$ rpki-client -vvf repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.mft File: D018BF43793F56145B87233DD668DE3BDEEFFE13.mft (raw, json) Hash identifier: RCcwtCJ4+Jw9lycAPMSQqRUziJ8ju3PLcDBAXl0+ZZw= Subject key identifier: 34:91:F4:DB:AE:5C:F1:E9:12:33:14:BD:26:21:E7:BA:E7:8F:06:36 Authority key identifier: D0:18:BF:43:79:3F:56:14:5B:87:23:3D:D6:68:DE:3B:DE:EF:FE:13 Certificate issuer: /CN=D018BF43793F56145B87233DD668DE3BDEEFFE13 Certificate serial: 38E52D94427757499B87D8AFF6D659674D42F019 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D018BF43793F56145B87233DD668DE3BDEEFFE13.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.mft Manifest number: 58 Signing time: Thu 04 Sep 2025 06:31:14 +0000 Manifest this update: Thu 04 Sep 2025 06:26:14 +0000 Manifest next update: Sun 07 Sep 2025 11:32:14 +0000 Files and hashes: 1: D018BF43793F56145B87233DD668DE3BDEEFFE13.crl (hash: ZUnKxKGuHYSmlO3oig57cRo6z2ypHWzaX/5kJThCIbA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.crl rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D018BF43793F56145B87233DD668DE3BDEEFFE13.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 11:32:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:e5:2d:94:42:77:57:49:9b:87:d8:af:f6:d6:59:67:4d:42:f0:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D018BF43793F56145B87233DD668DE3BDEEFFE13 Validity Not Before: Sep 4 06:26:14 2025 GMT Not After : Sep 7 11:32:14 2025 GMT Subject: CN=3491F4DBAE5CF1E9123314BD2621E7BAE78F0636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:56:8a:42:eb:ee:32:b3:49:9d:f2:35:48:85: 85:ff:6e:fe:2a:e1:d9:fd:a5:68:e1:21:bc:a8:22: 78:cf:5c:34:c4:eb:df:1f:18:81:70:d5:1c:e5:d5: 71:62:58:79:b6:76:d3:8a:ac:9e:53:e9:75:94:1b: 24:4a:9e:97:f2:b9:52:77:7d:be:3c:b7:da:83:c0: 52:01:61:db:ed:84:08:1e:ef:94:fe:3b:98:65:88: a9:34:b1:40:8f:2b:df:fe:3e:69:84:8c:7a:55:7c: 5f:d9:38:f0:f1:4e:78:ef:5b:f0:cd:8d:20:9d:6c: 71:fc:bd:84:02:a7:8c:93:c2:f7:d9:38:25:4e:41: 62:87:e3:0b:76:7f:e0:78:e9:43:18:9c:d3:c6:0b: a7:6a:24:91:4d:03:a9:b8:98:0b:3d:36:0e:04:e4: 1b:cd:57:58:17:81:15:30:13:64:20:34:44:db:d0: 30:df:03:45:bf:41:8e:47:50:e5:e6:27:0c:a8:33: fb:09:f1:16:0e:36:c9:87:4c:12:83:32:b7:aa:1e: a8:00:c1:ca:e5:1b:df:22:1e:a2:a8:bd:18:1d:4b: d3:c5:08:08:34:81:d6:73:df:33:0e:fe:f8:0c:9c: ab:7d:cd:bc:a5:56:7c:07:14:07:cb:28:a3:06:ed: 7b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:91:F4:DB:AE:5C:F1:E9:12:33:14:BD:26:21:E7:BA:E7:8F:06:36 X509v3 Authority Key Identifier: keyid:D0:18:BF:43:79:3F:56:14:5B:87:23:3D:D6:68:DE:3B:DE:EF:FE:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D018BF43793F56145B87233DD668DE3BDEEFFE13.