$ rpki-client -vvf repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft File: 9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft (raw, json) Hash identifier: SG48KbFwpzPeHTxbxn9uYRtyUipdS1pRm/hyWOIzA7w= Subject key identifier: 16:15:72:18:02:70:32:00:E7:CA:5E:79:88:51:B8:06:9F:9B:0F:BA Authority key identifier: 9F:64:F1:24:BC:CF:26:E2:26:CC:EA:CE:01:1C:CF:BB:F2:4A:86:87 Certificate issuer: /CN=9F64F124BCCF26E226CCEACE011CCFBBF24A8687 Certificate serial: 67D10F20B0919AEE95799653DC6660A8BED32EEC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft Manifest number: 0107 Signing time: Sun 29 Jun 2025 10:52:10 +0000 Manifest this update: Sun 29 Jun 2025 10:47:10 +0000 Manifest next update: Wed 02 Jul 2025 20:10:10 +0000 Files and hashes: 1: 9F64F124BCCF26E226CCEACE011CCFBBF24A8687.crl (hash: 5n9yvrVQMdvcd1EnEYlG9iJ7cDhTdfHdccApYY6c9SE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.crl rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:d1:0f:20:b0:91:9a:ee:95:79:96:53:dc:66:60:a8:be:d3:2e:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F64F124BCCF26E226CCEACE011CCFBBF24A8687 Validity Not Before: Jun 29 10:47:10 2025 GMT Not After : Jul 2 20:10:10 2025 GMT Subject: CN=1615721802703200E7CA5E798851B8069F9B0FBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:55:d8:16:33:95:19:dd:e4:21:0e:77:8a:f0: 5c:e1:97:d4:7c:93:2e:e3:4f:a3:b5:2e:60:bf:2e: 5b:3d:b2:2c:49:13:4e:a9:24:00:9a:b9:8b:cd:db: 04:d9:a1:e4:20:27:45:bf:96:61:09:4f:f0:3f:eb: 0b:75:d6:39:e4:84:af:97:42:54:db:01:aa:51:53: 39:44:63:9a:0e:f3:02:4a:69:16:e4:b3:59:ea:48: 99:19:57:4a:97:45:0e:79:33:fb:39:a2:f9:a3:41: 05:39:58:cb:39:87:a5:f6:c4:a3:b5:8e:a8:88:38: 03:01:44:49:26:32:6e:9b:7d:f8:67:c5:4a:3d:41: a1:42:f3:5d:af:e7:06:9c:c8:89:d8:d7:69:65:f3: a9:e1:4e:55:d2:7b:98:06:e9:a0:1e:af:65:64:ec: 93:35:b8:9c:56:02:e0:5c:99:31:b7:59:5c:a7:9f: d9:10:c7:10:19:cc:a2:9d:a4:cd:fc:83:9f:38:f1: 8f:b1:68:85:22:58:a3:d5:3c:31:44:d7:82:2a:6c: a7:25:be:4e:91:22:c7:1d:ba:51:2a:05:37:ed:74: 49:78:7c:4b:04:03:e1:37:fc:26:ea:a6:d0:d9:4b: 2d:a3:6f:28:bf:e7:fa:4a:45:cc:4c:ac:0f:ad:1a: b6:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:15:72:18:02:70:32:00:E7:CA:5E:79:88:51:B8:06:9F:9B:0F:BA X509v3 Authority Key Identifier: keyid:9F:64:F1:24:BC:CF:26:E2:26:CC:EA:CE:01:1C:CF:BB:F2:4A:86:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:1c:10:2a:72:88:8d:d4:af:ad:15:8e:9e:1d:47:91:a9:98: e1:d1:f7:47:35:75:00:62:40:69:a6:eb:03:56:14:4f:0e:24: cf:e0:09:54:96:25:d4:b6:b2:13:18:3e:21:8b:19:df:5c:51: 4f:cb:23:54:8e:25:ed:c8:ca:17:d5:40:1f:43:21:62:25:71: 94:a1:9f:20:29:dc:b5:ad:02:60:a7:8e:a5:c9:e3:a0:38:7c: 50:7c:e3:12:10:20:12:28:fe:2d:4b:50:7b:8a:3b:68:62:b0: 61:97:cc:0f:9c:fc:39:6c:60:ed:97:36:80:60:eb:79:c4:1d: 2f:e4:73:20:9b:46:8c:d1:1d:00:2f:3b:6a:26:3a:f5:71:b4: b0:d4:ef:e1:a1:81:b0:de:d7:cb:6c:57:2b:b1:29:50:23:5f: e0:b8:33:b6:23:73:b1:dc:64:d5:2c:9d:1c:14:1e:fc:55:ce: 79:3a:2d:dd:9c:cb:67:d5:c7:1e:e3:b1:7f:2c:c3:d6:cc:01: a0:27:68:18:d8:e2:fc:06:31:17:39:0d:e2:f4:96:5a:aa:ba: 7e:2f:f7:29:b9:c6:04:9d:f2:ed:ce:22:a5:8b:fe:95:0a:45: bf:d7:14:67:82:30:b4:d2:76:0d:d4:17:da:89:49:40:fe:16: 19:1d:de:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ9EPILCRmu6VeZZT3GZgqL7TLuwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY2NEYxMjRCQ0NGMjZFMjI2Q0NFQUNFMDExQ0NGQkJG MjRBODY4NzAeFw0yNTA2MjkxMDQ3MTBaFw0yNTA3MDIyMDEwMTBaMDMxMTAvBgNV BAMTKDE2MTU3MjE4MDI3MDMyMDBFN0NBNUU3OTg4NTFCODA2OUY5QjBGQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2VdgWM5UZ3eQhDneK8Fzhl9R8 ky7jT6O1LmC/Lls9sixJE06pJACauYvN2wTZoeQgJ0W/lmEJT/A/6wt11jnkhK+X QlTbAapRUzlEY5oO8wJKaRbks1nqSJkZV0qXRQ55M/s5ovmjQQU5WMs5h6X2xKO1 jqiIOAMBREkmMm6bffhnxUo9QaFC812v5wacyInY12ll86nhTlXSe5gG6aAer2Vk 7JM1uJxWAuBcmTG3WVynn9kQxxAZzKKdpM38g5848Y+xaIUiWKPVPDFE14IqbKcl vk6RIscdulEqBTftdEl4fEsEA+E3/CbqptDZSy2jbyi/5/pKRcxMrA+tGratAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFhVyGAJwMgDnyl55iFG4Bp+bD7owHwYDVR0j BBgwFoAUn2TxJLzPJuImzOrOARzPu/JKhocwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZjI4NmYwYy0wZmNkLTQzOWMtOGRmZS04MDY1YzkxNzg5MDEvMC85RjY0RjEyNEJD Q0YyNkUyMjZDQ0VBQ0UwMTFDQ0ZCQkYyNEE4Njg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY2NEYxMjRCQ0NGMjZFMjI2Q0NFQUNFMDExQ0NGQkJGMjRB ODY4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWYyODZmMGMtMGZjZC00MzljLThk ZmUtODA2NWM5MTc4OTAxLzAvOUY2NEYxMjRCQ0NGMjZFMjI2Q0NFQUNFMDExQ0NG QkJGMjRBODY4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAccECpyiI3Ur60Vjp4dR5GpmOHR90c1dQBi QGmm6wNWFE8OJM/gCVSWJdS2shMYPiGLGd9cUU/LI1SOJe3IyhfVQB9DIWIlcZSh nyAp3LWtAmCnjqXJ46A4fFB84xIQIBIo/i1LUHuKO2hisGGXzA+c/DlsYO2XNoBg 63nEHS/kcyCbRozRHQAvO2omOvVxtLDU7+GhgbDe18tsVyuxKVAjX+C4M7Yjc7Hc ZNUsnRwUHvxVznk6Ld2cy2fVxx7jsX8sw9bMAaAnaBjY4vwGMRc5DeL0llqqun4v 9ym5xgSd8u3OIqWL/pUKRb/XFGeCMLTSdg3UF9qJSUD+Fhkd3mQ= -----END CERTIFICATE-----Generated at Sun Jun 29 18:10:41 2025 by rpki-client