$ rpki-client -vvf repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft File: 02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft (raw, json) Hash identifier: PF9PuLZhoUxclBXfOy6sRxPB0YFOf9Xn6WTpIa9ogb4= Subject key identifier: 96:E9:3D:94:03:DF:FC:32:8E:E1:63:2A:2A:FF:DA:F8:60:BD:CA:EC Authority key identifier: 02:23:69:13:B4:6A:90:03:C0:64:5E:6C:C8:58:EA:54:D6:D7:F4:AC Certificate issuer: /CN=02236913B46A9003C0645E6CC858EA54D6D7F4AC Certificate serial: 5A54A91905AFA9B32FB8917F83E9CA5765F37986 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02236913B46A9003C0645E6CC858EA54D6D7F4AC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft Manifest number: E5 Signing time: Tue 22 Jul 2025 13:00:58 +0000 Manifest this update: Tue 22 Jul 2025 12:55:58 +0000 Manifest next update: Fri 25 Jul 2025 20:56:58 +0000 Files and hashes: 1: 02236913B46A9003C0645E6CC858EA54D6D7F4AC.crl (hash: wPw0ZflKDf3VxJJFRQ4qvgpJvkAmOOs/URBUHPW5bQY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.crl rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02236913B46A9003C0645E6CC858EA54D6D7F4AC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:54:a9:19:05:af:a9:b3:2f:b8:91:7f:83:e9:ca:57:65:f3:79:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02236913B46A9003C0645E6CC858EA54D6D7F4AC Validity Not Before: Jul 22 12:55:58 2025 GMT Not After : Jul 25 20:56:58 2025 GMT Subject: CN=96E93D9403DFFC328EE1632A2AFFDAF860BDCAEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:27:44:fa:3b:df:4f:29:d2:55:23:42:13:bb: 4f:6f:06:97:21:c7:ca:2a:54:19:ad:75:e5:03:f5: ee:b7:23:14:0d:db:70:ec:84:d5:2e:26:df:44:4b: 85:cf:a8:36:33:2a:fd:07:c3:77:f6:5c:2e:3a:35: c1:5b:e6:c7:c4:ab:cb:d5:50:81:f5:a4:a4:71:fb: 77:9f:01:ff:9b:a8:7b:6f:fd:75:37:9d:e4:e2:af: e8:02:07:e8:05:b1:78:b6:5d:f2:2d:40:c1:f1:61: af:52:62:92:fe:bf:0f:de:ca:8f:fb:89:ee:f0:86: 48:4c:6f:4b:ad:86:61:1a:09:ce:5e:41:f3:cc:74: a8:5b:0f:57:9e:f5:b6:a0:bf:4c:32:a0:8d:9a:88: 99:44:82:8a:a3:23:ef:2b:cb:87:34:e5:56:eb:8e: b9:fb:a8:1d:e5:32:72:7a:2c:d2:f2:3a:a0:92:26: b1:3e:d8:c2:a2:e0:61:05:81:c0:dd:31:16:44:56: b5:bf:83:08:7d:c5:9d:51:1b:d3:16:3a:00:56:36: 97:60:61:80:82:a5:3e:82:81:08:64:1a:60:46:9e: c2:4b:4c:3b:26:2e:83:5c:45:33:95:74:66:98:c4: e9:c1:24:67:61:ac:88:32:9a:70:67:dd:65:cc:d2: 1d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:E9:3D:94:03:DF:FC:32:8E:E1:63:2A:2A:FF:DA:F8:60:BD:CA:EC X509v3 Authority Key Identifier: keyid:02:23:69:13:B4:6A:90:03:C0:64:5E:6C:C8:58:EA:54:D6:D7:F4:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02236913B46A9003C0645E6CC858EA54D6D7F4AC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:8c:e0:d1:4c:96:ff:46:ce:78:7f:9f:85:69:10:13:c5:9c: 