$ rpki-client -vvf repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft File: C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft (raw, json) Hash identifier: xk4YYR8pWRFD/aMSllTuX1nLoS1056a9aiFIq757HiI= Subject key identifier: 65:7A:3A:DB:87:C6:FB:AF:5D:E4:70:74:56:C0:01:64:D6:6A:AB:01 Authority key identifier: C1:66:91:03:D8:70:A3:90:C5:6C:8D:FD:3C:1B:FE:23:E4:8B:05:40 Certificate issuer: /CN=C1669103D870A390C56C8DFD3C1BFE23E48B0540 Certificate serial: 562D638B856F18AEA8258C65EFB6876721567A48 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1669103D870A390C56C8DFD3C1BFE23E48B0540.cer Subject info access: rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft Manifest number: CE Signing time: Sun 07 Sep 2025 00:01:22 +0000 Manifest this update: Sat 06 Sep 2025 23:56:22 +0000 Manifest next update: Wed 10 Sep 2025 08:57:22 +0000 Files and hashes: 1: C1669103D870A390C56C8DFD3C1BFE23E48B0540.crl (hash: iaN4ESZIK2zihY8Dypc/iAnO4GaNIHmsuxzeM5FM0N4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.crl rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1669103D870A390C56C8DFD3C1BFE23E48B0540.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 08:57:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:2d:63:8b:85:6f:18:ae:a8:25:8c:65:ef:b6:87:67:21:56:7a:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1669103D870A390C56C8DFD3C1BFE23E48B0540 Validity Not Before: Sep 6 23:56:22 2025 GMT Not After : Sep 10 08:57:22 2025 GMT Subject: CN=657A3ADB87C6FBAF5DE4707456C00164D66AAB01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:32:5f:bd:83:d0:66:22:f5:51:ca:f4:0f:38: 1e:ca:40:cb:62:55:50:9f:54:47:38:0a:45:c4:36: ef:af:27:36:e9:30:ce:64:e4:47:66:b1:bd:0f:c5: 9f:fd:20:49:39:9a:31:c1:0b:e6:e9:02:39:e0:4d: d8:f4:7b:25:23:a1:a0:0f:51:47:b9:3c:2f:f1:08: 02:41:12:69:32:e6:b8:40:d8:87:bf:ee:8f:44:ab: b6:c3:10:37:29:3d:ad:07:6d:30:c1:67:4f:2a:d5: 01:13:4a:bf:b6:ad:ec:a6:a5:71:59:d2:ca:22:a1: 70:75:1a:38:f9:df:bc:4e:c1:b6:41:36:65:b0:03: aa:bf:60:93:f3:1d:a5:b8:8f:5a:e4:bb:29:3b:a9: 48:02:70:ec:0d:b3:01:5f:a1:fa:89:4f:bc:1b:c9: 05:e8:0d:ad:4c:18:2b:d5:d2:a3:45:6d:f5:15:11: e4:b4:31:40:47:da:64:a8:f1:79:b9:7e:67:ec:43: 44:b4:d9:f5:03:4a:20:65:96:ec:7b:04:52:84:c8: e3:63:29:3f:06:2a:6c:a3:59:53:a1:3a:77:d0:94: 62:90:d3:80:de:fc:be:f6:ba:8b:c5:f3:c4:32:89: d3:2a:c9:82:69:f9:c2:c9:f3:5e:75:87:01:66:48: aa:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:7A:3A:DB:87:C6:FB:AF:5D:E4:70:74:56:C0:01:64:D6:6A:AB:01 X509v3 Authority Key Identifier: keyid:C1:66:91:03:D8:70:A3:90:C5:6C:8D:FD:3C:1B:FE:23:E4:8B:05:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1669103D870A390C56C8DFD3C1BFE23E48B0540.