$ rpki-client -vvf repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/1/C07911838F3BCDBB76B01070E127AA00CC27F991.mft File: C07911838F3BCDBB76B01070E127AA00CC27F991.mft (raw, json) Hash identifier: ZPFUaB1ZWP1G56C/3jYRsswuUaUJnywaWd1imu2FwCk= Subject key identifier: 46:2A:55:62:FB:75:EE:39:51:D0:D7:AD:DA:D5:22:D0:83:E3:2C:6E Authority key identifier: C0:79:11:83:8F:3B:CD:BB:76:B0:10:70:E1:27:AA:00:CC:27:F9:91 Certificate issuer: /CN=C07911838F3BCDBB76B01070E127AA00CC27F991 Certificate serial: 7EDD94DD5E3723E7B7BAF9F0E349DBBCC08AD90F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07911838F3BCDBB76B01070E127AA00CC27F991.cer Subject info access: rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/1/C07911838F3BCDBB76B01070E127AA00CC27F991.mft Manifest number: BE Signing time: Fri 05 Sep 2025 05:12:07 +0000 Manifest this update: Fri 05 Sep 2025 05:07:07 +0000 Manifest next update: Mon 08 Sep 2025 16:31:07 +0000 Files and hashes: 1: C07911838F3BCDBB76B01070E127AA00CC27F991.crl (hash: /2jfxA+HOBWLkb3ezjZ4ckFm4Uz8FCLdvF7DXGZK97Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/1/C07911838F3BCDBB76B01070E127AA00CC27F991.crl rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/1/C07911838F3BCDBB76B01070E127AA00CC27F991.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07911838F3BCDBB76B01070E127AA00CC27F991.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 16:31:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:dd:94:dd:5e:37:23:e7:b7:ba:f9:f0:e3:49:db:bc:c0:8a:d9:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C07911838F3BCDBB76B01070E127AA00CC27F991 Validity Not Before: Sep 5 05:07:07 2025 GMT Not After : Sep 8 16:31:07 2025 GMT Subject: CN=462A5562FB75EE3951D0D7ADDAD522D083E32C6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:dd:98:9b:f2:64:8d:d7:98:cc:0f:9c:d2:76: 3e:df:63:5b:9c:dd:58:48:c2:9e:ae:99:b1:43:d4: dc:82:6c:08:f3:e4:07:dd:37:66:0e:39:0e:4a:46: 7c:7a:b3:29:4b:49:81:57:19:64:2c:c4:f3:87:f6: 83:1e:25:17:40:f3:64:01:f7:f1:15:18:60:79:3b: 2c:d3:37:12:4c:eb:8a:c7:99:13:c6:40:33:c1:d1: ee:3b:df:78:9d:f5:b5:f9:3c:23:8a:21:6e:fc:88: e8:da:44:44:76:ad:92:e7:b4:b2:7a:02:59:61:a6: 8c:5d:34:bb:45:d7:46:21:22:38:59:eb:90:02:2e: 89:90:ee:0e:37:a8:f0:e9:af:51:a1:3c:81:5b:96: ef:07:97:59:0d:49:8e:63:1f:4b:78:cd:b8:87:0d: 5a:b2:13:4a:24:8a:24:4f:00:d1:0e:7c:6e:76:90: f1:52:73:0a:83:49:88:a4:12:23:25:48:b7:60:73: 2a:23:27:2c:15:c9:3e:18:4c:95:3f:d2:2a:cb:ac: f9:c1:26:42:65:4e:f0:af:a7:a9:f9:a5:97:cc:a1: f9:81:97:5f:42:1e:65:bd:37:3c:c0:3d:3d:c0:f8: c2:ef:df:9d:16:f3:4b:07:b1:13:37:ae:f1:43:04: c6:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:2A:55:62:FB:75:EE:39:51:D0:D7:AD:DA:D5:22:D0:83:E3:2C:6E X509v3 Authority Key Identifier: keyid:C0:79:11:83:8F:3B:CD:BB:76:B0:10:70:E1:27:AA:00:CC:27:F9:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/1/C07911838F3BCDBB76B01070E127AA00CC27F991.