$ rpki-client -vvf repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.mft File: 381455361E726B6ECCDAF271673BD59B1555336E.mft (raw, json) Hash identifier: KHY7wqpc/5RZcnmqxOCDs0+pkEfcvx/up67Q8weHmaE= Subject key identifier: E7:C1:7E:AF:2C:B8:AA:46:94:39:B2:7B:06:59:80:FD:4F:BF:C2:6E Authority key identifier: 38:14:55:36:1E:72:6B:6E:CC:DA:F2:71:67:3B:D5:9B:15:55:33:6E Certificate issuer: /CN=381455361E726B6ECCDAF271673BD59B1555336E Certificate serial: 14C291F510CFB2C33CD0AE98A13F58BDEDA3A48F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/381455361E726B6ECCDAF271673BD59B1555336E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.mft Manifest number: 036D Signing time: Thu 04 Sep 2025 16:01:39 +0000 Manifest this update: Thu 04 Sep 2025 15:56:39 +0000 Manifest next update: Mon 08 Sep 2025 01:13:39 +0000 Files and hashes: 1: 381455361E726B6ECCDAF271673BD59B1555336E.crl (hash: IqcEFssqK5MjSFUcLTODoNHXxXfZEp0TbupQp4+/dTs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.crl rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/381455361E726B6ECCDAF271673BD59B1555336E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 01:13:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:c2:91:f5:10:cf:b2:c3:3c:d0:ae:98:a1:3f:58:bd:ed:a3:a4:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=381455361E726B6ECCDAF271673BD59B1555336E Validity Not Before: Sep 4 15:56:39 2025 GMT Not After : Sep 8 01:13:39 2025 GMT Subject: CN=E7C17EAF2CB8AA469439B27B065980FD4FBFC26E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:85:de:4c:f7:ed:dd:de:b0:b3:53:f7:aa:f9: 10:c8:af:b4:db:0f:ad:fc:a2:17:91:84:e2:81:9c: 15:37:ee:a5:ee:a9:6b:6e:36:4f:a8:cb:cc:09:f3: c9:8e:82:36:9c:fe:ac:86:38:5d:e2:16:33:fa:b7: b1:40:2c:80:20:e4:a3:91:ae:27:57:4e:61:d0:5a: 1b:5e:35:ec:6d:c4:bc:df:fd:e2:4c:d6:b5:d7:f7: b7:9a:af:b2:a4:aa:ee:2c:cc:66:4c:c9:a4:bb:7c: 99:95:d7:e4:be:d8:a6:45:95:0c:c2:ba:70:05:a9: d6:4b:cd:eb:21:b4:6a:83:ac:58:66:23:6e:8a:a6: ff:28:ef:03:d8:0e:7c:61:61:bc:87:ce:2a:cd:07: 28:4b:99:d6:83:43:c2:82:47:9b:5a:26:7c:87:fb: 34:97:a9:ef:e0:ab:60:f2:70:2f:76:c3:48:35:da: a1:da:f8:b5:14:11:9d:3b:4f:6e:4d:09:88:48:e9: 2d:e0:f0:47:2f:7e:6b:35:58:16:3a:3c:fa:2a:b3: e7:3f:d6:ef:bf:fd:13:58:14:ce:00:e1:d7:ed:47: 0c:0d:f7:37:98:91:f4:98:ef:c1:ef:01:4a:28:2e: 1f:a0:ff:62:bf:bd:d6:2f:c3:70:96:09:f5:26:81: 02:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:C1:7E:AF:2C:B8:AA:46:94:39:B2:7B:06:59:80:FD:4F:BF:C2:6E X509v3 Authority Key Identifier: keyid:38:14:55:36:1E:72:6B:6E:CC:DA:F2:71:67:3B:D5:9B:15:55:33:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/381455361E726B6ECCDAF271673BD59B1555336E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c19874c-a6b2-4b0b-9cc6-559a4e7cd95a/0/381455361E726B6ECCDAF271673BD59B1555336E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:56:25:bc:da:62:14:2b:cf:76:76:cb:9e:56:3f:c5:8a:3d: dd:23:cd:d9:11:53:bb:2b:85:a4:50:4d:11:c7:44:4c:aa:c1: 93:f6:40:58:8b:90:43:b4:4f:33:da:9e:8a:11:62:b5:71:39: 87:1a:2f:b6:e0:56:2a:ee:79:6b:18:73:29:96:e3:a5:09:e2: 87:70:9c:b0:2c:10:d3:ce:59:6d:ab:18:7a:c4:7c:97:a2:2c: c2:59:7f:76:e9:85:a3:f3:68:21:ab:68:57:a6:ec:d8:18:9b: 4d:92:ed:1c:9a:74:5d:fe:41:33:6e:66:60:3a:04:9a:ae:38: d3:ba:b0:0d:6e:71:1f:64:d1:c1:01:95:e7:06:c6:12:f2:df: 63:cb:28:d2:45:ee:76:5e:ef:b0:a3:1f:59:dc:a0:6f:3f:8f: f9:04:e3:e6:e4:5d:3b:e6:63:2d:f3:8d:f5:d8:e2:f1:65:19: 2b:bc:c7:db:5d:93:d4:ad:b5:36:5a:e2:63:f4:86:83:b4:67: 0b:bc:b6:6e:68:73:ac:95:ad:d3:09:2a:d3:c0:e3:6d:da:de: 70:16:04:92:da:7f:70:bb:c0:3e:01:e1:46:a4:bd:17:9b:5c: 49:a9:1c:a2:44:9c:43:af:0c:3a:6d:4e:e5:fa:c6:59:d9:c9: c2:bd:10:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFMKR9RDPssM80K6YoT9Yve2jpI8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzgxNDU1MzYxRTcyNkI2RUNDREFGMjcxNjczQkQ1OUIx NTU1MzM2RTAeFw0yNTA5MDQxNTU2MzlaFw0yNTA5MDgwMTEzMzlaMDMxMTAvBgNV BAMTKEU3QzE3RUFGMkNCOEFBNDY5NDM5QjI3QjA2NTk4MEZENEZCRkMyNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCehd5M9+3d3rCzU/eq+RDIr7Tb D638oheRhOKBnBU37qXuqWtuNk+oy8wJ88mOgjac/qyGOF3iFjP6t7FALIAg5KOR ridXTmHQWhteNextxLzf/eJM1rXX97ear7Kkqu4szGZMyaS7fJmV1+S+2KZFlQzC unAFqdZLzeshtGqDrFhmI26Kpv8o7wPYDnxhYbyHzirNByhLmdaDQ8KCR5taJnyH +zSXqe/gq2DycC92w0g12qHa+LUUEZ07T25NCYhI6S3g8Ecvfms1WBY6PPoqs+c/ 1u+//RNYFM4A4dftRwwN9zeYkfSY78HvAUooLh+g/2K/vdYvw3CWCfUmgQJlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU58F+ryy4qkaUObJ7BlmA/U+/wm4wHwYDVR0j BBgwFoAUOBRVNh5ya27M2vJxZzvVmxVVM24wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzE5ODc0Yy1hNmIyLTRiMGItOWNjNi01NTlhNGU3Y2Q5NWEvMC8zODE0NTUzNjFF NzI2QjZFQ0NEQUYyNzE2NzNCRDU5QjE1NTUzMzZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzgxNDU1MzYxRTcyNkI2RUNDREFGMjcxNjczQkQ1OUIxNTU1 MzM2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMxOTg3NGMtYTZiMi00YjBiLTlj YzYtNTU5YTRlN2NkOTVhLzAvMzgxNDU1MzYxRTcyNkI2RUNDREFGMjcxNjczQkQ1 OUIxNTU1MzM2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEhWJbzaYhQrz3Z2y55WP8WKPd0jzdkRU7sr haRQTRHHREyqwZP2QFiLkEO0TzPanooRYrVxOYcaL7bgVirueWsYcymW46UJ4odw nLAsENPOWW2rGHrEfJeiLMJZf3bphaPzaCGraFem7NgYm02S7RyadF3+QTNuZmA6 BJquONO6sA1ucR9k0cEBlecGxhLy32PLKNJF7nZe77CjH1ncoG8/j/kE4+bkXTvm Yy3zjfXY4vFlGSu8x9tdk9SttTZa4mP0hoO0Zwu8tm5oc6yVrdMJKtPA423a3nAW BJLaf3C7wD4B4UakvRebXEmpHKJEnEOvDDptTuX6xlnZycK9EGU= -----END CERTIFICATE-----Generated at Fri Sep 5 10:11:36 2025 by rpki-client