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89ad314a-7657-4901-b7dd-3b9a9bfc6e9c/0/D018BF43793F56145B87233DD668DE3BDEEFFE13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:e1:91:02:e4:0f:0a:dd:bb:26:5d:01:a5:70:04:67:04:c1: 0b:52:06:f8:79:cc:fc:ae:1c:f9:af:35:a5:41:66:7e:a8:56: b2:88:c6:06:c2:6b:d5:d5:82:cc:f3:c5:3a:be:5c:40:9a:d8: ff:32:70:da:f4:34:96:ab:12:bb:f5:85:88:3f:10:89:61:61: e0:ed:1c:f2:37:fa:b7:29:c7:91:9b:b5:53:56:1d:2f:bb:8f: d4:09:cd:3b:9e:95:c6:a3:cc:3b:5b:97:23:71:83:44:00:3b: 4f:7f:fe:5b:fe:60:81:0f:72:06:9c:aa:88:a0:5a:a6:73:88: 43:69:40:4d:6f:c9:0a:41:66:1d:26:4f:ce:6a:07:13:bb:2e: 73:8c:6d:f2:23:c5:42:a2:38:a4:5c:3f:73:2f:11:51:1e:76: 86:fc:a4:14:bb:cb:ab:94:e8:75:74:87:5b:3c:18:fa:17:38: d8:32:21:af:b9:e8:8b:5f:fb:91:58:23:09:ea:4a:20:d6:eb: 85:2a:72:48:25:2b:43:23:c1:64:87:a1:38:80:a8:7b:1f:26: 2e:36:ad:8b:02:b2:6e:2b:a4:dd:88:d3:88:18:0e:76:72:db: 77:0e:03:ed:a7:a3:0a:6c:fa:fe:5c:0a:85:d9:f1:c3:f6:12: 89:b8:f8:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOOUtlEJ3V0mbh9iv9tZZZ01C8BkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDAxOEJGNDM3OTNGNTYxNDVCODcyMzNERDY2OERFM0JE RUVGRkUxMzAeFw0yNTA5MDQwNjI2MTRaFw0yNTA5MDcxMTMyMTRaMDMxMTAvBgNV BAMTKDM0OTFGNERCQUU1Q0YxRTkxMjMzMTRCRDI2MjFFN0JBRTc4RjA2MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBVopC6+4ys0md8jVIhYX/bv4q 4dn9pWjhIbyoInjPXDTE698fGIFw1Rzl1XFiWHm2dtOKrJ5T6XWUGyRKnpfyuVJ3 fb48t9qDwFIBYdvthAge75T+O5hliKk0sUCPK9/+PmmEjHpVfF/ZOPDxTnjvW/DN jSCdbHH8vYQCp4yTwvfZOCVOQWKH4wt2f+B46UMYnNPGC6dqJJFNA6m4mAs9Ng4E 5BvNV1gXgRUwE2QgNETb0DDfA0W/QY5HUOXmJwyoM/sJ8RYONsmHTBKDMreqHqgA wcrlG98iHqKovRgdS9PFCAg0gdZz3zMO/vgMnKt9zbylVnwHFAfLKKMG7Xt/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNJH0265c8ekSMxS9JiHnuuePBjYwHwYDVR0j BBgwFoAU0Bi/Q3k/VhRbhyM91mjeO97v/hMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWFkMzE0YS03NjU3LTQ5MDEtYjdkZC0zYjlhOWJmYzZlOWMvMC9EMDE4QkY0Mzc5 M0Y1NjE0NUI4NzIzM0RENjY4REUzQkRFRUZGRTEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDAxOEJGNDM3OTNGNTYxNDVCODcyMzNERDY2OERFM0JERUVG RkUxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODlhZDMxNGEtNzY1Ny00OTAxLWI3 ZGQtM2I5YTliZmM2ZTljLzAvRDAxOEJGNDM3OTNGNTYxNDVCODcyMzNERDY2OERF M0JERUVGRkUxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG7hkQLkDwrduyZdAaVwBGcEwQtSBvh5zPyu HPmvNaVBZn6oVrKIxgbCa9XVgszzxTq+XECa2P8ycNr0NJarErv1hYg/EIlhYeDt HPI3+rcpx5GbtVNWHS+7j9QJzTuelcajzDtblyNxg0QAO09//lv+YIEPcgacqoig WqZziENpQE1vyQpBZh0mT85qBxO7LnOMbfIjxUKiOKRcP3MvEVEedob8pBS7y6uU 6HV0h1s8GPoXONgyIa+56Itf+5FYIwnqSiDW64UqckglK0MjwWSHoTiAqHsfJi42 rYsCsm4rpN2I04gYDnZy23cOA+2nowps+v5cCoXZ8cP2Eom4+Cg= -----END CERTIFICATE-----Generated at Fri Sep 5 10:31:54 2025 by rpki-client