$ rpki-client -vvf repo-rpki.idnic.net/repo/e7b1f14f-4d90-46c5-9fbc-9c9aa6b9dfa5/0/164D60A5876A6B9B50D1CB09453536273A893898.mft File: 164D60A5876A6B9B50D1CB09453536273A893898.mft (raw, json) Hash identifier: /a7C1/hbOkfQLJJBN+PmEdLWDmpBN/1ZF9xFCZXKPK8= Subject key identifier: D3:08:24:A2:27:9F:B2:26:38:87:F0:A2:F6:5A:4B:C1:41:85:4E:82 Authority key identifier: 16:4D:60:A5:87:6A:6B:9B:50:D1:CB:09:45:35:36:27:3A:89:38:98 Certificate issuer: /CN=164D60A5876A6B9B50D1CB09453536273A893898 Certificate serial: 52F62CC72C87390C0BF4DE70314456529A08F9A3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/164D60A5876A6B9B50D1CB09453536273A893898.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e7b1f14f-4d90-46c5-9fbc-9c9aa6b9dfa5/0/164D60A5876A6B9B50D1CB09453536273A893898.mft Manifest number: A6 Signing time: Mon 21 Jul 2025 00:11:53 +0000 Manifest this update: Mon 21 Jul 2025 00:06:53 +0000 Manifest next update: Thu 24 Jul 2025 08:58:53 +0000 Files and hashes: 1: 164D60A5876A6B9B50D1CB09453536273A893898.crl (hash: yJvY32KpjV4zgiumA47y6wjigfWhHHo9U8b8YHDoKPA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e7b1f14f-4d90-46c5-9fbc-9c9aa6b9dfa5/0/164D60A5876A6B9B50D1CB09453536273A893898.crl rsync://repo-rpki.idnic.net/repo/e7b1f14f-4d90-46c5-9fbc-9c9aa6b9dfa5/0/164D60A5876A6B9B50D1CB09453536273A893898.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/164D60A5876A6B9B50D1CB09453536273A893898.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 00:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:f6:2c:c7:2c:87:39:0c:0b:f4:de:70:31:44:56:52:9a:08:f9:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=164D60A5876A6B9B50D1CB09453536273A893898 Validity Not Before: Jul 21 00:06:53 2025 GMT Not After : Jul 24 08:58:53 2025 GMT Subject: CN=D30824A2279FB2263887F0A2F65A4BC141854E82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:bc:0c:62:f0:c7:1e:19:d3:ed:37:0d:7b:1d: b2:bd:9f:38:62:8f:fc:f0:18:ee:8b:dc:c3:43:26: 51:b6:b5:5d:99:11:f0:9a:6f:dd:d8:b1:0a:ea:5c: 51:1d:26:7c:46:f9:c7:79:3e:ae:79:a9:e4:b6:fd: 70:72:bf:e4:fb:07:73:85:e1:16:51:73:87:f5:7e: 12:48:9a:57:8f:c2:16:b7:e2:2c:4c:33:5c:93:80: e2:d6:20:69:c3:b4:de:56:af:a8:2a:1d:a2:12:e5: b2:0b:2a:9b:76:0b:93:e5:46:69:73:45:29:16:90: f7:ff:45:07:70:2a:d8:18:eb:bc:ae:e7:de:6d:12: e8:28:ed:2c:36:ab:49:fd:43:02:2f:5e:19:ba:64: f7:04:38:08:1f:2d:a1:d2:66:8f:a6:9c:54:79:fd: 75:98:fe:79:05:47:60:4c:14:61:bc:8b:25:64:d9: 8b:09:35:8d:09:62:71:3e:c4:04:8c:ec:76:be:30: 5f:4f:ea:fd:11:fd:b5:e3:42:70:20:3a:13:6e:ce: f8:9f:0a:dc:fd:11:0d:21:b1:7c:81:17:99:cd:48: d3:65:37:bd:9e:94:0e:55:08:a9:47:a6:ac:61:ec: 94:51:b6:66:5c:47:c1:53:14:7f:fb:8a:eb:d8:e8: 31:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:08:24:A2:27:9F:B2:26:38:87:F0:A2:F6:5A:4B:C1:41:85:4E:82 X509v3 Authority Key Identifier: keyid:16:4D:60:A5:87:6A:6B:9B:50:D1:CB:09:45:35:36:27:3A:89:38:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e7b1f14f-4d90-46c5-9fbc-9c9aa6b9dfa5/0/164D60A5876A6B9B50D1CB09453536273A893898.