$ rpki-client -vvf repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.mft File: 7188210EAEFBA7947009E19B6219830752F542A9.mft (raw, json) Hash identifier: oGGEFrnKFM/uDZYvqkgynST5dLPqseYhKQF5/x7YM54= Subject key identifier: 8A:55:FA:35:39:77:8D:B4:10:EA:AB:EE:1B:A1:E5:BC:32:EC:EC:9B Authority key identifier: 71:88:21:0E:AE:FB:A7:94:70:09:E1:9B:62:19:83:07:52:F5:42:A9 Certificate issuer: /CN=7188210EAEFBA7947009E19B6219830752F542A9 Certificate serial: 596D0D804C341AF7B5034B5D9F8E1003E89F7EA0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7188210EAEFBA7947009E19B6219830752F542A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.mft Manifest number: 019A Signing time: Fri 22 Aug 2025 05:31:07 +0000 Manifest this update: Fri 22 Aug 2025 05:26:07 +0000 Manifest next update: Mon 25 Aug 2025 15:34:07 +0000 Files and hashes: 1: 7188210EAEFBA7947009E19B6219830752F542A9.crl (hash: kikCEfr+jxUBsQcnr9sJzOkl7VrIjsrPzW3YbcBNQvU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.crl rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7188210EAEFBA7947009E19B6219830752F542A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 15:34:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:6d:0d:80:4c:34:1a:f7:b5:03:4b:5d:9f:8e:10:03:e8:9f:7e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7188210EAEFBA7947009E19B6219830752F542A9 Validity Not Before: Aug 22 05:26:07 2025 GMT Not After : Aug 25 15:34:07 2025 GMT Subject: CN=8A55FA3539778DB410EAABEE1BA1E5BC32ECEC9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:33:f6:a9:82:0f:c7:d6:cf:60:d3:82:12:10: cf:7f:84:00:ba:27:a2:62:ed:ea:c0:96:b8:63:87: 35:e1:1b:b8:3a:c2:a3:17:16:b6:ef:35:b1:e6:77: ee:83:4d:30:35:af:f4:a1:25:f0:14:5f:1b:dc:f9: cd:f5:56:5e:dd:10:73:f9:7a:9a:a3:c1:2c:e2:48: 54:0c:b2:27:a1:6e:99:9c:c7:f8:c7:06:10:58:e5: 69:38:df:e5:95:37:21:22:80:37:71:8b:ff:02:ea: 21:95:6e:b2:03:13:15:1e:e1:4e:0f:2f:79:b9:d4: d7:56:10:5c:37:be:f2:94:a3:02:8c:f8:08:ab:54: 83:46:d8:5f:37:35:e6:2c:18:2c:13:bf:5d:62:10: d8:cc:44:f5:bd:14:32:96:8c:62:fc:b6:24:91:b7: eb:79:71:c0:90:8a:eb:35:28:d6:54:61:48:ba:2a: 1c:52:4b:f3:d1:15:69:26:81:4a:8c:03:f7:98:81: eb:ca:fd:ed:6a:3b:20:a0:36:30:73:36:54:98:df: 5b:3e:f7:cd:47:81:62:1f:0d:09:44:e3:8f:56:61: ba:96:09:12:6e:48:cd:b4:e7:7e:8e:33:df:22:c9: 27:90:48:31:b9:e3:5b:d4:31:63:57:39:62:7e:36: c5:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:55:FA:35:39:77:8D:B4:10:EA:AB:EE:1B:A1:E5:BC:32:EC:EC:9B X509v3 Authority Key Identifier: keyid:71:88:21:0E:AE:FB:A7:94:70:09:E1:9B:62:19:83:07:52:F5:42:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7188210EAEFBA7947009E19B6219830752F542A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea7d7b38-d66b-43b3-91fb-4bb9e6637e2a/0/7188210EAEFBA7947009E19B6219830752F542A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:00:9b:3a:6a:cd:07:6d:eb:49:f5:60:9e:ce:05:ec:e3:2d: 4a:48:9c:8c:56:be:20:04:ca:56:cd:51:12:13:e6:ee:41:64: 78:5b:a6:8f:b3:67:11:58:15:b8:8f:ef:c6:eb:9f:c6:15:40: 7c:e4:76:c4:d7:33:22:43:fe:14:5f:9b:4e:06:02:1f:ca:e2: b0:05:5c:3f:fd:92:d1:b7:d6:98:dd:d0:1b:08:4e:aa:f3:16: 59:58:8c:f7:8c:9d:8f:bd:4b:cb:0b:6f:df:2f:a7:31:03:12: c9:17:c8:c5:06:ef:66:5e:6b:87:16:a2:88:86:91:56:02:ac: 3c:1c:95:f2:b1:bf:49:7a:df:5d:9f:4f:b1:1e:04:18:e2:b8: c6:b9:66:67:10:47:ef:88:01:61:e2:28:6d:cb:5e:b0:32:e6: ff:7f:81:76:94:da:35:b3:f0:c0:30:08:82:0c:9c:ae:ea:d5: 0e:2c:87:a7:18:0f:c2:03:21:7a:40:6b:65:8b:a6:09:17:f4: 8b:3e:e9:2f:33:72:44:80:0a:04:08:38:a7:71:4f:fa:4b:81: 22:ca:3c:b3:85:b2:b6:d0:cb:04:59:04:78:44:08:02:70:f6: ab:15:89:b3:dc:69:88:1c:a1:78:2c:f3:15:cf:f9:ef:d9:f7: 13:0e:4a:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWW0NgEw0Gve1A0tdn44QA+iffqAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE4ODIxMEVBRUZCQTc5NDcwMDlFMTlCNjIxOTgzMDc1 MkY1NDJBOTAeFw0yNTA4MjIwNTI2MDdaFw0yNTA4MjUxNTM0MDdaMDMxMTAvBgNV BAMTKDhBNTVGQTM1Mzk3NzhEQjQxMEVBQUJFRTFCQTFFNUJDMzJFQ0VDOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiM/apgg/H1s9g04ISEM9/hAC6 J6Ji7erAlrhjhzXhG7g6wqMXFrbvNbHmd+6DTTA1r/ShJfAUXxvc+c31Vl7dEHP5 epqjwSziSFQMsiehbpmcx/jHBhBY5Wk43+WVNyEigDdxi/8C6iGVbrIDExUe4U4P L3m51NdWEFw3vvKUowKM+AirVING2F83NeYsGCwTv11iENjMRPW9FDKWjGL8tiSR t+t5ccCQius1KNZUYUi6KhxSS/PRFWkmgUqMA/eYgevK/e1qOyCgNjBzNlSY31s+ 981HgWIfDQlE449WYbqWCRJuSM20536OM98iySeQSDG541vUMWNXOWJ+NsXtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUilX6NTl3jbQQ6qvuG6HlvDLs7JswHwYDVR0j BBgwFoAUcYghDq77p5RwCeGbYhmDB1L1QqkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTdkN2IzOC1kNjZiLTQzYjMtOTFmYi00YmI5ZTY2MzdlMmEvMC83MTg4MjEwRUFF RkJBNzk0NzAwOUUxOUI2MjE5ODMwNzUyRjU0MkE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzE4ODIxMEVBRUZCQTc5NDcwMDlFMTlCNjIxOTgzMDc1MkY1 NDJBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE3ZDdiMzgtZDY2Yi00M2IzLTkx ZmItNGJiOWU2NjM3ZTJhLzAvNzE4ODIxMEVBRUZCQTc5NDcwMDlFMTlCNjIxOTgz MDc1MkY1NDJBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMsAmzpqzQdt60n1YJ7OBezjLUpInIxWviAE ylbNURIT5u5BZHhbpo+zZxFYFbiP78brn8YVQHzkdsTXMyJD/hRfm04GAh/K4rAF XD/9ktG31pjd0BsITqrzFllYjPeMnY+9S8sLb98vpzEDEskXyMUG72Zea4cWooiG kVYCrDwclfKxv0l6312fT7EeBBjiuMa5ZmcQR++IAWHiKG3LXrAy5v9/gXaU2jWz 8MAwCIIMnK7q1Q4sh6cYD8IDIXpAa2WLpgkX9Is+6S8zckSACgQIOKdxT/pLgSLK PLOFsrbQywRZBHhECAJw9qsVibPcaYgcoXgs8xXP+e/Z9xMOSsE= -----END CERTIFICATE-----Generated at Sat Aug 23 10:33:17 2025 by rpki-client