$ rpki-client -vvf repo-rpki.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/A45C7486216530EA5E88FE961534FA7EAE72A79C.mft File: A45C7486216530EA5E88FE961534FA7EAE72A79C.mft (raw, json) Hash identifier: p6C3eeL8ESrbSKL9w4pGj8/cBEAt5xxqux/6MqzUtlk= Subject key identifier: 24:2F:D5:7A:27:1F:B3:82:82:F3:89:3A:D0:26:2E:92:44:A9:33:67 Authority key identifier: A4:5C:74:86:21:65:30:EA:5E:88:FE:96:15:34:FA:7E:AE:72:A7:9C Certificate issuer: /CN=A45C7486216530EA5E88FE961534FA7EAE72A79C Certificate serial: 35D12127E4064B0E2D852A3EE048EE6D2A972553 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A45C7486216530EA5E88FE961534FA7EAE72A79C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/A45C7486216530EA5E88FE961534FA7EAE72A79C.mft Manifest number: EF Signing time: Sat 19 Jul 2025 07:31:32 +0000 Manifest this update: Sat 19 Jul 2025 07:26:32 +0000 Manifest next update: Tue 22 Jul 2025 10:58:32 +0000 Files and hashes: 1: A45C7486216530EA5E88FE961534FA7EAE72A79C.crl (hash: 5lsGW4A5/bupbt1n6ays0zdUMtNq3ssnfZXIxhVYGLc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/A45C7486216530EA5E88FE961534FA7EAE72A79C.crl rsync://repo-rpki.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/A45C7486216530EA5E88FE961534FA7EAE72A79C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A45C7486216530EA5E88FE961534FA7EAE72A79C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 10:58:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:d1:21:27:e4:06:4b:0e:2d:85:2a:3e:e0:48:ee:6d:2a:97:25:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A45C7486216530EA5E88FE961534FA7EAE72A79C Validity Not Before: Jul 19 07:26:32 2025 GMT Not After : Jul 22 10:58:32 2025 GMT Subject: CN=242FD57A271FB38282F3893AD0262E9244A93367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ba:bc:c5:b5:71:13:14:0c:c0:fd:c2:01:30: aa:7c:9d:c2:4d:d1:7d:1f:40:bc:c7:be:4b:14:1f: e5:a8:da:d1:43:c8:45:6e:10:e2:02:0a:04:fe:9d: 99:c0:41:aa:75:c8:09:79:49:15:51:e4:3d:8c:cf: 73:b5:46:bb:5e:0c:87:d2:72:7b:e1:48:ae:c8:9e: ca:de:50:81:9d:17:56:cb:d4:0b:3f:1e:6b:44:87: 3c:c0:e8:49:39:8f:5a:08:c1:5a:45:ab:db:b2:3e: 17:db:05:c8:b5:5d:b9:a6:cc:c8:51:ba:76:96:55: f2:fa:60:6b:7c:aa:3d:dd:bb:8b:44:6b:8b:a4:22: 6b:a1:6d:ac:84:2e:49:52:df:69:da:a1:4c:aa:96: 96:27:0e:fc:ee:c6:69:a7:88:85:b9:ff:c0:c5:6d: ca:3e:f4:aa:41:a8:86:d2:01:ba:e1:fd:2e:73:d3: 4c:63:de:1d:75:34:3a:00:ae:db:fb:69:c9:29:ea: f0:ac:ad:05:4d:90:fc:11:f1:8a:42:94:da:89:98: 41:b9:68:67:4d:0f:18:fb:46:46:fe:0a:8e:6e:d1: 56:d2:95:01:64:02:02:35:2e:f8:b9:5e:14:fb:93: c1:e7:ff:1c:03:d6:c9:74:c1:9a:b9:ca:6a:52:98: b6:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:2F:D5:7A:27:1F:B3:82:82:F3:89:3A:D0:26:2E:92:44:A9:33:67 X509v3 Authority Key Identifier: keyid:A4:5C:74:86:21:65:30:EA:5E:88:FE:96:15:34:FA:7E:AE:72:A7:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/A45C7486216530EA5E88FE961534FA7EAE72A79C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A45C7486216530EA5E88FE961534FA7EAE72A79C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1e46365-74d3-4e60-952a-f9428096001d/0/A45C7486216530EA5E88FE961534FA7EAE72A79C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:17:4b:75:a1:fc:6d:49:e3:c3:cf:4e:12:fa:74:7c:e6:41: 44:59:c9:80:31:87:06:75:e3:1a:25:1f:db:3b:4c:72:a5:1d: e9:43:ab:cb:b4:de:73:c5:b6:a2:ee:71:fd:df:47:14:f6:23: 95:54:64:9d:a2:9b:84:7e:e5:50:af:9a:96:a7:7a:e9:70:db: 4f:2d:b6:89:88:ba:a1:61:7a:f0:4c:07:fc:d6:35:01:f4:6f: 1b:1c:5b:13:b5:31:87:6a:df:1e:01:eb:50:96:b9:9e:ab:66: ca:21:04:a7:38:5b:af:ce:67:9f:36:5e:7a:18:3c:d4:f6:61: f0:87:47:a3:59:e3:a9:e1:1b:ab:6f:cc:5f:f7:9b:f5:d0:71: 3c:af:b4:24:8c:75:57:1e:0e:74:87:61:51:92:92:8f:2d:71: ba:89:c5:f6:e0:f8:19:13:3e:91:0b:9f:26:79:26:4c:7d:ac: 90:ed:a8:de:7f:11:af:57:22:6e:c0:ac:07:f4:03:53:32:8e: 40:43:af:3c:d3:1a:f3:20:95:42:f6:a6:80:b7:59:92:4a:e3: a4:36:4a:0a:d8:29:31:1d:0a:ea:08:60:ff:61:af:2d:22:e2: 39:d4:c6:a1:ff:08:b7:d2:68:f7:aa:ef:a9:37:76:26:3f:4d: cc:7e:97:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNdEhJ+QGSw4thSo+4EjubSqXJVMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQ1Qzc0ODYyMTY1MzBFQTVFODhGRTk2MTUzNEZBN0VB RTcyQTc5QzAeFw0yNTA3MTkwNzI2MzJaFw0yNTA3MjIxMDU4MzJaMDMxMTAvBgNV BAMTKDI0MkZENTdBMjcxRkIzODI4MkYzODkzQUQwMjYyRTkyNDRBOTMzNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWurzFtXETFAzA/cIBMKp8ncJN 0X0fQLzHvksUH+Wo2tFDyEVuEOICCgT+nZnAQap1yAl5SRVR5D2Mz3O1RrteDIfS cnvhSK7InsreUIGdF1bL1As/HmtEhzzA6Ek5j1oIwVpFq9uyPhfbBci1XbmmzMhR unaWVfL6YGt8qj3du4tEa4ukImuhbayELklS32naoUyqlpYnDvzuxmmniIW5/8DF bco+9KpBqIbSAbrh/S5z00xj3h11NDoArtv7ackp6vCsrQVNkPwR8YpClNqJmEG5 aGdNDxj7Rkb+Co5u0VbSlQFkAgI1Lvi5XhT7k8Hn/xwD1sl0wZq5ympSmLbfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJC/Veicfs4KC84k60CYukkSpM2cwHwYDVR0j BBgwFoAUpFx0hiFlMOpeiP6WFTT6fq5yp5wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MWU0NjM2NS03NGQzLTRlNjAtOTUyYS1mOTQyODA5NjAwMWQvMC9BNDVDNzQ4NjIx NjUzMEVBNUU4OEZFOTYxNTM0RkE3RUFFNzJBNzlDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTQ1Qzc0ODYyMTY1MzBFQTVFODhGRTk2MTUzNEZBN0VBRTcy QTc5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjFlNDYzNjUtNzRkMy00ZTYwLTk1 MmEtZjk0MjgwOTYwMDFkLzAvQTQ1Qzc0ODYyMTY1MzBFQTVFODhGRTk2MTUzNEZB N0VBRTcyQTc5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEsXS3Wh/G1J48PPThL6dHzmQURZyYAxhwZ1 4xolH9s7THKlHelDq8u03nPFtqLucf3fRxT2I5VUZJ2im4R+5VCvmpaneulw208t tomIuqFhevBMB/zWNQH0bxscWxO1MYdq3x4B61CWuZ6rZsohBKc4W6/OZ582XnoY PNT2YfCHR6NZ46nhG6tvzF/3m/XQcTyvtCSMdVceDnSHYVGSko8tcbqJxfbg+BkT PpELnyZ5Jkx9rJDtqN5/Ea9XIm7ArAf0A1MyjkBDrzzTGvMglUL2poC3WZJK46Q2 SgrYKTEdCuoIYP9hry0i4jnUxqH/CLfSaPeq76k3diY/Tcx+lyM= -----END CERTIFICATE-----Generated at Mon Jul 21 09:01:52 2025 by rpki-client