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:42:46:54:43:27:b9:59:d4:fe:94:f6:3c:e0:83:92:37:4f: 4f:49:37:44:de:7a:c7:55:6d:4f:b9:a2:51:7c:71:86:c9:cd: ee:8f:a4:96:ec:03:5e:af:31:5a:d2:ab:9e:a2:31:5e:32:0c: e5:6e:84:9b:30:6f:d1:18:3f:e2:76:34:20:4e:0b:fa:ec:e5: ff:86:59:e3:1f:f2:62:b8:65:6a:62:8a:98:13:a5:30:ab:82: f3:0e:30:b1:3f:a3:95:1f:9e:b7:b9:47:a2:9f:81:31:c2:b2: 26:94:0f:a6:9a:12:d3:41:1f:fd:57:87:db:06:5e:0e:c0:95: 93:46:b0:24:2c:d1:20:08:3b:fb:1f:14:ca:6f:5d:bb:c0:f7: 82:ec:37:8e:bc:57:23:d9:74:60:74:10:0e:9f:83:79:33:60: b4:00:4e:d3:6e:1e:86:53:ec:b3:98:6b:df:18:ee:4f:41:37: d9:a4:51:ac:86:8e:bf:2d:5e:2b:a5:22:4e:e6:53:3f:a4:fd: 94:51:a3:5a:fa:a8:94:2e:49:2e:9f:2d:d9:b3:41:f9:81:cc: 3b:a6:ca:58:60:73:03:91:9d:c5:59:8b:d0:8a:9c:07:33:29: 90:21:67:23:c7:32:93:24:19:bd:28:61:0d:03:9b:92:13:28: 95:b0:66:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVi1ji4VvGK6oJYxl77aHZyFWekgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE2NjkxMDNEODcwQTM5MEM1NkM4REZEM0MxQkZFMjNF NDhCMDU0MDAeFw0yNTA5MDYyMzU2MjJaFw0yNTA5MTAwODU3MjJaMDMxMTAvBgNV BAMTKDY1N0EzQURCODdDNkZCQUY1REU0NzA3NDU2QzAwMTY0RDY2QUFCMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdMl+9g9BmIvVRyvQPOB7KQMti VVCfVEc4CkXENu+vJzbpMM5k5Edmsb0PxZ/9IEk5mjHBC+bpAjngTdj0eyUjoaAP UUe5PC/xCAJBEmky5rhA2Ie/7o9Eq7bDEDcpPa0HbTDBZ08q1QETSr+2reympXFZ 0soioXB1Gjj537xOwbZBNmWwA6q/YJPzHaW4j1rkuyk7qUgCcOwNswFfofqJT7wb yQXoDa1MGCvV0qNFbfUVEeS0MUBH2mSo8Xm5fmfsQ0S02fUDSiBllux7BFKEyONj KT8GKmyjWVOhOnfQlGKQ04De/L72uovF88QyidMqyYJp+cLJ8151hwFmSKo5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZXo624fG+69d5HB0VsABZNZqqwEwHwYDVR0j BBgwFoAUwWaRA9hwo5DFbI39PBv+I+SLBUAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ODhkMGI2ZS1iMmVkLTQ5YzgtYTQ5OC04ZmQyOTlhZmI3MDEvMC9DMTY2OTEwM0Q4 NzBBMzkwQzU2QzhERkQzQzFCRkUyM0U0OEIwNTQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE2NjkxMDNEODcwQTM5MEM1NkM4REZEM0MxQkZFMjNFNDhC MDU0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODg4ZDBiNmUtYjJlZC00OWM4LWE0 OTgtOGZkMjk5YWZiNzAxLzAvQzE2NjkxMDNEODcwQTM5MEM1NkM4REZEM0MxQkZF MjNFNDhCMDU0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACxCRlRDJ7lZ1P6U9jzgg5I3T09JN0TeesdV bU+5olF8cYbJze6PpJbsA16vMVrSq56iMV4yDOVuhJswb9EYP+J2NCBOC/rs5f+G WeMf8mK4ZWpiipgTpTCrgvMOMLE/o5Ufnre5R6KfgTHCsiaUD6aaEtNBH/1Xh9sG Xg7AlZNGsCQs0SAIO/sfFMpvXbvA94LsN468VyPZdGB0EA6fg3kzYLQATtNuHoZT 7LOYa98Y7k9BN9mkUayGjr8tXiulIk7mUz+k/ZRRo1r6qJQuSS6fLdmzQfmBzDum ylhgcwORncVZi9CKnAczKZAhZyPHMpMkGb0oYQ0Dm5ITKJWwZj0= -----END CERTIFICATE-----Generated at Sun Sep 7 15:34:15 2025 by rpki-client