$ rpki-client -vvf repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft File: 114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft (raw, json) Hash identifier: OmRTzPSxG33hwehp+s4fUa1jKcz0J8UNtJJaoPgLGus= Subject key identifier: C0:A5:05:A1:20:BC:3F:54:1C:D1:3F:56:4F:0A:C7:1F:1A:A9:24:E3 Authority key identifier: 11:4C:9E:7E:A9:1F:63:87:C2:CB:F1:D1:6E:A8:24:58:0C:D6:85:87 Certificate issuer: /CN=114C9E7EA91F6387C2CBF1D16EA824580CD68587 Certificate serial: 254740B8C3B0BA2D99F8D5B481B71B086B91BDBA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/114C9E7EA91F6387C2CBF1D16EA824580CD68587.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft Manifest number: 04EE Signing time: Tue 22 Jul 2025 05:02:00 +0000 Manifest this update: Tue 22 Jul 2025 04:57:00 +0000 Manifest next update: Fri 25 Jul 2025 07:16:00 +0000 Files and hashes: 1: 114C9E7EA91F6387C2CBF1D16EA824580CD68587.crl (hash: Du+SPZZvIWyb0OR65tGCdFmCelnhhkv1KiYSPCgPMUM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.crl rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/114C9E7EA91F6387C2CBF1D16EA824580CD68587.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 07:16:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:47:40:b8:c3:b0:ba:2d:99:f8:d5:b4:81:b7:1b:08:6b:91:bd:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=114C9E7EA91F6387C2CBF1D16EA824580CD68587 Validity Not Before: Jul 22 04:57:00 2025 GMT Not After : Jul 25 07:16:00 2025 GMT Subject: CN=C0A505A120BC3F541CD13F564F0AC71F1AA924E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:10:68:e9:5e:0b:f8:49:d9:a0:6d:4e:13:ee: ed:88:91:ac:12:c9:ae:b8:70:ae:5f:50:61:88:c3: 73:10:7e:6c:2e:66:86:09:33:f4:f2:27:8b:5b:13: 5e:72:07:61:bf:8b:14:4d:48:39:18:d8:eb:68:c1: c5:49:f3:0b:36:c3:06:cb:a0:76:1c:40:6d:d7:f7: 8e:44:c2:f4:af:fd:36:68:b9:63:ee:be:98:10:6d: c5:f0:48:97:16:22:7a:a8:6e:36:26:27:b7:4b:e6: 96:08:0b:99:b6:19:c6:8e:99:db:23:b9:c5:ab:ae: ef:ae:ef:d8:b5:bf:2b:8d:b3:61:a3:07:bf:21:97: 0d:40:20:ca:88:18:9b:1f:a1:ac:a0:7f:8a:7c:a4: 9e:55:6f:41:fd:0c:6a:d2:91:ff:45:c7:82:27:23: 88:70:2e:26:3b:f3:fb:0b:17:f4:fe:81:cf:e2:e5: 77:e7:11:48:08:6c:93:0a:dc:bf:e9:f8:8a:47:df: f6:13:0c:c5:7a:1e:ee:d8:a1:b1:67:26:1d:48:2d: 9f:a9:e0:75:e3:15:15:3d:59:95:3e:e0:5e:56:87: 18:0b:58:b3:46:df:42:dc:ce:a5:89:e2:be:0b:56: 91:65:61:9c:18:a6:70:0d:8b:52:92:33:c1:cd:87: 89:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:A5:05:A1:20:BC:3F:54:1C:D1:3F:56:4F:0A:C7:1F:1A:A9:24:E3 X509v3 Authority Key Identifier: keyid:11:4C:9E:7E:A9:1F:63:87:C2:CB:F1:D1:6E:A8:24:58:0C:D6:85:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/114C9E7EA91F6387C2CBF1D16EA824580CD68587.