$ rpki-client -vvf repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.mft File: 115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.mft (raw, json) Hash identifier: n5F/IxX0czvUkLdRQ1W88f5/Bmg2LefHCq97E+0wt6Y= Subject key identifier: BE:35:C3:D3:6B:A1:E0:1A:A1:1E:D1:AC:33:9F:17:D2:5F:DA:33:71 Authority key identifier: 11:5F:DA:5F:36:D9:1E:E9:38:FA:B5:D4:B2:AB:88:42:2A:3D:4B:BF Certificate issuer: /CN=115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF Certificate serial: 7D636EB175F860DFC1A104B42C63B609E8069CDD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.mft Manifest number: 01CB Signing time: Thu 04 Sep 2025 04:51:44 +0000 Manifest this update: Thu 04 Sep 2025 04:46:44 +0000 Manifest next update: Sun 07 Sep 2025 11:09:44 +0000 Files and hashes: 1: 115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.crl (hash: 4VzzPOeBARMsv9ylqzMeGTCUN/waSGZP3ywSWIR+uBA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.crl rsync://repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 11:09:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:63:6e:b1:75:f8:60:df:c1:a1:04:b4:2c:63:b6:09:e8:06:9c:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF Validity Not Before: Sep 4 04:46:44 2025 GMT Not After : Sep 7 11:09:44 2025 GMT Subject: CN=BE35C3D36BA1E01AA11ED1AC339F17D25FDA3371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ce:01:da:dc:a8:8c:bf:e8:2c:30:c3:40:4e: cc:0b:64:60:e0:92:0f:17:9c:3b:09:b7:70:d9:31: e2:b3:8d:cc:45:e8:a5:b9:72:16:32:5b:87:99:7a: 5b:4e:6b:da:dc:28:e6:b2:e0:ed:48:13:3e:fe:9b: 03:c4:35:02:65:1e:da:3f:c4:a0:b3:c9:71:16:b3: 1d:0e:8d:b8:3e:bd:b5:34:cd:f1:73:0a:fd:76:12: c7:1f:91:d7:15:00:e9:35:a2:51:90:47:ec:c8:fd: a9:08:47:0c:50:49:b4:0d:74:79:a7:2f:b9:30:b2: 30:d3:69:c7:81:34:fd:6f:94:5b:a1:a9:b8:b4:fa: 91:f6:9b:a1:55:21:cd:e8:83:99:9d:1a:21:a9:6d: ae:9a:2e:3e:d1:e5:39:75:7a:6f:36:e8:0f:04:9b: 4e:c6:c8:0a:5d:57:35:6b:5b:1c:0f:6c:16:ed:04: 9b:c2:3a:7c:fb:ae:43:57:68:00:e9:fa:1f:dd:d9: e8:1f:0e:d7:18:43:ac:72:c6:1b:48:7a:2d:4d:69: 6d:67:7d:e1:86:84:22:1f:27:9d:f8:ab:d6:22:9e: f0:52:dc:9f:a7:52:d5:10:16:b9:ce:71:3c:73:12: 82:37:07:54:31:e3:77:a4:0d:be:d4:c3:27:f6:57: 9f:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:35:C3:D3:6B:A1:E0:1A:A1:1E:D1:AC:33:9F:17:D2:5F:DA:33:71 X509v3 Authority Key Identifier: keyid:11:5F:DA:5F:36:D9:1E:E9:38:FA:B5:D4:B2:AB:88:42:2A:3D:4B:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:ef:9a:c1:88:cd:de:c2:b6:b9:ff:10:fa:a2:18:71:9f:79: 