$ rpki-client -vvf repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.mft File: C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.mft (raw, json) Hash identifier: NW9Bx9hcH0jZ8TrKCRst+cOlTQU750PqKbBmonVsfpk= Subject key identifier: 10:7C:DC:62:8C:D2:EE:63:3D:BA:8B:EA:7F:11:3C:57:54:7D:CB:01 Authority key identifier: C9:27:69:FD:5D:97:A4:67:70:E3:A1:0F:9D:57:AE:93:1F:9A:9F:C2 Certificate issuer: /CN=C92769FD5D97A46770E3A10F9D57AE931F9A9FC2 Certificate serial: 6D76C1A4178F3F45A3EA5DCEAE78D310F836A6B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.mft Manifest number: 0151 Signing time: Fri 22 Aug 2025 05:02:21 +0000 Manifest this update: Fri 22 Aug 2025 04:57:21 +0000 Manifest next update: Mon 25 Aug 2025 16:30:21 +0000 Files and hashes: 1: C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.crl (hash: eGuCJrPEo3V6CQuAjI9w+cHf537h6Pvn3cqDdojhBDI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.crl rsync://repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 16:30:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:76:c1:a4:17:8f:3f:45:a3:ea:5d:ce:ae:78:d3:10:f8:36:a6:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C92769FD5D97A46770E3A10F9D57AE931F9A9FC2 Validity Not Before: Aug 22 04:57:21 2025 GMT Not After : Aug 25 16:30:21 2025 GMT Subject: CN=107CDC628CD2EE633DBA8BEA7F113C57547DCB01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:52:e7:d2:58:b1:0f:a9:ae:91:b2:e8:3a:31: 3c:f3:e4:ab:6b:80:93:0e:2b:71:9e:de:fe:f6:49: db:8d:ad:04:c6:40:1c:0c:61:a0:64:85:6f:ce:2b: b9:f8:b0:28:7e:b4:49:d5:09:9e:17:d8:06:7d:2f: ce:6d:3a:cf:be:c4:5e:5f:13:33:54:c1:0c:28:92: 23:77:6d:b7:62:ea:d2:ce:09:64:44:80:1e:c2:18: 7b:00:c8:22:96:c0:4b:84:78:3f:ae:74:3e:41:b7: c9:18:fe:9e:12:4f:fc:a4:38:b5:c8:93:b7:ad:e1: 86:3a:8a:74:d7:b2:9c:3f:77:c8:ce:38:83:2a:dc: ca:5b:81:b9:79:8b:43:72:f1:27:ac:76:30:85:53: f1:d2:23:9a:13:02:d3:62:fe:65:42:ea:5b:f5:96: f8:87:76:75:99:32:6f:7c:c6:23:4d:4d:9e:a5:60: e3:ba:51:51:14:e0:d9:6c:4d:1b:f6:d7:82:d5:1b: 72:71:1a:c3:ac:49:5b:64:2e:01:c9:03:e2:c5:57: 84:b0:c5:b5:26:ae:0f:f8:66:ac:eb:24:bd:5d:1e: 3d:29:f7:df:68:a3:17:b6:55:28:37:82:0e:4e:f6: 82:ab:b4:2d:aa:81:f2:33:c4:d5:4f:71:52:c7:41: 1f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:7C:DC:62:8C:D2:EE:63:3D:BA:8B:EA:7F:11:3C:57:54:7D:CB:01 X509v3 Authority Key Identifier: keyid:C9:27:69:FD:5D:97:A4:67:70:E3:A1:0F:9D:57:AE:93:1F:9A:9F:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:4b:24:73:b8:39:75:2d:8c:15:8e:40:6a:45:d8:65:79:27: 