$ rpki-client -vvf repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.mft File: AD2137BA5758D926364E9E038F19A65DC3F1846E.mft (raw, json) Hash identifier: kHKv+Qb5dxxA3V9mMM+RGN8yWvjldCX/IrvRkzmvzkY= Subject key identifier: 92:C7:70:05:33:0A:7D:44:28:FC:63:E4:1E:06:E5:E7:21:85:12:58 Authority key identifier: AD:21:37:BA:57:58:D9:26:36:4E:9E:03:8F:19:A6:5D:C3:F1:84:6E Certificate issuer: /CN=AD2137BA5758D926364E9E038F19A65DC3F1846E Certificate serial: 660248BE8C16CD5E119996608DCFDFEAEBCA4373 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2137BA5758D926364E9E038F19A65DC3F1846E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.mft Manifest number: 0246 Signing time: Wed 03 Sep 2025 06:52:05 +0000 Manifest this update: Wed 03 Sep 2025 06:47:05 +0000 Manifest next update: Sat 06 Sep 2025 09:27:05 +0000 Files and hashes: 1: AD2137BA5758D926364E9E038F19A65DC3F1846E.crl (hash: mmMt2/6dttMn2EEtRZpjePh/HeGfynU7gj9MjmHpExA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.crl rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2137BA5758D926364E9E038F19A65DC3F1846E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 09:27:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:02:48:be:8c:16:cd:5e:11:99:96:60:8d:cf:df:ea:eb:ca:43:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD2137BA5758D926364E9E038F19A65DC3F1846E Validity Not Before: Sep 3 06:47:05 2025 GMT Not After : Sep 6 09:27:05 2025 GMT Subject: CN=92C77005330A7D4428FC63E41E06E5E721851258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:aa:a5:3b:67:5c:16:78:5e:9f:a3:c0:5b:b7: 12:0a:f1:6e:2a:cf:a0:2d:fb:6e:6c:8c:68:af:81: 70:5d:70:bd:d1:03:1a:ed:44:f8:14:7e:d3:6d:83: 3d:ac:51:ce:5c:74:e8:51:83:ec:54:77:9b:fa:07: 2d:7c:11:1d:69:97:56:f9:82:45:34:d4:9c:e2:85: d0:90:75:7d:bf:e4:bd:79:12:33:92:11:1e:bd:3a: 57:90:ef:f0:72:2e:7f:ae:cb:79:70:70:8d:59:2d: 9a:56:28:08:25:71:52:e6:2d:d3:15:66:98:bd:eb: b3:e7:0c:d1:40:40:28:0d:ff:f1:0a:2a:e0:82:ab: a5:e3:2a:b6:1c:78:96:e3:01:e8:bf:71:21:17:95: 4d:d7:82:f5:86:ee:3e:7d:a5:80:9a:f5:a4:2d:2a: 7b:d8:6a:14:2e:23:2e:6c:1e:29:a4:c2:93:7b:53: e2:c9:5c:aa:48:90:21:a7:e8:96:be:ea:7c:69:a1: b9:16:9e:f1:27:63:dc:0c:87:9c:04:d3:2d:2d:bd: af:f5:5c:cc:bb:0d:29:77:5b:29:35:e9:44:0f:61: f2:0b:f7:b7:99:c6:73:35:fb:03:0a:f2:7c:8f:2d: 9a:f3:cd:08:76:2b:e5:4a:73:41:60:cd:a1:40:53: 47:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:C7:70:05:33:0A:7D:44:28:FC:63:E4:1E:06:E5:E7:21:85:12:58 X509v3 Authority Key Identifier: keyid:AD:21:37:BA:57:58:D9:26:36:4E:9E:03:8F:19:A6:5D:C3:F1:84:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2137BA5758D926364E9E038F19A65DC3F1846E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a74d20a3-3d83-4c4f-9138-76bc7c510eb9/0/AD2137BA5758D926364E9E038F19A65DC3F1846E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:b2:19:3b:e1:9a:3f:56:96:f3:03:e4:8e:bd:9c:cd:4c:96: 5d:da:b0:f7:33:20:7b:94:54:a7:3f:f8:d3:c1:2b:0d:1e:e1: 5f:b7:ea:a0:3f:16:30:c8:ee:2d:d1:48:ae:1e:9f:e2:c9:b5: 76:c6:77:8f:7d:0d:81:bc:6c:d5:ec:7a:54:13:e1:be:d7:57: 8b:5b:2c:5a:4b:7e:f3:6c:55:59:2e:89:c8:69:6b:5d:f7:7c: 99:5d:cd:57:51:2d:a8:56:d3:a3:5f:a4:17:d3:c5:7e:6e:53: 9f:2d:d1:8d:e6:47:f1:d9:21:32:a5:05:a9:02:4f:4e:1b:4e: 75:47:0b:a3:23:a4:91:e5:0e:ac:b7:19:81:76:74:0b:3a:b1: e3:a5:bb:1e:de:0e:53:65:2e:d7:6f:84:b6:36:fd:c2:f0:97: 30:59:8a:7a:a0:04:d0:47:13:e4:a7:bb:61:47:2e:62:6c:c3: 49:15:06:49:33:e5:4a:c6:0f:b7:0a:96:09:87:fd:24:b6:10: d1:85:11:32:f9:2a:9b:9b:d0:92:58:d2:7a:6e:7c:2c:c1:9f: 7e:42:23:0f:f9:14:33:53:22:ad:e7:2a:99:49:36:ff:ac:9c: 97:e6:db:73:22:e6:93:a7:e9:3c:27:31:8e:da:3a:04:68:9e: 82:e3:2a:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZgJIvowWzV4RmZZgjc/f6uvKQ3MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQyMTM3QkE1NzU4RDkyNjM2NEU5RTAzOEYxOUE2NURD M0YxODQ2RTAeFw0yNTA5MDMwNjQ3MDVaFw0yNTA5MDYwOTI3MDVaMDMxMTAvBgNV BAMTKDkyQzc3MDA1MzMwQTdENDQyOEZDNjNFNDFFMDZFNUU3MjE4NTEyNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIqqU7Z1wWeF6fo8BbtxIK8W4q z6At+25sjGivgXBdcL3RAxrtRPgUftNtgz2sUc5cdOhRg+xUd5v6By18ER1pl1b5 gkU01JzihdCQdX2/5L15EjOSER69OleQ7/ByLn+uy3lwcI1ZLZpWKAglcVLmLdMV Zpi967PnDNFAQCgN//EKKuCCq6XjKrYceJbjAei/cSEXlU3XgvWG7j59pYCa9aQt KnvYahQuIy5sHimkwpN7U+LJXKpIkCGn6Ja+6nxpobkWnvEnY9wMh5wE0y0tva/1 XMy7DSl3Wyk16UQPYfIL97eZxnM1+wMK8nyPLZrzzQh2K+VKc0FgzaFAU0c3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUksdwBTMKfUQo/GPkHgbl5yGFElgwHwYDVR0j BBgwFoAUrSE3uldY2SY2Tp4DjxmmXcPxhG4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NzRkMjBhMy0zZDgzLTRjNGYtOTEzOC03NmJjN2M1MTBlYjkvMC9BRDIxMzdCQTU3 NThEOTI2MzY0RTlFMDM4RjE5QTY1REMzRjE4NDZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQyMTM3QkE1NzU4RDkyNjM2NEU5RTAzOEYxOUE2NURDM0Yx ODQ2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTc0ZDIwYTMtM2Q4My00YzRmLTkx MzgtNzZiYzdjNTEwZWI5LzAvQUQyMTM3QkE1NzU4RDkyNjM2NEU5RTAzOEYxOUE2 NURDM0YxODQ2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALCyGTvhmj9WlvMD5I69nM1Mll3asPczIHuU VKc/+NPBKw0e4V+36qA/FjDI7i3RSK4en+LJtXbGd499DYG8bNXselQT4b7XV4tb LFpLfvNsVVkuichpa133fJldzVdRLahW06NfpBfTxX5uU58t0Y3mR/HZITKlBakC T04bTnVHC6MjpJHlDqy3GYF2dAs6seOlux7eDlNlLtdvhLY2/cLwlzBZinqgBNBH E+Snu2FHLmJsw0kVBkkz5UrGD7cKlgmH/SS2ENGFETL5Kpub0JJY0npufCzBn35C Iw/5FDNTIq3nKplJNv+snJfm23Mi5pOn6TwnMY7aOgRonoLjKtY= -----END CERTIFICATE-----Generated at Fri Sep 5 10:13:45 2025 by rpki-client