$ rpki-client -vvf repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.mft File: D4D0F3E6E684847D602FC73758893CE2BB05D399.mft (raw, json) Hash identifier: D+18GqnNo9H2hdozQ+Pb4/Lq1CbMJ54bqhC/iykurHI= Subject key identifier: D9:69:C5:D7:6E:32:58:95:EA:92:8F:E2:5C:66:65:93:51:32:8B:77 Authority key identifier: D4:D0:F3:E6:E6:84:84:7D:60:2F:C7:37:58:89:3C:E2:BB:05:D3:99 Certificate issuer: /CN=D4D0F3E6E684847D602FC73758893CE2BB05D399 Certificate serial: 23629B47A1DE89765EEA3425C10292A1B80248AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4D0F3E6E684847D602FC73758893CE2BB05D399.cer Subject info access: rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.mft Manifest number: 0194 Signing time: Sun 20 Jul 2025 21:20:43 +0000 Manifest this update: Sun 20 Jul 2025 21:15:43 +0000 Manifest next update: Thu 24 Jul 2025 09:05:43 +0000 Files and hashes: 1: D4D0F3E6E684847D602FC73758893CE2BB05D399.crl (hash: UXl5VcXWM+QDcGXvHDdak7vyjaawQ2JOBRX7qh3AoEc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.crl rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4D0F3E6E684847D602FC73758893CE2BB05D399.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 09:05:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:62:9b:47:a1:de:89:76:5e:ea:34:25:c1:02:92:a1:b8:02:48:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4D0F3E6E684847D602FC73758893CE2BB05D399 Validity Not Before: Jul 20 21:15:43 2025 GMT Not After : Jul 24 09:05:43 2025 GMT Subject: CN=D969C5D76E325895EA928FE25C66659351328B77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:4a:5e:76:93:d5:76:d1:75:5f:92:58:f0:b1: e3:13:74:3a:07:ca:37:b4:5b:30:6e:86:dc:41:86: d7:f9:45:44:ca:ac:7d:8d:4b:bf:c1:df:70:5f:64: a9:f4:db:2c:52:86:51:10:c0:55:a8:32:be:cc:8d: 34:91:b1:b6:e7:29:f8:9f:cb:15:d7:72:5a:c1:8d: de:4d:26:f4:a2:3a:d0:7a:71:ed:68:9d:b7:7c:05: 82:7d:76:81:04:a9:fb:c0:ab:5b:73:fc:65:3d:44: f8:38:a7:11:f6:15:56:27:e1:86:52:46:ee:d0:f7: 28:97:12:6c:e6:6e:9b:a6:2c:53:87:9b:a4:fd:b5: 56:33:e9:3e:db:9d:f7:8e:66:36:4b:d0:b0:36:97: d4:53:00:e0:18:df:75:9e:24:08:28:b0:da:a2:10: ba:d7:a1:f5:58:87:4d:79:35:b8:34:9b:c6:d0:90: 0e:d6:9b:44:4c:26:93:db:d1:6a:40:73:9b:fc:d6: 59:62:54:c6:46:41:a7:87:71:45:bb:0c:87:17:d8: 82:28:24:1a:1e:66:1f:36:28:ed:80:f0:ba:b5:8f: 60:5c:33:58:49:2a:c7:67:81:a2:86:48:94:22:e4: de:47:91:16:16:fe:8e:9e:66:ca:7b:f6:44:02:ed: 5a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:69:C5:D7:6E:32:58:95:EA:92:8F:E2:5C:66:65:93:51:32:8B:77 X509v3 Authority Key Identifier: keyid:D4:D0:F3:E6:E6:84:84:7D:60:2F:C7:37:58:89:3C:E2:BB:05:D3:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4D0F3E6E684847D602FC73758893CE2BB05D399.