$ rpki-client -vvf repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft File: 9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft (raw, json) Hash identifier: zZPS8wjCQDPbndCcbNm6nr4MVFyUTe4erNvt7hFO2lQ= Subject key identifier: B1:E2:4A:81:CB:C3:6E:73:05:0C:8E:14:33:FA:95:A0:DE:FF:E9:ED Authority key identifier: 9F:0F:0B:61:BB:6A:FA:ED:E5:A1:E7:59:1E:D4:84:13:13:DF:D6:FF Certificate issuer: /CN=9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF Certificate serial: 45476EE7169FA75A3B9E12D311BA69DF7AF6C596 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft Manifest number: 01E3 Signing time: Sun 19 Oct 2025 00:11:56 +0000 Manifest this update: Sun 19 Oct 2025 00:06:56 +0000 Manifest next update: Wed 22 Oct 2025 04:38:56 +0000 Files and hashes: 1: 9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.crl (hash: U2a8pvM8qjtjQ5Vyzr4pR3BqHTDyhCEVDsvlZOlZ+VY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.crl rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 04:38:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:47:6e:e7:16:9f:a7:5a:3b:9e:12:d3:11:ba:69:df:7a:f6:c5:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF Validity Not Before: Oct 19 00:06:56 2025 GMT Not After : Oct 22 04:38:56 2025 GMT Subject: CN=B1E24A81CBC36E73050C8E1433FA95A0DEFFE9ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ad:28:d1:7c:c3:e1:cf:ef:2c:2b:39:f9:20: 2d:92:b0:35:09:fd:86:e5:e1:1f:25:fc:31:9d:fe: 6f:7f:cb:e9:5c:99:cc:43:2b:38:ed:35:eb:f8:ad: d3:ae:75:db:39:b8:30:bc:c8:c1:d3:f3:c6:bc:49: c4:2a:56:71:8b:9b:65:8a:01:66:60:f2:41:eb:39: 62:41:ef:9d:01:14:4b:87:e0:9a:30:af:83:14:b8: fd:a6:0f:a9:67:b3:7a:70:a1:91:76:cc:ef:c0:1b: 3a:6b:79:5f:f9:11:b7:de:a5:26:5f:4e:e0:86:3d: 5c:1e:57:c5:29:d9:4b:b3:81:ca:a0:b9:a8:11:bc: ed:b5:e1:cf:3c:79:3f:22:1b:62:1c:f5:19:30:94: 41:47:51:40:85:b4:8d:60:e6:b4:e2:1f:f7:b7:a2: 37:3a:6f:5a:2e:0e:6b:b4:a9:b7:17:ce:ff:01:ee: fd:3a:f5:63:9d:cb:70:03:f2:90:ba:4b:92:43:7a: 88:b9:46:ba:c0:1c:ee:a6:12:d5:c7:83:c5:30:a4: 22:9e:48:1a:ef:85:6f:ae:8d:9c:7a:34:ad:3c:a8: a9:fc:9a:66:17:e4:8f:a6:a8:b1:a2:d8:9c:b3:05: 96:09:67:e5:56:31:38:d0:88:53:2c:82:c8:c9:aa: fd:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:E2:4A:81:CB:C3:6E:73:05:0C:8E:14:33:FA:95:A0:DE:FF:E9:ED X509v3 Authority Key Identifier: keyid:9F:0F:0B:61:BB:6A:FA:ED:E5:A1:E7:59:1E:D4:84:13:13:DF:D6:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:f7:13:d5:fe:26:8d:e6:39:7b:c1:cf:14:90:0b:63:a2:29: 