$ rpki-client -vvf repo-rpki.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.mft File: 2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.mft (raw, json) Hash identifier: dqEGNSChiFaFCDZZDfUVhqbOsMh14doyXYeMCXJH1tQ= Subject key identifier: 32:00:1D:F4:2C:45:86:5C:0F:58:AB:3E:3F:05:37:8D:D5:BC:F9:0F Authority key identifier: 26:64:CB:E1:0F:2B:9F:F1:BE:C5:0A:6A:85:DC:7A:A5:2B:9F:17:FA Certificate issuer: /CN=2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA Certificate serial: 6C5D91AB137ACF0403AF0840D272D848A3046CC0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.mft Manifest number: 03B5 Signing time: Sat 06 Sep 2025 04:42:09 +0000 Manifest this update: Sat 06 Sep 2025 04:37:09 +0000 Manifest next update: Tue 09 Sep 2025 16:13:09 +0000 Files and hashes: 1: 2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.crl (hash: xcqRPRsYO9EouratAeNEkxXzPg20MC878MkPruLBUWQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.crl rsync://repo-rpki.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 16:13:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:5d:91:ab:13:7a:cf:04:03:af:08:40:d2:72:d8:48:a3:04:6c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA Validity Not Before: Sep 6 04:37:09 2025 GMT Not After : Sep 9 16:13:09 2025 GMT Subject: CN=32001DF42C45865C0F58AB3E3F05378DD5BCF90F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f9:42:2c:88:31:ed:d4:7a:b0:b7:ed:e7:37: 03:92:2d:27:eb:6c:6b:69:05:0c:5e:fa:67:16:3b: dc:5b:5f:53:52:19:ea:be:23:6d:12:91:7d:ba:aa: 8d:34:53:9b:84:58:50:3f:ef:3e:59:20:94:e2:16: da:62:dc:e3:cc:14:52:3a:55:16:d3:07:55:6d:10: ae:07:2f:af:36:a6:23:5e:5f:ef:2b:cb:78:4c:c4: 0d:ff:06:eb:96:59:98:3f:3f:65:66:85:6c:ea:a1: 47:7e:fa:b8:f8:18:f6:87:74:f8:f1:1a:da:e4:8a: 77:37:23:5f:17:60:dd:d6:12:58:3c:12:34:1d:e7: 71:b0:b7:75:50:8d:e2:17:2b:8b:dd:7c:7e:99:ac: b5:d3:c5:e6:b1:35:e5:b9:5c:8e:6f:71:a0:c9:24: 1c:62:59:e0:8d:1b:92:92:3b:27:19:06:ac:74:05: a8:be:e6:d5:4b:92:96:79:06:ab:53:82:24:08:83: f7:d3:42:1f:0d:06:ac:d5:7b:df:ed:6a:9a:74:cf: 51:86:70:20:af:99:d4:41:0e:e8:3b:b4:67:fa:01: da:23:f3:62:40:ef:81:5a:bd:de:22:22:26:3f:c7: f0:59:50:15:7a:0e:6e:64:f7:5c:34:c6:9c:c6:6b: fd:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:00:1D:F4:2C:45:86:5C:0F:58:AB:3E:3F:05:37:8D:D5:BC:F9:0F X509v3 Authority Key Identifier: keyid:26:64:CB:E1:0F:2B:9F:F1:BE:C5:0A:6A:85:DC:7A:A5:2B:9F:17:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cf3c211-0645-4882-a4f1-46be867b7983/0/2664CBE10F2B9FF1BEC50A6A85DC7AA52B9F17FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:3b:da:58:98:dc:f1:9c:6a:28:cc:d3:f7:f4:b1:6b:36:cb: 