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:75:9d:7a:98:93:44:b5:8d:a7:07:8b:4f:85:11:eb:3d:ae: fa:b5:85:0d:43:8e:fe:a2:5d:6d:01:e6:c1:db:58:f2:ee:2b: 46:27:4d:3d:62:d1:38:d6:88:b0:03:99:a9:59:71:6e:0b:c5: 31:46:b2:a5:cb:11:c8:54:0b:b5:ac:22:10:9f:07:25:a1:39: d3:ef:c8:1d:a2:d1:45:49:70:d4:8c:ae:3a:9d:3c:f0:70:1a: a9:4d:bd:c6:8d:60:df:aa:fe:4d:e2:e0:b6:ba:c2:8a:b5:31: d6:8f:b5:f0:a5:d7:83:91:bd:07:f1:f1:14:13:72:11:47:9f: ff:d8:e3:49:e6:7d:75:25:f5:ce:76:70:b8:58:f0:83:29:02: 71:42:d1:1a:97:01:e9:1c:e0:55:11:13:46:a4:de:24:f5:c7: cc:2c:f3:c1:63:66:4b:35:b4:14:0c:82:44:3a:8a:0e:df:6c: e9:dd:21:14:a4:04:c6:eb:c5:0b:77:e5:61:6a:53:30:ab:df: f6:38:2a:d4:cd:30:7d:3a:38:54:0f:c8:51:01:2c:35:57:1b: 83:5a:d9:b3:94:67:72:f9:11:8e:48:36:a5:0b:89:86:f7:2c: 45:ce:ef:5e:55:fd:7f:56:19:d7:ef:e1:7d:8b:0e:d1:5f:d2: 07:06:3d:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI2KbR6HeiXZe6jQlwQKSobgCSKswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDREMEYzRTZFNjg0ODQ3RDYwMkZDNzM3NTg4OTNDRTJC QjA1RDM5OTAeFw0yNTA3MjAyMTE1NDNaFw0yNTA3MjQwOTA1NDNaMDMxMTAvBgNV BAMTKEQ5NjlDNUQ3NkUzMjU4OTVFQTkyOEZFMjVDNjY2NTkzNTEzMjhCNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpSl52k9V20XVfkljwseMTdDoH yje0WzBuhtxBhtf5RUTKrH2NS7/B33BfZKn02yxShlEQwFWoMr7MjTSRsbbnKfif yxXXclrBjd5NJvSiOtB6ce1onbd8BYJ9doEEqfvAq1tz/GU9RPg4pxH2FVYn4YZS Ru7Q9yiXEmzmbpumLFOHm6T9tVYz6T7bnfeOZjZL0LA2l9RTAOAY33WeJAgosNqi ELrXofVYh015Nbg0m8bQkA7Wm0RMJpPb0WpAc5v81lliVMZGQaeHcUW7DIcX2IIo JBoeZh82KO2A8Lq1j2BcM1hJKsdngaKGSJQi5N5HkRYW/o6eZsp79kQC7Vp3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2WnF124yWJXqko/iXGZlk1Eyi3cwHwYDVR0j BBgwFoAU1NDz5uaEhH1gL8c3WIk84rsF05kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MjM1MzBlYy05OTBlLTQxZDctOWQ3OC1iNzdlMjBkNzZiY2QvMC9ENEQwRjNFNkU2 ODQ4NDdENjAyRkM3Mzc1ODg5M0NFMkJCMDVEMzk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDREMEYzRTZFNjg0ODQ3RDYwMkZDNzM3NTg4OTNDRTJCQjA1 RDM5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODIzNTMwZWMtOTkwZS00MWQ3LTlk NzgtYjc3ZTIwZDc2YmNkLzAvRDREMEYzRTZFNjg0ODQ3RDYwMkZDNzM3NTg4OTND RTJCQjA1RDM5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHl1nXqYk0S1jacHi0+FEes9rvq1hQ1Djv6i XW0B5sHbWPLuK0YnTT1i0TjWiLADmalZcW4LxTFGsqXLEchUC7WsIhCfByWhOdPv yB2i0UVJcNSMrjqdPPBwGqlNvcaNYN+q/k3i4La6woq1MdaPtfCl14ORvQfx8RQT chFHn//Y40nmfXUl9c52cLhY8IMpAnFC0RqXAekc4FURE0ak3iT1x8ws88FjZks1 tBQMgkQ6ig7fbOndIRSkBMbrxQt35WFqUzCr3/Y4KtTNMH06OFQPyFEBLDVXG4Na 2bOUZ3L5EY5INqULiYb3LEXO715V/X9WGdfv4X2LDtFf0gcGPeI= -----END CERTIFICATE-----Generated at Mon Jul 21 10:31:53 2025 by rpki-client