$ rpki-client -vvf repo-rpki.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/C2759C8490CBC757371078D2CA604D6FF8EE4C19.mft File: C2759C8490CBC757371078D2CA604D6FF8EE4C19.mft (raw, json) Hash identifier: qrONCzV3QKhxgdah3XZTYcDmLuyC0P0hw+l6vB5CGDg= Subject key identifier: A4:51:14:4D:1D:76:37:59:54:3A:4A:41:4A:43:FD:79:44:02:E2:50 Authority key identifier: C2:75:9C:84:90:CB:C7:57:37:10:78:D2:CA:60:4D:6F:F8:EE:4C:19 Certificate issuer: /CN=C2759C8490CBC757371078D2CA604D6FF8EE4C19 Certificate serial: 1E7859293C75FCF61CB923CD6499D89EB7C5561A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2759C8490CBC757371078D2CA604D6FF8EE4C19.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/C2759C8490CBC757371078D2CA604D6FF8EE4C19.mft Manifest number: 42 Signing time: Sat 23 Aug 2025 00:30:35 +0000 Manifest this update: Sat 23 Aug 2025 00:25:35 +0000 Manifest next update: Tue 26 Aug 2025 05:24:35 +0000 Files and hashes: 1: C2759C8490CBC757371078D2CA604D6FF8EE4C19.crl (hash: P6Jh3I0F8smolBwdosN0rjU7UjqWBT6inU/K0o6ZjMw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/C2759C8490CBC757371078D2CA604D6FF8EE4C19.crl rsync://repo-rpki.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/C2759C8490CBC757371078D2CA604D6FF8EE4C19.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2759C8490CBC757371078D2CA604D6FF8EE4C19.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 05:24:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:78:59:29:3c:75:fc:f6:1c:b9:23:cd:64:99:d8:9e:b7:c5:56:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2759C8490CBC757371078D2CA604D6FF8EE4C19 Validity Not Before: Aug 23 00:25:35 2025 GMT Not After : Aug 26 05:24:35 2025 GMT Subject: CN=A451144D1D763759543A4A414A43FD794402E250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2a:5e:fd:c1:16:35:20:6b:af:9c:7b:39:73: 74:5a:6d:9a:b0:65:4f:a3:35:d7:ec:30:a6:8f:3f: 01:f2:37:c6:3e:17:6e:93:b9:ca:0e:9b:01:0f:73: 72:03:ce:91:3d:73:7c:4a:7a:3f:d8:f9:8f:76:66: d0:88:e9:10:e0:43:0b:54:7b:dc:e7:b4:2d:74:f0: b4:4e:78:df:92:a4:b3:ef:23:87:f6:68:fc:a0:19: 9f:a3:52:23:21:58:a8:b9:bd:db:18:60:b7:df:43: b7:fd:9d:95:91:18:82:62:a7:f7:a0:dc:80:ff:52: 33:0c:b9:73:22:67:55:97:00:49:8e:d4:6e:18:6e: ff:b6:1d:ca:fe:49:59:71:c1:77:15:8c:24:16:b5: 7f:c5:8f:fa:09:bb:ad:ba:6e:0e:8f:7d:9e:d4:59: c0:73:00:23:a6:e3:57:23:33:a0:fd:49:4b:10:b0: ae:81:7f:f9:42:d0:7d:50:4f:32:a4:28:45:48:8d: 12:ee:c9:4c:00:66:ac:32:64:f1:3f:35:4b:90:9a: 47:4b:94:29:7a:39:22:df:3b:9b:43:9a:9f:61:8f: 48:09:fe:bc:98:2a:1b:aa:59:14:18:64:e7:81:f4: ae:82:9a:3b:66:78:f5:60:d6:44:50:a7:40:82:86: f6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:51:14:4D:1D:76:37:59:54:3A:4A:41:4A:43:FD:79:44:02:E2:50 X509v3 Authority Key Identifier: keyid:C2:75:9C:84:90:CB:C7:57:37:10:78:D2:CA:60:4D:6F:F8:EE:4C:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/C2759C8490CBC757371078D2CA604D6FF8EE4C19.