$ rpki-client -vvf repo-rpki.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.mft File: 7271655D6318ECB0B797B46C6ECFBC3DD2E32504.mft (raw, json) Hash identifier: RyuNdJxVMQ/s1W0510c4fT+QOL7hgOq8VBQXP3ZGGLM= Subject key identifier: F2:C0:1D:7F:DE:75:CC:CC:47:C3:24:52:C4:33:1D:BD:65:17:2E:CD Authority key identifier: 72:71:65:5D:63:18:EC:B0:B7:97:B4:6C:6E:CF:BC:3D:D2:E3:25:04 Certificate issuer: /CN=7271655D6318ECB0B797B46C6ECFBC3DD2E32504 Certificate serial: 50FCF4C23F59A9168F21869A8033FFB122D348AA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.cer Subject info access: rsync://repo-rpki.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.mft Manifest number: 0A Signing time: Wed 03 Sep 2025 06:51:24 +0000 Manifest this update: Wed 03 Sep 2025 06:46:24 +0000 Manifest next update: Sat 06 Sep 2025 18:21:24 +0000 Files and hashes: 1: 7271655D6318ECB0B797B46C6ECFBC3DD2E32504.crl (hash: u+ScnDWcAFFporZHA3+JugbpyCSY2LMWLifZc3TXXUg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.crl rsync://repo-rpki.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 18:21:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:fc:f4:c2:3f:59:a9:16:8f:21:86:9a:80:33:ff:b1:22:d3:48:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7271655D6318ECB0B797B46C6ECFBC3DD2E32504 Validity Not Before: Sep 3 06:46:24 2025 GMT Not After : Sep 6 18:21:24 2025 GMT Subject: CN=F2C01D7FDE75CCCC47C32452C4331DBD65172ECD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:01:bf:09:a0:b5:d7:25:8c:00:da:de:fc:4b: 41:77:24:4a:3d:8d:56:83:c4:aa:42:01:08:d1:85: 58:2b:56:26:69:bd:2d:ac:00:8c:de:ac:30:35:01: 1d:24:0f:2d:b4:78:28:a5:b6:80:90:38:48:7a:c1: 2e:1e:6c:59:4c:80:61:b5:54:79:9a:92:32:9d:55: 1e:5e:8c:8e:79:28:3a:36:63:a1:87:d1:f5:5c:58: d3:8d:d7:5d:9b:ad:2f:d5:11:4a:53:ab:a7:69:5b: f8:cf:d6:20:bc:b3:21:c1:60:c7:d7:bb:99:18:5d: 4a:87:34:1f:ca:b6:6b:1c:2a:5d:72:17:08:9f:d1: a9:a2:e5:f0:ad:d0:b4:b2:c7:3e:ab:1a:be:5d:ae: ba:cb:2f:87:fe:50:ed:06:96:e0:a3:af:0d:07:e5: 3c:da:4c:29:33:64:6c:9a:83:db:6a:98:1b:b4:28: ea:11:84:c7:b2:1f:ab:33:25:c4:56:45:2f:67:3e: e3:43:ef:31:74:09:9a:48:85:25:06:11:c4:85:b7: d5:9e:8e:52:12:30:87:bf:b6:b3:6f:98:f0:16:08: 65:a4:07:46:75:98:3f:e1:d0:84:56:c1:8b:ff:84: 6e:75:38:9b:4a:e1:7a:9f:0c:43:5f:7c:b6:26:b7: f8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:C0:1D:7F:DE:75:CC:CC:47:C3:24:52:C4:33:1D:BD:65:17:2E:CD X509v3 Authority Key Identifier: keyid:72:71:65:5D:63:18:EC:B0:B7:97:B4:6C:6E:CF:BC:3D:D2:E3:25:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/468de91b-636b-4da4-b1d0-72632cfcf235/0/7271655D6318ECB0B797B46C6ECFBC3DD2E32504.