$ rpki-client -vvf repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/93D212CCFA351E8E694E5AFB214D80DC8C741916.mft File: 93D212CCFA351E8E694E5AFB214D80DC8C741916.mft (raw, json) Hash identifier: MRho70nvnBo148bLAZ0sCEk1Q6/WZ6oy8tahRfBXes8= Subject key identifier: C0:10:21:10:57:F8:EF:DD:95:F5:C6:F6:F9:DB:D5:02:19:76:AF:70 Authority key identifier: 93:D2:12:CC:FA:35:1E:8E:69:4E:5A:FB:21:4D:80:DC:8C:74:19:16 Certificate issuer: /CN=93D212CCFA351E8E694E5AFB214D80DC8C741916 Certificate serial: 2527BDF654105BBF0ADA725B2B10EB6D1414801E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/93D212CCFA351E8E694E5AFB214D80DC8C741916.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/93D212CCFA351E8E694E5AFB214D80DC8C741916.mft Manifest number: E1 Signing time: Sat 23 Aug 2025 10:00:47 +0000 Manifest this update: Sat 23 Aug 2025 09:55:46 +0000 Manifest next update: Tue 26 Aug 2025 11:14:46 +0000 Files and hashes: 1: 93D212CCFA351E8E694E5AFB214D80DC8C741916.crl (hash: 3D6U1saIqzik5+NAPKszfxlY4L4UQljnjoM5105llnA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/93D212CCFA351E8E694E5AFB214D80DC8C741916.crl rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/93D212CCFA351E8E694E5AFB214D80DC8C741916.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/93D212CCFA351E8E694E5AFB214D80DC8C741916.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:27:bd:f6:54:10:5b:bf:0a:da:72:5b:2b:10:eb:6d:14:14:80:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93D212CCFA351E8E694E5AFB214D80DC8C741916 Validity Not Before: Aug 23 09:55:46 2025 GMT Not After : Aug 26 11:14:46 2025 GMT Subject: CN=C010211057F8EFDD95F5C6F6F9DBD5021976AF70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ac:b7:12:7e:e9:64:7a:7f:2a:3b:0b:69:44: 06:64:2a:c3:95:af:cd:d8:26:8a:8d:d8:95:5e:0c: 13:ff:62:64:6b:66:9b:ba:58:23:2f:54:ff:d0:74: 43:0a:33:2f:bb:ad:07:61:9b:34:be:10:26:ca:65: 24:6f:52:81:67:f8:67:89:35:b6:c4:af:ac:f6:bf: e8:ea:84:d1:b2:45:21:a1:b2:4a:1e:86:5d:cd:a0: 69:d9:c0:75:86:99:42:58:fd:4e:83:43:38:ce:7f: 53:19:c5:6a:c2:2f:1c:df:70:31:12:c7:5b:e2:9e: 8f:29:5c:d1:2a:1f:48:c4:62:52:49:0e:28:06:c3: 2a:57:d8:aa:3e:80:65:37:5b:0b:8a:34:8d:37:9f: 5b:04:7a:d6:1b:14:fa:f1:33:d1:19:7b:f6:dd:92: e5:51:13:74:ac:ca:a1:45:a8:c4:da:c8:33:74:90: b4:84:c3:e5:28:b5:c6:6e:ff:0d:2a:b3:f5:a4:98: 26:3b:b2:03:67:18:59:2a:8d:5f:eb:ef:9a:9f:2c: 59:09:c9:78:b0:e7:63:4d:b1:bb:fe:ee:6a:ce:a2: 90:cb:30:a6:bf:64:e3:de:53:3b:a1:a6:84:b4:91: 5c:e5:4f:63:b2:4f:33:f8:56:27:4f:9f:a0:0d:dd: f6:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:10:21:10:57:F8:EF:DD:95:F5:C6:F6:F9:DB:D5:02:19:76:AF:70 X509v3 Authority Key Identifier: keyid:93:D2:12:CC:FA:35:1E:8E:69:4E:5A:FB:21:4D:80:DC:8C:74:19:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/93D212CCFA351E8E694E5AFB214D80DC8C741916.