$ rpki-client -vvf repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.mft File: 115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.mft (raw, json) Hash identifier: v3WRJu0brpzNU+n1e9bFA8wCXMgeCG8iDytHr+vtw2A= Subject key identifier: 38:6A:4F:A7:8F:09:67:D1:42:F2:4A:88:06:76:38:6F:E0:A0:2C:9B Authority key identifier: 11:5F:DA:5F:36:D9:1E:E9:38:FA:B5:D4:B2:AB:88:42:2A:3D:4B:BF Certificate issuer: /CN=115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF Certificate serial: 678ECEE32969D89F76117A135F6C30877D6B6C11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.mft Manifest number: 01B6 Signing time: Fri 18 Jul 2025 14:41:42 +0000 Manifest this update: Fri 18 Jul 2025 14:36:42 +0000 Manifest next update: Tue 22 Jul 2025 02:08:42 +0000 Files and hashes: 1: 115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.crl (hash: jcVJyD7Q8FxVcm8Z17Y0e61y9HJSU9l/LetFCLz3haw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.crl rsync://repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 02:08:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:8e:ce:e3:29:69:d8:9f:76:11:7a:13:5f:6c:30:87:7d:6b:6c:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF Validity Not Before: Jul 18 14:36:42 2025 GMT Not After : Jul 22 02:08:42 2025 GMT Subject: CN=386A4FA78F0967D142F24A880676386FE0A02C9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:17:f9:9d:e6:0e:6f:0f:50:d9:c9:70:cc:44: f4:30:e4:ee:1f:4b:01:63:57:ee:b3:42:2a:00:ca: d3:78:52:ec:fd:48:97:26:63:17:70:76:f6:b3:4e: 07:95:73:a9:d4:57:70:54:de:fe:47:7f:2f:5c:00: 21:94:36:8e:4f:f5:ea:9f:d9:1d:61:8b:ba:9f:9a: 57:20:12:38:fb:c2:f2:60:85:11:c6:b2:c7:06:6d: 4b:25:d9:30:c9:f1:b8:25:5f:df:fb:05:a3:9f:74: 77:48:6f:00:11:1a:34:ee:f1:d7:30:6e:60:85:e9: cc:a3:71:0e:fa:05:f6:c0:8c:f7:ab:e2:bc:80:e4: 8e:9f:ed:af:4e:96:44:22:2d:64:9f:cb:d5:0e:1f: ce:8e:5e:c0:70:3b:7b:51:48:dd:97:08:e0:b8:99: ed:eb:21:45:44:7d:4f:7c:6e:04:1f:6c:65:79:cc: 26:9e:24:61:a7:3f:b6:cc:8a:de:e9:71:f9:60:18: e3:65:af:06:65:bf:b9:d9:ca:f6:94:de:24:4e:39: 07:d5:e3:7b:95:32:0a:a1:11:e9:2a:7d:c3:a8:a9: d2:4f:7e:ea:51:76:92:ca:93:16:cb:ca:a0:23:16: 76:6f:71:f8:72:39:fd:8e:c9:e9:4a:5f:15:e1:57: 3f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:6A:4F:A7:8F:09:67:D1:42:F2:4A:88:06:76:38:6F:E0:A0:2C:9B X509v3 Authority Key Identifier: keyid:11:5F:DA:5F:36:D9:1E:E9:38:FA:B5:D4:B2:AB:88:42:2A:3D:4B:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:3c:b8:3f:f7:d8:20:23:69:d2:b2:6c:9a:c1:7e:b6:0a:50: a9:ff:12:5b:01:cf:58:db:a8:28:bb:4c:e0:ea:13:cc:0d:2c: 31:f2:a9:52:cb:22:4b:f4:47:af:2f:98:b2:0b:c4:26:0a:ac: 99:91:53:e8:85:fc:f7:82:66:21:7c:02:27:7d:5a:bb:f1:ad: 5d:7a:f8:03:7d:68:00:ed:b8:90:dd:c1:c3:50:1f:0e:a3:ce: 73:e7:80:dd:cf:8c:63:84:41:76:13:ac:1a:1d:e7:28:10:91: 64:18:44:3c:1b:74:c1:fc:23:f0:6d:41:e8:f6:4b:49:a0:0f: 56:4d:9e:bc:66:5d:db:8a:4a:ce:f9:30:ec:df:83:3d:2e:57: 0e:47:8d:c6:44:10:42:92:b0:4e:67:dd:2b:42:20:e4:aa:aa: bd:0b:90:b9:27:e2:56:bf:ff:95:fe:5f:7a:57:31:d6:d6:8f: b4:11:4b:a7:cb:89:40:fd:86:54:94:23:11:2c:c1:05:bf:6a: 3c:fd:40:54:1d:00:67:e4:da:06:f7:6f:e3:dc:62:e3:26:cc: 02:19:09:aa:6c:06:f6:1a:cd:e6:a5:af:b0:0c:99:67:ad:d1: eb:40:95:56:b4:94:a1:be:e3:7e:f9:f0:9c:eb:14:80:9e:c6: 91:bb:ed:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ47O4ylp2J92EXoTX2wwh31rbBEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE1RkRBNUYzNkQ5MUVFOTM4RkFCNUQ0QjJBQjg4NDIy QTNENEJCRjAeFw0yNTA3MTgxNDM2NDJaFw0yNTA3MjIwMjA4NDJaMDMxMTAvBgNV BAMTKDM4NkE0RkE3OEYwOTY3RDE0MkYyNEE4ODA2NzYzODZGRTBBMDJDOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+F/md5g5vD1DZyXDMRPQw5O4f SwFjV+6zQioAytN4Uuz9SJcmYxdwdvazTgeVc6nUV3BU3v5Hfy9cACGUNo5P9eqf 2R1hi7qfmlcgEjj7wvJghRHGsscGbUsl2TDJ8bglX9/7BaOfdHdIbwARGjTu8dcw bmCF6cyjcQ76BfbAjPer4ryA5I6f7a9OlkQiLWSfy9UOH86OXsBwO3tRSN2XCOC4 me3rIUVEfU98bgQfbGV5zCaeJGGnP7bMit7pcflgGONlrwZlv7nZyvaU3iROOQfV 43uVMgqhEekqfcOoqdJPfupRdpLKkxbLyqAjFnZvcfhyOf2OyelKXxXhVz/3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOGpPp48JZ9FC8kqIBnY4b+CgLJswHwYDVR0j BBgwFoAUEV/aXzbZHuk4+rXUsquIQio9S78wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzI2NzgyNS01MWFmLTQ1NmQtYjQ1YS1hZTkzYzVmMjcwZWUvMC8xMTVGREE1RjM2 RDkxRUU5MzhGQUI1RDRCMkFCODg0MjJBM0Q0QkJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE1RkRBNUYzNkQ5MUVFOTM4RkFCNUQ0QjJBQjg4NDIyQTNE NEJCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMyNjc4MjUtNTFhZi00NTZkLWI0 NWEtYWU5M2M1ZjI3MGVlLzAvMTE1RkRBNUYzNkQ5MUVFOTM4RkFCNUQ0QjJBQjg4 NDIyQTNENEJCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB08uD/32CAjadKybJrBfrYKUKn/ElsBz1jb qCi7TODqE8wNLDHyqVLLIkv0R68vmLILxCYKrJmRU+iF/PeCZiF8Aid9WrvxrV16 +AN9aADtuJDdwcNQHw6jznPngN3PjGOEQXYTrBod5ygQkWQYRDwbdMH8I/BtQej2 S0mgD1ZNnrxmXduKSs75MOzfgz0uVw5HjcZEEEKSsE5n3StCIOSqqr0LkLkn4la/ /5X+X3pXMdbWj7QRS6fLiUD9hlSUIxEswQW/ajz9QFQdAGfk2gb3b+PcYuMmzAIZ CapsBvYazealr7AMmWet0etAlVa0lKG+43758JzrFICexpG77W4= -----END CERTIFICATE-----Generated at Sun Jul 20 22:34:30 2025 by rpki-client