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/164D60A5876A6B9B50D1CB09453536273A893898.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e7b1f14f-4d90-46c5-9fbc-9c9aa6b9dfa5/0/164D60A5876A6B9B50D1CB09453536273A893898.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:a8:fb:f2:e8:ca:c9:39:c3:95:87:ab:1f:e1:48:3a:0d:3b: 3f:5a:a7:8b:bb:74:c9:9e:e2:8d:03:35:49:d7:22:4f:2e:d2: 3d:37:aa:34:68:01:2b:d4:51:b9:29:5f:b2:3f:2d:81:d3:99: 0b:08:d9:d4:58:54:0a:3d:be:5e:f5:3b:70:4e:5a:ec:b2:f3: 2a:9e:a8:34:9d:97:8c:2a:4d:cf:e1:75:92:95:9c:e3:46:d7: 99:af:40:6d:ae:88:96:86:45:a5:c5:cb:3c:61:1c:6a:71:f9: d3:58:7b:8e:25:7b:85:24:50:63:4b:9b:23:36:7e:0d:9d:b2: 0d:cc:af:3c:1b:41:c9:90:31:11:ee:ed:d9:9d:d5:e6:2a:a4: 29:2a:4a:6b:0c:8d:fc:5c:3d:32:f6:64:ed:80:41:48:e2:0f: 37:1f:44:cc:18:1d:cf:7d:02:dc:33:45:0e:d4:a1:db:30:51: 17:f3:37:9f:97:31:df:af:68:50:38:33:5d:03:74:8b:b2:4b: 0e:11:bf:fc:c0:a5:3a:83:69:83:7d:0b:ad:49:db:f7:2c:1e: 33:38:79:6d:75:1a:bd:d5:f3:c4:20:40:02:44:f9:a7:29:39: 6b:cd:da:89:b4:18:3f:55:93:31:95:ec:cf:3c:61:64:7b:a5: 8a:ca:d5:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUvYsxyyHOQwL9N5wMURWUpoI+aMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY0RDYwQTU4NzZBNkI5QjUwRDFDQjA5NDUzNTM2Mjcz QTg5Mzg5ODAeFw0yNTA3MjEwMDA2NTNaFw0yNTA3MjQwODU4NTNaMDMxMTAvBgNV BAMTKEQzMDgyNEEyMjc5RkIyMjYzODg3RjBBMkY2NUE0QkMxNDE4NTRFODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqvAxi8MceGdPtNw17HbK9nzhi j/zwGO6L3MNDJlG2tV2ZEfCab93YsQrqXFEdJnxG+cd5Pq55qeS2/XByv+T7B3OF 4RZRc4f1fhJImlePwha34ixMM1yTgOLWIGnDtN5Wr6gqHaIS5bILKpt2C5PlRmlz RSkWkPf/RQdwKtgY67yu595tEugo7Sw2q0n9QwIvXhm6ZPcEOAgfLaHSZo+mnFR5 /XWY/nkFR2BMFGG8iyVk2YsJNY0JYnE+xASM7Ha+MF9P6v0R/bXjQnAgOhNuzvif Ctz9EQ0hsXyBF5nNSNNlN72elA5VCKlHpqxh7JRRtmZcR8FTFH/7iuvY6DHdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0wgkoiefsiY4h/Ci9lpLwUGFToIwHwYDVR0j BBgwFoAUFk1gpYdqa5tQ0csJRTU2JzqJOJgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l N2IxZjE0Zi00ZDkwLTQ2YzUtOWZiYy05YzlhYTZiOWRmYTUvMC8xNjRENjBBNTg3 NkE2QjlCNTBEMUNCMDk0NTM1MzYyNzNBODkzODk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY0RDYwQTU4NzZBNkI5QjUwRDFDQjA5NDUzNTM2MjczQTg5 Mzg5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTdiMWYxNGYtNGQ5MC00NmM1LTlm YmMtOWM5YWE2YjlkZmE1LzAvMTY0RDYwQTU4NzZBNkI5QjUwRDFDQjA5NDUzNTM2 MjczQTg5Mzg5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALOo+/Loysk5w5WHqx/hSDoNOz9ap4u7dMme 4o0DNUnXIk8u0j03qjRoASvUUbkpX7I/LYHTmQsI2dRYVAo9vl71O3BOWuyy8yqe qDSdl4wqTc/hdZKVnONG15mvQG2uiJaGRaXFyzxhHGpx+dNYe44le4UkUGNLmyM2 fg2dsg3MrzwbQcmQMRHu7dmd1eYqpCkqSmsMjfxcPTL2ZO2AQUjiDzcfRMwYHc99 AtwzRQ7UodswURfzN5+XMd+vaFA4M10DdIuySw4Rv/zApTqDaYN9C61J2/csHjM4 eW11Gr3V88QgQAJE+acpOWvN2om0GD9VkzGV7M88YWR7pYrK1W0= -----END CERTIFICATE-----Generated at Mon Jul 21 02:04:51 2025 by rpki-client