47:60:2b:71:14:bb:12:5b:48:e7:89:24:35:5c:fa:3f:db:78: 01:82:02:63:17:af:e5:58:0c:fb:f8:9e:eb:d3:26:39:b2:1c: 91:5e:fc:86:37:02:0d:b6:12:30:6e:ce:5a:62:ef:cb:2a:99: 6c:9c:e0:f0:be:34:b9:07:bd:bd:23:40:69:40:03:56:da:32: 8d:cb:b5:ff:ce:5b:7b:ae:3e:49:dc:2a:3e:f9:a4:b4:1c:ae: eb:5c:74:a8:27:93:9b:ae:9c:80:dc:f3:3f:e5:a1:0d:da:b2: 7e:c0:b7:c7:5f:98:c1:70:19:94:1a:c5:d5:d7:7d:2e:5f:7a: 68:e6:d9:a6:7c:86:aa:2c:a5:95:25:1d:eb:3c:b5:70:36:ff: f9:8c:82:27:0e:16:27:41:20:9a:3e:f1:1a:9e:8f:25:b2:0b: f3:8d:ce:33:f9:77:74:26:ef:4f:c9:30:ff:d1:58:9f:95:18: 37:c3:62:20:c0:d8:8b:e4:2a:3b:96:16:75:68:50:4b:dd:0e: 05:9d:e4:d7:35:db:98:c0:97:f5:1f:63:e4:3d:a6:75:c3:e0: 4d:6e:8e:f2:8f:9d:f4:d9:e3:98:8a:8f:f6:3e:aa:77:b5:f3: 65:90:d8:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbF2RqxN6zwQDrwhA0nLYSKMEbMAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjY2NENCRTEwRjJCOUZGMUJFQzUwQTZBODVEQzdBQTUy QjlGMTdGQTAeFw0yNTA5MDYwNDM3MDlaFw0yNTA5MDkxNjEzMDlaMDMxMTAvBgNV BAMTKDMyMDAxREY0MkM0NTg2NUMwRjU4QUIzRTNGMDUzNzhERDVCQ0Y5MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE+UIsiDHt1Hqwt+3nNwOSLSfr bGtpBQxe+mcWO9xbX1NSGeq+I20SkX26qo00U5uEWFA/7z5ZIJTiFtpi3OPMFFI6 VRbTB1VtEK4HL682piNeX+8ry3hMxA3/BuuWWZg/P2VmhWzqoUd++rj4GPaHdPjx Gtrkinc3I18XYN3WElg8EjQd53Gwt3VQjeIXK4vdfH6ZrLXTxeaxNeW5XI5vcaDJ JBxiWeCNG5KSOycZBqx0Bai+5tVLkpZ5BqtTgiQIg/fTQh8NBqzVe9/tapp0z1GG cCCvmdRBDug7tGf6Adoj82JA74Favd4iIiY/x/BZUBV6Dm5k91w0xpzGa/0VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMgAd9CxFhlwPWKs+PwU3jdW8+Q8wHwYDVR0j BBgwFoAUJmTL4Q8rn/G+xQpqhdx6pSufF/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Y2YzYzIxMS0wNjQ1LTQ4ODItYTRmMS00NmJlODY3Yjc5ODMvMC8yNjY0Q0JFMTBG MkI5RkYxQkVDNTBBNkE4NURDN0FBNTJCOUYxN0ZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjY2NENCRTEwRjJCOUZGMUJFQzUwQTZBODVEQzdBQTUyQjlG MTdGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGNmM2MyMTEtMDY0NS00ODgyLWE0 ZjEtNDZiZTg2N2I3OTgzLzAvMjY2NENCRTEwRjJCOUZGMUJFQzUwQTZBODVEQzdB QTUyQjlGMTdGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFI72liY3PGcaijM0/f0sWs2y0dgK3EUuxJb SOeJJDVc+j/beAGCAmMXr+VYDPv4nuvTJjmyHJFe/IY3Ag22EjBuzlpi78sqmWyc 4PC+NLkHvb0jQGlAA1baMo3Ltf/OW3uuPkncKj75pLQcrutcdKgnk5uunIDc8z/l oQ3asn7At8dfmMFwGZQaxdXXfS5femjm2aZ8hqospZUlHes8tXA2//mMgicOFidB IJo+8RqejyWyC/ONzjP5d3Qm70/JMP/RWJ+VGDfDYiDA2IvkKjuWFnVoUEvdDgWd 5Nc125jAl/UfY+Q9pnXD4E1ujvKPnfTZ45iKj/Y+qne182WQ2OA= -----END CERTIFICATE-----Generated at Sun Sep 7 17:50:44 2025 by rpki-client