$ rpki-client -vvf repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft File: 9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft (raw, json) Hash identifier: xPUgvhJJUJ1GMYwf4IUAim3VHJ7dxa0I0rH2zBc7RY0= Subject key identifier: 1D:90:82:5B:E4:50:1C:91:01:8C:F7:51:83:D4:9B:F7:7C:8A:2F:43 Authority key identifier: 9F:64:F1:24:BC:CF:26:E2:26:CC:EA:CE:01:1C:CF:BB:F2:4A:86:87 Certificate issuer: /CN=9F64F124BCCF26E226CCEACE011CCFBBF24A8687 Certificate serial: 1EEDCEE93B8CF297783161EE4DA1E9832A794382 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft Manifest number: EE Signing time: Sun 04 May 2025 05:32:08 +0000 Manifest this update: Sun 04 May 2025 05:27:08 +0000 Manifest next update: Wed 07 May 2025 10:11:08 +0000 Files and hashes: 1: 9F64F124BCCF26E226CCEACE011CCFBBF24A8687.crl (hash: 8Yroesnobl7Pq0bO9qYezsXjUewvCXFGT76dQ6g2r+M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.crl rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 10:11:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:ed:ce:e9:3b:8c:f2:97:78:31:61:ee:4d:a1:e9:83:2a:79:43:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F64F124BCCF26E226CCEACE011CCFBBF24A8687 Validity Not Before: May 4 05:27:08 2025 GMT Not After : May 7 10:11:08 2025 GMT Subject: CN=1D90825BE4501C91018CF75183D49BF77C8A2F43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:fb:3c:17:1a:16:9f:37:f2:10:f8:2f:e5:04: a9:1f:48:5d:8d:09:ea:b6:65:6a:7f:48:9c:1c:4d: 6e:94:99:16:0c:5f:51:06:39:6d:54:7f:aa:e6:98: f2:2f:f9:d6:2b:7b:ee:17:4c:66:d3:3e:f6:70:fa: e1:fa:54:a0:09:2e:9a:b6:74:0b:a0:b7:a6:f9:88: a2:23:83:8f:f4:2c:f5:5d:d7:cb:70:8b:08:c5:12: 2e:20:23:7b:89:13:68:cd:63:0c:6c:fd:ca:9b:84: b5:45:a3:a3:eb:72:1d:9d:14:d2:47:9d:3f:8e:da: 21:82:5b:81:7a:7c:dd:e6:a4:e8:ff:72:9d:62:27: 79:97:c2:6c:59:d4:04:a0:1a:8a:25:a2:03:69:52: 12:1b:a7:65:c2:9a:39:56:cb:30:93:0d:d2:57:8b: da:61:61:8e:fd:19:fa:ec:6c:90:82:5f:2b:b9:a1: 39:c4:ef:2b:f9:c0:d3:f4:6b:06:5e:e1:7a:da:65: b1:04:76:bb:f6:d3:6b:88:c9:14:c3:01:34:bd:af: 5c:72:07:6d:2d:dc:83:ac:50:c9:79:97:b1:ea:6a: 4a:37:31:a4:c1:1a:78:31:1b:b8:47:5d:85:98:fa: 98:7b:69:a6:f9:03:51:ea:9f:09:c9:9a:54:a2:29: d6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:90:82:5B:E4:50:1C:91:01:8C:F7:51:83:D4:9B:F7:7C:8A:2F:43 X509v3 Authority Key Identifier: keyid:9F:64:F1:24:BC:CF:26:E2:26:CC:EA:CE:01:1C:CF:BB:F2:4A:86:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:cc:94:fa:58:6c:1a:8a:c1:d4:f1:ec:68:af:e5:32:b7:da: