$ rpki-client -vvf repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.mft File: AD2137BA5758D926364E9E038F19A65DC3F1846E.mft (raw, json) Hash identifier: WvF8tj5Qc8t8SkH12HfLjcI5+MawBlnCh/WyOAHJDag= Subject key identifier: D1:EC:A4:06:1A:B4:4B:B5:B1:99:0D:50:B1:F2:D3:4B:17:62:E6:42 Authority key identifier: AD:21:37:BA:57:58:D9:26:36:4E:9E:03:8F:19:A6:5D:C3:F1:84:6E Certificate issuer: /CN=AD2137BA5758D926364E9E038F19A65DC3F1846E Certificate serial: 4CDBD71690AFC81B5D4B0814CFB75F3F5E9DF239 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2137BA5758D926364E9E038F19A65DC3F1846E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.mft Manifest number: 0232 Signing time: Sun 20 Jul 2025 00:52:08 +0000 Manifest this update: Sun 20 Jul 2025 00:47:08 +0000 Manifest next update: Wed 23 Jul 2025 04:40:08 +0000 Files and hashes: 1: AD2137BA5758D926364E9E038F19A65DC3F1846E.crl (hash: 4RlOjVyKIFDmHPwXM7aL2nKjHJqPeKDIWLPAWV6LBeY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.crl rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2137BA5758D926364E9E038F19A65DC3F1846E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 04:40:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:db:d7:16:90:af:c8:1b:5d:4b:08:14:cf:b7:5f:3f:5e:9d:f2:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD2137BA5758D926364E9E038F19A65DC3F1846E Validity Not Before: Jul 20 00:47:08 2025 GMT Not After : Jul 23 04:40:08 2025 GMT Subject: CN=D1ECA4061AB44BB5B1990D50B1F2D34B1762E642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:6e:12:b5:27:8e:06:05:e5:7f:11:20:3d:41: e4:7e:c6:27:98:0e:78:0c:60:c4:b3:42:a3:d4:d6: ba:7e:17:d8:dd:3b:16:c0:f8:ba:9d:76:6d:9a:1c: 50:58:16:18:47:a2:3f:ad:88:a8:8e:46:cb:9e:ec: 59:bb:e3:47:ce:ac:22:f5:c0:58:2c:7e:7c:3f:ad: 56:37:35:24:dc:d8:b4:82:04:5a:cf:5c:b5:7d:d1: a7:e2:7c:21:da:be:4e:27:1d:70:d6:a9:e9:b9:23: b0:99:10:10:ea:33:72:fd:69:26:13:32:07:1b:19: 36:45:1e:1f:b6:02:41:26:f7:bd:8d:7a:d7:32:22: 10:a6:36:8c:74:39:dd:09:eb:4a:dc:b8:36:51:be: a2:07:c7:f5:dd:bc:0a:70:1b:db:cc:6c:cc:29:6a: ad:b8:aa:42:6f:e5:cc:15:8b:87:1a:3d:8f:e3:eb: 2d:0f:58:94:7f:c2:89:11:97:b8:b1:07:3b:3a:40: 35:86:d2:92:bc:d4:a8:84:af:ce:01:fd:eb:7a:bb: 07:87:cc:2d:0a:81:b6:5b:5a:c1:37:5f:d8:9c:f9: 3f:b4:36:9a:9a:81:50:63:d1:a6:76:03:dd:15:3e: e9:f9:45:7b:de:ec:a6:a7:09:cf:ed:dd:33:7e:eb: 49:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:EC:A4:06:1A:B4:4B:B5:B1:99:0D:50:B1:F2:D3:4B:17:62:E6:42 X509v3 Authority Key Identifier: keyid:AD:21:37:BA:57:58:D9:26:36:4E:9E:03:8F:19:A6:5D:C3:F1:84:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2137BA5758D926364E9E038F19A65DC3F1846E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:ef:a6:db:b3:7c:c4:34:85:46:63:51:67:fc:3e:ac:33:7a: bb:c8:01:a5:53:f1:1b:9e:e2:e9:5b:4c:cf:d7:0a:b3:e9:89: b6:6d:f4:21:4b:75:1c:d1:95:2d:8f:4e:c4:05:59:29:97:18: 4f:aa:a8:d5:2d:fc:72:10:44:d7:77:91:04:8b:47:2f:ed:b1: 50:4a:b2:ec:6b:cb:ff:b4:9f:32:41:95:e8:2b:30:92:7f:a8: 30:9b:9e:34:a9:8f:54:db:65:61:82:78:26:38:7c:97:9c:cf: 38:60:62:28:5d:d0:56:6c:b5:37:0d:84:9b:b0:d1:a4:8c:55: 0b:22:c6:fe:69:bb:39:c2:97:09:1c:3f:eb:5e:36:c5:d3:4d: 32:06:b0:2f:e5:f3:26:a6:9d:12:f3:f3:4b:e6:e5:44:b7:63: fe:04:fe:45:f0:d8:5e:7b:aa:8e:84:89:b1:17:bb:d0:40:63: 36:85:5a:bb:16:64:d0:7c:eb:66:55:fc:4d:1f:83:1d:1a:1f: 23:08:4f:83:f4:ec:6a:e8:41:79:63:23:97:2a:ea:46:1f:77: 82:c4:3f:94:8d:36:54:4e:3a:ad:83:cc:42:a6:1d:03:a5:57: 74:16:f1:84:8a:3c:fe:7c:72:70:f8:64:04:8a:cc:7c:6f:ff: 60:cd:50:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTNvXFpCvyBtdSwgUz7dfP16d8jkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQyMTM3QkE1NzU4RDkyNjM2NEU5RTAzOEYxOUE2NURD M0YxODQ2RTAeFw0yNTA3MjAwMDQ3MDhaFw0yNTA3MjMwNDQwMDhaMDMxMTAvBgNV BAMTKEQxRUNBNDA2MUFCNDRCQjVCMTk5MEQ1MEIxRjJEMzRCMTc2MkU2NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxbhK1J44GBeV/ESA9QeR+xieY DngMYMSzQqPU1rp+F9jdOxbA+Lqddm2aHFBYFhhHoj+tiKiORsue7Fm740fOrCL1 wFgsfnw/rVY3NSTc2LSCBFrPXLV90afifCHavk4nHXDWqem5I7CZEBDqM3L9aSYT MgcbGTZFHh+2AkEm972NetcyIhCmNox0Od0J60rcuDZRvqIHx/XdvApwG9vMbMwp aq24qkJv5cwVi4caPY/j6y0PWJR/wokRl7ixBzs6QDWG0pK81KiEr84B/et6uweH zC0KgbZbWsE3X9ic+T+0NpqagVBj0aZ2A90VPun5RXve7KanCc/t3TN+60npAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0eykBhq0S7WxmQ1QsfLTSxdi5kIwHwYDVR0j BBgwFoAUrSE3uldY2SY2Tp4DjxmmXcPxhG4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzRkMjBhMy0zZDgzLTRjNGYtOTEzOC03NmJjN2M1MTBlYjkvMC9BRDIxMzdCQTU3 NThEOTI2MzY0RTlFMDM4RjE5QTY1REMzRjE4NDZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQyMTM3QkE1NzU4RDkyNjM2NEU5RTAzOEYxOUE2NURDM0Yx ODQ2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTc0ZDIwYTMtM2Q4My00YzRmLTkx MzgtNzZiYzdjNTEwZWI5LzAvQUQyMTM3QkE1NzU4RDkyNjM2NEU5RTAzOEYxOUE2 NURDM0YxODQ2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG3vptuzfMQ0hUZjUWf8PqwzervIAaVT8Rue 4ulbTM/XCrPpibZt9CFLdRzRlS2PTsQFWSmXGE+qqNUt/HIQRNd3kQSLRy/tsVBK suxry/+0nzJBlegrMJJ/qDCbnjSpj1TbZWGCeCY4fJeczzhgYihd0FZstTcNhJuw 0aSMVQsixv5puznClwkcP+teNsXTTTIGsC/l8yamnRLz80vm5US3Y/4E/kXw2F57 qo6EibEXu9BAYzaFWrsWZNB862ZV/E0fgx0aHyMIT4P07GroQXljI5cq6kYfd4LE P5SNNlROOq2DzEKmHQOlV3QW8YSKPP58cnD4ZASKzHxv/2DNUHE= -----END CERTIFICATE-----Generated at Mon Jul 21 07:27:20 2025 by rpki-client