$ rpki-client -vvf repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft File: 2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft (raw, json) Hash identifier: DWe4mnBhekXTiNBB/71nQYQEc2a+p8jYWl4YTMhHuto= Subject key identifier: 21:E2:4E:D2:EB:76:A0:97:B1:E6:21:8D:06:29:04:A0:30:C7:8B:C8 Authority key identifier: 25:96:AD:9D:A9:03:31:FB:33:6D:C5:2C:5B:72:F9:92:D7:D4:9D:37 Certificate issuer: /CN=2596AD9DA90331FB336DC52C5B72F992D7D49D37 Certificate serial: 1C86536E176EAB28D38149E817DDC1D77BDBDB41 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2596AD9DA90331FB336DC52C5B72F992D7D49D37.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft Manifest number: DA Signing time: Sun 19 Oct 2025 03:02:18 +0000 Manifest this update: Sun 19 Oct 2025 02:57:18 +0000 Manifest next update: Wed 22 Oct 2025 10:54:18 +0000 Files and hashes: 1: 2596AD9DA90331FB336DC52C5B72F992D7D49D37.crl (hash: aqP39vFWXqfOq8o1wwzhmI6PbqmB5FkpNu6WLZEJWAw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.crl rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2596AD9DA90331FB336DC52C5B72F992D7D49D37.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 10:54:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:86:53:6e:17:6e:ab:28:d3:81:49:e8:17:dd:c1:d7:7b:db:db:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2596AD9DA90331FB336DC52C5B72F992D7D49D37 Validity Not Before: Oct 19 02:57:18 2025 GMT Not After : Oct 22 10:54:18 2025 GMT Subject: CN=21E24ED2EB76A097B1E6218D062904A030C78BC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:89:4b:2f:8f:5f:69:52:ef:3d:08:e8:b1:99: ce:16:d3:7e:2e:ef:2c:8d:c7:bb:c3:07:92:df:54: 50:91:80:c8:6e:0a:aa:51:47:9d:42:8e:4d:14:28: f4:b5:68:45:b9:14:bb:da:02:06:dc:7e:cd:b1:b6: 3b:77:04:b0:18:46:ca:8f:fc:84:5c:04:bd:c4:ab: a9:54:88:78:37:eb:09:38:fe:ee:dc:d5:ef:e4:75: c4:ee:26:28:d7:98:6e:08:9b:e4:33:e9:8f:7b:54: 7a:d8:13:f1:cb:04:12:b1:d7:54:94:62:e7:4c:c3: 4c:46:77:86:23:67:ac:9e:3f:96:88:f8:96:a9:32: 7a:36:ea:4e:81:80:b9:75:8f:37:61:31:b5:d3:ca: a9:46:df:4a:a0:21:d4:4f:02:74:6e:c5:15:15:c9: fd:e1:7e:56:3f:01:b7:2d:58:c4:84:63:d5:b6:bd: 35:02:2d:a7:50:69:a5:2f:c1:f7:9a:16:ab:3c:a3: 4f:36:ff:c0:04:a4:d1:c0:3d:f0:5b:db:10:29:58: 8e:c5:4e:0d:76:36:e6:3a:30:39:2c:c3:52:d8:8d: ab:30:8d:e3:41:50:10:4b:73:0f:76:1e:ea:2d:6c: e6:77:29:a0:79:15:16:28:72:be:d1:ae:38:bb:3d: 85:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:E2:4E:D2:EB:76:A0:97:B1:E6:21:8D:06:29:04:A0:30:C7:8B:C8 X509v3 Authority Key Identifier: keyid:25:96:AD:9D:A9:03:31:FB:33:6D:C5:2C:5B:72:F9:92:D7:D4:9D:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2596AD9DA90331FB336DC52C5B72F992D7D49D37.