20:81:85:b4:2a:6a:53:29:b7:34:19:fa:e6:8d:8d:f7:69:00: aa:9e:ef:36:84:47:11:5e:51:30:95:6f:57:f9:40:26:b5:ba: 42:c5:13:24:f4:83:ef:59:b2:b1:43:42:5c:d4:e6:34:45:eb: b5:b1:f2:2f:99:56:e4:30:5f:d8:f0:ec:e2:ed:24:30:c8:49: 54:75:5a:ea:e3:ce:ba:d6:a6:ed:bc:2b:3a:69:07:60:ef:24: 61:6c:7b:20:6e:e7:57:5e:71:0e:01:95:3b:af:d1:e3:07:c9: a3:26:70:06:10:92:69:ea:c8:fb:fe:22:0b:d5:25:34:e0:b9: 69:8a:93:62:5c:6c:24:17:43:07:16:3a:b1:33:bc:f9:d6:05: 5a:23:ab:df:33:9a:46:45:68:16:52:73:f3:fc:96:99:36:8f: 57:b5:e0:5a:12:b5:2a:2b:c2:2f:0f:f7:77:9b:b9:38:04:1c: 39:bc:67:6a:72:c2:0e:f1:93:b2:76:20:18:8d:aa:b8:1f:80: b2:e3:10:60:9a:c5:21:2b:3c:76:f2:a5:b4:1f:49:c3:00:59: c7:82:05:d3:a3:59:f3:a7:99:5f:6a:06:bd:30:18:f9:2f:43: c8:f9:08:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfWNusXX4YN/BoQS0LGO2CegGnN0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE1RkRBNUYzNkQ5MUVFOTM4RkFCNUQ0QjJBQjg4NDIy QTNENEJCRjAeFw0yNTA5MDQwNDQ2NDRaFw0yNTA5MDcxMTA5NDRaMDMxMTAvBgNV BAMTKEJFMzVDM0QzNkJBMUUwMUFBMTFFRDFBQzMzOUYxN0QyNUZEQTMzNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpzgHa3KiMv+gsMMNATswLZGDg kg8XnDsJt3DZMeKzjcxF6KW5chYyW4eZeltOa9rcKOay4O1IEz7+mwPENQJlHto/ xKCzyXEWsx0Ojbg+vbU0zfFzCv12EscfkdcVAOk1olGQR+zI/akIRwxQSbQNdHmn L7kwsjDTaceBNP1vlFuhqbi0+pH2m6FVIc3og5mdGiGpba6aLj7R5Tl1em826A8E m07GyApdVzVrWxwPbBbtBJvCOnz7rkNXaADp+h/d2egfDtcYQ6xyxhtIei1NaW1n feGGhCIfJ534q9YinvBS3J+nUtUQFrnOcTxzEoI3B1Qx43ekDb7Uwyf2V59ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvjXD02uh4BqhHtGsM58X0l/aM3EwHwYDVR0j BBgwFoAUEV/aXzbZHuk4+rXUsquIQio9S78wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzI2NzgyNS01MWFmLTQ1NmQtYjQ1YS1hZTkzYzVmMjcwZWUvMC8xMTVGREE1RjM2 RDkxRUU5MzhGQUI1RDRCMkFCODg0MjJBM0Q0QkJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE1RkRBNUYzNkQ5MUVFOTM4RkFCNUQ0QjJBQjg4NDIyQTNE NEJCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMyNjc4MjUtNTFhZi00NTZkLWI0 NWEtYWU5M2M1ZjI3MGVlLzAvMTE1RkRBNUYzNkQ5MUVFOTM4RkFCNUQ0QjJBQjg4 NDIyQTNENEJCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJjvmsGIzd7Ctrn/EPqiGHGfeSCBhbQqalMp tzQZ+uaNjfdpAKqe7zaERxFeUTCVb1f5QCa1ukLFEyT0g+9ZsrFDQlzU5jRF67Wx 8i+ZVuQwX9jw7OLtJDDISVR1WurjzrrWpu28KzppB2DvJGFseyBu51decQ4BlTuv 0eMHyaMmcAYQkmnqyPv+IgvVJTTguWmKk2JcbCQXQwcWOrEzvPnWBVojq98zmkZF aBZSc/P8lpk2j1e14FoStSorwi8P93ebuTgEHDm8Z2pywg7xk7J2IBiNqrgfgLLj EGCaxSErPHbypbQfScMAWceCBdOjWfOnmV9qBr0wGPkvQ8j5CNU= -----END CERTIFICATE-----Generated at Fri Sep 5 10:16:55 2025 by rpki-client