$ rpki-client -vvf repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft File: 2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft (raw, json) Hash identifier: ExE+nbOF/5WczbrWbHg1fmGap+TDqwTi/Ty6r7LcHY0= Subject key identifier: 7E:4D:D7:CA:B7:72:55:F8:D2:F2:B1:24:EC:DC:14:70:6A:B1:85:47 Authority key identifier: 25:96:AD:9D:A9:03:31:FB:33:6D:C5:2C:5B:72:F9:92:D7:D4:9D:37 Certificate issuer: /CN=2596AD9DA90331FB336DC52C5B72F992D7D49D37 Certificate serial: 2B31551AAEA8116D719EB23039D53FC12F13A59D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2596AD9DA90331FB336DC52C5B72F992D7D49D37.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft Manifest number: C1 Signing time: Sat 23 Aug 2025 06:42:15 +0000 Manifest this update: Sat 23 Aug 2025 06:37:15 +0000 Manifest next update: Tue 26 Aug 2025 16:35:15 +0000 Files and hashes: 1: 2596AD9DA90331FB336DC52C5B72F992D7D49D37.crl (hash: RF7yqywKwUflBR1h1tppkx7o2YGDrGQXM2AeomE2YH4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.crl rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2596AD9DA90331FB336DC52C5B72F992D7D49D37.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 16:35:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:31:55:1a:ae:a8:11:6d:71:9e:b2:30:39:d5:3f:c1:2f:13:a5:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2596AD9DA90331FB336DC52C5B72F992D7D49D37 Validity Not Before: Aug 23 06:37:15 2025 GMT Not After : Aug 26 16:35:15 2025 GMT Subject: CN=7E4DD7CAB77255F8D2F2B124ECDC14706AB18547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:65:44:ff:37:f7:16:56:a7:a4:e0:1a:93:db: ae:eb:f4:9a:0c:df:ce:68:43:11:2d:73:23:a0:53: d0:9b:7b:27:15:80:b1:a4:f7:bd:17:43:a1:85:26: 71:9c:ad:f6:30:44:fc:28:e2:f2:45:96:bf:79:92: 16:44:25:21:ca:e5:6d:a6:48:b4:fd:5f:28:86:f2: 3c:71:da:a0:f0:1a:f0:6b:68:d0:ee:22:a4:2f:95: b8:d4:bf:82:8c:72:4d:cd:cd:76:aa:cc:03:53:56: 71:a6:3f:ed:8a:96:a7:e6:ff:9c:f2:78:22:4e:0d: c9:26:d6:79:07:53:1b:dc:4a:61:1c:02:6b:4f:5d: 76:a4:f2:5e:f9:57:dc:de:e6:88:f5:67:c6:b8:10: 99:e2:18:3b:22:1e:08:79:ff:87:0e:01:4c:48:74: 59:5f:b4:83:d3:69:ad:3d:41:8d:3c:36:62:ef:45: 51:ef:35:ba:40:0f:be:42:30:48:55:9b:f1:11:97: 7c:b4:58:77:7c:04:57:6b:5e:ff:00:b4:81:cb:62: cc:cd:9b:ca:a8:90:8d:0a:73:c0:64:35:aa:56:6f: 4d:54:9b:b5:a4:b4:0f:b6:b9:e0:a4:59:bd:58:63: 1a:c4:7a:66:7f:90:89:dc:79:70:77:1f:85:2c:3f: 2c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:4D:D7:CA:B7:72:55:F8:D2:F2:B1:24:EC:DC:14:70:6A:B1:85:47 X509v3 Authority Key Identifier: keyid:25:96:AD:9D:A9:03:31:FB:33:6D:C5:2C:5B:72:F9:92:D7:D4:9D:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2596AD9DA90331FB336DC52C5B72F992D7D49D37.