$ rpki-client -vvf repo-rpki.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/E810D41602DB2D5449939EA97EB71C350841BC5D.mft File: E810D41602DB2D5449939EA97EB71C350841BC5D.mft (raw, json) Hash identifier: lKeCJi1ZoNlESLfl+QTAuDdSwYmz7dPBjYgCZMRJDYY= Subject key identifier: F4:0D:5C:6E:87:6C:11:9D:2F:86:01:E2:F5:82:29:66:0F:F4:DA:B9 Authority key identifier: E8:10:D4:16:02:DB:2D:54:49:93:9E:A9:7E:B7:1C:35:08:41:BC:5D Certificate issuer: /CN=E810D41602DB2D5449939EA97EB71C350841BC5D Certificate serial: 795F451C81FBAEADC54633554DEDDD6EF0E87D24 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E810D41602DB2D5449939EA97EB71C350841BC5D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/E810D41602DB2D5449939EA97EB71C350841BC5D.mft Manifest number: 0209 Signing time: Sun 20 Jul 2025 12:31:06 +0000 Manifest this update: Sun 20 Jul 2025 12:26:06 +0000 Manifest next update: Wed 23 Jul 2025 14:23:06 +0000 Files and hashes: 1: E810D41602DB2D5449939EA97EB71C350841BC5D.crl (hash: 16FT4ZDBDPRFh21gl+CBdfq3YaFZjhKanPpuNuFNbxg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/E810D41602DB2D5449939EA97EB71C350841BC5D.crl rsync://repo-rpki.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/E810D41602DB2D5449939EA97EB71C350841BC5D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E810D41602DB2D5449939EA97EB71C350841BC5D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 14:23:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:5f:45:1c:81:fb:ae:ad:c5:46:33:55:4d:ed:dd:6e:f0:e8:7d:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E810D41602DB2D5449939EA97EB71C350841BC5D Validity Not Before: Jul 20 12:26:06 2025 GMT Not After : Jul 23 14:23:06 2025 GMT Subject: CN=F40D5C6E876C119D2F8601E2F58229660FF4DAB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:29:b7:78:a9:f3:4a:ea:60:4d:82:9d:ae:ad: 72:24:84:79:cb:a0:c4:01:b8:c7:8c:5d:56:4e:51: 17:b6:eb:13:55:d9:33:2c:0f:f1:c1:92:e9:ea:4a: 47:85:11:74:07:c9:65:4b:71:2f:75:54:94:e9:fe: 92:5d:24:c4:86:8d:e5:77:91:39:6b:7c:b3:9a:44: be:bc:ad:dc:ba:8a:fd:3c:e4:c3:bf:9a:a8:c7:1a: ed:2b:58:1c:bc:16:14:b7:cc:8e:38:7b:a0:d8:9b: 41:8c:15:b7:22:c3:74:15:0e:42:c9:b1:c8:d7:dc: e8:05:35:1a:e9:1d:7d:96:5b:fd:48:50:fd:6c:cb: c9:d9:b5:bf:f5:53:7f:61:ff:09:3f:95:65:0a:47: bb:1b:94:98:7b:b5:37:0a:8b:03:a1:31:89:5a:e2: ed:78:25:af:38:b4:ee:41:16:d6:c4:84:61:15:81: e7:58:56:d9:cb:e5:c0:f3:de:c6:44:77:cb:ba:75: d5:81:be:0d:5d:7f:b5:74:fd:4b:1e:49:5d:98:70: 33:07:bb:fa:e0:07:73:53:db:c4:50:9b:2b:65:23: cb:1d:b8:2b:22:66:f7:57:8a:0e:09:11:05:ea:c7: 51:b5:e7:dc:e7:3f:46:b6:6f:af:a2:25:92:88:ee: 2b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:0D:5C:6E:87:6C:11:9D:2F:86:01:E2:F5:82:29:66:0F:F4:DA:B9 X509v3 Authority Key Identifier: