$ rpki-client -vvf repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft File: 9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft (raw, json) Hash identifier: VIV4piYoE8mh/BuQ7LIeVN334ryHGseIxOHLeEw3UO4= Subject key identifier: 3A:C5:7C:69:A5:96:62:B0:26:5F:4A:1D:69:E8:8E:79:BE:B6:4D:6C Authority key identifier: 9F:64:F1:24:BC:CF:26:E2:26:CC:EA:CE:01:1C:CF:BB:F2:4A:86:87 Certificate issuer: /CN=9F64F124BCCF26E226CCEACE011CCFBBF24A8687 Certificate serial: 1F8667250320968599D9B5DE0B892F053140D8B7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft Manifest number: 011F Signing time: Sat 23 Aug 2025 03:02:11 +0000 Manifest this update: Sat 23 Aug 2025 02:57:11 +0000 Manifest next update: Tue 26 Aug 2025 04:33:11 +0000 Files and hashes: 1: 9F64F124BCCF26E226CCEACE011CCFBBF24A8687.crl (hash: MQ0NcQ7ZL9uSKqEyEbNhs4dCadgzWnyc1IBg2m3YN5g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.crl rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 04:33:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:86:67:25:03:20:96:85:99:d9:b5:de:0b:89:2f:05:31:40:d8:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F64F124BCCF26E226CCEACE011CCFBBF24A8687 Validity Not Before: Aug 23 02:57:11 2025 GMT Not After : Aug 26 04:33:11 2025 GMT Subject: CN=3AC57C69A59662B0265F4A1D69E88E79BEB64D6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:20:e8:89:63:4b:5f:01:b1:b9:90:7f:13:6c: 22:df:46:46:18:c0:b7:08:ff:ae:73:f7:6d:3d:15: da:ad:08:f9:18:ba:92:9e:b1:e9:c0:ea:64:61:9f: fe:05:0b:d4:6e:82:43:86:76:7c:8d:eb:2c:66:e0: 6c:de:48:86:ef:c6:40:61:f9:01:bf:04:40:9a:05: 3f:c8:17:09:7c:37:57:2d:65:39:9d:c4:1f:50:4e: b0:e1:98:46:df:b7:bb:bf:0d:fd:5a:1c:e3:22:e0: d1:54:8e:44:bf:3e:d3:1d:bc:24:9f:8e:c1:f9:51: da:15:68:d9:a1:35:05:67:48:32:99:e0:d1:58:07: 9e:dc:bf:13:c5:1a:77:6f:b7:77:c9:73:05:79:c4: a5:2e:63:d3:68:18:f6:1e:34:76:1a:76:ef:60:c7: 68:71:30:d4:bc:9c:2a:99:b9:50:7e:63:a1:99:33: 3f:7f:d8:5d:c5:c5:c1:44:66:c9:04:ba:42:5c:90: c3:8e:f0:0c:cc:0f:02:39:bd:4b:5d:2a:36:da:f2: 54:9d:38:ec:7f:07:d9:0c:ae:65:73:9e:e0:2f:d3: 78:3a:47:cd:8a:60:ac:db:0b:c2:66:93:99:52:34: 80:b1:39:d6:a7:82:24:f2:f0:67:d9:52:c5:0d:85: 32:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:C5:7C:69:A5:96:62:B0:26:5F:4A:1D:69:E8:8E:79:BE:B6:4D:6C X509v3 Authority Key Identifier: keyid:9F:64:F1:24:BC:CF:26:E2:26:CC:EA:CE:01:1C:CF:BB:F2:4A:86:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:01:47:99:6e:17:a7:db:42:0f:68:6a:9e:b7:ce:90:91:98: 