$ rpki-client -vvf repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft File: 02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft (raw, json) Hash identifier: AgdwkVMCxuZ6SE6lZEJXRk3ZGHeG8el1kSZCeAbd5vk= Subject key identifier: 1A:F3:C4:77:C8:7E:69:BE:D4:58:EC:7D:7E:E2:46:E0:49:B3:49:3D Authority key identifier: 02:23:69:13:B4:6A:90:03:C0:64:5E:6C:C8:58:EA:54:D6:D7:F4:AC Certificate issuer: /CN=02236913B46A9003C0645E6CC858EA54D6D7F4AC Certificate serial: 59CD64C46604DF00CC7C805762CFCC1D81092E13 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02236913B46A9003C0645E6CC858EA54D6D7F4AC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft Manifest number: 010C Signing time: Sat 18 Oct 2025 11:31:00 +0000 Manifest this update: Sat 18 Oct 2025 11:26:00 +0000 Manifest next update: Tue 21 Oct 2025 12:42:00 +0000 Files and hashes: 1: 02236913B46A9003C0645E6CC858EA54D6D7F4AC.crl (hash: eQof41B2llL2QGEmVc0JF1lpRCSLX9/USCjTR3d1vNY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.crl rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02236913B46A9003C0645E6CC858EA54D6D7F4AC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 12:42:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:cd:64:c4:66:04:df:00:cc:7c:80:57:62:cf:cc:1d:81:09:2e:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02236913B46A9003C0645E6CC858EA54D6D7F4AC Validity Not Before: Oct 18 11:26:00 2025 GMT Not After : Oct 21 12:42:00 2025 GMT Subject: CN=1AF3C477C87E69BED458EC7D7EE246E049B3493D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1f:6d:e2:87:5e:82:69:fb:02:65:49:78:c9: 6e:20:aa:80:54:c4:48:8b:b7:db:5f:b0:6a:4d:b5: 55:82:c5:e6:12:e5:6d:76:18:9e:49:be:94:57:e2: b4:c4:75:28:4f:02:87:c4:e3:eb:f0:14:28:15:08: dd:68:2d:df:b1:e7:d4:5d:43:59:0b:84:27:83:45: c1:7e:98:02:58:d3:2b:c5:46:b6:1a:45:fa:af:82: 14:ec:94:81:9f:da:17:d9:be:84:1b:1f:a0:13:ea: 95:de:56:c6:aa:c8:6b:27:99:67:8a:23:10:4b:c0: d5:41:8f:f3:83:12:bd:95:1d:49:ee:ab:6f:1d:26: a6:49:ae:16:50:54:de:6e:70:69:b6:e1:3a:3f:30: 84:58:39:0f:52:f3:db:0f:95:23:5a:14:3e:a3:51: 33:c0:7f:17:0d:95:65:c2:6d:38:bc:89:2b:44:15: 49:8e:21:be:74:9f:b7:58:96:5c:6c:79:e8:c9:17: 5c:17:7a:36:68:8c:b3:dd:31:ba:e7:83:3b:7f:b5: 9c:24:c3:8b:51:ac:13:58:f0:ce:f9:b2:95:6c:cf: 1a:0f:13:bd:d8:76:cb:76:42:a8:51:f0:0c:d0:ad: 3c:1e:a5:c6:7d:5c:9d:02:6c:c0:87:da:f2:b7:4f: c5:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:F3:C4:77:C8:7E:69:BE:D4:58:EC:7D:7E:E2:46:E0:49:B3:49:3D X509v3 Authority Key Identifier: