$ rpki-client -vvf repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.mft File: C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.mft (raw, json) Hash identifier: 2sCAr2H9A/XxsSqAtbiB3k1naVPleE0xjmC9/U7wFJY= Subject key identifier: 04:9A:85:D2:57:86:6D:B6:ED:A2:B2:6F:5E:A6:95:35:74:87:AC:8B Authority key identifier: C9:27:69:FD:5D:97:A4:67:70:E3:A1:0F:9D:57:AE:93:1F:9A:9F:C2 Certificate issuer: /CN=C92769FD5D97A46770E3A10F9D57AE931F9A9FC2 Certificate serial: 6152456FD536F039AA9E03B6759C0FC241292F9E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.mft Manifest number: 0143 Signing time: Mon 21 Jul 2025 13:32:23 +0000 Manifest this update: Mon 21 Jul 2025 13:27:23 +0000 Manifest next update: Thu 24 Jul 2025 23:32:23 +0000 Files and hashes: 1: C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.crl (hash: xm2wcZZfQJohrMPkLn4JPI30mNwKHfsRQzhwfoOmP7E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.crl rsync://repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 22:22:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:52:45:6f:d5:36:f0:39:aa:9e:03:b6:75:9c:0f:c2:41:29:2f:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C92769FD5D97A46770E3A10F9D57AE931F9A9FC2 Validity Not Before: Jul 21 13:27:23 2025 GMT Not After : Jul 24 23:32:23 2025 GMT Subject: CN=049A85D257866DB6EDA2B26F5EA695357487AC8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b4:e2:78:c6:e6:1a:67:23:18:b9:a8:f3:12: 1e:53:2f:44:29:dd:22:20:05:4e:b5:f4:43:db:4f: c8:07:b2:b3:e8:31:79:cd:c3:3e:9f:42:79:8e:f5: b4:04:1b:a8:18:91:69:ad:9e:da:2e:9d:e7:1a:2b: c7:af:17:6a:bc:9c:fc:2b:c8:42:29:d4:6e:89:e9: c3:a2:b5:67:5b:fb:0f:3a:59:19:73:53:03:7f:a5: 7b:cc:e5:c2:eb:57:83:e1:1f:6d:a5:c6:f3:a7:08: 7f:93:87:e6:b7:f7:b8:ed:a2:ea:7e:d1:03:05:5a: 6e:9a:a6:40:07:6b:d1:9f:e0:77:be:16:04:f5:f3: a5:64:f1:71:c6:e4:d8:8c:d5:90:a8:f2:14:b6:65: 3d:b1:66:42:41:c2:ee:c8:50:59:47:23:1c:e4:95: 39:b1:37:ed:99:ec:33:44:a4:4c:5c:96:4d:b9:8a: 36:d0:16:f0:ee:7c:48:78:79:c1:53:c7:bf:86:6c: 68:8f:35:ae:4b:96:8b:9f:30:d6:75:01:31:ed:6e: 19:cb:b0:21:ca:52:db:8b:5d:58:63:08:36:81:45: da:6b:f8:73:39:6e:24:ef:53:2a:ed:ae:29:51:16: f0:a6:dc:e8:96:32:68:7b:41:32:ea:58:c8:f6:e1: 4f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:9A:85:D2:57:86:6D:B6:ED:A2:B2:6F:5E:A6:95:35:74:87:AC:8B X509v3 Authority Key Identifier: keyid:C9:27:69:FD:5D:97:A4:67:70:E3:A1:0F:9D:57:AE:93:1F:9A:9F:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:28:fe:12:07:ec:88:cf:42:23:ce:8e:32:46:07:7a:ac:ec: