$ rpki-client -vvf repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft File: 9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft (raw, json) Hash identifier: hs7tsRCVOlvh7owdsrb3byoS4PhnNoivr+hwZNIfIcQ= Subject key identifier: D7:FA:B9:A2:19:89:C9:C0:21:4D:92:5B:8B:FC:56:3E:C8:93:2F:1E Authority key identifier: 9F:0F:0B:61:BB:6A:FA:ED:E5:A1:E7:59:1E:D4:84:13:13:DF:D6:FF Certificate issuer: /CN=9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF Certificate serial: 09245573B812F88AE11EC7C31CDA00DF708FF3C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft Manifest number: 01B2 Signing time: Sun 29 Jun 2025 15:31:54 +0000 Manifest this update: Sun 29 Jun 2025 15:26:54 +0000 Manifest next update: Wed 02 Jul 2025 18:42:54 +0000 Files and hashes: 1: 9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.crl (hash: xxGSHgUh5QGacC0eY4nX1xdFewGcTuSED0Gb6jPRAVY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.crl rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:24:55:73:b8:12:f8:8a:e1:1e:c7:c3:1c:da:00:df:70:8f:f3:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF Validity Not Before: Jun 29 15:26:54 2025 GMT Not After : Jul 2 18:42:54 2025 GMT Subject: CN=D7FAB9A21989C9C0214D925B8BFC563EC8932F1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:14:d7:96:49:a8:ea:6e:80:af:93:8d:d5:bf: 1a:3f:0b:6d:90:05:e2:72:08:9d:d0:e8:88:95:90: 2b:3c:20:d4:77:14:e4:37:90:60:4b:f0:a4:07:b9: bc:f6:a6:07:d7:12:a6:8e:7e:92:30:bc:44:3a:6c: 4e:da:76:59:3d:53:c0:00:91:e8:7c:9e:b3:23:1d: 66:ce:bc:1f:e8:43:42:c7:9b:b8:d1:c4:25:e2:26: cb:a0:d4:ed:23:04:33:97:a2:36:7d:0b:88:ab:d4: 0c:cd:e2:6e:ac:2f:1b:38:b2:63:da:cc:c6:81:2c: fd:15:6e:de:34:b3:26:58:f6:93:68:c3:b5:60:35: 7c:34:fc:46:36:40:4a:61:bb:33:66:cf:83:0a:1c: 55:cc:53:f4:5e:3c:4e:83:e0:fa:c4:5f:e9:11:06: b4:bf:91:4f:54:a2:f6:7d:08:d1:d6:da:b2:db:0d: 6f:6c:cb:51:80:42:d8:3f:bf:e6:9b:24:f5:f9:84: bd:15:42:38:c1:52:ab:d6:d8:71:1d:de:5c:71:2d: a6:e9:ef:c7:10:52:c5:a8:b0:97:81:6f:25:f2:ab: 43:97:b2:18:3d:c4:84:b1:7e:03:0a:52:99:0d:4d: c2:55:38:bd:7e:27:48:03:22:53:8c:a4:5e:e8:a6: a7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:FA:B9:A2:19:89:C9:C0:21:4D:92:5B:8B:FC:56:3E:C8:93:2F:1E X509v3 Authority Key Identifier: keyid:9F:0F:0B:61:BB:6A:FA:ED:E5:A1:E7:59:1E:D4:84:13:13:DF:D6:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:a1:e9:ff:6c:2f:12:53:8f:47:96:ae:cc:6a:d9:0a:0e:40: ee:f7:b8:f3:05:d5:b3:b9:08:55:f2:d4:db:2e:26:94:e0:2f: a1:16:d6:bc:a0:7f:01:a0:7a:fb:b6:a3:79:9b:cc:3d:30:f7: 5a:dc:9c:fe:82:bc:1e:ae:6f:a6:ac:e4:53:6f:d9:9e:c4:50: 9e:c6:94:cd:1d:cf:25:5f:67:bc:fb:6f:c6:84:68:23:a1:90: b6:09:b0:0b:f6:f8:4d:b4:11:ec:a1:55:3a:8b:ee:84:6b:a8: 42:f3:fc:8e:35:82:80:18:e9:c3:c7:37:76:4e:3b:ee:bf:20: 4f:33:4b:fd:08:6f:10:b4:85:57:9f:32:ca:c8:fd:2d:c8:62: f9:b8:f5:4a:1d:e8:c4:bf:8f:e5:59:a4:99:dc:84:5a:ae:77: 6a:28:20:1f:4d:f2:9c:2d:a6:33:dd:1e:9c:4d:b7:b6:c0:3f: 81:6b:e9:cb:fa:db:91:ba:0d:e9:fb:df:3e:d6:fe:60:a0:61: b7:5a:80:9f:d0:b6:19:10:f7:db:59:9e:97:7b:f3:d6:6f:26: a1:6a:e6:ff:4c:4f:17:9e:0d:7a:a3:91:3b:dc:c0:dc:45:2e: 7a:2d:7a:f3:53:f3:35:84:63:0a:ea:a1:8e:42:85:10:80:c2: c5:04:09:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCSRVc7gS+IrhHsfDHNoA33CP88YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYwRjBCNjFCQjZBRkFFREU1QTFFNzU5MUVENDg0MTMx M0RGRDZGRjAeFw0yNTA2MjkxNTI2NTRaFw0yNTA3MDIxODQyNTRaMDMxMTAvBgNV BAMTKEQ3RkFCOUEyMTk4OUM5QzAyMTREOTI1QjhCRkM1NjNFQzg5MzJGMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiFNeWSajqboCvk43Vvxo/C22Q BeJyCJ3Q6IiVkCs8INR3FOQ3kGBL8KQHubz2pgfXEqaOfpIwvEQ6bE7adlk9U8AA keh8nrMjHWbOvB/oQ0LHm7jRxCXiJsug1O0jBDOXojZ9C4ir1AzN4m6sLxs4smPa zMaBLP0Vbt40syZY9pNow7VgNXw0/EY2QEphuzNmz4MKHFXMU/RePE6D4PrEX+kR BrS/kU9UovZ9CNHW2rLbDW9sy1GAQtg/v+abJPX5hL0VQjjBUqvW2HEd3lxxLabp 78cQUsWosJeBbyXyq0OXshg9xISxfgMKUpkNTcJVOL1+J0gDIlOMpF7opqc9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1/q5ohmJycAhTZJbi/xWPsiTLx4wHwYDVR0j BBgwFoAUnw8LYbtq+u3loedZHtSEExPf1v8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MGYyNDczMy1lOGRhLTQyYzgtODQ2Yi1lNzk0ZTFiNDM5ZGEvMC85RjBGMEI2MUJC NkFGQUVERTVBMUU3NTkxRUQ0ODQxMzEzREZENkZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUYwRjBCNjFCQjZBRkFFREU1QTFFNzU5MUVENDg0MTMxM0RG RDZGRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDBmMjQ3MzMtZThkYS00MmM4LTg0 NmItZTc5NGUxYjQzOWRhLzAvOUYwRjBCNjFCQjZBRkFFREU1QTFFNzU5MUVENDg0 MTMxM0RGRDZGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMWh6f9sLxJTj0eWrsxq2QoOQO73uPMF1bO5 CFXy1NsuJpTgL6EW1rygfwGgevu2o3mbzD0w91rcnP6CvB6ub6as5FNv2Z7EUJ7G lM0dzyVfZ7z7b8aEaCOhkLYJsAv2+E20EeyhVTqL7oRrqELz/I41goAY6cPHN3ZO O+6/IE8zS/0IbxC0hVefMsrI/S3IYvm49Uod6MS/j+VZpJnchFqud2ooIB9N8pwt pjPdHpxNt7bAP4Fr6cv625G6Den73z7W/mCgYbdagJ/QthkQ99tZnpd789ZvJqFq 5v9MTxeeDXqjkTvcwNxFLnotevNT8zWEYwrqoY5ChRCAwsUECQA= -----END CERTIFICATE-----Generated at Sun Jun 29 19:33:44 2025 by rpki-client