keyid:02:23:69:13:B4:6A:90:03:C0:64:5E:6C:C8:58:EA:54:D6:D7:F4:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02236913B46A9003C0645E6CC858EA54D6D7F4AC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b72f71a-b9c2-4033-9675-d7707603a82c/0/02236913B46A9003C0645E6CC858EA54D6D7F4AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:3b:b1:6b:d9:c5:61:23:09:13:6a:7f:57:fb:8c:22:3f:90: 18:44:a1:b6:c3:04:6d:33:ba:60:87:96:c4:31:ce:48:29:b3: a7:2f:51:5a:d1:ca:80:30:5d:9d:33:28:db:22:fd:f7:c3:51: 66:55:16:bf:46:d3:02:73:67:7f:ab:2c:84:2a:21:f8:3f:91: 90:00:3d:f2:08:52:4d:88:2c:06:fa:a2:f4:f2:61:52:02:03: e2:9b:17:38:f7:cb:2f:2c:22:5b:6f:05:2c:58:19:92:e5:bf: 52:0e:98:7f:e0:56:1a:de:da:13:b1:ac:71:80:72:d3:27:cd: 7f:17:76:06:09:01:f2:21:8f:be:17:43:4e:48:95:6d:52:3b: ab:6b:f9:a7:bb:ad:11:5e:b3:73:44:d9:20:6e:50:a0:6a:7f: 85:78:d3:b0:5c:34:ac:16:9e:03:22:d6:d9:94:ff:de:12:14: c9:65:50:ac:e9:ea:1d:42:bc:10:a1:97:da:f1:56:0a:15:4d: ae:a4:c9:b3:0a:66:6d:b7:6b:c5:15:85:b9:32:4e:6e:7e:d8: c9:d0:72:f6:fc:77:be:bd:91:12:e4:35:f1:dc:ec:bb:a1:83: 52:f3:c2:5b:45:36:98:d4:0b:b3:0b:23:e0:da:bd:2c:79:e0: 2b:08:65:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWc1kxGYE3wDMfIBXYs/MHYEJLhMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDIyMzY5MTNCNDZBOTAwM0MwNjQ1RTZDQzg1OEVBNTRE NkQ3RjRBQzAeFw0yNTEwMTgxMTI2MDBaFw0yNTEwMjExMjQyMDBaMDMxMTAvBgNV BAMTKDFBRjNDNDc3Qzg3RTY5QkVENDU4RUM3RDdFRTI0NkUwNDlCMzQ5M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCH23ih16CafsCZUl4yW4gqoBU xEiLt9tfsGpNtVWCxeYS5W12GJ5JvpRX4rTEdShPAofE4+vwFCgVCN1oLd+x59Rd Q1kLhCeDRcF+mAJY0yvFRrYaRfqvghTslIGf2hfZvoQbH6AT6pXeVsaqyGsnmWeK IxBLwNVBj/ODEr2VHUnuq28dJqZJrhZQVN5ucGm24To/MIRYOQ9S89sPlSNaFD6j UTPAfxcNlWXCbTi8iStEFUmOIb50n7dYllxseejJF1wXejZojLPdMbrngzt/tZwk w4tRrBNY8M75spVszxoPE73Ydst2QqhR8AzQrTwepcZ9XJ0CbMCH2vK3T8W/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGvPEd8h+ab7UWOx9fuJG4EmzST0wHwYDVR0j BBgwFoAUAiNpE7RqkAPAZF5syFjqVNbX9KwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YjcyZjcxYS1iOWMyLTQwMzMtOTY3NS1kNzcwNzYwM2E4MmMvMC8wMjIzNjkxM0I0 NkE5MDAzQzA2NDVFNkNDODU4RUE1NEQ2RDdGNEFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDIyMzY5MTNCNDZBOTAwM0MwNjQ1RTZDQzg1OEVBNTRENkQ3 RjRBQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI3MmY3MWEtYjljMi00MDMzLTk2 NzUtZDc3MDc2MDNhODJjLzAvMDIyMzY5MTNCNDZBOTAwM0MwNjQ1RTZDQzg1OEVB NTRENkQ3RjRBQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA47sWvZxWEjCRNqf1f7jCI/kBhEobbDBG0z umCHlsQxzkgps6cvUVrRyoAwXZ0zKNsi/ffDUWZVFr9G0wJzZ3+rLIQqIfg/kZAA PfIIUk2ILAb6ovTyYVICA+KbFzj3yy8sIltvBSxYGZLlv1IOmH/gVhre2hOxrHGA ctMnzX8XdgYJAfIhj74XQ05IlW1SO6tr+ae7rRFes3NE2SBuUKBqf4V407BcNKwW ngMi1tmU/94SFMllUKzp6h1CvBChl9rxVgoVTa6kybMKZm23a8UVhbkyTm5+2MnQ cvb8d769kRLkNfHc7Luhg1LzwltFNpjUC7MLI+DavSx54CsIZV8= -----END CERTIFICATE-----Generated at Sun Oct 19 18:07:51 2025 by rpki-client