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/114C9E7EA91F6387C2CBF1D16EA824580CD68587.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:7e:dc:38:32:13:6c:db:ea:9f:14:6e:ca:23:42:2b:00:f0: 5a:ac:e8:23:25:16:1e:52:91:24:5d:c3:53:1c:af:b2:38:87: 94:51:80:b0:b6:0e:92:6d:85:47:32:93:e0:2e:6a:50:e7:ba: 4f:c7:ba:9c:96:9e:04:fd:8f:b2:e7:d4:f1:05:0f:3b:ec:91: 89:66:bf:08:01:11:e1:8c:c0:ae:ae:b1:5b:8e:16:c9:99:68: 98:43:c4:6f:26:c4:e4:89:47:70:d5:a9:9e:f2:96:39:d1:29: c9:b0:f0:95:b4:58:41:73:52:48:ef:3e:54:c3:38:98:f9:25: 21:72:6b:ff:ca:9d:a4:da:e3:a4:f1:ab:c7:62:42:b3:50:62: d7:62:39:2f:3c:ae:d8:d8:9e:d2:39:07:8b:ad:7d:6f:02:d5: b6:ec:72:40:08:07:89:e5:4b:e7:4d:2a:43:06:86:fa:0e:0c: 95:af:d5:ff:7b:1a:c4:6c:ff:ef:fa:b0:0c:80:e2:eb:9f:61: 55:ca:6e:eb:3d:a1:7f:49:ac:a7:94:16:f6:13:59:b4:5e:74: fb:52:b3:e6:df:68:e3:5b:37:d1:ce:98:39:06:ea:98:a6:b7: bf:61:ef:2e:6d:68:4e:a1:70:f6:de:be:de:92:f2:0c:52:bd: 4b:0c:31:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJUdAuMOwui2Z+NW0gbcbCGuRvbowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE0QzlFN0VBOTFGNjM4N0MyQ0JGMUQxNkVBODI0NTgw Q0Q2ODU4NzAeFw0yNTA3MjIwNDU3MDBaFw0yNTA3MjUwNzE2MDBaMDMxMTAvBgNV BAMTKEMwQTUwNUExMjBCQzNGNTQxQ0QxM0Y1NjRGMEFDNzFGMUFBOTI0RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/EGjpXgv4SdmgbU4T7u2IkawS ya64cK5fUGGIw3MQfmwuZoYJM/TyJ4tbE15yB2G/ixRNSDkY2OtowcVJ8ws2wwbL oHYcQG3X945EwvSv/TZouWPuvpgQbcXwSJcWInqobjYmJ7dL5pYIC5m2GcaOmdsj ucWrru+u79i1vyuNs2GjB78hlw1AIMqIGJsfoaygf4p8pJ5Vb0H9DGrSkf9Fx4In I4hwLiY78/sLF/T+gc/i5XfnEUgIbJMK3L/p+IpH3/YTDMV6Hu7YobFnJh1ILZ+p 4HXjFRU9WZU+4F5WhxgLWLNG30LczqWJ4r4LVpFlYZwYpnANi1KSM8HNh4lxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwKUFoSC8P1Qc0T9WTwrHHxqpJOMwHwYDVR0j BBgwFoAUEUyefqkfY4fCy/HRbqgkWAzWhYcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDNlYzg0ZS02MGVmLTQ0ZDQtOWY0My04NWI2Zjk2YjI2Y2YvMC8xMTRDOUU3RUE5 MUY2Mzg3QzJDQkYxRDE2RUE4MjQ1ODBDRDY4NTg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE0QzlFN0VBOTFGNjM4N0MyQ0JGMUQxNkVBODI0NTgwQ0Q2 ODU4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQzZWM4NGUtNjBlZi00NGQ0LTlm NDMtODViNmY5NmIyNmNmLzAvMTE0QzlFN0VBOTFGNjM4N0MyQ0JGMUQxNkVBODI0 NTgwQ0Q2ODU4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFV+3DgyE2zb6p8UbsojQisA8Fqs6CMlFh5S kSRdw1Mcr7I4h5RRgLC2DpJthUcyk+AualDnuk/HupyWngT9j7Ln1PEFDzvskYlm vwgBEeGMwK6usVuOFsmZaJhDxG8mxOSJR3DVqZ7yljnRKcmw8JW0WEFzUkjvPlTD OJj5JSFya//KnaTa46Txq8diQrNQYtdiOS88rtjYntI5B4utfW8C1bbsckAIB4nl S+dNKkMGhvoODJWv1f97GsRs/+/6sAyA4uufYVXKbus9oX9JrKeUFvYTWbRedPtS s+bfaONbN9HOmDkG6pimt79h7y5taE6hcPbevt6S8gxSvUsMMVw= -----END CERTIFICATE-----Generated at Wed Jul 23 01:59:48 2025 by rpki-client