37:97:09:5a:12:41:a1:1c:67:55:2a:99:58:0c:35:f4:ca:48: 61:37:9d:44:b6:09:5c:23:ac:c3:c1:77:14:56:eb:89:4a:0e: cc:5c:8a:7b:3c:f4:1b:87:ac:ad:80:02:0d:61:56:97:34:4b: 3c:bc:e2:ed:f1:72:f6:35:4a:60:a4:8c:77:ff:a8:40:0d:f5: d8:37:65:1f:7d:be:cf:0b:9e:89:ac:f1:15:eb:5f:1e:9a:67: 7f:d8:eb:a4:11:c9:7c:68:e3:3f:8b:ab:c8:39:4a:ff:62:6e: 36:9b:37:c7:ed:9b:e8:ba:a0:61:0a:60:1f:a9:51:46:a5:1d: 91:1a:ba:a9:2b:c3:3d:90:00:aa:5c:c1:25:73:de:5f:51:7b: fd:fb:d8:a7:68:6b:bd:cc:13:20:3b:01:6e:c8:1b:27:38:c0: 3f:91:ec:41:ad:f0:80:6d:1d:71:53:09:c7:f4:04:0c:9b:23: 37:54:9e:eb:39:ea:f2:08:14:8b:7e:8c:f4:a4:1b:a2:d0:99: 03:0d:b9:4d:62:14:21:59:ad:99:08:1e:8d:ba:cf:53:73:3d: 09:6d:46:4c:d5:3d:f6:cb:f2:b6:d5:92:99:74:15:a5:bf:6a: a5:55:8d:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbXbBpBePP0Wj6l3OrnjTEPg2prkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzkyNzY5RkQ1RDk3QTQ2NzcwRTNBMTBGOUQ1N0FFOTMx RjlBOUZDMjAeFw0yNTA4MjIwNDU3MjFaFw0yNTA4MjUxNjMwMjFaMDMxMTAvBgNV BAMTKDEwN0NEQzYyOENEMkVFNjMzREJBOEJFQTdGMTEzQzU3NTQ3RENCMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChUufSWLEPqa6Rsug6MTzz5Ktr gJMOK3Ge3v72SduNrQTGQBwMYaBkhW/OK7n4sCh+tEnVCZ4X2AZ9L85tOs++xF5f EzNUwQwokiN3bbdi6tLOCWREgB7CGHsAyCKWwEuEeD+udD5Bt8kY/p4ST/ykOLXI k7et4YY6inTXspw/d8jOOIMq3Mpbgbl5i0Ny8SesdjCFU/HSI5oTAtNi/mVC6lv1 lviHdnWZMm98xiNNTZ6lYOO6UVEU4NlsTRv214LVG3JxGsOsSVtkLgHJA+LFV4Sw xbUmrg/4ZqzrJL1dHj0p999ooxe2VSg3gg5O9oKrtC2qgfIzxNVPcVLHQR+hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEHzcYozS7mM9uovqfxE8V1R9ywEwHwYDVR0j BBgwFoAUySdp/V2XpGdw46EPnVeukx+an8IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NWQ3Nzg0MC02MDhlLTQ0OWEtYjIyZi0zNmE2ZTI1MmZiMjMvMC9DOTI3NjlGRDVE OTdBNDY3NzBFM0ExMEY5RDU3QUU5MzFGOUE5RkMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzkyNzY5RkQ1RDk3QTQ2NzcwRTNBMTBGOUQ1N0FFOTMxRjlB OUZDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjVkNzc4NDAtNjA4ZS00NDlhLWIy MmYtMzZhNmUyNTJmYjIzLzAvQzkyNzY5RkQ1RDk3QTQ2NzcwRTNBMTBGOUQ1N0FF OTMxRjlBOUZDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGpLJHO4OXUtjBWOQGpF2GV5JzeXCVoSQaEc Z1UqmVgMNfTKSGE3nUS2CVwjrMPBdxRW64lKDsxcins89BuHrK2AAg1hVpc0Szy8 4u3xcvY1SmCkjHf/qEAN9dg3ZR99vs8Lnoms8RXrXx6aZ3/Y66QRyXxo4z+Lq8g5 Sv9ibjabN8ftm+i6oGEKYB+pUUalHZEauqkrwz2QAKpcwSVz3l9Re/372Kdoa73M EyA7AW7IGyc4wD+R7EGt8IBtHXFTCcf0BAybIzdUnus56vIIFIt+jPSkG6LQmQMN uU1iFCFZrZkIHo26z1NzPQltRkzVPfbL8rbVkpl0FaW/aqVVjTg= -----END CERTIFICATE-----Generated at Sat Aug 23 12:21:59 2025 by rpki-client