$ rpki-client -vvf repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.mft File: 2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.mft (raw, json) Hash identifier: f9GCJTZ0jqe1EGM0I3M8BMsosYgtjr4GvqJE1heXh8k= Subject key identifier: 17:CE:B1:26:25:A2:22:63:4B:F0:4C:CD:F5:1B:40:D4:2D:26:DE:AB Authority key identifier: 25:66:F4:DF:5C:09:FF:A8:E4:F4:D6:99:99:41:B9:AB:A2:B7:22:8B Certificate issuer: /CN=2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B Certificate serial: 2A0E3BAA0D6E5C8689D03ED51B7E60A738B85139 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.mft Manifest number: 010A Signing time: Sat 06 Sep 2025 15:02:02 +0000 Manifest this update: Sat 06 Sep 2025 14:57:02 +0000 Manifest next update: Tue 09 Sep 2025 17:37:02 +0000 Files and hashes: 1: 2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.crl (hash: TmV66J5vCJm+DkQ0UoOU0J4qqcP2P+gTwoa+gKeMbf8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.crl rsync://repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 17:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:0e:3b:aa:0d:6e:5c:86:89:d0:3e:d5:1b:7e:60:a7:38:b8:51:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B Validity Not Before: Sep 6 14:57:02 2025 GMT Not After : Sep 9 17:37:02 2025 GMT Subject: CN=17CEB12625A222634BF04CCDF51B40D42D26DEAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:07:3b:e8:74:74:75:3d:66:a7:63:66:77:84: 52:d7:54:87:c8:98:01:e6:e7:fa:bf:90:a5:ee:5e: a7:a8:c5:67:6c:19:e6:68:6a:b7:d6:07:7f:77:f4: 6b:2e:f0:b2:ad:f0:cb:30:ee:7b:a1:cb:ca:f9:3b: a0:e6:20:6b:55:e7:b8:ca:01:14:b5:be:86:80:c4: 1d:e1:78:76:84:8e:88:cd:c2:3f:58:64:26:c8:48: e6:c9:5d:cd:9c:bb:96:8a:fe:c1:d1:36:59:9d:93: f0:f5:0d:38:8c:19:af:1d:e3:92:2e:7d:da:c5:cd: a1:d3:e5:2b:4e:ed:f7:49:c1:ac:65:f3:76:64:6f: f3:64:8f:b5:c9:41:c0:27:aa:d3:36:37:a7:b7:31: 90:2b:29:88:ac:ad:65:b6:31:35:08:1c:ec:d0:51: e4:48:98:b8:fc:b9:e0:a0:26:8c:6b:1f:74:53:63: b3:37:41:1f:74:04:91:4e:c7:1d:4e:74:0d:e2:cb: 3f:a5:29:e7:a9:1b:c3:39:29:06:65:67:69:2a:aa: 03:b8:2e:b0:a0:3c:51:b3:b0:b4:63:a8:6e:f7:01: a3:dc:06:1b:6e:9a:06:8d:bb:40:b7:7a:2c:e2:7b: 67:3e:6f:ce:d0:5a:f5:5f:6b:b6:c2:98:ed:c1:fc: 55:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:CE:B1:26:25:A2:22:63:4B:F0:4C:CD:F5:1B:40:D4:2D:26:DE:AB X509v3 Authority Key Identifier: keyid:25:66:F4:DF:5C:09:FF:A8:E4:F4:D6:99:99:41:B9:AB:A2:B7:22:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d916411f-78ca-4916-8919-37c1d99efbd8/0/2566F4DF5C09FFA8E4F4D6999941B9ABA2B7228B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:4d:8c:f1:a4:0c:60:94:fd:98:5a:31:b9:1b:4b:c5:78:92: 