$ rpki-client -vvf repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft File: 9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft (raw, json) Hash identifier: 0j0gZcMSa+VRg1UFpmPC1Fb2kYtG9XYD/NRDXzYGXY0= Subject key identifier: EC:E7:F5:8D:D1:73:9B:D4:27:31:DC:7F:A2:05:40:4C:FF:C9:4F:00 Authority key identifier: 9F:0F:0B:61:BB:6A:FA:ED:E5:A1:E7:59:1E:D4:84:13:13:DF:D6:FF Certificate issuer: /CN=9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF Certificate serial: 06E09DE26D006E85118080E6278B77E2A8BE90E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft Manifest number: 01CA Signing time: Sat 23 Aug 2025 03:21:56 +0000 Manifest this update: Sat 23 Aug 2025 03:16:56 +0000 Manifest next update: Tue 26 Aug 2025 14:54:56 +0000 Files and hashes: 1: 9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.crl (hash: lLQYFWJEWKbNCrIjKradUHwKerRMb43Ya7swXBqFPOQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.crl rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:e0:9d:e2:6d:00:6e:85:11:80:80:e6:27:8b:77:e2:a8:be:90:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF Validity Not Before: Aug 23 03:16:56 2025 GMT Not After : Aug 26 14:54:56 2025 GMT Subject: CN=ECE7F58DD1739BD42731DC7FA205404CFFC94F00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:47:65:f3:f7:1f:10:68:a4:3d:cc:a3:8b:41: fb:9b:ca:b0:9d:20:32:b8:c7:bb:4f:84:db:55:08: d9:fa:55:e4:66:8d:ab:fe:36:65:12:73:da:5e:02: 98:74:aa:7a:84:a3:6a:bc:32:3b:b0:03:53:42:d4: 8f:0c:38:72:0f:31:9c:2d:97:af:21:90:68:6e:2a: 5e:c8:0b:8b:92:10:e4:f8:a4:4a:16:a9:2a:c3:8d: d5:94:65:4e:d8:5f:59:e1:2e:1b:1c:2a:d9:20:90: 55:2d:5f:28:8f:1e:4d:39:e2:16:92:d7:02:f4:58: ec:b9:d8:2d:c6:39:33:34:ce:52:c1:37:50:e4:c3: 3d:c3:85:a1:7b:84:9f:8b:56:e7:a5:40:97:17:5a: ea:da:d9:e3:4b:e8:59:e7:8b:0b:fa:91:c4:b2:7a: 68:2c:77:d6:74:11:69:ba:8c:7d:c6:79:eb:e4:d5: cc:0c:f3:8e:da:d8:57:9c:dc:f2:4e:b4:8a:e9:45: 5d:4f:c5:f5:56:bf:00:8e:a5:4c:3d:47:3f:88:3c: 50:54:eb:bc:2d:99:da:3c:4c:c1:dc:0b:1b:8b:87: 39:b7:eb:81:af:51:ef:b8:de:71:89:de:97:cc:01: e7:1e:45:79:e9:0e:46:03:7f:95:db:7e:61:3a:bd: 79:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E7:F5:8D:D1:73:9B:D4:27:31:DC:7F:A2:05:40:4C:FF:C9:4F:00 X509v3 Authority Key Identifier: keyid:9F:0F:0B:61:BB:6A:FA:ED:E5:A1:E7:59:1E:D4:84:13:13:DF:D6:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:26:01:70:c8:88:27:f4:3a:f0:3b:ff:7e:4b:ce:2d:c8:f5: 03:dc:1c:80:77:21:20:c7:0e:e6:f6:92:0f:d0:c8:05:0b:dd: cd:9c:c3:fd:ad:10:47:98:86:c7:12:43:d2:2f:a8:a0:de:3f: 60:2e:09:fd:0d:aa:48:34:aa:0d:2c:4f:e6:f5:bc:ac:b1:49: b1:f2:c2:cc:95:64:5d:f6:c3:cd:c2:cc:bd:e9:51:46:8e:07: 4a:5e:46:f9:e6:ea:eb:2d:6c:cb:da:b9:d9:2f:dc:5d:58:86: 9d:b3:1b:d1:6e:85:50:c1:0d:2b:01:a4:bc:3b:a7:fe:dc:a1: e6:64:d2:1e:93:c5:f9:29:93:09:13:b7:d7:d9:45:40:43:10: 59:ca:93:46:48:f1:8c:7b:b2:c0:fe:b1:b4:a0:72:ee:27:22: 49:15:70:5b:bf:bb:3e:40:9f:5e:46:f4:37:44:53:be:58:cb: 27:48:a8:b8:5e:e8:55:69:96:7a:de:13:b4:32:7c:76:d0:a1: ac:91:6e:a0:a7:46:9a:51:7b:94:3d:77:ae:73:c4:37:71:cf: a4:47:df:e1:1a:0f:30:b6:6d:e1:ea:a9:c9:20:a8:fe:fa:ec: 2a:06:f2:48:82:45:83:f0:a4:82:53:01:ea:01:0f:0e:0c:2b: c4:f5:76:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBuCd4m0AboURgIDmJ4t34qi+kOcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYwRjBCNjFCQjZBRkFFREU1QTFFNzU5MUVENDg0MTMx M0RGRDZGRjAeFw0yNTA4MjMwMzE2NTZaFw0yNTA4MjYxNDU0NTZaMDMxMTAvBgNV BAMTKEVDRTdGNThERDE3MzlCRDQyNzMxREM3RkEyMDU0MDRDRkZDOTRGMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhR2Xz9x8QaKQ9zKOLQfubyrCd IDK4x7tPhNtVCNn6VeRmjav+NmUSc9peAph0qnqEo2q8MjuwA1NC1I8MOHIPMZwt l68hkGhuKl7IC4uSEOT4pEoWqSrDjdWUZU7YX1nhLhscKtkgkFUtXyiPHk054haS 1wL0WOy52C3GOTM0zlLBN1Dkwz3DhaF7hJ+LVuelQJcXWura2eNL6Fnniwv6kcSy emgsd9Z0EWm6jH3Geevk1cwM847a2Fec3PJOtIrpRV1PxfVWvwCOpUw9Rz+IPFBU 67wtmdo8TMHcCxuLhzm364GvUe+43nGJ3pfMAeceRXnpDkYDf5XbfmE6vXn5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7Of1jdFzm9QnMdx/ogVATP/JTwAwHwYDVR0j BBgwFoAUnw8LYbtq+u3loedZHtSEExPf1v8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MGYyNDczMy1lOGRhLTQyYzgtODQ2Yi1lNzk0ZTFiNDM5ZGEvMC85RjBGMEI2MUJC NkFGQUVERTVBMUU3NTkxRUQ0ODQxMzEzREZENkZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUYwRjBCNjFCQjZBRkFFREU1QTFFNzU5MUVENDg0MTMxM0RG RDZGRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDBmMjQ3MzMtZThkYS00MmM4LTg0 NmItZTc5NGUxYjQzOWRhLzAvOUYwRjBCNjFCQjZBRkFFREU1QTFFNzU5MUVENDg0 MTMxM0RGRDZGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABQmAXDIiCf0OvA7/35Lzi3I9QPcHIB3ISDH Dub2kg/QyAUL3c2cw/2tEEeYhscSQ9IvqKDeP2AuCf0Nqkg0qg0sT+b1vKyxSbHy wsyVZF32w83CzL3pUUaOB0peRvnm6ustbMvaudkv3F1Yhp2zG9FuhVDBDSsBpLw7 p/7coeZk0h6TxfkpkwkTt9fZRUBDEFnKk0ZI8Yx7ssD+sbSgcu4nIkkVcFu/uz5A n15G9DdEU75YyydIqLhe6FVplnreE7QyfHbQoayRbqCnRppRe5Q9d65zxDdxz6RH 3+EaDzC2beHqqckgqP767CoG8kiCRYPwpIJTAeoBDw4MK8T1dnI= -----END CERTIFICATE-----Generated at Sat Aug 23 14:11:08 2025 by rpki-client