keyid:E8:10:D4:16:02:DB:2D:54:49:93:9E:A9:7E:B7:1C:35:08:41:BC:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/E810D41602DB2D5449939EA97EB71C350841BC5D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E810D41602DB2D5449939EA97EB71C350841BC5D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/E810D41602DB2D5449939EA97EB71C350841BC5D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:0e:44:56:81:4d:db:8b:e4:fb:af:e1:ab:d4:f9:13:4b:48: ad:ef:0a:6e:1a:a8:09:d8:30:79:8c:0d:52:24:d5:4f:6e:3c: 92:8f:be:8e:47:29:46:9d:e7:38:88:75:13:b3:5c:01:58:74: 29:14:8b:17:0a:e9:c5:1c:9f:0e:9e:4a:63:e9:a1:41:43:40: 66:7e:4f:c8:34:ed:ce:aa:d2:2a:be:3c:c5:29:0c:38:9c:0a: b9:1b:95:ca:49:1c:bc:f6:16:77:1e:cf:cc:84:e3:de:50:93: 6a:48:f5:f0:53:22:96:74:c7:e0:83:a8:90:30:8e:c4:13:1e: 76:5e:ab:76:b7:4a:59:62:66:e4:eb:8d:58:f8:01:cb:b6:fe: 89:a4:50:27:e5:46:52:e3:dc:85:83:6b:d0:bf:33:79:70:f4: c1:97:68:46:94:6d:5c:49:d2:eb:0e:5e:dd:a7:42:f1:1c:0d: 4d:26:86:89:1b:e0:20:d5:8d:79:3c:e8:be:59:67:30:73:2e: f2:25:f8:83:f4:29:28:94:86:fe:41:17:47:bf:4f:5a:de:ed: ce:01:e5:d1:1d:22:89:fa:a5:d1:8d:91:5b:45:6e:e2:23:87: 70:fe:8a:ef:58:40:ac:87:4b:ef:97:cf:a0:30:a1:6d:90:7b: f0:d9:df:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeV9FHIH7rq3FRjNVTe3dbvDofSQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTgxMEQ0MTYwMkRCMkQ1NDQ5OTM5RUE5N0VCNzFDMzUw ODQxQkM1RDAeFw0yNTA3MjAxMjI2MDZaFw0yNTA3MjMxNDIzMDZaMDMxMTAvBgNV BAMTKEY0MEQ1QzZFODc2QzExOUQyRjg2MDFFMkY1ODIyOTY2MEZGNERBQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwKbd4qfNK6mBNgp2urXIkhHnL oMQBuMeMXVZOURe26xNV2TMsD/HBkunqSkeFEXQHyWVLcS91VJTp/pJdJMSGjeV3 kTlrfLOaRL68rdy6iv085MO/mqjHGu0rWBy8FhS3zI44e6DYm0GMFbciw3QVDkLJ scjX3OgFNRrpHX2WW/1IUP1sy8nZtb/1U39h/wk/lWUKR7sblJh7tTcKiwOhMYla 4u14Ja84tO5BFtbEhGEVgedYVtnL5cDz3sZEd8u6ddWBvg1df7V0/UseSV2YcDMH u/rgB3NT28RQmytlI8sduCsiZvdXig4JEQXqx1G159znP0a2b6+iJZKI7itVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9A1cbodsEZ0vhgHi9YIpZg/02rkwHwYDVR0j BBgwFoAU6BDUFgLbLVRJk56pfrccNQhBvF0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTkwNWI4Zi01YzBhLTQ1NzktYjRmNy0wOTI2N2I1NTg5NjgvMC9FODEwRDQxNjAy REIyRDU0NDk5MzlFQTk3RUI3MUMzNTA4NDFCQzVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTgxMEQ0MTYwMkRCMkQ1NDQ5OTM5RUE5N0VCNzFDMzUwODQx QkM1RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk5MDViOGYtNWMwYS00NTc5LWI0 ZjctMDkyNjdiNTU4OTY4LzAvRTgxMEQ0MTYwMkRCMkQ1NDQ5OTM5RUE5N0VCNzFD MzUwODQxQkM1RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADsORFaBTduL5Puv4avU+RNLSK3vCm4aqAnY MHmMDVIk1U9uPJKPvo5HKUad5ziIdROzXAFYdCkUixcK6cUcnw6eSmPpoUFDQGZ+ T8g07c6q0iq+PMUpDDicCrkblcpJHLz2Fncez8yE495Qk2pI9fBTIpZ0x+CDqJAw jsQTHnZeq3a3SlliZuTrjVj4Acu2/omkUCflRlLj3IWDa9C/M3lw9MGXaEaUbVxJ 0usOXt2nQvEcDU0mhokb4CDVjXk86L5ZZzBzLvIl+IP0KSiUhv5BF0e/T1re7c4B 5dEdIon6pdGNkVtFbuIjh3D+iu9YQKyHS++Xz6AwoW2Qe/DZ32g= -----END CERTIFICATE-----Generated at Mon Jul 21 07:27:31 2025 by rpki-client