$ rpki-client -vvf repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.mft File: A349D07CAB13BF067B13D95E99981C2BA84B9A6B.mft (raw, json) Hash identifier: F/7CSvlfwDelZDlsxPV583Mq4+DrUXfKAQNyJ5G1ItU= Subject key identifier: F1:3D:DA:84:2D:B5:4F:0B:3A:95:10:EF:15:0F:D0:17:83:73:D4:7D Authority key identifier: A3:49:D0:7C:AB:13:BF:06:7B:13:D9:5E:99:98:1C:2B:A8:4B:9A:6B Certificate issuer: /CN=A349D07CAB13BF067B13D95E99981C2BA84B9A6B Certificate serial: 03CF9EBAA97F79AEDA9E2E84EAF998D39897F73C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.mft Manifest number: 049F Signing time: Sat 19 Jul 2025 14:40:36 +0000 Manifest this update: Sat 19 Jul 2025 14:35:36 +0000 Manifest next update: Tue 22 Jul 2025 20:57:36 +0000 Files and hashes: 1: A349D07CAB13BF067B13D95E99981C2BA84B9A6B.crl (hash: Nq+/swUsv7ryB1H+r5JhG1y7mRa33wxA9vMg+1+yF50=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.crl rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 20:57:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:cf:9e:ba:a9:7f:79:ae:da:9e:2e:84:ea:f9:98:d3:98:97:f7:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A349D07CAB13BF067B13D95E99981C2BA84B9A6B Validity Not Before: Jul 19 14:35:36 2025 GMT Not After : Jul 22 20:57:36 2025 GMT Subject: CN=F13DDA842DB54F0B3A9510EF150FD0178373D47D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f0:75:e2:7b:7c:62:1e:8e:ec:2c:5f:72:31: 52:50:8d:50:7b:62:9e:f2:45:20:2c:5f:6c:06:2c: 5c:25:57:41:5b:52:b1:49:13:85:0f:d4:4a:0e:9a: 90:bf:b2:ad:19:cb:fc:1c:45:91:c7:e3:52:47:e9: d9:88:52:4f:9b:63:e1:16:c2:ae:21:e4:96:0f:5b: aa:c0:0b:a8:12:2c:e3:f3:3c:00:8c:3b:a3:bb:05: af:36:5d:9a:bc:5d:c6:56:dd:a6:49:ca:f9:11:62: a7:84:e3:e5:36:e8:d1:27:55:ce:76:53:0a:fc:68: 37:b7:5d:23:a7:72:4e:b0:1b:1e:3a:5d:e3:f8:05: 43:d3:34:bb:de:2b:d9:06:67:5d:34:c8:8c:5d:95: e5:8d:c8:d7:17:08:89:88:05:38:e6:e5:62:33:06: 5c:0d:16:ac:8d:2a:5b:f4:63:54:49:1a:f3:1b:67: ed:2f:50:27:4d:2a:11:51:e5:32:15:72:fc:fc:5c: ac:bb:38:80:11:98:96:04:10:e4:94:a8:fd:cf:ca: 7d:63:e5:fc:89:48:19:6d:ae:80:59:27:45:b8:db: 03:ed:76:ed:16:ac:21:c2:4e:fd:07:4a:cd:61:9a: 21:df:85:7a:1d:35:86:ff:97:34:89:00:8c:6a:97: a2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:3D:DA:84:2D:B5:4F:0B:3A:95:10:EF:15:0F:D0:17:83:73:D4:7D X509v3 Authority Key Identifier: keyid:A3:49:D0:7C:AB:13:BF:06:7B:13:D9:5E:99:98:1C:2B:A8:4B:9A:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:13:d3:11:c0:35:b1:99:a9:35:1b:4c:12:cf:88:26:cc:ab: 