$ rpki-client -vvf repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.mft File: 2244AB179BDE031980D325EEBEAFEC994CA8B419.mft (raw, json) Hash identifier: gY9fBgJWCYTcQtWg8As3hZlEhWbHGbCGYudsCCpFQfE= Subject key identifier: BD:9E:80:72:71:08:09:9F:32:39:1A:D1:8D:C1:71:7D:B7:42:43:A3 Authority key identifier: 22:44:AB:17:9B:DE:03:19:80:D3:25:EE:BE:AF:EC:99:4C:A8:B4:19 Certificate issuer: /CN=2244AB179BDE031980D325EEBEAFEC994CA8B419 Certificate serial: 1CB6F2DE60BDCD334C9621DAB3E9052413DC9452 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2244AB179BDE031980D325EEBEAFEC994CA8B419.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.mft Manifest number: 92 Signing time: Sun 20 Jul 2025 23:41:00 +0000 Manifest this update: Sun 20 Jul 2025 23:36:00 +0000 Manifest next update: Thu 24 Jul 2025 05:47:00 +0000 Files and hashes: 1: 2244AB179BDE031980D325EEBEAFEC994CA8B419.crl (hash: wvqrDBLDNbKXgYCk8n7d3wD/uFGp6LqPF49pz1ji1dw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.crl rsync://repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2244AB179BDE031980D325EEBEAFEC994CA8B419.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 05:47:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:b6:f2:de:60:bd:cd:33:4c:96:21:da:b3:e9:05:24:13:dc:94:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2244AB179BDE031980D325EEBEAFEC994CA8B419 Validity Not Before: Jul 20 23:36:00 2025 GMT Not After : Jul 24 05:47:00 2025 GMT Subject: CN=BD9E80727108099F32391AD18DC1717DB74243A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a5:1e:7f:a5:e0:c4:e2:47:bc:3d:7e:9d:d7: b8:b9:36:0c:b3:45:ff:ec:24:65:88:6e:84:2d:ed: 9a:c1:a8:d8:17:0f:47:9c:a7:19:b2:a4:ac:b9:7f: 0f:32:a4:3c:ee:13:7c:9b:41:7d:95:d1:f2:8f:43: c8:6d:56:4e:9d:03:dd:29:5f:83:ea:ea:8a:6f:f3: aa:b3:da:f0:28:19:0e:15:92:c9:92:a6:e2:4c:06: 81:2b:48:0c:6b:0a:78:da:c1:8b:4e:ef:2d:5d:4a: 9d:87:0d:34:05:6a:64:19:7b:fc:08:dd:76:46:a6: f2:dc:6b:fa:f3:8f:f0:b7:ef:20:9b:69:a8:1e:2b: 1e:a7:b0:cc:c5:5d:d2:7d:1e:b7:3c:0f:71:b5:cc: 95:e8:68:90:75:5e:21:0b:3f:f1:17:cf:6e:4b:db: 8f:b1:87:c9:f4:ca:a8:d8:a6:fc:64:61:f8:25:c4: 2f:55:46:3c:fc:47:b9:9d:36:29:78:7b:06:9e:7b: de:c4:f3:25:f7:f7:47:8d:5c:d3:68:ab:56:98:a1: fb:77:95:d2:bc:e1:cc:22:fb:10:ed:11:79:26:fc: ce:cd:e6:4a:81:8d:d1:e1:bf:53:c2:d5:7d:09:ec: ec:69:20:e9:ee:82:18:a2:ae:ab:52:62:de:e5:99: dd:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:9E:80:72:71:08:09:9F:32:39:1A:D1:8D:C1:71:7D:B7:42:43:A3 X509v3 Authority Key Identifier: keyid:22:44:AB:17:9B:DE:03:19:80:D3:25:EE:BE:AF:EC:99:4C:A8:B4:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2244AB179BDE031980D325EEBEAFEC994CA8B419.