$ rpki-client -vvf repo-rpki.idnic.net/repo/c31328cb-dd48-43bb-b31f-07eb8030c8f4/0/92FFDECB7B4BC69043740B159B29A018D07273F1.mft File: 92FFDECB7B4BC69043740B159B29A018D07273F1.mft (raw, json) Hash identifier: gXI5dfoj1hQ4wsong3W7HV+U+ShhfSyb5T2uNng2zxo= Subject key identifier: 4D:0D:66:D8:51:C9:0C:06:F7:E5:08:75:AA:ED:41:0F:23:BD:AF:2B Authority key identifier: 92:FF:DE:CB:7B:4B:C6:90:43:74:0B:15:9B:29:A0:18:D0:72:73:F1 Certificate issuer: /CN=92FFDECB7B4BC69043740B159B29A018D07273F1 Certificate serial: 25C366E7DC0E596743402D6E99E9F1DD755FA7E9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/92FFDECB7B4BC69043740B159B29A018D07273F1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c31328cb-dd48-43bb-b31f-07eb8030c8f4/0/92FFDECB7B4BC69043740B159B29A018D07273F1.mft Manifest number: 010B Signing time: Fri 05 Sep 2025 07:12:10 +0000 Manifest this update: Fri 05 Sep 2025 07:07:10 +0000 Manifest next update: Mon 08 Sep 2025 15:03:10 +0000 Files and hashes: 1: 92FFDECB7B4BC69043740B159B29A018D07273F1.crl (hash: jjLtmChaXQLH8coVj8UbgwjPPnneqnbCBjjX4XJ92iU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c31328cb-dd48-43bb-b31f-07eb8030c8f4/0/92FFDECB7B4BC69043740B159B29A018D07273F1.crl rsync://repo-rpki.idnic.net/repo/c31328cb-dd48-43bb-b31f-07eb8030c8f4/0/92FFDECB7B4BC69043740B159B29A018D07273F1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/92FFDECB7B4BC69043740B159B29A018D07273F1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 15:03:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:c3:66:e7:dc:0e:59:67:43:40:2d:6e:99:e9:f1:dd:75:5f:a7:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92FFDECB7B4BC69043740B159B29A018D07273F1 Validity Not Before: Sep 5 07:07:10 2025 GMT Not After : Sep 8 15:03:10 2025 GMT Subject: CN=4D0D66D851C90C06F7E50875AAED410F23BDAF2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b0:c2:36:89:95:4b:b8:e2:cd:86:fa:e2:3f: 18:e3:cc:1a:40:5f:39:ff:a3:4f:a2:79:a0:25:1a: cd:59:76:32:72:66:74:ce:3b:e0:9f:2f:63:1c:4d: c3:25:c9:2a:48:5f:f8:c3:a6:ab:d9:43:24:bb:3b: 1d:c3:ef:9e:45:91:31:78:f4:a8:86:c0:55:98:ff: cc:71:8f:5c:1f:e3:73:ce:11:45:c8:f5:1e:19:6d: 48:d1:75:51:98:b8:6d:96:ed:96:58:a6:6f:2b:c9: ef:c9:0c:05:69:97:18:c9:ec:08:0c:5b:2b:26:09: 55:8c:42:c2:c3:e5:f7:df:e8:76:e0:e5:91:da:e4: b8:a2:f4:2f:73:53:c6:b4:fa:70:08:ac:cc:d5:c5: 46:08:b4:95:46:9a:e4:2a:82:06:9f:1e:07:64:4e: f1:1a:99:3c:46:64:5a:dd:4b:2d:fe:ca:68:6d:79: 60:78:9d:e9:7d:98:35:93:fc:c9:6a:67:2c:a7:75: e0:c7:0a:9d:90:5c:50:a1:7a:16:07:a1:50:49:8f: 45:83:a4:2b:d6:8f:7b:87:fa:f9:5c:28:85:c7:fd: 58:32:7e:8a:52:2e:fd:61:d7:ab:8d:b9:c9:68:66: dd:d1:dd:91:60:d4:87:5e:71:e2:3d:6e:27:9b:a1: 86:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:0D:66:D8:51:C9:0C:06:F7:E5:08:75:AA:ED:41:0F:23:BD:AF:2B X509v3 Authority Key Identifier: keyid:92:FF:DE:CB:7B:4B:C6:90:43:74:0B:15:9B:29:A0:18:D0:72:73:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c31328cb-dd48-43bb-b31f-07eb8030c8f4/0/92FFDECB7B4BC69043740B159B29A018D07273F1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/92FFDECB7B4BC69043740B159B29A018D07273F1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c31328cb-dd48-43bb-b31f-07eb8030c8f4/0/92FFDECB7B4BC69043740B159B29A018D07273F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:16:c8:4c:07:84:63:12:3b:a3:49:6b:50:04:66:ea:34:a8: 38:f3:17:e2:9c:11:d3:f3:4a:c1:21:02:98:83:29:d9:5a:ca: 2d:8d:64:67:7a:53:27:dd:ae:f0:b4:d9:17:2d:74:85:3e:8d: 03:64:10:06:91:27:ce:59:50:e3:d6:f9:2e:c4:a2:04:9d:00: ad:20:93:24:ed:62:63:9e:09:7a:dc:b1:f8:a4:c3:cb:0c:9f: 57:15:d7:df:4c:65:a3:e1:d5:be:f8:21:cb:ae:ec:c7:63:8a: bd:0d:f5:5e:41:f2:51:91:e1:16:aa:6f:1f:5c:82:02:63:ff: 51:c3:fd:4e:b8:73:c7:7a:88:2c:5a:82:52:8e:3e:1d:16:7a: 5d:c5:81:e0:42:ff:ba:1f:59:42:ea:eb:5a:7a:4e:18:83:71: 26:28:9a:41:3b:3f:28:d5:d9:59:f0:16:3e:d0:fb:36:61:00: 5b:9f:71:c4:5c:ef:d0:07:b6:ca:25:da:a1:a3:01:1d:58:39: 9d:8b:c3:68:85:48:d9:d6:d5:0a:0c:76:15:68:d0:6a:40:58: b0:6c:dc:7b:a4:8b:68:c6:e0:66:5d:8a:96:8c:e1:0f:46:4e: 0a:96:97:9c:47:0b:cc:c5:89:7b:17:37:58:36:f8:89:6a:b7: e5:09:9c:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJcNm59wOWWdDQC1umenx3XVfp+kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJGRkRFQ0I3QjRCQzY5MDQzNzQwQjE1OUIyOUEwMThE MDcyNzNGMTAeFw0yNTA5MDUwNzA3MTBaFw0yNTA5MDgxNTAzMTBaMDMxMTAvBgNV BAMTKDREMEQ2NkQ4NTFDOTBDMDZGN0U1MDg3NUFBRUQ0MTBGMjNCREFGMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMsMI2iZVLuOLNhvriPxjjzBpA Xzn/o0+ieaAlGs1ZdjJyZnTOO+CfL2McTcMlySpIX/jDpqvZQyS7Ox3D755FkTF4 9KiGwFWY/8xxj1wf43POEUXI9R4ZbUjRdVGYuG2W7ZZYpm8rye/JDAVplxjJ7AgM WysmCVWMQsLD5fff6Hbg5ZHa5Lii9C9zU8a0+nAIrMzVxUYItJVGmuQqggafHgdk TvEamTxGZFrdSy3+ymhteWB4nel9mDWT/MlqZyyndeDHCp2QXFChehYHoVBJj0WD pCvWj3uH+vlcKIXH/VgyfopSLv1h16uNucloZt3R3ZFg1IdeceI9bieboYZjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTQ1m2FHJDAb35Qh1qu1BDyO9ryswHwYDVR0j BBgwFoAUkv/ey3tLxpBDdAsVmymgGNByc/EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzEzMjhjYi1kZDQ4LTQzYmItYjMxZi0wN2ViODAzMGM4ZjQvMC85MkZGREVDQjdC NEJDNjkwNDM3NDBCMTU5QjI5QTAxOEQwNzI3M0YxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTJGRkRFQ0I3QjRCQzY5MDQzNzQwQjE1OUIyOUEwMThEMDcy NzNGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzMxMzI4Y2ItZGQ0OC00M2JiLWIz MWYtMDdlYjgwMzBjOGY0LzAvOTJGRkRFQ0I3QjRCQzY5MDQzNzQwQjE1OUIyOUEw MThEMDcyNzNGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALwWyEwHhGMSO6NJa1AEZuo0qDjzF+KcEdPz SsEhApiDKdlayi2NZGd6UyfdrvC02RctdIU+jQNkEAaRJ85ZUOPW+S7EogSdAK0g kyTtYmOeCXrcsfikw8sMn1cV199MZaPh1b74Icuu7Mdjir0N9V5B8lGR4Raqbx9c ggJj/1HD/U64c8d6iCxaglKOPh0Wel3FgeBC/7ofWULq61p6ThiDcSYomkE7PyjV 2VnwFj7Q+zZhAFufccRc79AHtsol2qGjAR1YOZ2Lw2iFSNnW1QoMdhVo0GpAWLBs 3Huki2jG4GZdipaM4Q9GTgqWl5xHC8zFiXsXN1g2+Ilqt+UJnO0= -----END CERTIFICATE-----Generated at Fri Sep 5 10:16:09 2025 by rpki-client