20:63:E1:71:40:02:F3:CB:F6 X509v3 Authority Key Identifier: keyid:25:96:AD:9D:A9:03:31:FB:33:6D:C5:2C:5B:72:F9:92:D7:D4:9D:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2596AD9DA90331FB336DC52C5B72F992D7D49D37.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:68:ad:29:7a:6b:c2:e9:71:be:da:f0:dc:5d:0b:00:7e:fc: 10:9c:da:17:b1:38:18:a3:d3:7f:ba:0e:4e:58:ab:b3:d6:d6: df:91:d4:5f:9d:e0:c7:b5:46:16:7c:22:c7:aa:9f:90:9b:dd: 87:ac:c2:c7:1b:99:5a:23:77:1e:d8:67:92:4f:1d:31:39:5e: 4a:b0:7e:19:a6:12:7c:a5:15:f3:14:52:55:af:a6:a5:fc:bf: 96:a4:c3:01:dd:33:16:74:9d:67:62:fc:8e:0a:c7:a3:a5:ca: b1:ce:96:9e:6e:2c:d5:c7:38:6f:89:92:21:67:14:26:10:f6: 3c:d1:c9:15:79:16:bd:79:b9:70:ad:3a:0e:20:c9:d2:10:ee: af:4f:51:5a:05:d3:1e:cd:ff:11:ea:fd:bb:33:c0:53:e8:f3: ab:dd:7c:00:de:90:28:5b:ba:7e:8c:50:85:42:54:8d:9a:f8: dc:c4:df:49:d7:e9:5b:0e:37:b1:e5:86:a3:2d:cc:c1:37:86: 45:93:de:27:77:b4:55:a1:e7:d0:30:1a:50:6c:ff:ea:82:db: dd:90:aa:13:12:7c:d1:76:15:92:11:68:41:38:5e:d5:c1:b0: 01:43:95:70:e9:f5:37:20:c0:b1:56:0d:66:bb:22:ef:f6:cb: b0:50:a0:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcxpa5S4bGcw2nEtdQdSvr+httbIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU5NkFEOURBOTAzMzFGQjMzNkRDNTJDNUI3MkY5OTJE N0Q0OUQzNzAeFw0yNTA2MjgxODM3MTRaFw0yNTA3MDEyMjQ1MTRaMDMxMTAvBgNV BAMTKEU3QzE5MEQwQTYxRUVFMTdDODNGODAyMDYzRTE3MTQwMDJGM0NCRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOqaHRIs9VPXq858weTTTVJj8r 7jgvDwvuV7GbuXk0B6ZbVnwHgQe5HEoH/8DPPSb75NvVvu2/2FsfszOazBXAfak6 PbdVR/pazxnEezQRmJFlNHx2yxR7McofioXKJueC/f/FPg1oCmHY9QsJypWAdCaE D2BRjWZKJFR5J0Sl+LzdH6gaHo9Y6EbVt93ig1TW1XkQSEx4LNWWW4kX+OFay4kN 2qi2lQ9mhAZ7rurngS7V1tVjgNMr3IxMBH8fMycGCeFbdwdq4iOaa0tKTq7MyKMy jUcpOwRlZ1epOcqjM/FmDMnmAmeBBKcIUK+bfb1/aAuLzhb3vYP3I19XNz0JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU58GQ0KYe7hfIP4AgY+FxQALzy/YwHwYDVR0j BBgwFoAUJZatnakDMfszbcUsW3L5ktfUnTcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjAzNmI3NC04YTVkLTQwYWEtOTYwYy05MjFlNjNhNzBhNGMvMC8yNTk2QUQ5REE5 MDMzMUZCMzM2REM1MkM1QjcyRjk5MkQ3RDQ5RDM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjU5NkFEOURBOTAzMzFGQjMzNkRDNTJDNUI3MkY5OTJEN0Q0 OUQzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGYwMzZiNzQtOGE1ZC00MGFhLTk2 MGMtOTIxZTYzYTcwYTRjLzAvMjU5NkFEOURBOTAzMzFGQjMzNkRDNTJDNUI3MkY5 OTJEN0Q0OUQzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFtorSl6a8Lpcb7a8NxdCwB+/BCc2hexOBij 03+6Dk5Yq7PW1t+R1F+d4Me1RhZ8Iseqn5Cb3YeswscbmVojdx7YZ5JPHTE5Xkqw fhmmEnylFfMUUlWvpqX8v5akwwHdMxZ0nWdi/I4Kx6OlyrHOlp5uLNXHOG+JkiFn FCYQ9jzRyRV5Fr15uXCtOg4gydIQ7q9PUVoF0x7N/xHq/bszwFPo86vdfADekChb un6MUIVCVI2a+NzE30nX6VsON7HlhqMtzME3hkWT3id3tFWh59AwGlBs/+qC292Q qhMSfNF2FZIRaEE4XtXBsAFDlXDp9TcgwLFWDWa7Iu/2y7BQoFA= -----END CERTIFICATE-----Generated at Sun Jun 29 18:14:23 2025 by rpki-client