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:aa:20:10:f6:49:01:a7:82:61:04:6a:c6:17:c8:60:98:79: 17:f3:f3:aa:1d:bb:7f:e0:fb:58:ef:ef:51:db:7b:29:31:83: fe:8a:ab:74:4e:a3:35:97:b9:2e:26:80:58:3c:af:c1:1f:bb: 5e:bf:aa:7d:f2:f2:f2:4e:18:5e:8c:81:2d:da:88:0a:89:02: 85:a5:4c:28:25:f0:80:f7:3f:8c:c6:5e:ec:cb:a1:5b:9d:bb: 24:d1:9c:0f:20:93:eb:5c:85:9b:94:39:ad:b4:65:d7:1f:c8: 78:56:46:ee:09:e4:13:ea:e0:d8:d1:f2:5d:03:1d:c8:e2:9d: 06:12:b4:fc:4f:3c:a1:14:ab:4a:89:b0:9a:35:5b:64:43:8a: 6c:b2:67:a7:96:01:e2:3c:9c:35:56:2c:59:9e:75:c1:6e:6c: eb:b1:31:7d:87:00:9a:a4:09:dc:ab:66:16:d2:3a:de:00:b7: 3c:c0:14:03:62:97:ca:23:e0:9f:c7:0f:b4:8c:3d:d0:88:d9: 52:61:57:93:7b:05:79:e2:73:ae:4c:49:b6:66:df:17:60:fe: 33:9e:8a:6e:20:65:d3:12:a4:cd:4b:f8:24:e7:f5:05:35:27: a4:be:5c:4b:0f:4a:c0:58:ed:32:c5:a2:7b:dc:f3:c9:dd:12: 62:bc:5b:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUPz0wj9ZqRaPIYaagDP/sSLTSKowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI3MTY1NUQ2MzE4RUNCMEI3OTdCNDZDNkVDRkJDM0RE MkUzMjUwNDAeFw0yNTA5MDMwNjQ2MjRaFw0yNTA5MDYxODIxMjRaMDMxMTAvBgNV BAMTKEYyQzAxRDdGREU3NUNDQ0M0N0MzMjQ1MkM0MzMxREJENjUxNzJFQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCAb8JoLXXJYwA2t78S0F3JEo9 jVaDxKpCAQjRhVgrViZpvS2sAIzerDA1AR0kDy20eCiltoCQOEh6wS4ebFlMgGG1 VHmakjKdVR5ejI55KDo2Y6GH0fVcWNON112brS/VEUpTq6dpW/jP1iC8syHBYMfX u5kYXUqHNB/KtmscKl1yFwif0ami5fCt0LSyxz6rGr5drrrLL4f+UO0GluCjrw0H 5TzaTCkzZGyag9tqmBu0KOoRhMeyH6szJcRWRS9nPuND7zF0CZpIhSUGEcSFt9We jlISMIe/trNvmPAWCGWkB0Z1mD/h0IRWwYv/hG51OJtK4XqfDENffLYmt/hFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8sAdf951zMxHwyRSxDMdvWUXLs0wHwYDVR0j BBgwFoAUcnFlXWMY7LC3l7Rsbs+8PdLjJQQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NjhkZTkxYi02MzZiLTRkYTQtYjFkMC03MjYzMmNmY2YyMzUvMC83MjcxNjU1RDYz MThFQ0IwQjc5N0I0NkM2RUNGQkMzREQyRTMyNTA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzI3MTY1NUQ2MzE4RUNCMEI3OTdCNDZDNkVDRkJDM0REMkUz MjUwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDY4ZGU5MWItNjM2Yi00ZGE0LWIx ZDAtNzI2MzJjZmNmMjM1LzAvNzI3MTY1NUQ2MzE4RUNCMEI3OTdCNDZDNkVDRkJD M0REMkUzMjUwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFeqIBD2SQGngmEEasYXyGCYeRfz86odu3/g +1jv71Hbeykxg/6Kq3ROozWXuS4mgFg8r8Efu16/qn3y8vJOGF6MgS3aiAqJAoWl TCgl8ID3P4zGXuzLoVuduyTRnA8gk+tchZuUOa20ZdcfyHhWRu4J5BPq4NjR8l0D HcjinQYStPxPPKEUq0qJsJo1W2RDimyyZ6eWAeI8nDVWLFmedcFubOuxMX2HAJqk CdyrZhbSOt4AtzzAFANil8oj4J/HD7SMPdCI2VJhV5N7BXnic65MSbZm3xdg/jOe im4gZdMSpM1L+CTn9QU1J6S+XEsPSsBY7TLFonvc88ndEmK8W5k= -----END CERTIFICATE-----Generated at Fri Sep 5 10:31:52 2025 by rpki-client