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07911838F3BCDBB76B01070E127AA00CC27F991.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/1/C07911838F3BCDBB76B01070E127AA00CC27F991.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:73:e2:ba:23:a9:7c:b6:c5:58:98:88:d7:35:38:d7:aa:95: db:a7:92:74:b6:0b:fe:c2:0e:09:50:e8:8a:e7:3f:97:e1:f8: 52:05:c1:11:f2:03:98:e8:2a:e4:3c:fc:5f:bb:ac:cb:27:af: e4:36:57:63:46:0f:60:a5:91:38:f1:bf:c4:42:74:6e:45:cd: 23:db:e8:3c:6e:57:6c:1d:76:3f:de:0c:54:a8:b5:6b:3a:79: 12:04:fa:4f:ed:18:25:11:77:52:e6:c7:ee:27:11:01:3b:fc: ad:88:57:a3:6f:db:48:3a:61:f4:d7:12:04:8e:20:ae:ef:94: 1e:6e:20:65:a3:d2:cc:f3:69:7d:6e:d4:25:36:7b:73:6f:44: b4:17:09:c0:68:0a:a5:8f:57:66:d4:48:56:99:06:b9:9f:7f: f2:97:fb:ce:a6:13:fc:7b:54:18:09:52:cc:35:51:2b:6a:19: 7d:dd:6d:ed:81:b1:13:c4:81:20:7a:79:12:9a:b8:b2:f4:6b: db:7c:32:e0:91:4d:47:1a:54:be:10:e7:d2:dd:d6:51:58:49: f0:a9:0a:1f:06:a4:d4:e4:d2:a5:61:f2:f8:2e:c6:3f:ce:f1: df:99:a9:ca:10:eb:d7:21:43:63:0d:eb:af:3e:31:41:03:53: 2d:5c:70:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUft2U3V43I+e3uvnw40nbvMCK2Q8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA3OTExODM4RjNCQ0RCQjc2QjAxMDcwRTEyN0FBMDBD QzI3Rjk5MTAeFw0yNTA5MDUwNTA3MDdaFw0yNTA5MDgxNjMxMDdaMDMxMTAvBgNV BAMTKDQ2MkE1NTYyRkI3NUVFMzk1MUQwRDdBRERBRDUyMkQwODNFMzJDNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC43Zib8mSN15jMD5zSdj7fY1uc 3VhIwp6umbFD1NyCbAjz5AfdN2YOOQ5KRnx6sylLSYFXGWQsxPOH9oMeJRdA82QB 9/EVGGB5OyzTNxJM64rHmRPGQDPB0e4733id9bX5PCOKIW78iOjaRER2rZLntLJ6 AllhpoxdNLtF10YhIjhZ65ACLomQ7g43qPDpr1GhPIFblu8Hl1kNSY5jH0t4zbiH DVqyE0okiiRPANEOfG52kPFScwqDSYikEiMlSLdgcyojJywVyT4YTJU/0irLrPnB JkJlTvCvp6n5pZfMofmBl19CHmW9NzzAPT3A+MLv350W80sHsRM3rvFDBMZtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURipVYvt17jlR0Net2tUi0IPjLG4wHwYDVR0j BBgwFoAUwHkRg487zbt2sBBw4SeqAMwn+ZEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzQ0NjU2My0wOWJjLTQ5MWItOGZiOS1mZDM5ZjA5MTY2OWQvMS9DMDc5MTE4MzhG M0JDREJCNzZCMDEwNzBFMTI3QUEwMENDMjdGOTkxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzA3OTExODM4RjNCQ0RCQjc2QjAxMDcwRTEyN0FBMDBDQzI3 Rjk5MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzc0NDY1NjMtMDliYy00OTFiLThm YjktZmQzOWYwOTE2NjlkLzEvQzA3OTExODM4RjNCQ0RCQjc2QjAxMDcwRTEyN0FB MDBDQzI3Rjk5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKBz4rojqXy2xViYiNc1ONeqldunknS2C/7C DglQ6IrnP5fh+FIFwRHyA5joKuQ8/F+7rMsnr+Q2V2NGD2ClkTjxv8RCdG5FzSPb 6DxuV2wddj/eDFSotWs6eRIE+k/tGCURd1Lmx+4nEQE7/K2IV6Nv20g6YfTXEgSO IK7vlB5uIGWj0szzaX1u1CU2e3NvRLQXCcBoCqWPV2bUSFaZBrmff/KX+86mE/x7 VBgJUsw1UStqGX3dbe2BsRPEgSB6eRKauLL0a9t8MuCRTUcaVL4Q59Ld1lFYSfCp Ch8GpNTk0qVh8vguxj/O8d+ZqcoQ69chQ2MN668+MUEDUy1ccBY= -----END CERTIFICATE-----Generated at Fri Sep 5 12:46:58 2025 by rpki-client