$ rpki-client -vvf repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft File: 9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft (raw, json) Hash identifier: PQfJgSXy5BOExf0ntpFjFFiJ5fO2HiL4cyXRzPS5icc= Subject key identifier: F7:69:3F:8D:ED:41:99:A3:06:EB:A1:F9:4A:2F:13:18:C4:E4:BE:0E Authority key identifier: 9F:64:F1:24:BC:CF:26:E2:26:CC:EA:CE:01:1C:CF:BB:F2:4A:86:87 Certificate issuer: /CN=9F64F124BCCF26E226CCEACE011CCFBBF24A8687 Certificate serial: 66031F18CF16D86468D71136EBE22FA97A85D14C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft Manifest number: 0139 Signing time: Mon 20 Oct 2025 05:12:12 +0000 Manifest this update: Mon 20 Oct 2025 05:07:12 +0000 Manifest next update: Thu 23 Oct 2025 14:10:12 +0000 Files and hashes: 1: 9F64F124BCCF26E226CCEACE011CCFBBF24A8687.crl (hash: WB9lEdIJpaIQ5Eam2ze8D6fWVMFDMJCLUa3w+T4gJEM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.crl rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 14:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:03:1f:18:cf:16:d8:64:68:d7:11:36:eb:e2:2f:a9:7a:85:d1:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F64F124BCCF26E226CCEACE011CCFBBF24A8687 Validity Not Before: Oct 20 05:07:12 2025 GMT Not After : Oct 23 14:10:12 2025 GMT Subject: CN=F7693F8DED4199A306EBA1F94A2F1318C4E4BE0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4d:ba:fc:90:fe:2c:ed:ae:bb:41:36:88:40: 84:e4:0e:a2:3e:49:a5:ee:48:08:0f:46:d1:52:c3: ca:5c:29:e3:93:26:67:b9:20:ae:bf:bd:29:0d:7b: cc:4e:db:60:39:d9:00:e9:0e:4a:7f:20:d9:f9:0d: 22:c3:26:6d:55:69:11:78:7e:c9:27:0c:1f:bb:af: 48:ed:37:f2:68:7d:10:e7:4c:90:25:1f:ed:e9:70: 8c:7b:55:ba:74:3c:77:45:0f:ea:01:f8:23:f8:08: f2:3e:28:81:c2:9e:d6:1d:9e:c7:3b:3a:d3:fe:9b: b0:ac:2c:ea:83:f4:74:40:47:79:b2:d1:f0:d9:b5: 24:73:af:9f:bb:3b:20:f6:9e:98:5b:3c:50:ab:70: ab:99:7f:d4:62:c7:35:7f:d7:47:82:91:89:0d:93: b5:04:72:a8:cf:27:a2:43:73:48:d7:d3:0e:12:59: 4b:cb:01:cc:28:b7:96:09:b7:5d:5d:f2:44:7f:3d: 55:76:bc:26:ea:11:a9:3b:63:86:bf:8d:7f:de:57: c3:78:2d:35:dd:ec:00:a1:b4:b7:48:bb:f4:c3:ad: 96:b0:c8:7a:20:d4:80:7d:70:b6:52:a6:b1:a4:2c: 51:00:f6:36:a7:42:0f:c6:e8:28:5c:25:f8:82:42: 50:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:69:3F:8D:ED:41:99:A3:06:EB:A1:F9:4A:2F:13:18:C4:E4:BE:0E X509v3 Authority Key Identifier: keyid:9F:64:F1:24:BC:CF:26:E2:26:CC:EA:CE:01:1C:CF:BB:F2:4A:86:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:c5:a2:08:8e:b4:6f:5e:27:1a:86:da:f6:b3:96:7d:82:af: