$ rpki-client -vvf repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft File: 2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft (raw, json) Hash identifier: PPfP5/zi8QSqyNXs8xmdLIeF1Ovu9CSL7xZMHFAWbnc= Subject key identifier: 61:62:22:A4:C0:F8:2A:BE:A3:1A:0B:5E:F2:80:8B:FA:18:8B:E4:F9 Authority key identifier: 25:96:AD:9D:A9:03:31:FB:33:6D:C5:2C:5B:72:F9:92:D7:D4:9D:37 Certificate issuer: /CN=2596AD9DA90331FB336DC52C5B72F992D7D49D37 Certificate serial: 301A254BB4C142D4FE8F946389DCB93AA79A7C5E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2596AD9DA90331FB336DC52C5B72F992D7D49D37.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft Manifest number: B2 Signing time: Sun 20 Jul 2025 20:02:31 +0000 Manifest this update: Sun 20 Jul 2025 19:57:31 +0000 Manifest next update: Thu 24 Jul 2025 02:39:31 +0000 Files and hashes: 1: 2596AD9DA90331FB336DC52C5B72F992D7D49D37.crl (hash: 0Aiz/zWuEZUYpo627P+x6T9cmHboYNYofPQalmwgiak=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.crl rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2596AD9DA90331FB336DC52C5B72F992D7D49D37.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 00:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:1a:25:4b:b4:c1:42:d4:fe:8f:94:63:89:dc:b9:3a:a7:9a:7c:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2596AD9DA90331FB336DC52C5B72F992D7D49D37 Validity Not Before: Jul 20 19:57:31 2025 GMT Not After : Jul 24 02:39:31 2025 GMT Subject: CN=616222A4C0F82ABEA31A0B5EF2808BFA188BE4F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:25:f5:49:25:73:ed:ce:3f:1b:a0:55:42:b3: 70:fb:da:88:c0:71:29:7b:98:d6:cf:b1:d4:08:06: 97:55:f3:69:1c:e1:d3:7a:ab:cb:d4:01:3d:3d:d2: 1a:bf:0e:dc:5b:32:19:92:2d:14:01:01:e2:fc:fb: 61:96:0d:ad:ca:01:c7:b0:84:cd:49:ee:d3:f4:74: 8c:13:32:3f:a1:27:31:f8:a9:00:0e:bf:8c:f8:cd: a1:fd:6d:1c:57:88:ed:2b:f0:43:c4:e7:17:90:2b: 7f:06:1e:f9:8c:de:f2:f7:24:3e:ce:54:55:ed:20: ac:89:36:19:ce:fa:ff:7d:19:63:ba:36:2b:93:f4: 04:56:5b:e7:a7:7d:20:f3:34:32:39:e1:52:25:93: 8a:c0:a9:7b:78:f7:6d:8b:96:f5:ca:0f:f6:4d:8a: 71:f6:7a:79:6f:95:89:7c:cf:54:6e:14:e8:72:ae: 7b:41:d3:ef:ab:c3:75:29:8a:80:af:56:4d:99:8b: 47:9a:c8:c1:74:76:ae:d5:2e:8b:aa:51:9b:f3:e4: 84:b2:13:f8:56:e9:4b:fd:7c:35:2e:02:3c:32:58: c0:29:72:e1:8e:9d:26:a8:96:f5:4c:f7:23:45:b1: 3b:de:3c:db:0b:ff:15:fc:2f:1a:3c:3f:02:70:8f: d9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:62:22:A4:C0:F8:2A:BE:A3:1A:0B:5E:F2:80:8B:FA:18:8B:E4:F9 X509v3 Authority Key Identifier: keyid:25:96:AD:9D:A9:03:31:FB:33:6D:C5:2C:5B:72:F9:92:D7:D4:9D:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2596AD9DA90331FB336DC52C5B72F992D7D49D37.