3a:b7:12:45:3e:88:09:ee:61:f6:31:3c:f8:28:93:8a:10:ce: af:20:2f:70:6b:2e:b1:29:ec:0c:d3:99:64:1b:e0:c5:75:c6: 26:7f:c3:0e:fe:3f:d8:6b:88:87:08:f9:5e:2a:b5:e6:f0:ba: 28:4a:35:f1:aa:35:f8:1e:6d:29:2e:2c:b1:ac:81:34:21:da: e7:d5:13:7a:b2:3d:2f:20:ec:7a:23:1d:b0:cc:ae:1f:d3:61: ec:8b:a5:a5:42:80:ce:66:98:4d:3f:78:77:ca:8f:40:01:93: c1:50:d1:1d:58:1a:84:2b:41:10:24:41:fb:07:81:2a:49:99: c9:b7:70:6a:99:69:15:3e:22:91:a4:59:1e:c8:0a:a8:75:ef: 4c:5f:3c:f6:96:7a:c0:e5:86:bd:0e:2d:78:55:a2:36:4b:25: 2c:13:26:aa:91:62:c0:d9:ad:10:a1:a3:0b:a5:13:3f:c0:8c: 64:bc:0b:97:39:f7:4b:2c:e9:57:99:9b:9b:99:c8:7b:06:81: 0d:83:eb:4a:34:b0:eb:28:68:39:fe:c2:aa:1a:fc:08:07:65: 66:a1:49:1e:a2:e6:1f:e9:de:d2:79:ce:b1:f9:b8:27:24:3a: 2e:27:98:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKg47qg1uXIaJ0D7VG35gpzi4UTkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU2NkY0REY1QzA5RkZBOEU0RjRENjk5OTk0MUI5QUJB MkI3MjI4QjAeFw0yNTA5MDYxNDU3MDJaFw0yNTA5MDkxNzM3MDJaMDMxMTAvBgNV BAMTKDE3Q0VCMTI2MjVBMjIyNjM0QkYwNENDREY1MUI0MEQ0MkQyNkRFQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2BzvodHR1PWanY2Z3hFLXVIfI mAHm5/q/kKXuXqeoxWdsGeZoarfWB3939Gsu8LKt8Msw7nuhy8r5O6DmIGtV57jK ARS1voaAxB3heHaEjojNwj9YZCbISObJXc2cu5aK/sHRNlmdk/D1DTiMGa8d45Iu fdrFzaHT5StO7fdJwaxl83Zkb/Nkj7XJQcAnqtM2N6e3MZArKYisrWW2MTUIHOzQ UeRImLj8ueCgJoxrH3RTY7M3QR90BJFOxx1OdA3iyz+lKeepG8M5KQZlZ2kqqgO4 LrCgPFGzsLRjqG73AaPcBhtumgaNu0C3eizie2c+b87QWvVfa7bCmO3B/FX5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF86xJiWiImNL8EzN9RtA1C0m3qswHwYDVR0j BBgwFoAUJWb031wJ/6jk9NaZmUG5q6K3IoswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTE2NDExZi03OGNhLTQ5MTYtODkxOS0zN2MxZDk5ZWZiZDgvMC8yNTY2RjRERjVD MDlGRkE4RTRGNEQ2OTk5OTQxQjlBQkEyQjcyMjhCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjU2NkY0REY1QzA5RkZBOEU0RjRENjk5OTk0MUI5QUJBMkI3 MjI4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkxNjQxMWYtNzhjYS00OTE2LTg5 MTktMzdjMWQ5OWVmYmQ4LzAvMjU2NkY0REY1QzA5RkZBOEU0RjRENjk5OTk0MUI5 QUJBMkI3MjI4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF5NjPGkDGCU/ZhaMbkbS8V4kjq3EkU+iAnu YfYxPPgok4oQzq8gL3BrLrEp7AzTmWQb4MV1xiZ/ww7+P9hriIcI+V4qtebwuihK NfGqNfgebSkuLLGsgTQh2ufVE3qyPS8g7HojHbDMrh/TYeyLpaVCgM5mmE0/eHfK j0ABk8FQ0R1YGoQrQRAkQfsHgSpJmcm3cGqZaRU+IpGkWR7ICqh170xfPPaWesDl hr0OLXhVojZLJSwTJqqRYsDZrRChowulEz/AjGS8C5c590ss6VeZm5uZyHsGgQ2D 60o0sOsoaDn+wqoa/AgHZWahSR6i5h/p3tJ5zrH5uCckOi4nmLw= -----END CERTIFICATE-----Generated at Sun Sep 7 15:31:13 2025 by rpki-client