85:d0:12:3a:a5:d8:07:56:4e:02:12:58:6c:7e:11:c7:0f:fb: f6:d6:b3:23:b7:f7:48:eb:d7:fe:2b:ba:dd:88:4b:f6:86:02: a0:dd:4a:4e:bc:ed:6d:a1:39:2f:36:a5:11:a0:67:a4:18:f8: a9:cf:01:70:9d:53:11:9a:9a:8d:c2:56:fa:e1:87:d7:94:53: 5a:f1:10:fe:26:12:ca:e4:16:74:a1:ec:af:c8:c9:ac:ef:16: cf:98:cb:6d:78:84:b1:ac:bc:f9:41:af:9a:8f:6b:26:f9:b2: fe:08:e1:2c:48:f7:ee:eb:f1:2a:66:95:f9:6f:a4:b4:e9:67: 4a:39:85:60:7e:16:d3:3a:a9:81:e7:53:de:dd:80:bf:5a:3b: 29:16:a3:18:1d:07:df:fc:07:cc:32:38:a1:a1:f9:30:c6:d0: a2:1c:9f:7f:05:82:19:ca:7c:82:75:00:8a:93:d8:4e:cf:38: 6c:62:36:ed:dc:6d:bb:42:a9:e7:bc:91:2d:0c:20:04:f9:fb: d3:71:03:c4:97:ff:73:db:26:f9:08:06:b7:0e:08:34:bf:e3: 6f:41:a4:f6:40:2a:57:9d:01:13:64:c9:d7:57:47:e6:e8:3e: 2c:65:fd:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURUdu5xafp1o7nhLTEbpp33r2xZYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYwRjBCNjFCQjZBRkFFREU1QTFFNzU5MUVENDg0MTMx M0RGRDZGRjAeFw0yNTEwMTkwMDA2NTZaFw0yNTEwMjIwNDM4NTZaMDMxMTAvBgNV BAMTKEIxRTI0QTgxQ0JDMzZFNzMwNTBDOEUxNDMzRkE5NUEwREVGRkU5RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLrSjRfMPhz+8sKzn5IC2SsDUJ /Ybl4R8l/DGd/m9/y+lcmcxDKzjtNev4rdOudds5uDC8yMHT88a8ScQqVnGLm2WK AWZg8kHrOWJB750BFEuH4Jowr4MUuP2mD6lns3pwoZF2zO/AGzpreV/5EbfepSZf TuCGPVweV8Up2UuzgcqguagRvO214c88eT8iG2Ic9RkwlEFHUUCFtI1g5rTiH/e3 ojc6b1ouDmu0qbcXzv8B7v069WOdy3AD8pC6S5JDeoi5RrrAHO6mEtXHg8UwpCKe SBrvhW+ujZx6NK08qKn8mmYX5I+mqLGi2JyzBZYJZ+VWMTjQiFMsgsjJqv2zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUseJKgcvDbnMFDI4UM/qVoN7/6e0wHwYDVR0j BBgwFoAUnw8LYbtq+u3loedZHtSEExPf1v8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MGYyNDczMy1lOGRhLTQyYzgtODQ2Yi1lNzk0ZTFiNDM5ZGEvMC85RjBGMEI2MUJC NkFGQUVERTVBMUU3NTkxRUQ0ODQxMzEzREZENkZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUYwRjBCNjFCQjZBRkFFREU1QTFFNzU5MUVENDg0MTMxM0RG RDZGRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDBmMjQ3MzMtZThkYS00MmM4LTg0 NmItZTc5NGUxYjQzOWRhLzAvOUYwRjBCNjFCQjZBRkFFREU1QTFFNzU5MUVENDg0 MTMxM0RGRDZGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFT3E9X+Jo3mOXvBzxSQC2OiKYXQEjql2AdW TgISWGx+EccP+/bWsyO390jr1/4rut2IS/aGAqDdSk687W2hOS82pRGgZ6QY+KnP AXCdUxGamo3CVvrhh9eUU1rxEP4mEsrkFnSh7K/IyazvFs+Yy214hLGsvPlBr5qP ayb5sv4I4SxI9+7r8SpmlflvpLTpZ0o5hWB+FtM6qYHnU97dgL9aOykWoxgdB9/8 B8wyOKGh+TDG0KIcn38FghnKfIJ1AIqT2E7POGxiNu3cbbtCqee8kS0MIAT5+9Nx A8SX/3PbJvkIBrcOCDS/429BpPZAKledARNkyddXR+boPixl/b0= -----END CERTIFICATE-----Generated at Mon Oct 20 20:18:47 2025 by rpki-client