$ rpki-client -vvf repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft File: 2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft (raw, json) Hash identifier: ksA+gkNAZ8PuGrHLV91W0WElAjW8KwibtQ1WjsM0kfo= Subject key identifier: C7:E1:BD:26:B4:FA:52:FE:C4:AB:99:93:C8:62:49:3D:0F:8E:DA:7E Authority key identifier: 25:96:AD:9D:A9:03:31:FB:33:6D:C5:2C:5B:72:F9:92:D7:D4:9D:37 Certificate issuer: /CN=2596AD9DA90331FB336DC52C5B72F992D7D49D37 Certificate serial: 2C232C529ED13BEF3871EEB338FC41BC60163CAC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2596AD9DA90331FB336DC52C5B72F992D7D49D37.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft Manifest number: C7 Signing time: Fri 05 Sep 2025 22:52:19 +0000 Manifest this update: Fri 05 Sep 2025 22:47:18 +0000 Manifest next update: Tue 09 Sep 2025 10:37:18 +0000 Files and hashes: 1: 2596AD9DA90331FB336DC52C5B72F992D7D49D37.crl (hash: vkhNQggWrnJ3KpWDCjPQ6nJ2ZhTvVelaPma0y0BIeJo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.crl rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2596AD9DA90331FB336DC52C5B72F992D7D49D37.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 10:37:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:23:2c:52:9e:d1:3b:ef:38:71:ee:b3:38:fc:41:bc:60:16:3c:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2596AD9DA90331FB336DC52C5B72F992D7D49D37 Validity Not Before: Sep 5 22:47:18 2025 GMT Not After : Sep 9 10:37:18 2025 GMT Subject: CN=C7E1BD26B4FA52FEC4AB9993C862493D0F8EDA7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:07:66:a9:d5:6e:c0:c9:e5:c3:aa:13:a1:35: 0a:a6:ed:3c:1d:27:74:62:68:f8:cd:e3:46:e0:44: 0b:32:de:39:06:88:20:76:28:b5:74:56:20:c2:53: 8d:b4:b9:40:b7:1a:08:7b:fb:77:3f:62:ef:a3:b0: e2:8b:d7:c6:14:ab:0c:c1:d8:6f:61:1b:32:80:73: 74:19:99:69:eb:a0:5a:03:65:3d:42:eb:f2:55:62: 8d:61:86:48:e3:82:ab:22:97:27:dc:ac:00:0c:4e: a7:79:ed:6a:80:3f:79:c7:99:c7:a5:87:ba:95:16: cd:47:92:18:d9:47:b9:7f:15:db:28:25:f1:0e:e7: cf:2d:ab:31:cf:ba:d8:2c:9d:15:45:10:a0:d9:73: 08:de:a1:e9:6a:91:57:d1:f7:c7:c0:b1:b8:2c:e2: bd:45:cf:af:27:71:7b:1e:be:fc:24:2f:ee:4a:24: 32:28:64:4a:1f:24:ae:4c:90:56:5e:e4:17:4e:a3: ce:6a:c7:5c:55:25:46:c9:e0:4b:3a:f5:09:77:57: 15:71:d0:0f:f1:66:32:99:01:bd:39:f8:c1:b8:c4: 07:b8:7f:64:92:6c:e0:05:b4:e3:3b:ce:7e:c2:cc: 24:f2:71:fd:cf:79:75:05:23:7d:4b:19:c6:e9:4a: 39:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:E1:BD:26:B4:FA:52:FE:C4:AB:99:93:C8:62:49:3D:0F:8E:DA:7E X509v3 Authority Key Identifier: keyid:25:96:AD:9D:A9:03:31:FB:33:6D:C5:2C:5B:72:F9:92:D7:D4:9D:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2596AD9DA90331FB336DC52C5B72F992D7D49D37.