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:a5:64:76:23:e4:f0:c3:0a:14:e3:3b:09:71:cd:cf:65:09: e5:8b:13:f5:cd:73:da:ce:bf:89:ec:a0:ed:cc:2a:62:99:a9: f9:41:f4:8a:85:ab:1f:f7:a8:2b:5f:f7:b9:e7:3c:3d:7d:31: 4b:90:9b:e6:76:e2:11:cc:ad:af:a9:fb:76:9d:15:b0:5e:1b: 05:ad:92:1a:ce:8c:e6:98:21:fe:14:56:d7:00:b2:b9:00:b7: c7:2f:70:fc:95:a1:a5:59:29:0e:96:16:7f:86:75:96:d1:5b: 27:9b:5f:87:c0:a6:9e:54:13:d9:45:d0:7e:97:cc:57:5e:fa: 4c:91:11:21:a0:a3:f9:9b:64:83:88:2a:17:e8:78:05:85:97: 0f:0b:45:d0:e0:75:3f:c4:1e:75:73:cc:d7:a9:ca:1b:ad:30: f2:8e:03:0d:3e:21:c4:80:0b:4d:fc:e7:7f:70:26:3b:5f:e5: c2:91:e5:90:11:bf:80:db:d5:00:2e:0b:8f:e6:01:24:9e:26: 19:27:36:b3:6b:40:62:03:f4:58:e2:09:19:a1:55:eb:e8:59: 3b:80:14:4b:7c:6f:2c:88:c8:ba:9c:9b:f0:bd:10:60:65:3e: 2f:50:d6:fa:ea:25:a0:96:30:f9:fb:4a:22:64:c5:99:75:75: 29:fd:77:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKzFVGq6oEW1xnrIwOdU/wS8TpZ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU5NkFEOURBOTAzMzFGQjMzNkRDNTJDNUI3MkY5OTJE N0Q0OUQzNzAeFw0yNTA4MjMwNjM3MTVaFw0yNTA4MjYxNjM1MTVaMDMxMTAvBgNV BAMTKDdFNEREN0NBQjc3MjU1RjhEMkYyQjEyNEVDREMxNDcwNkFCMTg1NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYZUT/N/cWVqek4BqT267r9JoM 385oQxEtcyOgU9CbeycVgLGk970XQ6GFJnGcrfYwRPwo4vJFlr95khZEJSHK5W2m SLT9XyiG8jxx2qDwGvBraNDuIqQvlbjUv4KMck3NzXaqzANTVnGmP+2Klqfm/5zy eCJODckm1nkHUxvcSmEcAmtPXXak8l75V9ze5oj1Z8a4EJniGDsiHgh5/4cOAUxI dFlftIPTaa09QY08NmLvRVHvNbpAD75CMEhVm/ERl3y0WHd8BFdrXv8AtIHLYszN m8qokI0Kc8BkNapWb01Um7WktA+2ueCkWb1YYxrEemZ/kInceXB3H4UsPyyrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfk3XyrdyVfjS8rEk7NwUcGqxhUcwHwYDVR0j BBgwFoAUJZatnakDMfszbcUsW3L5ktfUnTcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjAzNmI3NC04YTVkLTQwYWEtOTYwYy05MjFlNjNhNzBhNGMvMC8yNTk2QUQ5REE5 MDMzMUZCMzM2REM1MkM1QjcyRjk5MkQ3RDQ5RDM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjU5NkFEOURBOTAzMzFGQjMzNkRDNTJDNUI3MkY5OTJEN0Q0 OUQzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGYwMzZiNzQtOGE1ZC00MGFhLTk2 MGMtOTIxZTYzYTcwYTRjLzAvMjU5NkFEOURBOTAzMzFGQjMzNkRDNTJDNUI3MkY5 OTJEN0Q0OUQzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEKlZHYj5PDDChTjOwlxzc9lCeWLE/XNc9rO v4nsoO3MKmKZqflB9IqFqx/3qCtf97nnPD19MUuQm+Z24hHMra+p+3adFbBeGwWt khrOjOaYIf4UVtcAsrkAt8cvcPyVoaVZKQ6WFn+GdZbRWyebX4fApp5UE9lF0H6X zFde+kyRESGgo/mbZIOIKhfoeAWFlw8LRdDgdT/EHnVzzNepyhutMPKOAw0+IcSA C038539wJjtf5cKR5ZARv4Db1QAuC4/mASSeJhknNrNrQGID9FjiCRmhVevoWTuA FEt8byyIyLqcm/C9EGBlPi9Q1vrqJaCWMPn7SiJkxZl1dSn9d6Y= -----END CERTIFICATE-----Generated at Sat Aug 23 21:45:45 2025 by rpki-client