$ rpki-client -vvf repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft File: D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft (raw, json) Hash identifier: +nE+IK3LRQY+qCqD0Iw0t7+Sh7sKxOBVD93fAusBpw4= Subject key identifier: B6:82:2D:8A:D4:62:64:A9:76:F7:D9:9A:CC:8B:58:BB:D5:81:1A:BE Authority key identifier: D2:89:2B:AB:EE:5F:3B:29:8F:67:4D:48:B1:A6:A8:D6:38:54:6C:DF Certificate issuer: /CN=D2892BABEE5F3B298F674D48B1A6A8D638546CDF Certificate serial: 5FABA457F597B1A8D59C70C88F1645D55052E792 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft Manifest number: 04F2 Signing time: Sat 06 Sep 2025 01:02:08 +0000 Manifest this update: Sat 06 Sep 2025 00:57:08 +0000 Manifest next update: Tue 09 Sep 2025 11:58:08 +0000 Files and hashes: 1: D2892BABEE5F3B298F674D48B1A6A8D638546CDF.crl (hash: 0r3+71yMK2siBQKGfnjTQLkt5eM/882GUdL6UMGFIZQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.crl rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 11:58:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:ab:a4:57:f5:97:b1:a8:d5:9c:70:c8:8f:16:45:d5:50:52:e7:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2892BABEE5F3B298F674D48B1A6A8D638546CDF Validity Not Before: Sep 6 00:57:08 2025 GMT Not After : Sep 9 11:58:08 2025 GMT Subject: CN=B6822D8AD46264A976F7D99ACC8B58BBD5811ABE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b7:b9:03:4a:9c:5d:a6:9e:b4:4e:79:c0:31: 88:b2:35:86:cd:5e:f2:4e:40:19:5a:82:5c:ea:16: 71:43:d0:3a:35:03:ee:f8:a5:43:c5:d0:75:ab:ed: 32:08:65:1d:a4:1b:d3:69:32:92:2f:cb:ea:39:6e: 26:d8:1d:8a:12:c3:7e:3d:98:66:36:3b:6a:78:95: 6a:9f:c9:2d:d3:8b:0d:e7:6a:99:3b:7e:5d:8b:a2: bd:df:82:0b:ef:bb:ca:b5:ff:50:7b:92:5e:b7:1f: 51:38:55:d4:2e:ce:55:c4:ff:28:ba:d4:c8:98:83: 3d:da:fd:c7:e4:c2:c8:0e:a6:40:85:38:f0:c2:1d: e4:8b:71:85:4f:e3:b0:56:58:e8:e2:37:71:9f:77: 68:aa:8e:89:b9:6a:ba:b0:8a:79:e0:7f:ee:53:7a: cf:a4:5a:55:0a:e0:4b:42:6e:d3:60:0e:93:c5:f0: e6:fb:41:57:cd:8d:84:06:95:67:46:a1:53:54:8c: 06:6e:e8:28:b2:01:57:4c:20:a6:69:9d:64:1f:90: 47:db:eb:00:50:38:a3:47:3b:ce:4c:2d:74:ce:49: 93:ec:8b:ae:28:b3:74:32:8a:da:3e:c2:2c:ca:0f: e1:04:c9:8d:74:89:5c:28:2b:98:db:89:13:d1:10: da:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:82:2D:8A:D4:62:64:A9:76:F7:D9:9A:CC:8B:58:BB:D5:81:1A:BE X509v3 Authority Key Identifier: keyid:D2:89:2B:AB:EE:5F:3B:29:8F:67:4D:48:B1:A6:A8:D6:38:54:6C:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62bcf1ec-922d-4cd7-8ca6-72724f66e5fb/0/D2892BABEE5F3B298F674D48B1A6A8D638546CDF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:e7:3d:8d:9b:04:e8:ca:1e:1d:a6:71:8a:47:15:d1:e7:a2: cb:be:ef:8f:97:2c:26:3d:14:e5:af:df:36:51:30:2a:bd:70: 69:f2:8c:af:21:40:e7:60:21:8f:47:12:61:1d:9f:c3:f3:d5: 09:1e:c3:d6:7f:cf:13:7a:9b:20:3f:94:b2:88:de:0b:92:a5: f8:6f:ce:55:d3:16:bf:9a:e0:ec:f8:ef:32:bd:2c:b5:70:47: eb:af:1c:22:9c:2a:89:09:8a:3c:12:56:df:c6:9b:d1:f3:c4: 39:d5:8e:29:72:89:5e:fd:24:ec:9c:34:23:18:c9:17:bd:44: 7b:5a:ec:c7:84:e4:1a:30:9f:7d:9a:d9:2a:5f:3a:47:16:85: d9:53:43:fa:34:1e:76:c2:58:12:28:6b:ea:d1:a3:80:44:a8: 81:5c:47:0b:69:5a:84:9d:c5:65:92:fd:e7:7c:55:e6:0c:95: 8d:31:d2:b6:6c:59:83:21:53:69:6d:d9:4f:c5:55:f4:24:58: 52:5a:9a:34:d8:65:9b:81:23:20:d7:f2:20:ef:76:8b:ae:82: 0c:c3:e9:35:e6:02:3e:e0:37:45:81:cd:57:46:8d:58:8f:4a: ca:22:23:ff:a8:1c:7b:a6:0b:e5:33:49:9a:70:0c:3b:74:ed: 8a:d0:01:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX6ukV/WXsajVnHDIjxZF1VBS55IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI4OTJCQUJFRTVGM0IyOThGNjc0RDQ4QjFBNkE4RDYz ODU0NkNERjAeFw0yNTA5MDYwMDU3MDhaFw0yNTA5MDkxMTU4MDhaMDMxMTAvBgNV BAMTKEI2ODIyRDhBRDQ2MjY0QTk3NkY3RDk5QUNDOEI1OEJCRDU4MTFBQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTt7kDSpxdpp60TnnAMYiyNYbN XvJOQBlaglzqFnFD0Do1A+74pUPF0HWr7TIIZR2kG9NpMpIvy+o5bibYHYoSw349 mGY2O2p4lWqfyS3Tiw3napk7fl2Lor3fggvvu8q1/1B7kl63H1E4VdQuzlXE/yi6 1MiYgz3a/cfkwsgOpkCFOPDCHeSLcYVP47BWWOjiN3Gfd2iqjom5arqwinngf+5T es+kWlUK4EtCbtNgDpPF8Ob7QVfNjYQGlWdGoVNUjAZu6CiyAVdMIKZpnWQfkEfb 6wBQOKNHO85MLXTOSZPsi64os3Qyito+wizKD+EEyY10iVwoK5jbiRPRENrBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtoItitRiZKl299mazItYu9WBGr4wHwYDVR0j BBgwFoAU0okrq+5fOymPZ01Isaao1jhUbN8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmJjZjFlYy05MjJkLTRjZDctOGNhNi03MjcyNGY2NmU1ZmIvMC9EMjg5MkJBQkVF NUYzQjI5OEY2NzRENDhCMUE2QThENjM4NTQ2Q0RGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI4OTJCQUJFRTVGM0IyOThGNjc0RDQ4QjFBNkE4RDYzODU0 NkNERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjJiY2YxZWMtOTIyZC00Y2Q3LThj YTYtNzI3MjRmNjZlNWZiLzAvRDI4OTJCQUJFRTVGM0IyOThGNjc0RDQ4QjFBNkE4 RDYzODU0NkNERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB/nPY2bBOjKHh2mcYpHFdHnosu+74+XLCY9 FOWv3zZRMCq9cGnyjK8hQOdgIY9HEmEdn8Pz1Qkew9Z/zxN6myA/lLKI3guSpfhv zlXTFr+a4Oz47zK9LLVwR+uvHCKcKokJijwSVt/Gm9HzxDnVjilyiV79JOycNCMY yRe9RHta7MeE5Bown32a2SpfOkcWhdlTQ/o0HnbCWBIoa+rRo4BEqIFcRwtpWoSd xWWS/ed8VeYMlY0x0rZsWYMhU2lt2U/FVfQkWFJamjTYZZuBIyDX8iDvdouuggzD 6TXmAj7gN0WBzVdGjViPSsoiI/+oHHumC+UzSZpwDDt07YrQARo= -----END CERTIFICATE-----Generated at Sun Sep 7 15:25:43 2025 by rpki-client