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/93D212CCFA351E8E694E5AFB214D80DC8C741916.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/1/93D212CCFA351E8E694E5AFB214D80DC8C741916.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:b9:6b:17:3c:4e:db:99:a2:c9:76:76:3f:27:1b:cc:b8:f4: 8e:f6:1d:dc:5d:aa:8f:de:9d:ca:54:d4:54:0a:dc:91:7f:71: ed:f6:48:4a:5b:8f:d8:05:4d:49:72:2f:21:b8:97:19:c7:2b: 97:50:8f:b0:4e:a8:4c:cf:c1:bb:3c:ea:7e:ff:de:3d:de:46: a2:18:d9:c5:45:f2:d0:a8:80:ab:30:10:e8:13:e0:a9:e8:0b: 13:88:c9:c2:62:89:a1:f3:70:bc:51:64:36:6f:91:a8:cf:ea: 1b:f1:e9:c1:67:ad:c4:d5:bb:29:df:41:a6:0d:2d:9b:6e:f3: 3a:e0:54:4d:02:c4:77:30:80:ed:67:56:a5:28:8d:e3:66:98: 3c:b9:6c:bc:71:77:02:09:04:72:94:65:04:14:03:e1:44:c6: b2:ce:e8:50:d0:5d:24:87:f4:3f:dc:bf:79:c5:4b:37:12:dd: dc:90:04:eb:7c:f7:4a:88:08:15:d1:7b:4b:66:70:10:86:a6: 75:73:fd:68:23:73:fe:c9:28:17:e0:60:2e:b4:f9:c7:92:e7: 96:9c:84:66:a8:29:a0:67:7c:3c:11:7e:5f:f4:c4:73:b5:ec: c3:51:15:52:70:e1:b6:8e:f5:b0:02:0c:a6:4f:53:07:f9:1a: 69:7f:c1:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJSe99lQQW78K2nJbKxDrbRQUgB4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTNEMjEyQ0NGQTM1MUU4RTY5NEU1QUZCMjE0RDgwREM4 Qzc0MTkxNjAeFw0yNTA4MjMwOTU1NDZaFw0yNTA4MjYxMTE0NDZaMDMxMTAvBgNV BAMTKEMwMTAyMTEwNTdGOEVGREQ5NUY1QzZGNkY5REJENTAyMTk3NkFGNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+rLcSfulken8qOwtpRAZkKsOV r83YJoqN2JVeDBP/YmRrZpu6WCMvVP/QdEMKMy+7rQdhmzS+ECbKZSRvUoFn+GeJ NbbEr6z2v+jqhNGyRSGhskoehl3NoGnZwHWGmUJY/U6DQzjOf1MZxWrCLxzfcDES x1vino8pXNEqH0jEYlJJDigGwypX2Ko+gGU3WwuKNI03n1sEetYbFPrxM9EZe/bd kuVRE3SsyqFFqMTayDN0kLSEw+UotcZu/w0qs/WkmCY7sgNnGFkqjV/r75qfLFkJ yXiw52NNsbv+7mrOopDLMKa/ZOPeUzuhpoS0kVzlT2OyTzP4VidPn6AN3fZpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwBAhEFf4792V9cb2+dvVAhl2r3AwHwYDVR0j BBgwFoAUk9ISzPo1Ho5pTlr7IU2A3Ix0GRYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2I0N2FiNi1kMWYxLTRkMmUtOWNmYy04MDg0YTRiYWNmMGIvMS85M0QyMTJDQ0ZB MzUxRThFNjk0RTVBRkIyMTREODBEQzhDNzQxOTE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTNEMjEyQ0NGQTM1MUU4RTY5NEU1QUZCMjE0RDgwREM4Qzc0 MTkxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjNiNDdhYjYtZDFmMS00ZDJlLTlj ZmMtODA4NGE0YmFjZjBiLzEvOTNEMjEyQ0NGQTM1MUU4RTY5NEU1QUZCMjE0RDgw REM4Qzc0MTkxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKa5axc8TtuZosl2dj8nG8y49I72Hdxdqo/e ncpU1FQK3JF/ce32SEpbj9gFTUlyLyG4lxnHK5dQj7BOqEzPwbs86n7/3j3eRqIY 2cVF8tCogKswEOgT4KnoCxOIycJiiaHzcLxRZDZvkajP6hvx6cFnrcTVuynfQaYN LZtu8zrgVE0CxHcwgO1nVqUojeNmmDy5bLxxdwIJBHKUZQQUA+FExrLO6FDQXSSH 9D/cv3nFSzcS3dyQBOt890qICBXRe0tmcBCGpnVz/Wgjc/7JKBfgYC60+ceS55ac hGaoKaBnfDwRfl/0xHO17MNRFVJw4baO9bACDKZPUwf5Gml/wTI= -----END CERTIFICATE-----Generated at Sat Aug 23 12:03:56 2025 by rpki-client