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:de:6d:b8:a4:83:ec:b9:bb:9c:01:93:cf:02:80:c6:bd:ec: 20:c3:71:6f:35:f9:22:34:39:6f:9e:71:32:9a:c5:bd:eb:77: e4:6d:87:ca:a9:87:69:c4:95:4a:da:d8:55:c9:b5:0c:fb:f6: 87:a9:b2:f5:64:2d:89:d8:d5:7c:a8:de:88:3f:c8:94:f8:b9: f5:22:6c:7b:50:48:d6:7d:fa:4d:0b:43:64:80:1d:11:3f:e3: dd:03:08:b4:a0:94:24:f5:3e:39:89:6b:3b:3f:9c:b0:0a:b9: 77:1c:27:d9:c2:31:dd:ec:ae:c8:ce:54:29:3a:ba:27:eb:b1: a4:eb:64:25:1c:ea:de:a9:9f:df:3d:81:1e:31:00:23:dc:25: f8:bf:7e:bf:2f:fd:8d:80:10:b0:77:eb:79:b2:c8:09:3a:6b: 57:f9:38:99:bf:a9:ef:2e:2a:4c:32:ab:e5:ce:2b:db:6a:bb: f4:a9:6a:a0:ff:0d:0a:7e:18:15:35:d0:50:6c:bd:2e:90:74: f7:0b:99:14:cd:f6:cf:d7:34:70:f5:5a:7b:f0:f8:89:a3:11: e4:31:0b:60:e6:42:3a:98:26:0c:40:a8:75:da:40:4f:91:60: 55:81:bb:69:ce:3b:bc:16:f1:d0:c9:35:17:88:8b:aa:ff:e3: 7b:42:1f:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMBolS7TBQtT+j5Rjidy5OqeafF4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU5NkFEOURBOTAzMzFGQjMzNkRDNTJDNUI3MkY5OTJE N0Q0OUQzNzAeFw0yNTA3MjAxOTU3MzFaFw0yNTA3MjQwMjM5MzFaMDMxMTAvBgNV BAMTKDYxNjIyMkE0QzBGODJBQkVBMzFBMEI1RUYyODA4QkZBMTg4QkU0RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClJfVJJXPtzj8boFVCs3D72ojA cSl7mNbPsdQIBpdV82kc4dN6q8vUAT090hq/DtxbMhmSLRQBAeL8+2GWDa3KAcew hM1J7tP0dIwTMj+hJzH4qQAOv4z4zaH9bRxXiO0r8EPE5xeQK38GHvmM3vL3JD7O VFXtIKyJNhnO+v99GWO6NiuT9ARWW+enfSDzNDI54VIlk4rAqXt4922LlvXKD/ZN inH2enlvlYl8z1RuFOhyrntB0++rw3UpioCvVk2Zi0eayMF0dq7VLouqUZvz5ISy E/hW6Uv9fDUuAjwyWMApcuGOnSaolvVM9yNFsTvePNsL/xX8Lxo8PwJwj9mhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYWIipMD4Kr6jGgte8oCL+hiL5PkwHwYDVR0j BBgwFoAUJZatnakDMfszbcUsW3L5ktfUnTcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjAzNmI3NC04YTVkLTQwYWEtOTYwYy05MjFlNjNhNzBhNGMvMC8yNTk2QUQ5REE5 MDMzMUZCMzM2REM1MkM1QjcyRjk5MkQ3RDQ5RDM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjU5NkFEOURBOTAzMzFGQjMzNkRDNTJDNUI3MkY5OTJEN0Q0 OUQzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGYwMzZiNzQtOGE1ZC00MGFhLTk2 MGMtOTIxZTYzYTcwYTRjLzAvMjU5NkFEOURBOTAzMzFGQjMzNkRDNTJDNUI3MkY5 OTJEN0Q0OUQzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAzebbikg+y5u5wBk88CgMa97CDDcW81+SI0 OW+ecTKaxb3rd+Rth8qph2nElUra2FXJtQz79oepsvVkLYnY1Xyo3og/yJT4ufUi bHtQSNZ9+k0LQ2SAHRE/490DCLSglCT1PjmJazs/nLAKuXccJ9nCMd3srsjOVCk6 uifrsaTrZCUc6t6pn989gR4xACPcJfi/fr8v/Y2AELB363myyAk6a1f5OJm/qe8u Kkwyq+XOK9tqu/SpaqD/DQp+GBU10FBsvS6QdPcLmRTN9s/XNHD1Wnvw+ImjEeQx C2DmQjqYJgxAqHXaQE+RYFWBu2nOO7wW8dDJNReIi6r/43tCHzY= -----END CERTIFICATE-----Generated at Sun Jul 20 21:24:22 2025 by rpki-client