a4:44:b7:bc:1f:dc:49:a4:12:d3:51:2a:79:95:6d:4f:7e:e1: 63:82:fd:eb:78:14:34:71:a1:c5:95:f3:15:23:a1:91:a2:8b: 70:0d:4f:ae:32:41:d2:06:7c:da:0f:f0:6d:8c:01:e6:a3:d6: d5:96:5f:1c:81:bb:96:51:41:7a:44:51:ff:9b:db:7b:fc:37: b8:0d:ad:74:d1:58:df:d7:1b:f8:87:e5:77:34:a6:ed:b9:50: ad:f1:84:0c:c1:2b:c5:26:6e:9d:d9:e0:76:ea:eb:0b:99:41: d5:8a:59:cd:4e:45:3f:79:3d:a2:ca:0f:d0:c3:be:78:37:18: 20:16:c9:a9:b0:09:bb:0c:f0:d9:f1:f2:5c:7f:fd:ce:6d:36: 61:72:82:39:6e:e1:db:86:19:e8:3b:bd:4c:07:43:25:ec:cc: e9:0c:fd:bf:e1:c1:18:26:02:28:3c:65:ba:39:3b:af:12:c3: c4:a8:f3:bd:c7:9e:5f:d7:6f:fb:86:9d:69:56:4b:2d:09:d8: ea:e8:e0:52:cd:1e:6d:a3:32:30:bf:18:37:61:8a:41:f4:0e: 23:22:11:31:4f:40:c3:2b:56:16:cc:e1:09:57:ad:72:5f:72: e9:9e:ea:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHu3O6TuM8pd4MWHuTaHpgyp5Q4IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY2NEYxMjRCQ0NGMjZFMjI2Q0NFQUNFMDExQ0NGQkJG MjRBODY4NzAeFw0yNTA1MDQwNTI3MDhaFw0yNTA1MDcxMDExMDhaMDMxMTAvBgNV BAMTKDFEOTA4MjVCRTQ1MDFDOTEwMThDRjc1MTgzRDQ5QkY3N0M4QTJGNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ+zwXGhafN/IQ+C/lBKkfSF2N Ceq2ZWp/SJwcTW6UmRYMX1EGOW1Uf6rmmPIv+dYre+4XTGbTPvZw+uH6VKAJLpq2 dAugt6b5iKIjg4/0LPVd18twiwjFEi4gI3uJE2jNYwxs/cqbhLVFo6Prch2dFNJH nT+O2iGCW4F6fN3mpOj/cp1iJ3mXwmxZ1ASgGoologNpUhIbp2XCmjlWyzCTDdJX i9phYY79GfrsbJCCXyu5oTnE7yv5wNP0awZe4XraZbEEdrv202uIyRTDATS9r1xy B20t3IOsUMl5l7Hqako3MaTBGngxG7hHXYWY+ph7aab5A1HqnwnJmlSiKdbNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHZCCW+RQHJEBjPdRg9Sb93yKL0MwHwYDVR0j BBgwFoAUn2TxJLzPJuImzOrOARzPu/JKhocwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZjI4NmYwYy0wZmNkLTQzOWMtOGRmZS04MDY1YzkxNzg5MDEvMC85RjY0RjEyNEJD Q0YyNkUyMjZDQ0VBQ0UwMTFDQ0ZCQkYyNEE4Njg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY2NEYxMjRCQ0NGMjZFMjI2Q0NFQUNFMDExQ0NGQkJGMjRB ODY4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWYyODZmMGMtMGZjZC00MzljLThk ZmUtODA2NWM5MTc4OTAxLzAvOUY2NEYxMjRCQ0NGMjZFMjI2Q0NFQUNFMDExQ0NG QkJGMjRBODY4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJLMlPpYbBqKwdTx7Giv5TK32qREt7wf3Emk EtNRKnmVbU9+4WOC/et4FDRxocWV8xUjoZGii3ANT64yQdIGfNoP8G2MAeaj1tWW XxyBu5ZRQXpEUf+b23v8N7gNrXTRWN/XG/iH5Xc0pu25UK3xhAzBK8Umbp3Z4Hbq 6wuZQdWKWc1ORT95PaLKD9DDvng3GCAWyamwCbsM8Nnx8lx//c5tNmFygjlu4duG Geg7vUwHQyXszOkM/b/hwRgmAig8Zbo5O68Sw8So873Hnl/Xb/uGnWlWSy0J2Oro 4FLNHm2jMjC/GDdhikH0DiMiETFPQMMrVhbM4QlXrXJfcume6nY= -----END CERTIFICATE-----Generated at Tue May 6 14:12:53 2025 by rpki-client