$ rpki-client -vvf repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.mft File: A349D07CAB13BF067B13D95E99981C2BA84B9A6B.mft (raw, json) Hash identifier: /CrM7Ktfz3Emd8PnVBgDYCjOAOCR8x9Eh2Y0Flih1Hw= Subject key identifier: 29:E0:CF:1A:D7:07:91:67:CD:69:CB:43:8E:DD:F9:79:01:B9:82:AE Authority key identifier: A3:49:D0:7C:AB:13:BF:06:7B:13:D9:5E:99:98:1C:2B:A8:4B:9A:6B Certificate issuer: /CN=A349D07CAB13BF067B13D95E99981C2BA84B9A6B Certificate serial: 18C58D627457920749D29768A88E371F638A9A18 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.mft Manifest number: 04B5 Signing time: Sun 07 Sep 2025 06:30:37 +0000 Manifest this update: Sun 07 Sep 2025 06:25:37 +0000 Manifest next update: Wed 10 Sep 2025 15:22:37 +0000 Files and hashes: 1: A349D07CAB13BF067B13D95E99981C2BA84B9A6B.crl (hash: uqtUlXdqvXGCA0jWiOGwrWmOkN9lddGLl3ILUUjLV/I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.crl rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:c5:8d:62:74:57:92:07:49:d2:97:68:a8:8e:37:1f:63:8a:9a:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A349D07CAB13BF067B13D95E99981C2BA84B9A6B Validity Not Before: Sep 7 06:25:37 2025 GMT Not After : Sep 10 15:22:37 2025 GMT Subject: CN=29E0CF1AD7079167CD69CB438EDDF97901B982AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:70:c9:bf:38:69:b5:2c:7f:d8:eb:70:80:5b: 36:13:f5:d3:c7:4c:7f:b6:56:dc:78:9f:7f:1e:b6: db:71:b9:a3:56:f0:a5:59:91:31:08:8b:fd:b9:14: ce:2a:97:d7:1e:2e:f6:44:4c:e5:04:f1:56:c8:29: 37:16:a2:16:09:d2:70:40:1f:88:44:28:94:84:b3: f6:c2:fa:02:d6:f5:f7:19:db:7e:b3:94:71:13:e9: f6:44:3e:48:ce:48:67:24:e1:61:75:7a:dd:86:ee: aa:94:45:f9:e5:b9:77:e2:8c:db:d6:af:07:2c:3f: 88:a5:4b:90:2e:0b:a1:c1:38:bf:24:81:e4:a6:79: d7:47:c8:74:9d:eb:28:5e:92:08:30:94:a2:91:1a: 4f:cc:19:75:7c:c4:ef:e3:e4:36:1c:31:4c:59:7d: fd:11:61:c1:42:2f:42:9d:a7:9b:97:1a:47:49:56: 00:f5:56:e1:d6:a4:f8:a6:0e:a5:0b:b7:fd:18:07: e2:b4:32:80:22:20:c5:4a:98:04:73:dc:09:ef:9b: ff:78:ef:d6:8f:ab:ae:93:0e:92:70:b3:5c:2e:a7: 9a:c0:a0:7f:4d:7e:6d:9e:b4:53:1a:f8:fd:b7:df: e6:96:0e:1d:9c:53:12:84:bb:ae:1a:fb:ca:f5:31: e4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:E0:CF:1A:D7:07:91:67:CD:69:CB:43:8E:DD:F9:79:01:B9:82:AE X509v3 Authority Key Identifier: keyid:A3:49:D0:7C:AB:13:BF:06:7B:13:D9:5E:99:98:1C:2B:A8:4B:9A:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:9c:db:54:bd:a6:d8:93:58:fe:e1:17:a2:12:16:db:f5:43: 32:8d:58:23:b4:72:4f:36:ab:8f:43:30:03:df:91:e6:14:dd: a2:fc:09:c7:60:b9:f4:44:74:1a:be:83:86:e2:49:83:c0:3d: 69:b0:58:8d:1f:9b:c9:b4:1d:6a:56:90:1c:5e:4b:ff:c0:54: fb:6a:fe:a2:88:70:b4:8f:a4:d2:f5:0f:48:f3:68:00:3a:fe: 35:ae:0e:f9:52:d3:1e:d7:d3:ea:4b:96:34:ec:eb:11:22:b5: 09:3c:23:74:df:e8:af:dc:65:95:71:5f:77:c8:72:4b:6f:a1: bb:2e:05:b5:85:30:55:4d:32:52:c4:de:f5:50:89:86:30:00: a5:02:8d:72:a6:91:c8:0e:53:7c:cb:b8:38:d3:ad:01:6b:88: a9:10:23:a7:f7:20:51:55:d0:22:49:fe:01:53:95:36:4f:7f: 62:1e:bf:c8:d1:b6:ad:6d:32:20:41:1b:36:da:34:51:60:61: 55:6b:0d:c0:7f:a7:d3:b6:88:15:ad:a0:60:c2:7f:2a:ff:16: d6:56:71:49:40:01:1c:a7:45:d4:ce:91:12:ce:0e:c4:84:5f: 5c:42:92:e9:9f:f2:08:0b:5d:ef:30:43:ad:0c:df:61:8a:e8: f1:18:45:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGMWNYnRXkgdJ0pdoqI43H2OKmhgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM0OUQwN0NBQjEzQkYwNjdCMTNEOTVFOTk5ODFDMkJB ODRCOUE2QjAeFw0yNTA5MDcwNjI1MzdaFw0yNTA5MTAxNTIyMzdaMDMxMTAvBgNV BAMTKDI5RTBDRjFBRDcwNzkxNjdDRDY5Q0I0MzhFRERGOTc5MDFCOTgyQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCucMm/OGm1LH/Y63CAWzYT9dPH TH+2Vtx4n38etttxuaNW8KVZkTEIi/25FM4ql9ceLvZETOUE8VbIKTcWohYJ0nBA H4hEKJSEs/bC+gLW9fcZ236zlHET6fZEPkjOSGck4WF1et2G7qqURfnluXfijNvW rwcsP4ilS5AuC6HBOL8kgeSmeddHyHSd6yhekggwlKKRGk/MGXV8xO/j5DYcMUxZ ff0RYcFCL0Kdp5uXGkdJVgD1VuHWpPimDqULt/0YB+K0MoAiIMVKmARz3Anvm/94 79aPq66TDpJws1wup5rAoH9Nfm2etFMa+P233+aWDh2cUxKEu64a+8r1MeRFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKeDPGtcHkWfNactDjt35eQG5gq4wHwYDVR0j BBgwFoAUo0nQfKsTvwZ7E9lemZgcK6hLmmswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YWRmY2I0NC1hZTdhLTQ0MjMtYWU3ZC0wODY0OGJmMWRlYjEvMC9BMzQ5RDA3Q0FC MTNCRjA2N0IxM0Q5NUU5OTk4MUMyQkE4NEI5QTZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTM0OUQwN0NBQjEzQkYwNjdCMTNEOTVFOTk5ODFDMkJBODRC OUE2Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmFkZmNiNDQtYWU3YS00NDIzLWFl N2QtMDg2NDhiZjFkZWIxLzAvQTM0OUQwN0NBQjEzQkYwNjdCMTNEOTVFOTk5ODFD MkJBODRCOUE2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEGc21S9ptiTWP7hF6ISFtv1QzKNWCO0ck82 q49DMAPfkeYU3aL8CcdgufREdBq+g4biSYPAPWmwWI0fm8m0HWpWkBxeS//AVPtq /qKIcLSPpNL1D0jzaAA6/jWuDvlS0x7X0+pLljTs6xEitQk8I3Tf6K/cZZVxX3fI cktvobsuBbWFMFVNMlLE3vVQiYYwAKUCjXKmkcgOU3zLuDjTrQFriKkQI6f3IFFV 0CJJ/gFTlTZPf2Iev8jRtq1tMiBBGzbaNFFgYVVrDcB/p9O2iBWtoGDCfyr/FtZW cUlAARynRdTOkRLODsSEX1xCkumf8ggLXe8wQ60M32GK6PEYRao= -----END CERTIFICATE-----Generated at Sun Sep 7 14:00:41 2025 by rpki-client