$ rpki-client -vvf repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft File: ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft (raw, json) Hash identifier: ZK8GKBs6r1Zf4SbksHUnO5eOMsck/UPK2vlBQxE7ceQ= Subject key identifier: 8B:FF:E7:C0:19:80:88:3B:02:07:60:58:BC:37:83:F1:F5:DB:00:FF Authority key identifier: ED:7A:48:EA:D1:0D:1F:E9:7C:7E:F2:3A:A6:EA:2A:D6:55:BF:B0:AF Certificate issuer: /CN=ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF Certificate serial: 2F23658C68EB965F637E4306E963A3DBB03963D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft Manifest number: 0223 Signing time: Sat 06 Sep 2025 16:11:32 +0000 Manifest this update: Sat 06 Sep 2025 16:06:32 +0000 Manifest next update: Tue 09 Sep 2025 18:37:32 +0000 Files and hashes: 1: ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.crl (hash: BQs+9ZgRyUheK4xJ9/yPoI62Rs4Gob3fyMA55qLgSCM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.crl rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 18:37:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:23:65:8c:68:eb:96:5f:63:7e:43:06:e9:63:a3:db:b0:39:63:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF Validity Not Before: Sep 6 16:06:32 2025 GMT Not After : Sep 9 18:37:32 2025 GMT Subject: CN=8BFFE7C01980883B02076058BC3783F1F5DB00FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e4:2e:38:bc:2c:d5:6a:22:a9:25:47:c9:f1: 81:66:2c:f8:7a:30:92:dc:d4:a8:5a:43:3e:ca:e2: a1:4d:87:d7:66:e8:1f:b3:f4:49:f1:0e:b8:15:84: d7:55:1b:4a:d7:11:17:b8:db:c0:a3:df:0b:02:7a: 58:b8:6a:74:aa:f5:28:d6:6c:ba:d3:62:34:cb:30: b7:4a:15:c8:08:f6:a7:a7:aa:ab:21:c5:52:b8:35: f9:06:46:8c:07:00:3f:3a:90:66:a5:25:45:2f:a1: 8d:82:dd:07:ed:5d:7a:4f:32:fc:ce:03:89:9b:e9: f8:20:ab:53:b1:09:d5:1f:fd:3a:dc:09:35:fb:d0: 83:7e:05:13:52:49:4f:75:8b:d9:1e:b2:7c:2a:57: 42:01:34:71:c2:27:fe:09:ea:89:77:ef:09:c6:2e: 5d:4e:f9:88:b1:5f:6a:f6:dc:e0:96:45:44:8f:ae: fd:66:cc:7e:cc:31:d2:c2:a9:a8:38:27:3c:96:bb: 91:c6:0a:7d:aa:ae:32:1a:b1:c7:28:51:87:ee:a9: a6:70:ec:06:3b:e5:bd:3f:72:6e:8f:fa:c7:97:e8: fd:36:d2:33:0a:21:e5:18:5c:b0:70:81:ca:65:9e: 2c:b1:ff:6e:39:83:d1:6f:b1:f1:c4:c6:b8:44:01: 9f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:FF:E7:C0:19:80:88:3B:02:07:60:58:BC:37:83:F1:F5:DB:00:FF X509v3 Authority Key Identifier: keyid:ED:7A:48:EA:D1:0D:1F:E9:7C:7E:F2:3A:A6:EA:2A:D6:55:BF:B0:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c433e344-e819-4438-b8ca-1f58c3d527cb/0/ED7A48EAD10D1FE97C7EF23AA6EA2AD655BFB0AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:2f:9f:0d:2f:25:8e:51:ca:96:ab:ba:b9:26:96:d8:27:fb: 