8a:fa:d2:8a:e3:a0:d0:5e:2c:ce:3e:75:f1:95:f0:d9:1d:cc: ef:de:da:95:0f:92:00:d8:6f:a4:83:32:9e:00:c6:8c:f1:8e: 59:ac:d5:10:78:90:1e:fa:a1:f7:4b:8a:e0:5a:bb:d1:c7:c8: fa:7a:fe:8d:12:b8:f0:5f:10:94:e1:d2:20:e4:41:66:49:ac: 5a:8f:9b:24:69:17:0b:73:e9:8f:f3:ff:78:1f:9d:ae:39:ff: 8d:0c:0e:d0:d5:0b:36:0b:9d:8f:b5:ad:0d:fd:e3:bc:37:5a: 45:70:bc:4a:db:4e:99:09:aa:d5:18:90:e3:89:81:fc:49:9d: 03:30:86:eb:72:f3:11:1d:81:3c:ca:64:84:61:03:32:a2:a8: 22:19:e5:e2:3a:3f:21:86:8e:ef:e0:71:ca:e7:2c:d2:28:5b: b2:94:0b:7d:9a:02:ae:84:79:c1:41:ed:ea:e9:fa:09:87:ea: 84:6c:19:8b:78:88:29:d9:92:c4:a7:03:57:70:df:65:c0:20: ff:ca:43:85:72:17:43:bd:60:8a:3f:67:0e:ba:c0:79:d6:4a: a6:53:3c:93:ee:32:8e:0c:2f:f6:4b:0e:61:ee:51:d4:3c:ce: 66:06:42:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWlSpGQWvqbMvuJF/g+nKV2XzeYYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIyMzY5MTNCNDZBOTAwM0MwNjQ1RTZDQzg1OEVBNTRE NkQ3RjRBQzAeFw0yNTA3MjIxMjU1NThaFw0yNTA3MjUyMDU2NThaMDMxMTAvBgNV BAMTKDk2RTkzRDk0MDNERkZDMzI4RUUxNjMyQTJBRkZEQUY4NjBCRENBRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8J0T6O99PKdJVI0ITu09vBpch x8oqVBmtdeUD9e63IxQN23DshNUuJt9ES4XPqDYzKv0Hw3f2XC46NcFb5sfEq8vV UIH1pKRx+3efAf+bqHtv/XU3neTir+gCB+gFsXi2XfItQMHxYa9SYpL+vw/eyo/7 ie7whkhMb0uthmEaCc5eQfPMdKhbD1ee9bagv0wyoI2aiJlEgoqjI+8ry4c05Vbr jrn7qB3lMnJ6LNLyOqCSJrE+2MKi4GEFgcDdMRZEVrW/gwh9xZ1RG9MWOgBWNpdg YYCCpT6CgQhkGmBGnsJLTDsmLoNcRTOVdGaYxOnBJGdhrIgymnBn3WXM0h3BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUluk9lAPf/DKO4WMqKv/a+GC9yuwwHwYDVR0j BBgwFoAUAiNpE7RqkAPAZF5syFjqVNbX9KwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YjcyZjcxYS1iOWMyLTQwMzMtOTY3NS1kNzcwNzYwM2E4MmMvMC8wMjIzNjkxM0I0 NkE5MDAzQzA2NDVFNkNDODU4RUE1NEQ2RDdGNEFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDIyMzY5MTNCNDZBOTAwM0MwNjQ1RTZDQzg1OEVBNTRENkQ3 RjRBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI3MmY3MWEtYjljMi00MDMzLTk2 NzUtZDc3MDc2MDNhODJjLzAvMDIyMzY5MTNCNDZBOTAwM0MwNjQ1RTZDQzg1OEVB NTRENkQ3RjRBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJuM4NFMlv9Gznh/n4VpEBPFnIr60orjoNBe LM4+dfGV8NkdzO/e2pUPkgDYb6SDMp4Axozxjlms1RB4kB76ofdLiuBau9HHyPp6 /o0SuPBfEJTh0iDkQWZJrFqPmyRpFwtz6Y/z/3gfna45/40MDtDVCzYLnY+1rQ39 47w3WkVwvErbTpkJqtUYkOOJgfxJnQMwhuty8xEdgTzKZIRhAzKiqCIZ5eI6PyGG ju/gccrnLNIoW7KUC32aAq6EecFB7erp+gmH6oRsGYt4iCnZksSnA1dw32XAIP/K Q4VyF0O9YIo/Zw66wHnWSqZTPJPuMo4ML/ZLDmHuUdQ8zmYGQqM= -----END CERTIFICATE-----Generated at Thu Jul 24 17:45:41 2025 by rpki-client