db:2a:4e:8e:db:91:cf:15:c1:ae:e9:bb:0d:9b:3d:64:01:4e: 8d:71:8d:ed:26:e0:bf:15:c2:35:1f:32:23:6c:0e:52:b2:2a: ca:0a:fc:06:f6:bf:6f:26:da:37:c2:ed:8e:12:7d:d0:46:59: cf:5b:35:73:e3:09:05:d8:62:84:5d:7c:e5:df:2b:89:53:ec: 5a:5d:ce:85:1d:28:fe:98:de:ff:41:7c:2c:70:54:14:35:4c: 78:d8:37:07:29:a8:ce:c4:ec:76:83:1a:78:e2:0b:e6:51:fc: cd:1b:a7:d2:dd:3e:cb:78:4a:09:f0:5a:77:6a:12:f5:56:d4: 80:11:cf:12:e4:17:f6:8f:b1:f6:9e:8c:1a:34:86:21:5a:b1: f7:a3:da:4d:11:0d:f0:0e:b3:9e:0d:e8:c1:33:73:91:c6:06: 53:6f:bd:8d:58:d0:60:c1:e8:7d:a5:db:eb:67:ab:fd:69:fd: c5:12:6d:5a:9e:5f:de:ff:ce:6e:f4:7c:28:3e:11:10:a8:83: 03:7c:7e:75:52:46:76:2f:10:32:d1:e0:32:0b:51:39:a2:17: 51:5b:ee:5b:50:0b:ce:67:b6:a4:9f:a0:ec:7e:9c:d7:cf:58: fd:6d:b8:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZgMfGM8W2GRo1xE26+IvqXqF0UwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY2NEYxMjRCQ0NGMjZFMjI2Q0NFQUNFMDExQ0NGQkJG MjRBODY4NzAeFw0yNTEwMjAwNTA3MTJaFw0yNTEwMjMxNDEwMTJaMDMxMTAvBgNV BAMTKEY3NjkzRjhERUQ0MTk5QTMwNkVCQTFGOTRBMkYxMzE4QzRFNEJFMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8Tbr8kP4s7a67QTaIQITkDqI+ SaXuSAgPRtFSw8pcKeOTJme5IK6/vSkNe8xO22A52QDpDkp/INn5DSLDJm1VaRF4 fsknDB+7r0jtN/JofRDnTJAlH+3pcIx7Vbp0PHdFD+oB+CP4CPI+KIHCntYdnsc7 OtP+m7CsLOqD9HRAR3my0fDZtSRzr5+7OyD2nphbPFCrcKuZf9RixzV/10eCkYkN k7UEcqjPJ6JDc0jX0w4SWUvLAcwot5YJt11d8kR/PVV2vCbqEak7Y4a/jX/eV8N4 LTXd7AChtLdIu/TDrZawyHog1IB9cLZSprGkLFEA9janQg/G6ChcJfiCQlANAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU92k/je1BmaMG66H5Si8TGMTkvg4wHwYDVR0j BBgwFoAUn2TxJLzPJuImzOrOARzPu/JKhocwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZjI4NmYwYy0wZmNkLTQzOWMtOGRmZS04MDY1YzkxNzg5MDEvMC85RjY0RjEyNEJD Q0YyNkUyMjZDQ0VBQ0UwMTFDQ0ZCQkYyNEE4Njg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY2NEYxMjRCQ0NGMjZFMjI2Q0NFQUNFMDExQ0NGQkJGMjRB ODY4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWYyODZmMGMtMGZjZC00MzljLThk ZmUtODA2NWM5MTc4OTAxLzAvOUY2NEYxMjRCQ0NGMjZFMjI2Q0NFQUNFMDExQ0NG QkJGMjRBODY4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHLFogiOtG9eJxqG2vazln2Cr9sqTo7bkc8V wa7puw2bPWQBTo1xje0m4L8VwjUfMiNsDlKyKsoK/Ab2v28m2jfC7Y4SfdBGWc9b NXPjCQXYYoRdfOXfK4lT7FpdzoUdKP6Y3v9BfCxwVBQ1THjYNwcpqM7E7HaDGnji C+ZR/M0bp9LdPst4SgnwWndqEvVW1IARzxLkF/aPsfaejBo0hiFasfej2k0RDfAO s54N6MEzc5HGBlNvvY1Y0GDB6H2l2+tnq/1p/cUSbVqeX97/zm70fCg+ERCogwN8 fnVSRnYvEDLR4DILUTmiF1Fb7ltQC85ntqSfoOx+nNfPWP1tuHw= -----END CERTIFICATE-----Generated at Mon Oct 20 12:08:26 2025 by rpki-client