e3:49:7e:10:98:7e:69:56:eb:96:95:4a:a4:0a:08:ef:1e:9e: 75:90:a7:f6:8d:78:8d:f5:57:f5:a0:9a:22:15:03:6c:97:b8: 8c:5a:b2:7d:8c:5e:29:43:79:51:7b:64:06:71:f2:bc:05:31: 5d:97:d8:ad:81:c3:77:d9:59:87:2d:de:72:87:e9:55:cf:ec: 5f:d7:cf:cb:83:76:da:14:29:c1:db:4b:3a:0d:2b:27:08:c6: 3d:d2:62:71:79:c8:fb:13:1b:55:3e:e7:70:be:79:3d:99:91: f7:18:c7:58:43:d6:af:4f:fb:82:05:b7:21:7a:45:34:2a:c7: a8:4e:75:8a:09:94:94:29:87:6f:9d:6e:aa:5e:14:24:6c:d4: e4:62:3b:36:75:85:b8:5c:44:97:6a:6d:fe:4b:8f:7d:49:5f: e5:9e:29:96:44:a2:06:e1:a2:a5:3b:f9:50:ed:20:f8:b3:2a: b7:db:1b:ab:63:d5:88:e1:ff:cc:9d:fa:4d:ce:80:52:a6:10: 83:5c:a3:77:36:5e:13:4a:19:4c:c4:1a:21:f2:0d:7a:42:d8: 05:43:37:5e:3b:0b:e2:bb:06:58:1d:b3:fb:a2:f8:39:c8:38: 71:27:07:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYVJFb9U28DmqngO2dZwPwkEpL54wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzkyNzY5RkQ1RDk3QTQ2NzcwRTNBMTBGOUQ1N0FFOTMx RjlBOUZDMjAeFw0yNTA3MjExMzI3MjNaFw0yNTA3MjQyMzMyMjNaMDMxMTAvBgNV BAMTKDA0OUE4NUQyNTc4NjZEQjZFREEyQjI2RjVFQTY5NTM1NzQ4N0FDOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCetOJ4xuYaZyMYuajzEh5TL0Qp 3SIgBU619EPbT8gHsrPoMXnNwz6fQnmO9bQEG6gYkWmtntounecaK8evF2q8nPwr yEIp1G6J6cOitWdb+w86WRlzUwN/pXvM5cLrV4PhH22lxvOnCH+Th+a397jtoup+ 0QMFWm6apkAHa9Gf4He+FgT186Vk8XHG5NiM1ZCo8hS2ZT2xZkJBwu7IUFlHIxzk lTmxN+2Z7DNEpExclk25ijbQFvDufEh4ecFTx7+GbGiPNa5LloufMNZ1ATHtbhnL sCHKUtuLXVhjCDaBRdpr+HM5biTvUyrtrilRFvCm3OiWMmh7QTLqWMj24U/nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBJqF0leGbbbtorJvXqaVNXSHrIswHwYDVR0j BBgwFoAUySdp/V2XpGdw46EPnVeukx+an8IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NWQ3Nzg0MC02MDhlLTQ0OWEtYjIyZi0zNmE2ZTI1MmZiMjMvMC9DOTI3NjlGRDVE OTdBNDY3NzBFM0ExMEY5RDU3QUU5MzFGOUE5RkMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzkyNzY5RkQ1RDk3QTQ2NzcwRTNBMTBGOUQ1N0FFOTMxRjlB OUZDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjVkNzc4NDAtNjA4ZS00NDlhLWIy MmYtMzZhNmUyNTJmYjIzLzAvQzkyNzY5RkQ1RDk3QTQ2NzcwRTNBMTBGOUQ1N0FF OTMxRjlBOUZDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEco/hIH7IjPQiPOjjJGB3qs7ONJfhCYfmlW 65aVSqQKCO8ennWQp/aNeI31V/WgmiIVA2yXuIxasn2MXilDeVF7ZAZx8rwFMV2X 2K2Bw3fZWYct3nKH6VXP7F/Xz8uDdtoUKcHbSzoNKycIxj3SYnF5yPsTG1U+53C+ eT2ZkfcYx1hD1q9P+4IFtyF6RTQqx6hOdYoJlJQph2+dbqpeFCRs1ORiOzZ1hbhc RJdqbf5Lj31JX+WeKZZEogbhoqU7+VDtIPizKrfbG6tj1Yjh/8yd+k3OgFKmEINc o3c2XhNKGUzEGiHyDXpC2AVDN147C+K7Blgds/ui+DnIOHEnB54= -----END CERTIFICATE-----Generated at Mon Jul 21 18:24:14 2025 by rpki-client