2a:2e:7a:9d:3b:a9:cb:03:ed:6f:c9:70:52:eb:9f:37:db:09: 50:ad:84:72:69:f5:09:bd:d4:8a:cb:9e:4a:2d:6a:01:ee:28: 8a:35:3f:d4:b0:a5:04:a6:91:11:30:a9:7a:9e:0b:58:98:5b: e9:e7:a4:96:04:cc:25:0c:fc:83:22:70:ad:30:ff:35:24:17: dd:0d:47:5b:33:d2:a8:e4:a8:ad:30:59:d2:48:d6:13:2f:71: 6b:74:20:a1:a9:77:45:74:f0:a9:17:58:42:b8:b3:da:4c:d4: fa:18:ef:8e:8f:8d:38:92:02:2f:09:81:6b:af:3f:fa:e7:b0: 4a:17:34:61:bb:ec:d7:bc:8b:a6:c2:33:ec:39:ec:19:98:76: 0e:fe:b4:5b:b6:35:ea:16:29:f6:2f:69:0c:b0:61:35:54:bb: 88:39:82:44:0b:c3:16:aa:c9:81:39:00:2c:1b:57:c1:e0:c2: 06:a4:d1:73:d9:3e:ab:9b:03:59:88:3f:b9:3e:91:e1:7b:a9: d5:ed:73:42:b6:e4:0f:21:84:0c:2a:5c:4f:66:65:1d:e6:b7: de:3d:76:07:23:70:ef:5a:be:73:64:84:7e:a7:35:02:d8:d7: cd:7d:05:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH4ZnJQMgloWZ2bXeC4kvBTFA2LcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY2NEYxMjRCQ0NGMjZFMjI2Q0NFQUNFMDExQ0NGQkJG MjRBODY4NzAeFw0yNTA4MjMwMjU3MTFaFw0yNTA4MjYwNDMzMTFaMDMxMTAvBgNV BAMTKDNBQzU3QzY5QTU5NjYyQjAyNjVGNEExRDY5RTg4RTc5QkVCNjRENkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcIOiJY0tfAbG5kH8TbCLfRkYY wLcI/65z9209FdqtCPkYupKesenA6mRhn/4FC9RugkOGdnyN6yxm4GzeSIbvxkBh +QG/BECaBT/IFwl8N1ctZTmdxB9QTrDhmEbft7u/Df1aHOMi4NFUjkS/PtMdvCSf jsH5UdoVaNmhNQVnSDKZ4NFYB57cvxPFGndvt3fJcwV5xKUuY9NoGPYeNHYadu9g x2hxMNS8nCqZuVB+Y6GZMz9/2F3FxcFEZskEukJckMOO8AzMDwI5vUtdKjba8lSd OOx/B9kMrmVznuAv03g6R82KYKzbC8Jmk5lSNICxOdangiTy8GfZUsUNhTItAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOsV8aaWWYrAmX0odaeiOeb62TWwwHwYDVR0j BBgwFoAUn2TxJLzPJuImzOrOARzPu/JKhocwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZjI4NmYwYy0wZmNkLTQzOWMtOGRmZS04MDY1YzkxNzg5MDEvMC85RjY0RjEyNEJD Q0YyNkUyMjZDQ0VBQ0UwMTFDQ0ZCQkYyNEE4Njg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY2NEYxMjRCQ0NGMjZFMjI2Q0NFQUNFMDExQ0NGQkJGMjRB ODY4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWYyODZmMGMtMGZjZC00MzljLThk ZmUtODA2NWM5MTc4OTAxLzAvOUY2NEYxMjRCQ0NGMjZFMjI2Q0NFQUNFMDExQ0NG QkJGMjRBODY4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKkBR5luF6fbQg9oap63zpCRmCouep07qcsD 7W/JcFLrnzfbCVCthHJp9Qm91IrLnkotagHuKIo1P9SwpQSmkREwqXqeC1iYW+nn pJYEzCUM/IMicK0w/zUkF90NR1sz0qjkqK0wWdJI1hMvcWt0IKGpd0V08KkXWEK4 s9pM1PoY746PjTiSAi8JgWuvP/rnsEoXNGG77Ne8i6bCM+w57BmYdg7+tFu2NeoW KfYvaQywYTVUu4g5gkQLwxaqyYE5ACwbV8Hgwgak0XPZPqubA1mIP7k+keF7qdXt c0K25A8hhAwqXE9mZR3mt949dgcjcO9avnNkhH6nNQLY1819BQU= -----END CERTIFICATE-----Generated at Sat Aug 23 15:23:28 2025 by rpki-client