$ rpki-client -vvf repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft File: 901FA7FD9132963972C91517CDC7E5EE9077E078.mft (raw, json) Hash identifier: mblfOK3dqfRbDqJBN5sEWqwZqDo45fAZegcM9FVLRIc= Subject key identifier: F5:BC:DF:BE:11:00:9B:12:95:64:16:58:7F:D1:24:F2:15:FF:B9:19 Authority key identifier: 90:1F:A7:FD:91:32:96:39:72:C9:15:17:CD:C7:E5:EE:90:77:E0:78 Certificate issuer: /CN=901FA7FD9132963972C91517CDC7E5EE9077E078 Certificate serial: 6EB16D6191606000BBB1057203F7663F447A8AE3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/901FA7FD9132963972C91517CDC7E5EE9077E078.cer Subject info access: rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft Manifest number: 0123 Signing time: Fri 22 Aug 2025 08:00:46 +0000 Manifest this update: Fri 22 Aug 2025 07:55:46 +0000 Manifest next update: Mon 25 Aug 2025 18:33:46 +0000 Files and hashes: 1: 901FA7FD9132963972C91517CDC7E5EE9077E078.crl (hash: YUA/uf9kDJbLQ58uzaquHG2lcyfWUUlkRzuqpN0yrno=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.crl rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/901FA7FD9132963972C91517CDC7E5EE9077E078.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 18:33:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:b1:6d:61:91:60:60:00:bb:b1:05:72:03:f7:66:3f:44:7a:8a:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=901FA7FD9132963972C91517CDC7E5EE9077E078 Validity Not Before: Aug 22 07:55:46 2025 GMT Not After : Aug 25 18:33:46 2025 GMT Subject: CN=F5BCDFBE11009B12956416587FD124F215FFB919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:70:0c:a8:d2:a8:3c:52:ab:58:97:9d:6d:59: cd:23:aa:51:bb:0e:94:47:74:bc:76:4b:b7:51:9b: 86:8c:80:53:2a:9c:88:64:6f:68:1d:00:fc:73:fe: e0:f6:3e:cc:bd:84:d3:57:3e:0d:ef:bb:77:35:46: fc:4d:c8:0f:ee:90:5a:02:fa:ff:53:6b:87:6d:55: a9:2a:aa:23:1f:1a:40:d3:e3:b4:f8:84:3d:d5:1a: 6b:b3:b5:fb:50:95:9a:3c:d7:eb:01:18:93:60:06: 74:6b:94:eb:7f:14:58:f6:19:59:2f:aa:87:b4:b4: bd:f5:33:61:81:68:ac:41:a5:20:1b:d2:95:f2:49: 5b:28:09:ff:b7:f1:4a:b6:6f:59:3b:5b:2a:18:ec: 6c:76:02:9d:9c:86:fc:a7:84:aa:cb:a2:77:10:ef: 52:bc:c7:95:64:ec:36:5a:ef:9e:97:66:01:3d:c6: 3b:52:b9:14:23:3e:af:25:ac:ff:54:66:db:b6:a7: d5:62:44:68:e1:5d:0c:01:90:57:46:c5:07:c0:ea: 20:41:e8:f7:a0:e7:ae:38:db:4a:01:58:38:6b:8e: f4:b2:87:59:8d:70:9b:3f:69:42:a3:2f:b0:d8:4a: b5:da:64:f6:f9:32:53:4b:4f:9f:d4:43:b5:82:a4: ea:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:BC:DF:BE:11:00:9B:12:95:64:16:58:7F:D1:24:F2:15:FF:B9:19 X509v3 Authority Key Identifier: keyid:90:1F:A7:FD:91:32:96:39:72:C9:15:17:CD:C7:E5:EE:90:77:E0:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/901FA7FD9132963972C91517CDC7E5EE9077E078.