31:30:ca:7a:3b:df:6d:c7:b3:d8:f7:a5:cb:43:a2:ac:7b:f6: f0:46:4d:be:c3:41:78:9b:b6:90:9a:90:65:cb:6b:67:0c:c8: a6:29:45:b4:72:28:8d:00:7a:11:ce:d0:68:08:7d:89:2a:7b: 2a:7e:7c:48:7b:24:b5:c7:15:6b:08:69:55:7e:a9:22:7f:3b: 4b:f1:46:ea:e9:07:6e:cc:91:9f:40:34:b6:ee:be:f6:4b:97: 3f:f4:e3:12:f2:55:5c:58:9d:e9:17:7c:51:24:e4:7a:9d:b1: 87:a2:7e:84:4c:ed:aa:1b:6b:cd:04:36:5b:14:44:4b:0b:d9: 97:66:f4:cf:47:d1:af:2e:a6:28:32:c4:b6:6c:7c:04:b3:38: d4:5a:6a:80:7a:24:2a:7b:c2:3f:ba:39:57:40:36:69:19:27: 13:e7:0a:c2:6f:b5:a2:15:f5:f1:e7:51:b1:6d:58:8c:a4:22: 44:9f:24:19:4d:a3:54:ca:e8:7d:81:3c:d0:11:34:37:c6:3b: 01:55:07:6e:14:b0:88:61:e2:73:3d:3d:0f:da:a5:c3:2e:37: ac:9d:33:78:13:8c:c0:7d:4e:c8:ce:df:76:52:e0:01:47:1d: 81:db:f0:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULyNljGjrll9jfkMG6WOj27A5Y9cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUQ3QTQ4RUFEMTBEMUZFOTdDN0VGMjNBQTZFQTJBRDY1 NUJGQjBBRjAeFw0yNTA5MDYxNjA2MzJaFw0yNTA5MDkxODM3MzJaMDMxMTAvBgNV BAMTKDhCRkZFN0MwMTk4MDg4M0IwMjA3NjA1OEJDMzc4M0YxRjVEQjAwRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf5C44vCzVaiKpJUfJ8YFmLPh6 MJLc1KhaQz7K4qFNh9dm6B+z9EnxDrgVhNdVG0rXERe428Cj3wsCeli4anSq9SjW bLrTYjTLMLdKFcgI9qenqqshxVK4NfkGRowHAD86kGalJUUvoY2C3QftXXpPMvzO A4mb6fggq1OxCdUf/TrcCTX70IN+BRNSSU91i9kesnwqV0IBNHHCJ/4J6ol37wnG Ll1O+YixX2r23OCWRUSPrv1mzH7MMdLCqag4JzyWu5HGCn2qrjIasccoUYfuqaZw 7AY75b0/cm6P+seX6P020jMKIeUYXLBwgcplniyx/245g9FvsfHExrhEAZ/xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi//nwBmAiDsCB2BYvDeD8fXbAP8wHwYDVR0j BBgwFoAU7XpI6tENH+l8fvI6puoq1lW/sK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NDMzZTM0NC1lODE5LTQ0MzgtYjhjYS0xZjU4YzNkNTI3Y2IvMC9FRDdBNDhFQUQx MEQxRkU5N0M3RUYyM0FBNkVBMkFENjU1QkZCMEFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRUQ3QTQ4RUFEMTBEMUZFOTdDN0VGMjNBQTZFQTJBRDY1NUJG QjBBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzQzM2UzNDQtZTgxOS00NDM4LWI4 Y2EtMWY1OGMzZDUyN2NiLzAvRUQ3QTQ4RUFEMTBEMUZFOTdDN0VGMjNBQTZFQTJB RDY1NUJGQjBBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK4vnw0vJY5Ryparurkmltgn+zEwyno7323H s9j3pctDoqx79vBGTb7DQXibtpCakGXLa2cMyKYpRbRyKI0AehHO0GgIfYkqeyp+ fEh7JLXHFWsIaVV+qSJ/O0vxRurpB27MkZ9ANLbuvvZLlz/04xLyVVxYnekXfFEk 5HqdsYeifoRM7aoba80ENlsUREsL2Zdm9M9H0a8upigyxLZsfASzONRaaoB6JCp7 wj+6OVdANmkZJxPnCsJvtaIV9fHnUbFtWIykIkSfJBlNo1TK6H2BPNARNDfGOwFV B24UsIhh4nM9PQ/apcMuN6ydM3gTjMB9TsjO33ZS4AFHHYHb8Ms= -----END CERTIFICATE-----Generated at Sun Sep 7 15:27:15 2025 by rpki-client