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:b9:bf:55:7f:b8:b6:b6:91:b4:e6:08:3a:82:d6:23:c8:a9: 21:8b:73:f0:76:74:f8:46:fc:e3:ff:f7:fe:78:04:da:00:10: bb:40:5d:7e:83:cb:fa:d4:52:e6:d4:2a:d1:4b:40:fe:1d:50: df:e2:00:7d:d4:08:53:ea:47:78:e2:8c:da:c5:7b:1d:aa:6b: 48:3a:76:cf:b9:e1:c4:ce:20:6a:f4:7e:d7:67:48:98:71:6b: 07:ce:26:cc:a3:03:d3:c2:80:dd:6d:1b:01:86:2c:a6:30:02: b5:08:b8:f5:83:9a:d6:b6:a3:4b:da:f0:3b:18:6c:4d:a8:9b: f8:23:01:d9:25:27:00:ab:5d:2d:1a:cd:5a:67:9a:f2:bf:52: 37:15:fe:d8:61:18:a3:1b:ec:eb:82:f9:19:61:ed:d5:67:81: 2f:e0:85:b0:a3:40:25:bd:d0:4d:00:1b:50:84:d7:88:4f:02: 85:61:85:44:e3:5e:b8:31:ba:fe:ef:40:c9:62:aa:ff:66:c4: be:b1:7e:b5:17:a7:b6:7c:03:ac:b4:ee:19:77:3b:6d:e1:c6: ea:09:c7:fa:10:eb:89:ea:bb:b4:e7:ae:88:05:07:8d:ad:62: f9:e1:4e:b8:00:31:25:cc:2c:f2:5b:99:2c:d1:05:d3:5a:90: 52:33:4d:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHIZTbhduqyjTgUnoF93B13vb20EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU5NkFEOURBOTAzMzFGQjMzNkRDNTJDNUI3MkY5OTJE N0Q0OUQzNzAeFw0yNTEwMTkwMjU3MThaFw0yNTEwMjIxMDU0MThaMDMxMTAvBgNV BAMTKDIxRTI0RUQyRUI3NkEwOTdCMUU2MjE4RDA2MjkwNEEwMzBDNzhCQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDciUsvj19pUu89COixmc4W034u 7yyNx7vDB5LfVFCRgMhuCqpRR51Cjk0UKPS1aEW5FLvaAgbcfs2xtjt3BLAYRsqP /IRcBL3Eq6lUiHg36wk4/u7c1e/kdcTuJijXmG4Im+Qz6Y97VHrYE/HLBBKx11SU YudMw0xGd4YjZ6yeP5aI+JapMno26k6BgLl1jzdhMbXTyqlG30qgIdRPAnRuxRUV yf3hflY/AbctWMSEY9W2vTUCLadQaaUvwfeaFqs8o082/8AEpNHAPfBb2xApWI7F Tg12NuY6MDksw1LYjaswjeNBUBBLcw92HuotbOZ3KaB5FRYocr7Rrji7PYWxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIeJO0ut2oJex5iGNBikEoDDHi8gwHwYDVR0j BBgwFoAUJZatnakDMfszbcUsW3L5ktfUnTcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjAzNmI3NC04YTVkLTQwYWEtOTYwYy05MjFlNjNhNzBhNGMvMC8yNTk2QUQ5REE5 MDMzMUZCMzM2REM1MkM1QjcyRjk5MkQ3RDQ5RDM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjU5NkFEOURBOTAzMzFGQjMzNkRDNTJDNUI3MkY5OTJEN0Q0 OUQzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGYwMzZiNzQtOGE1ZC00MGFhLTk2 MGMtOTIxZTYzYTcwYTRjLzAvMjU5NkFEOURBOTAzMzFGQjMzNkRDNTJDNUI3MkY5 OTJEN0Q0OUQzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANC5v1V/uLa2kbTmCDqC1iPIqSGLc/B2dPhG /OP/9/54BNoAELtAXX6Dy/rUUubUKtFLQP4dUN/iAH3UCFPqR3jijNrFex2qa0g6 ds+54cTOIGr0ftdnSJhxawfOJsyjA9PCgN1tGwGGLKYwArUIuPWDmta2o0va8DsY bE2om/gjAdklJwCrXS0azVpnmvK/UjcV/thhGKMb7OuC+Rlh7dVngS/ghbCjQCW9 0E0AG1CE14hPAoVhhUTjXrgxuv7vQMliqv9mxL6xfrUXp7Z8A6y07hl3O23hxuoJ x/oQ64nqu7TnrogFB42tYvnhTrgAMSXMLPJbmSzRBdNakFIzTRA= -----END CERTIFICATE-----Generated at Mon Oct 20 20:28:10 2025 by rpki-client