$ rpki-client -vvf repo-rpki.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.mft File: 0690815B5E9C2228263F17C9B3F5F99DD6882F9C.mft (raw, json) Hash identifier: ki03gnJxgcZe0n0OZtfCD1xf3T4H7JUuPmOGvqewYyI= Subject key identifier: 41:07:ED:FD:8E:73:29:30:E5:E6:1E:E3:C6:53:4B:34:32:09:46:36 Authority key identifier: 06:90:81:5B:5E:9C:22:28:26:3F:17:C9:B3:F5:F9:9D:D6:88:2F:9C Certificate issuer: /CN=0690815B5E9C2228263F17C9B3F5F99DD6882F9C Certificate serial: 7E172E32C1E85E8E6BE04D9F840914C1B61C814D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.mft Manifest number: 0178 Signing time: Fri 05 Sep 2025 12:31:11 +0000 Manifest this update: Fri 05 Sep 2025 12:26:11 +0000 Manifest next update: Mon 08 Sep 2025 21:22:11 +0000 Files and hashes: 1: 0690815B5E9C2228263F17C9B3F5F99DD6882F9C.crl (hash: anPXYLtexcjG8lzPOS3aHgfz5TuDJwHiWtJ9N/2q+Bc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.crl rsync://repo-rpki.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 21:22:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:17:2e:32:c1:e8:5e:8e:6b:e0:4d:9f:84:09:14:c1:b6:1c:81:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0690815B5E9C2228263F17C9B3F5F99DD6882F9C Validity Not Before: Sep 5 12:26:11 2025 GMT Not After : Sep 8 21:22:11 2025 GMT Subject: CN=4107EDFD8E732930E5E61EE3C6534B3432094636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:12:2d:87:4d:c8:32:bb:61:fd:1a:c1:8b:64: ce:56:81:3f:ec:1f:ba:8d:6e:50:cb:6d:2d:8d:6c: 0c:be:12:21:f3:ca:d6:3a:3d:e3:b5:68:d2:06:c8: d8:87:15:56:c0:09:bd:26:fd:f5:68:4b:d9:f3:7d: cd:26:45:0f:0f:8d:4b:81:38:8e:f3:ea:6b:39:8b: 71:f3:81:90:d1:9d:a9:59:43:8d:00:81:72:59:f6: dc:87:7b:35:bb:81:b7:1f:a0:62:9b:2f:af:45:9e: 92:9e:e4:81:16:26:58:1f:df:bf:a2:84:8d:2d:19: 22:17:0a:58:41:a2:47:d1:4d:30:38:b2:3f:14:17: de:c4:02:a3:6a:10:fb:38:b5:19:81:40:ae:98:ac: 2b:0a:49:fc:f9:80:f3:e3:23:8e:ce:55:52:e2:a4: fd:0f:72:56:73:ef:f2:06:f9:7a:fe:4a:8c:e0:5c: ce:55:af:14:7a:bc:b5:98:3d:cb:2d:da:ac:ae:63: 0f:de:8d:48:d9:ce:d3:5f:e9:fb:11:d1:d3:71:47: 42:7f:b0:b2:9d:9e:b7:f7:2d:0a:65:8b:2a:f6:a4: 1d:db:13:d8:79:ac:87:c2:74:ed:da:dc:61:c1:df: 2c:85:67:f2:0d:fa:1f:5f:4c:a1:68:f9:9c:f1:12: 14:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:07:ED:FD:8E:73:29:30:E5:E6:1E:E3:C6:53:4B:34:32:09:46:36 X509v3 Authority Key Identifier: keyid:06:90:81:5B:5E:9C:22:28:26:3F:17:C9:B3:F5:F9:9D:D6:88:2F:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:f4:df:61:f6:45:e3:db:17:51:fa:b7:22:2b:aa:85:12:29: ab:c3:7d:a3:df:f8:51:6b:56:48:3a:95:9e:c8:6d:82:ca:1a: 3d:c7:26:d0:de:ab:b2:98:57:2a:da:c1:02:b5:c1:8f:1c:df: 5a:60:92:7c:ad:8e:3d:ab:6a:1a:35:08:28:99:66:c2:01:90: 01:ce:60:16:33:14:8f:e2:15:b7:f0:78:23:b0:2e:40:6e:6d: 2a:e4:ce:ea:ea:9a:69:ca:2d:b1:1e:5d:98:d4:10:13:f7:26: 54:93:44:66:a2:16:e6:5d:c8:97:3d:5f:c4:13:47:fa:fc:03: 41:20:e3:b9:e1:af:7a:29:6e:b0:37:7f:6e:0f:69:94:5f:6b: f2:24:db:7f:5b:8a:92:05:1a:18:38:34:b5:05:c2:32:1e:cf: 77:ff:60:6c:9e:53:22:7d:42:69:b4:b8:e6:6c:c1:0b:7e:26: ec:6d:bc:8b:ad:1c:b4:19:11:50:11:30:20:9f:c4:b4:3a:9b: 53:65:ea:ba:0f:0e:e2:e0:51:0f:61:bd:64:dc:b2:42:c2:6e: a0:6b:ed:bb:db:7c:8f:5c:6d:ed:c8:9e:73:f3:ea:ad:02:ad: 4a:36:b7:69:2b:28:1b:15:fd:33:05:a2:cb:5d:1b:be:8e:f1: 82:70:97:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfhcuMsHoXo5r4E2fhAkUwbYcgU0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY5MDgxNUI1RTlDMjIyODI2M0YxN0M5QjNGNUY5OURE Njg4MkY5QzAeFw0yNTA5MDUxMjI2MTFaFw0yNTA5MDgyMTIyMTFaMDMxMTAvBgNV BAMTKDQxMDdFREZEOEU3MzI5MzBFNUU2MUVFM0M2NTM0QjM0MzIwOTQ2MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Ei2HTcgyu2H9GsGLZM5WgT/s H7qNblDLbS2NbAy+EiHzytY6PeO1aNIGyNiHFVbACb0m/fVoS9nzfc0mRQ8PjUuB OI7z6ms5i3HzgZDRnalZQ40AgXJZ9tyHezW7gbcfoGKbL69FnpKe5IEWJlgf37+i hI0tGSIXClhBokfRTTA4sj8UF97EAqNqEPs4tRmBQK6YrCsKSfz5gPPjI47OVVLi pP0PclZz7/IG+Xr+SozgXM5VrxR6vLWYPcst2qyuYw/ejUjZztNf6fsR0dNxR0J/ sLKdnrf3LQpliyr2pB3bE9h5rIfCdO3a3GHB3yyFZ/IN+h9fTKFo+ZzxEhSfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQQft/Y5zKTDl5h7jxlNLNDIJRjYwHwYDVR0j BBgwFoAUBpCBW16cIigmPxfJs/X5ndaIL5wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x M2ZhN2Q1Yy0zNjhkLTRhZjMtYjhlNy0xNzg2MjQ2ZGQ2MmYvMC8wNjkwODE1QjVF OUMyMjI4MjYzRjE3QzlCM0Y1Rjk5REQ2ODgyRjlDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDY5MDgxNUI1RTlDMjIyODI2M0YxN0M5QjNGNUY5OURENjg4 MkY5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTNmYTdkNWMtMzY4ZC00YWYzLWI4 ZTctMTc4NjI0NmRkNjJmLzAvMDY5MDgxNUI1RTlDMjIyODI2M0YxN0M5QjNGNUY5 OURENjg4MkY5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL3032H2RePbF1H6tyIrqoUSKavDfaPf+FFr Vkg6lZ7IbYLKGj3HJtDeq7KYVyrawQK1wY8c31pgknytjj2raho1CCiZZsIBkAHO YBYzFI/iFbfweCOwLkBubSrkzurqmmnKLbEeXZjUEBP3JlSTRGaiFuZdyJc9X8QT R/r8A0Eg47nhr3opbrA3f24PaZRfa/Ik239bipIFGhg4NLUFwjIez3f/YGyeUyJ9 Qmm0uOZswQt+JuxtvIutHLQZEVARMCCfxLQ6m1Nl6roPDuLgUQ9hvWTcskLCbqBr 7bvbfI9cbe3InnPz6q0CrUo2t2krKBsV/TMFostdG76O8YJwl9A= -----END CERTIFICATE-----Generated at Sun Sep 7 15:14:34 2025 by rpki-client