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df036b74-8a5d-40aa-960c-921e63a70a4c/0/2596AD9DA90331FB336DC52C5B72F992D7D49D37.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:e4:54:54:15:5a:0b:eb:40:04:eb:48:15:9c:1a:d3:9e:27: 6d:d1:34:33:da:96:4d:a1:36:e3:5a:88:fb:31:9e:ea:ee:6d: f4:87:b6:a3:e4:1a:66:9c:f6:6f:a8:e5:07:38:ae:1f:d9:49: 0c:1b:69:ec:1f:a7:d4:3f:b8:87:ff:de:45:de:9d:21:62:60: 0e:c8:47:24:6c:6f:48:ea:29:dc:53:f9:17:8d:07:ab:6a:9b: a1:9b:2f:74:19:8e:ee:92:0a:6e:e0:7c:c4:09:b7:5a:c0:a3: be:d2:85:3c:8e:9c:13:c8:7d:3e:86:73:d1:f8:b6:fa:7c:2f: a7:88:06:63:dd:72:28:34:17:41:fb:23:5b:7c:64:b3:6f:10: 9c:f8:67:e8:a6:7e:5a:94:c2:03:71:72:c5:18:eb:79:de:a0: 1a:8b:30:7c:1f:3d:d5:c2:b8:c8:cc:af:53:03:ec:87:ac:30: 18:2f:61:fd:b3:6b:cb:7d:d6:77:86:b3:3f:9f:24:40:13:50: 55:5d:55:4d:a0:5e:b6:bd:3d:42:e5:f2:68:0e:4c:e4:5a:62: c3:a0:2d:7e:73:8b:e5:b3:58:6d:15:7a:a6:d6:c3:4a:30:59: 4d:54:48:7c:7c:69:8e:74:d9:a0:f9:21:71:8e:9d:f0:93:76: 02:23:f8:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULCMsUp7RO+84ce6zOPxBvGAWPKwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU5NkFEOURBOTAzMzFGQjMzNkRDNTJDNUI3MkY5OTJE N0Q0OUQzNzAeFw0yNTA5MDUyMjQ3MThaFw0yNTA5MDkxMDM3MThaMDMxMTAvBgNV BAMTKEM3RTFCRDI2QjRGQTUyRkVDNEFCOTk5M0M4NjI0OTNEMEY4RURBN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUB2ap1W7AyeXDqhOhNQqm7Twd J3RiaPjN40bgRAsy3jkGiCB2KLV0ViDCU420uUC3Ggh7+3c/Yu+jsOKL18YUqwzB 2G9hGzKAc3QZmWnroFoDZT1C6/JVYo1hhkjjgqsilyfcrAAMTqd57WqAP3nHmcel h7qVFs1HkhjZR7l/FdsoJfEO588tqzHPutgsnRVFEKDZcwjeoelqkVfR98fAsbgs 4r1Fz68ncXsevvwkL+5KJDIoZEofJK5MkFZe5BdOo85qx1xVJUbJ4Es69Ql3VxVx 0A/xZjKZAb05+MG4xAe4f2SSbOAFtOM7zn7CzCTycf3PeXUFI31LGcbpSjlXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx+G9JrT6Uv7Eq5mTyGJJPQ+O2n4wHwYDVR0j BBgwFoAUJZatnakDMfszbcUsW3L5ktfUnTcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjAzNmI3NC04YTVkLTQwYWEtOTYwYy05MjFlNjNhNzBhNGMvMC8yNTk2QUQ5REE5 MDMzMUZCMzM2REM1MkM1QjcyRjk5MkQ3RDQ5RDM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjU5NkFEOURBOTAzMzFGQjMzNkRDNTJDNUI3MkY5OTJEN0Q0 OUQzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGYwMzZiNzQtOGE1ZC00MGFhLTk2 MGMtOTIxZTYzYTcwYTRjLzAvMjU5NkFEOURBOTAzMzFGQjMzNkRDNTJDNUI3MkY5 OTJEN0Q0OUQzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIHkVFQVWgvrQATrSBWcGtOeJ23RNDPalk2h NuNaiPsxnurubfSHtqPkGmac9m+o5Qc4rh/ZSQwbaewfp9Q/uIf/3kXenSFiYA7I RyRsb0jqKdxT+ReNB6tqm6GbL3QZju6SCm7gfMQJt1rAo77ShTyOnBPIfT6Gc9H4 tvp8L6eIBmPdcig0F0H7I1t8ZLNvEJz4Z+imflqUwgNxcsUY63neoBqLMHwfPdXC uMjMr1MD7IesMBgvYf2za8t91neGsz+fJEATUFVdVU2gXra9PULl8mgOTORaYsOg LX5zi+WzWG0VeqbWw0owWU1USHx8aY502aD5IXGOnfCTdgIj+Mc= -----END CERTIFICATE-----Generated at Sun Sep 7 13:45:19 2025 by rpki-client