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2759C8490CBC757371078D2CA604D6FF8EE4C19.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fe716dea-6536-4d6e-b54b-bf7f73cf6b94/0/C2759C8490CBC757371078D2CA604D6FF8EE4C19.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:d8:d8:7a:53:76:21:2e:ab:26:5c:9c:c3:9e:3e:a0:f6:63: 4a:ed:31:a5:35:e8:ae:e0:89:3e:2d:3a:56:ff:c9:77:e8:69: b7:09:12:fe:ec:82:49:a1:5b:61:e4:4e:d6:5d:06:53:90:ec: 47:e6:cd:06:36:c2:4b:76:cd:ac:fe:49:f1:36:c8:67:08:04: 4c:50:12:a0:17:d1:81:32:10:4e:a9:37:d5:2b:01:da:23:db: 33:9d:6d:9c:df:72:13:a9:f3:72:8d:54:ca:ac:de:0b:37:7e: a2:6e:7e:ef:9e:d4:d2:6a:fc:68:a2:52:97:d8:9f:d2:26:d6: 26:8d:a9:5d:d8:e6:dc:c8:0b:1c:dc:b3:68:ff:71:02:d3:10: a2:95:a7:ee:5a:9f:9a:3c:4f:18:45:16:d1:9b:04:b6:5b:f8: 5a:54:12:38:72:be:88:c2:3e:2d:c0:bd:af:8e:86:e3:15:c5: 2e:38:16:51:ff:51:76:13:87:f3:78:d2:99:cc:42:ad:95:a3: 80:28:58:26:c8:10:79:ea:8f:38:26:44:b0:10:10:b0:16:c5: 38:b2:08:3b:96:f4:46:54:38:7d:b5:cd:de:97:b9:44:3d:f7: d1:df:f1:75:56:ee:af:9e:2b:6f:ba:3b:71:8e:6f:3b:de:b4: df:d8:2f:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHnhZKTx1/PYcuSPNZJnYnrfFVhowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI3NTlDODQ5MENCQzc1NzM3MTA3OEQyQ0E2MDRENkZG OEVFNEMxOTAeFw0yNTA4MjMwMDI1MzVaFw0yNTA4MjYwNTI0MzVaMDMxMTAvBgNV BAMTKEE0NTExNDREMUQ3NjM3NTk1NDNBNEE0MTRBNDNGRDc5NDQwMkUyNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Kl79wRY1IGuvnHs5c3RabZqw ZU+jNdfsMKaPPwHyN8Y+F26TucoOmwEPc3IDzpE9c3xKej/Y+Y92ZtCI6RDgQwtU e9zntC108LROeN+SpLPvI4f2aPygGZ+jUiMhWKi5vdsYYLffQ7f9nZWRGIJip/eg 3ID/UjMMuXMiZ1WXAEmO1G4Ybv+2Hcr+SVlxwXcVjCQWtX/Fj/oJu626bg6PfZ7U WcBzACOm41cjM6D9SUsQsK6Bf/lC0H1QTzKkKEVIjRLuyUwAZqwyZPE/NUuQmkdL lCl6OSLfO5tDmp9hj0gJ/ryYKhuqWRQYZOeB9K6CmjtmePVg1kRQp0CChvaXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpFEUTR12N1lUOkpBSkP9eUQC4lAwHwYDVR0j BBgwFoAUwnWchJDLx1c3EHjSymBNb/juTBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZTcxNmRlYS02NTM2LTRkNmUtYjU0Yi1iZjdmNzNjZjZiOTQvMC9DMjc1OUM4NDkw Q0JDNzU3MzcxMDc4RDJDQTYwNEQ2RkY4RUU0QzE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzI3NTlDODQ5MENCQzc1NzM3MTA3OEQyQ0E2MDRENkZGOEVF NEMxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmU3MTZkZWEtNjUzNi00ZDZlLWI1 NGItYmY3ZjczY2Y2Yjk0LzAvQzI3NTlDODQ5MENCQzc1NzM3MTA3OEQyQ0E2MDRE NkZGOEVFNEMxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACnY2HpTdiEuqyZcnMOePqD2Y0rtMaU16K7g iT4tOlb/yXfoabcJEv7sgkmhW2HkTtZdBlOQ7EfmzQY2wkt2zaz+SfE2yGcIBExQ EqAX0YEyEE6pN9UrAdoj2zOdbZzfchOp83KNVMqs3gs3fqJufu+e1NJq/GiiUpfY n9Im1iaNqV3Y5tzICxzcs2j/cQLTEKKVp+5an5o8TxhFFtGbBLZb+FpUEjhyvojC Pi3Ava+OhuMVxS44FlH/UXYTh/N40pnMQq2Vo4AoWCbIEHnqjzgmRLAQELAWxTiy CDuW9EZUOH21zd6XuUQ999Hf8XVW7q+eK2+6O3GObzvetN/YL0s= -----END CERTIFICATE-----Generated at Sat Aug 23 10:11:26 2025 by rpki-client