$ rpki-client -vvf repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.mft File: C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.mft (raw, json) Hash identifier: fgYxWWMNIZKNjZcNuLtea+lm2cRchcEt35FFrbsRdUQ= Subject key identifier: 52:CD:CE:C5:D6:D4:80:05:F9:7A:32:63:75:D7:73:75:0F:D1:FC:E2 Authority key identifier: C9:27:69:FD:5D:97:A4:67:70:E3:A1:0F:9D:57:AE:93:1F:9A:9F:C2 Certificate issuer: /CN=C92769FD5D97A46770E3A10F9D57AE931F9A9FC2 Certificate serial: 6D591B6137AC98BA88D3178E6B07652B4D420086 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.mft Manifest number: 0157 Signing time: Thu 04 Sep 2025 18:42:19 +0000 Manifest this update: Thu 04 Sep 2025 18:37:19 +0000 Manifest next update: Mon 08 Sep 2025 04:24:19 +0000 Files and hashes: 1: C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.crl (hash: aGOE8WMoUQB47Ij4FARto8BrDcef7Gicl+A/4ZT7wrA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.crl rsync://repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 04:24:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:59:1b:61:37:ac:98:ba:88:d3:17:8e:6b:07:65:2b:4d:42:00:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C92769FD5D97A46770E3A10F9D57AE931F9A9FC2 Validity Not Before: Sep 4 18:37:19 2025 GMT Not After : Sep 8 04:24:19 2025 GMT Subject: CN=52CDCEC5D6D48005F97A326375D773750FD1FCE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:16:86:f2:91:94:7a:3a:10:af:c2:82:e7:5e: 59:ad:b0:83:4b:33:cf:b1:58:f9:de:24:5a:56:50: 87:bd:32:a5:ba:20:ae:fa:92:f2:da:a7:f7:cd:52: b7:0a:e5:c4:3a:33:36:a1:46:81:c6:0b:94:4d:fb: 00:75:b5:e4:95:44:1e:11:78:ee:08:fa:c7:f0:63: a3:1e:a8:a1:22:52:05:2e:89:07:ed:c6:eb:6c:84: ca:c0:c8:2a:45:07:1f:01:bc:76:48:c5:4a:f4:16: cc:1d:c3:06:a0:43:4e:7b:eb:69:e2:0b:78:8c:bf: b8:31:e1:b1:bf:a1:4e:aa:d7:72:34:e2:b7:61:60: be:0e:49:9d:8f:cf:9d:f4:11:9a:2d:d8:56:0b:cd: 71:06:ce:5f:2e:d9:5e:9b:8c:92:45:ba:ec:30:10: 2e:84:1c:df:a6:2d:e1:0d:cd:e9:ab:8e:de:9c:7d: de:9e:b7:62:87:8a:45:bc:f3:36:ba:9a:76:07:76: c1:a5:25:2a:bf:0e:d2:07:28:f5:91:d0:5e:78:3d: 31:66:16:56:9f:cf:27:b5:22:35:d9:e4:ba:fe:5c: 18:94:db:00:96:49:d4:a0:a6:51:5b:f4:65:a9:0b: 29:d7:c0:56:50:d5:a9:d5:d5:eb:67:59:93:92:3b: 8f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:CD:CE:C5:D6:D4:80:05:F9:7A:32:63:75:D7:73:75:0F:D1:FC:E2 X509v3 Authority Key Identifier: keyid:C9:27:69:FD:5D:97:A4:67:70:E3:A1:0F:9D:57:AE:93:1F:9A:9F:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f5d77840-608e-449a-b22f-36a6e252fb23/0/C92769FD5D97A46770E3A10F9D57AE931F9A9FC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:09:eb:3f:39:5f:ce:99:99:47:53:41:71:31:47:49:2b:0f: f4:42:73:fc:1f:09:3f:00:a9:44:45:f5:13:d2:d2:2d:aa:d3: ae:af:00:25:ea:62:21:17:18:5b:38:b9:e4:c7:71:49:fb:56: 4c:1b:d6:ee:30:31:fa:59:62:2c:45:9e:d1:22:c9:2c:65:80: 4b:0e:a7:4d:34:dc:ec:3a:c8:0d:2d:0d:c8:54:e2:89:3c:c4: 3c:b7:fb:9d:c9:42:09:83:ad:73:91:7b:3c:93:88:53:93:1c: 53:e4:e7:05:78:e3:8f:2b:4c:60:e0:a2:a7:c0:b6:a9:a3:67: 13:30:12:82:cf:88:fe:7f:4e:63:49:ca:3f:f4:19:30:59:f7: 1e:ed:7f:60:71:09:b7:23:a1:5a:0e:36:0e:bb:70:e7:cb:c4: af:12:a5:40:35:a8:2b:ab:d3:15:d2:a2:06:d0:cf:5a:1e:63: ef:30:23:a2:0b:9b:7e:6e:10:28:15:ac:bb:d4:d2:40:30:5c: a2:39:4a:ac:96:eb:b8:d8:24:31:8e:41:2e:a4:5f:01:cf:a3: 32:a2:f5:50:37:97:02:90:74:45:6b:12:01:73:1c:5c:72:44: 53:b0:7d:db:93:91:22:fc:20:4a:9e:51:88:9e:c4:3e:1a:ca: f3:2e:21:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbVkbYTesmLqI0xeOawdlK01CAIYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzkyNzY5RkQ1RDk3QTQ2NzcwRTNBMTBGOUQ1N0FFOTMx RjlBOUZDMjAeFw0yNTA5MDQxODM3MTlaFw0yNTA5MDgwNDI0MTlaMDMxMTAvBgNV BAMTKDUyQ0RDRUM1RDZENDgwMDVGOTdBMzI2Mzc1RDc3Mzc1MEZEMUZDRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTFobykZR6OhCvwoLnXlmtsINL M8+xWPneJFpWUIe9MqW6IK76kvLap/fNUrcK5cQ6MzahRoHGC5RN+wB1teSVRB4R eO4I+sfwY6MeqKEiUgUuiQftxutshMrAyCpFBx8BvHZIxUr0FswdwwagQ05762ni C3iMv7gx4bG/oU6q13I04rdhYL4OSZ2Pz530EZot2FYLzXEGzl8u2V6bjJJFuuww EC6EHN+mLeENzemrjt6cfd6et2KHikW88za6mnYHdsGlJSq/DtIHKPWR0F54PTFm Flafzye1IjXZ5Lr+XBiU2wCWSdSgplFb9GWpCynXwFZQ1anV1etnWZOSO48RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUs3OxdbUgAX5ejJjdddzdQ/R/OIwHwYDVR0j BBgwFoAUySdp/V2XpGdw46EPnVeukx+an8IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NWQ3Nzg0MC02MDhlLTQ0OWEtYjIyZi0zNmE2ZTI1MmZiMjMvMC9DOTI3NjlGRDVE OTdBNDY3NzBFM0ExMEY5RDU3QUU5MzFGOUE5RkMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzkyNzY5RkQ1RDk3QTQ2NzcwRTNBMTBGOUQ1N0FFOTMxRjlB OUZDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjVkNzc4NDAtNjA4ZS00NDlhLWIy MmYtMzZhNmUyNTJmYjIzLzAvQzkyNzY5RkQ1RDk3QTQ2NzcwRTNBMTBGOUQ1N0FF OTMxRjlBOUZDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGgJ6z85X86ZmUdTQXExR0krD/RCc/wfCT8A qURF9RPS0i2q066vACXqYiEXGFs4ueTHcUn7Vkwb1u4wMfpZYixFntEiySxlgEsO p0003Ow6yA0tDchU4ok8xDy3+53JQgmDrXORezyTiFOTHFPk5wV4448rTGDgoqfA tqmjZxMwEoLPiP5/TmNJyj/0GTBZ9x7tf2BxCbcjoVoONg67cOfLxK8SpUA1qCur 0xXSogbQz1oeY+8wI6ILm35uECgVrLvU0kAwXKI5SqyW67jYJDGOQS6kXwHPozKi 9VA3lwKQdEVrEgFzHFxyRFOwfduTkSL8IEqeUYiexD4ayvMuIY8= -----END CERTIFICATE-----Generated at Fri Sep 5 12:46:59 2025 by rpki-client