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6da0cdd9-7f31-4f1f-ab09-a60cc0859cda/0/2244AB179BDE031980D325EEBEAFEC994CA8B419.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:3e:02:5e:63:65:12:3d:38:b0:0a:50:8d:e9:78:45:b9:6c: 40:f8:bd:65:76:99:42:de:ce:a3:b9:3c:61:b5:0c:3e:f7:5d: 1f:c5:c5:70:44:cc:a6:47:f7:b8:ca:2f:77:af:0e:6c:b4:83: ad:b8:a0:00:cb:37:d8:3f:d6:1f:ea:f2:92:dd:6b:70:b6:9f: 5d:9e:3a:47:d0:45:b5:02:e1:c2:5d:e8:aa:80:6e:4f:8f:02: 7f:04:43:0b:27:4d:57:67:2d:77:b3:62:5a:00:97:bd:44:7f: 2d:eb:a3:39:67:6a:d9:9f:40:f9:fa:fc:b8:67:d2:6c:09:f2: 05:94:bc:9d:a8:e8:84:f0:00:c0:7a:40:09:38:a8:4c:52:a1: 95:80:64:2b:1f:7b:b4:0e:6b:37:f3:93:2a:b8:1a:11:f3:0d: 65:c3:b3:54:4b:5d:ae:47:a4:20:48:46:fc:12:8f:8e:66:3b: 24:33:ce:79:07:0f:4c:fd:47:3d:8c:e8:34:0e:0e:ae:9c:46: e4:cd:f8:2a:dc:53:aa:71:49:fc:bf:ea:83:d3:5f:05:9c:80: 9e:ee:78:f1:f8:b9:6a:e0:ca:e6:5c:1c:1c:e1:26:46:d0:f9: dd:88:38:71:30:f2:71:e7:b3:22:2e:57:af:95:cb:6e:90:aa: 83:29:e2:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHLby3mC9zTNMliHas+kFJBPclFIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI0NEFCMTc5QkRFMDMxOTgwRDMyNUVFQkVBRkVDOTk0 Q0E4QjQxOTAeFw0yNTA3MjAyMzM2MDBaFw0yNTA3MjQwNTQ3MDBaMDMxMTAvBgNV BAMTKEJEOUU4MDcyNzEwODA5OUYzMjM5MUFEMThEQzE3MTdEQjc0MjQzQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvpR5/peDE4ke8PX6d17i5Ngyz Rf/sJGWIboQt7ZrBqNgXD0ecpxmypKy5fw8ypDzuE3ybQX2V0fKPQ8htVk6dA90p X4Pq6opv86qz2vAoGQ4VksmSpuJMBoErSAxrCnjawYtO7y1dSp2HDTQFamQZe/wI 3XZGpvLca/rzj/C37yCbaageKx6nsMzFXdJ9Hrc8D3G1zJXoaJB1XiELP/EXz25L 24+xh8n0yqjYpvxkYfglxC9VRjz8R7mdNil4ewaee97E8yX390eNXNNoq1aYoft3 ldK84cwi+xDtEXkm/M7N5kqBjdHhv1PC1X0J7OxpIOnughiirqtSYt7lmd3NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvZ6AcnEICZ8yORrRjcFxfbdCQ6MwHwYDVR0j BBgwFoAUIkSrF5veAxmA0yXuvq/smUyotBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZGEwY2RkOS03ZjMxLTRmMWYtYWIwOS1hNjBjYzA4NTljZGEvMC8yMjQ0QUIxNzlC REUwMzE5ODBEMzI1RUVCRUFGRUM5OTRDQThCNDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI0NEFCMTc5QkRFMDMxOTgwRDMyNUVFQkVBRkVDOTk0Q0E4 QjQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmRhMGNkZDktN2YzMS00ZjFmLWFi MDktYTYwY2MwODU5Y2RhLzAvMjI0NEFCMTc5QkRFMDMxOTgwRDMyNUVFQkVBRkVD OTk0Q0E4QjQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMU+Al5jZRI9OLAKUI3peEW5bED4vWV2mULe zqO5PGG1DD73XR/FxXBEzKZH97jKL3evDmy0g624oADLN9g/1h/q8pLda3C2n12e OkfQRbUC4cJd6KqAbk+PAn8EQwsnTVdnLXezYloAl71Efy3rozlnatmfQPn6/Lhn 0mwJ8gWUvJ2o6ITwAMB6QAk4qExSoZWAZCsfe7QOazfzkyq4GhHzDWXDs1RLXa5H pCBIRvwSj45mOyQzznkHD0z9Rz2M6DQODq6cRuTN+CrcU6pxSfy/6oPTXwWcgJ7u ePH4uWrgyuZcHBzhJkbQ+d2IOHEw8nHnsyIuV6+Vy26QqoMp4o4= -----END CERTIFICATE-----Generated at Wed Jul 23 02:20:21 2025 by rpki-client