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:4b:ef:47:3e:e6:7b:e4:d6:d3:83:f8:8b:6d:ba:1d:e0:15: 47:c2:89:57:58:57:f9:6c:8a:74:09:df:0a:28:09:f0:58:08: 49:ea:d8:30:7d:d0:a4:9c:d8:0e:e6:02:a2:90:f0:7c:09:00: 1a:5d:f3:be:dd:6b:cb:86:1d:3b:27:6a:17:5a:a4:63:37:13: 5b:74:3c:1a:b7:1d:28:75:07:b6:2a:6b:63:80:91:99:6f:02: 90:ed:e2:82:87:37:c7:21:ad:15:40:b1:a7:7d:0e:12:9d:42: dd:72:e1:c8:dd:ab:20:65:27:3a:49:b5:fe:31:d4:6f:21:83: bf:ce:7e:58:3a:da:37:0b:e7:4f:c0:a8:de:82:1f:d8:e0:41: da:af:a0:12:e7:bd:ae:b9:6f:94:f5:18:3d:7c:6a:16:48:3f: c1:f3:38:e7:1b:5b:72:4e:11:01:dd:0e:b2:84:16:15:2e:44: ff:08:3a:97:79:f4:7a:a3:6f:b8:a1:43:81:78:f4:42:b8:81: 4f:94:9b:d9:28:33:cd:3d:00:65:2a:3b:d9:d2:fb:25:c4:f8: d5:b0:84:b2:03:fd:f5:4b:d4:d4:08:34:a2:6a:13:6f:95:94: 2e:53:7b:12:3d:8f:28:ce:13:8d:d4:41:7f:63:78:b8:27:24: 26:15:3a:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbrFtYZFgYAC7sQVyA/dmP0R6iuMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTAxRkE3RkQ5MTMyOTYzOTcyQzkxNTE3Q0RDN0U1RUU5 MDc3RTA3ODAeFw0yNTA4MjIwNzU1NDZaFw0yNTA4MjUxODMzNDZaMDMxMTAvBgNV BAMTKEY1QkNERkJFMTEwMDlCMTI5NTY0MTY1ODdGRDEyNEYyMTVGRkI5MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMcAyo0qg8UqtYl51tWc0jqlG7 DpRHdLx2S7dRm4aMgFMqnIhkb2gdAPxz/uD2Psy9hNNXPg3vu3c1RvxNyA/ukFoC +v9Ta4dtVakqqiMfGkDT47T4hD3VGmuztftQlZo81+sBGJNgBnRrlOt/FFj2GVkv qoe0tL31M2GBaKxBpSAb0pXySVsoCf+38Uq2b1k7WyoY7Gx2Ap2chvynhKrLoncQ 71K8x5Vk7DZa756XZgE9xjtSuRQjPq8lrP9UZtu2p9ViRGjhXQwBkFdGxQfA6iBB 6Peg564420oBWDhrjvSyh1mNcJs/aUKjL7DYSrXaZPb5MlNLT5/UQ7WCpOotAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9bzfvhEAmxKVZBZYf9Ek8hX/uRkwHwYDVR0j BBgwFoAUkB+n/ZEyljlyyRUXzcfl7pB34HgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODBhOGRmZC1hNjc5LTQ0NGEtYjlhOC02ZTNjYjQ4MWEwNzkvMC85MDFGQTdGRDkx MzI5NjM5NzJDOTE1MTdDREM3RTVFRTkwNzdFMDc4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTAxRkE3RkQ5MTMyOTYzOTcyQzkxNTE3Q0RDN0U1RUU5MDc3 RTA3OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjgwYThkZmQtYTY3OS00NDRhLWI5 YTgtNmUzY2I0ODFhMDc5LzAvOTAxRkE3RkQ5MTMyOTYzOTcyQzkxNTE3Q0RDN0U1 RUU5MDc3RTA3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ9L70c+5nvk1tOD+Ittuh3gFUfCiVdYV/ls inQJ3wooCfBYCEnq2DB90KSc2A7mAqKQ8HwJABpd877da8uGHTsnahdapGM3E1t0 PBq3HSh1B7Yqa2OAkZlvApDt4oKHN8chrRVAsad9DhKdQt1y4cjdqyBlJzpJtf4x 1G8hg7/Oflg62jcL50/AqN6CH9jgQdqvoBLnva65b5T1GD18ahZIP8HzOOcbW3JO EQHdDrKEFhUuRP8IOpd59Hqjb7ihQ4F49EK4gU+Um9koM809AGUqO9nS+yXE+NWw hLID/fVL1NQINKJqE2+VlC5TexI9jyjOE43UQX9jeLgnJCYVOrw= -----END CERTIFICATE-----Generated at Sat Aug 23 12:16:10 2025 by rpki-client