5c:ab:ca:47:6c:cf:0d:c3:51:c4:ff:d7:de:98:58:c8:7b:0c: 2a:f3:9a:35:8a:1a:6d:71:56:41:a7:a7:c2:52:a3:b1:29:22: 0e:23:5a:f1:46:9c:00:e6:f7:45:91:8e:af:f7:0d:cf:66:42: 6f:02:9c:80:05:f5:c3:71:c1:7d:8c:a8:fd:dd:5d:9a:93:c1: 41:6c:89:46:06:9d:34:7f:0a:3c:bf:2f:ca:f9:da:0a:55:be: 78:76:1c:e6:4b:f6:76:6f:7a:55:c4:c7:4c:49:47:12:3e:a5: 4e:b7:f9:1e:0c:a3:51:a1:a2:f6:14:f7:42:30:78:1d:9a:41: 72:0d:05:fd:cf:b9:77:cc:35:47:ee:6d:f6:04:88:99:f1:f6: 83:02:9f:9b:28:11:db:4d:a7:f8:59:7a:f7:46:b3:af:2d:cc: 50:0b:42:c6:5a:45:4c:a9:34:63:a2:61:6a:42:9a:75:fb:46: 99:5b:b4:bb:a2:4e:38:de:60:89:02:38:e9:0e:e9:96:c0:94: e1:e3:0b:96:0a:0a:ed:dc:42:9b:0d:60:35:1e:97:9c:dc:55: f6:b6:00:09:fd:d8:96:23:b8:06:f8:08:a1:e2:20:b5:7f:74: 8e:dd:92:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA8+euql/ea7ani6E6vmY05iX9zwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM0OUQwN0NBQjEzQkYwNjdCMTNEOTVFOTk5ODFDMkJB ODRCOUE2QjAeFw0yNTA3MTkxNDM1MzZaFw0yNTA3MjIyMDU3MzZaMDMxMTAvBgNV BAMTKEYxM0REQTg0MkRCNTRGMEIzQTk1MTBFRjE1MEZEMDE3ODM3M0Q0N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC78HXie3xiHo7sLF9yMVJQjVB7 Yp7yRSAsX2wGLFwlV0FbUrFJE4UP1EoOmpC/sq0Zy/wcRZHH41JH6dmIUk+bY+EW wq4h5JYPW6rAC6gSLOPzPACMO6O7Ba82XZq8XcZW3aZJyvkRYqeE4+U26NEnVc52 Uwr8aDe3XSOnck6wGx46XeP4BUPTNLveK9kGZ100yIxdleWNyNcXCImIBTjm5WIz BlwNFqyNKlv0Y1RJGvMbZ+0vUCdNKhFR5TIVcvz8XKy7OIARmJYEEOSUqP3Pyn1j 5fyJSBltroBZJ0W42wPtdu0WrCHCTv0HSs1hmiHfhXodNYb/lzSJAIxql6IZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8T3ahC21Tws6lRDvFQ/QF4Nz1H0wHwYDVR0j BBgwFoAUo0nQfKsTvwZ7E9lemZgcK6hLmmswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YWRmY2I0NC1hZTdhLTQ0MjMtYWU3ZC0wODY0OGJmMWRlYjEvMC9BMzQ5RDA3Q0FC MTNCRjA2N0IxM0Q5NUU5OTk4MUMyQkE4NEI5QTZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTM0OUQwN0NBQjEzQkYwNjdCMTNEOTVFOTk5ODFDMkJBODRC OUE2Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmFkZmNiNDQtYWU3YS00NDIzLWFl N2QtMDg2NDhiZjFkZWIxLzAvQTM0OUQwN0NBQjEzQkYwNjdCMTNEOTVFOTk5ODFD MkJBODRCOUE2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJMT0xHANbGZqTUbTBLPiCbMq1yrykdszw3D UcT/196YWMh7DCrzmjWKGm1xVkGnp8JSo7EpIg4jWvFGnADm90WRjq/3Dc9mQm8C nIAF9cNxwX2MqP3dXZqTwUFsiUYGnTR/Cjy/L8r52gpVvnh2HOZL9nZvelXEx0xJ RxI+pU63+R4Mo1GhovYU90IweB2aQXINBf3PuXfMNUfubfYEiJnx9oMCn5soEdtN p/hZevdGs68tzFALQsZaRUypNGOiYWpCmnX7RplbtLuiTjjeYIkCOOkO6ZbAlOHj C5YKCu3cQpsNYDUel5zcVfa2AAn92JYjuAb4CKHiILV/dI7dkiM= -----END CERTIFICATE-----Generated at Sun Jul 20 21:36:38 2025 by rpki-client