$ rpki-client -vvf repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.mft File: 381455361E726B6ECCDAF271673BD59B1555336E.mft (raw, json) Hash identifier: NXDCBBdom7CVQNJEbeMupBhL87LfIdwJV5De5Vgest4= Subject key identifier: 32:10:B1:B0:C4:A0:A1:3E:40:2B:40:BC:D0:AF:BC:F9:3C:CE:A8:97 Authority key identifier: 38:14:55:36:1E:72:6B:6E:CC:DA:F2:71:67:3B:D5:9B:15:55:33:6E Certificate issuer: /CN=381455361E726B6ECCDAF271673BD59B1555336E Certificate serial: 15F185597B320FBE099273A52CC29917AF30F015 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/381455361E726B6ECCDAF271673BD59B1555336E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.mft Manifest number: 0358 Signing time: Sat 19 Jul 2025 14:11:37 +0000 Manifest this update: Sat 19 Jul 2025 14:06:37 +0000 Manifest next update: Tue 22 Jul 2025 21:07:37 +0000 Files and hashes: 1: 381455361E726B6ECCDAF271673BD59B1555336E.crl (hash: lJA/p/eWO8yttwUq/CaPtcT5G8SD2unQDoYyThwwYpI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.crl rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/381455361E726B6ECCDAF271673BD59B1555336E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 21:07:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:f1:85:59:7b:32:0f:be:09:92:73:a5:2c:c2:99:17:af:30:f0:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=381455361E726B6ECCDAF271673BD59B1555336E Validity Not Before: Jul 19 14:06:37 2025 GMT Not After : Jul 22 21:07:37 2025 GMT Subject: CN=3210B1B0C4A0A13E402B40BCD0AFBCF93CCEA897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:19:fb:95:ac:96:c7:68:1c:61:bf:b3:fc:53: 69:36:74:8f:b6:c2:fb:08:0f:f9:0d:ad:6a:69:a9: 4b:8d:90:1c:79:61:c8:c3:79:49:d1:32:fa:6e:ea: 79:d8:c6:22:29:7b:62:9d:3a:b1:a8:c8:b9:91:35: 3a:a9:16:cc:c0:2a:04:d5:f8:bf:53:09:3a:4a:c5: 59:57:3e:ec:10:b1:1b:86:3c:aa:2e:29:c5:fb:bf: af:08:2d:b2:2b:86:ce:db:b4:97:64:13:89:e3:90: be:02:ff:bd:80:b1:72:0b:00:3b:13:18:69:24:31: 9d:fa:d2:f7:9c:33:fe:a5:0e:46:2b:0c:e6:54:c3: 33:91:e0:dd:dc:13:83:cc:0f:54:e3:3f:62:30:4c: 8d:94:e5:b0:9d:9c:27:bb:4f:4f:56:b2:cf:73:53: 79:73:25:14:ee:bd:50:a3:ef:a1:6c:27:9d:a3:ff: c6:f6:fb:f5:a9:e9:c6:da:46:07:e4:c3:41:a6:5e: b8:49:ce:21:82:d8:c5:f4:8c:4f:4e:c6:ec:34:9f: ac:ca:55:f7:3d:95:f5:07:1f:4f:bf:81:2d:22:4d: b2:70:47:71:78:b6:af:8b:11:41:4e:cc:d4:bc:cd: 45:91:1d:74:58:d8:4b:a8:56:3c:14:ae:4f:78:ec: 6a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:10:B1:B0:C4:A0:A1:3E:40:2B:40:BC:D0:AF:BC:F9:3C:CE:A8:97 X509v3 Authority Key Identifier: keyid:38:14:55:36:1E:72:6B:6E:CC:DA:F2:71:67:3B:D5:9B:15:55:33:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/381455361E726B6ECCDAF271673BD59B1555336E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:b2:2c:88:4f:4f:aa:1f:e8:f8:2a:64:89:a9:b1:3d:40:22: d6:18:64:19:08:d8:c2:bc:e1:f1:85:a1:da:c2:79:11:2b:66: 0d:5b:37:83:17:b9:d8:0b:26:4a:7c:52:07:c7:16:2c:85:bc: ea:06:3d:41:92:b3:e6:25:81:28:33:58:af:07:81:03:a9:75: 0d:fe:77:e7:2a:88:3f:db:1d:7f:5f:59:05:1a:c2:a9:c5:a1: 6b:11:5f:80:ff:47:12:1b:11:36:7c:42:5f:4f:ed:37:21:61: e4:7f:f4:77:6b:cf:c3:cf:84:dc:98:0f:1d:7b:17:bd:65:0d: e3:9f:79:6d:81:a5:38:c9:8b:c4:d4:c8:33:82:f6:cf:ea:b7: 76:c9:4e:d7:ee:56:4a:72:78:8a:e9:00:d4:59:4d:27:9d:f5: 37:c1:13:cd:d2:56:78:6b:16:15:64:c8:e1:17:4c:a0:24:8a: d4:80:4f:31:a0:5b:6f:9b:df:f8:9e:f6:81:4b:1e:85:e8:b9: a7:9f:68:e7:8b:e2:3d:22:f8:06:c2:ca:76:b5:94:c4:7c:63: 27:b8:79:48:c5:f6:b8:b1:27:8f:24:c6:14:82:aa:67:aa:fe: f8:72:6b:dd:d8:90:47:b9:e2:c6:7a:a3:e8:3e:30:f8:6b:92: 03:e0:fd:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFfGFWXsyD74JknOlLMKZF68w8BUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzgxNDU1MzYxRTcyNkI2RUNDREFGMjcxNjczQkQ1OUIx NTU1MzM2RTAeFw0yNTA3MTkxNDA2MzdaFw0yNTA3MjIyMTA3MzdaMDMxMTAvBgNV BAMTKDMyMTBCMUIwQzRBMEExM0U0MDJCNDBCQ0QwQUZCQ0Y5M0NDRUE4OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXGfuVrJbHaBxhv7P8U2k2dI+2 wvsID/kNrWppqUuNkBx5YcjDeUnRMvpu6nnYxiIpe2KdOrGoyLmRNTqpFszAKgTV +L9TCTpKxVlXPuwQsRuGPKouKcX7v68ILbIrhs7btJdkE4njkL4C/72AsXILADsT GGkkMZ360vecM/6lDkYrDOZUwzOR4N3cE4PMD1TjP2IwTI2U5bCdnCe7T09Wss9z U3lzJRTuvVCj76FsJ52j/8b2+/Wp6cbaRgfkw0GmXrhJziGC2MX0jE9Oxuw0n6zK Vfc9lfUHH0+/gS0iTbJwR3F4tq+LEUFOzNS8zUWRHXRY2EuoVjwUrk947GpTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMhCxsMSgoT5AK0C80K+8+TzOqJcwHwYDVR0j BBgwFoAUOBRVNh5ya27M2vJxZzvVmxVVM24wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzE5ODc0Yy1hNmIyLTRiMGItOWNjNi01NTlhNGU3Y2Q5NWEvMC8zODE0NTUzNjFF NzI2QjZFQ0NEQUYyNzE2NzNCRDU5QjE1NTUzMzZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzgxNDU1MzYxRTcyNkI2RUNDREFGMjcxNjczQkQ1OUIxNTU1 MzM2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMxOTg3NGMtYTZiMi00YjBiLTlj YzYtNTU5YTRlN2NkOTVhLzAvMzgxNDU1MzYxRTcyNkI2RUNDREFGMjcxNjczQkQ1 OUIxNTU1MzM2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA+yLIhPT6of6PgqZImpsT1AItYYZBkI2MK8 4fGFodrCeRErZg1bN4MXudgLJkp8UgfHFiyFvOoGPUGSs+YlgSgzWK8HgQOpdQ3+ d+cqiD/bHX9fWQUawqnFoWsRX4D/RxIbETZ8Ql9P7TchYeR/9Hdrz8PPhNyYDx17 F71lDeOfeW2BpTjJi8TUyDOC9s/qt3bJTtfuVkpyeIrpANRZTSed9TfBE83SVnhr FhVkyOEXTKAkitSATzGgW2+b3/ie9oFLHoXouaefaOeL4j0i+AbCyna1lMR8Yye4 eUjF9rixJ48kxhSCqmeq/vhya93YkEe54sZ6o+g+MPhrkgPg/do= -----END CERTIFICATE-----Generated at Sun Jul 20 21:56:24 2025 by rpki-client