$ rpki-client -vvf repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft File: C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft (raw, json) Hash identifier: qAhJS6KdWyjnk+oj+ljHvPagzU8uJTm240TscJOvLBs= Subject key identifier: 7F:B9:E8:EA:D8:8B:15:44:A6:95:6D:C4:10:26:FC:B5:38:61:9D:E7 Authority key identifier: C9:BA:44:08:64:54:B8:8A:BD:ED:EF:D6:01:08:86:1D:DD:AA:37:86 Certificate issuer: /CN=C9BA44086454B88ABDEDEFD60108861DDDAA3786 Certificate serial: 4B701610029D7C3F7AD34B5AC333D0B9746CBA08 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9BA44086454B88ABDEDEFD60108861DDDAA3786.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft Manifest number: FE Signing time: Fri 22 Aug 2025 13:10:36 +0000 Manifest this update: Fri 22 Aug 2025 13:05:36 +0000 Manifest next update: Mon 25 Aug 2025 15:12:36 +0000 Files and hashes: 1: C9BA44086454B88ABDEDEFD60108861DDDAA3786.crl (hash: vKyBsfkZOcs/rv30Yd5mG63LN64Iez9WsrZBIt7EzVo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.crl rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9BA44086454B88ABDEDEFD60108861DDDAA3786.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 15:12:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:70:16:10:02:9d:7c:3f:7a:d3:4b:5a:c3:33:d0:b9:74:6c:ba:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9BA44086454B88ABDEDEFD60108861DDDAA3786 Validity Not Before: Aug 22 13:05:36 2025 GMT Not After : Aug 25 15:12:36 2025 GMT Subject: CN=7FB9E8EAD88B1544A6956DC41026FCB538619DE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e1:47:c9:64:be:04:38:0f:49:63:d8:72:bd: c1:dd:6d:ce:3d:4b:0b:68:8e:da:2f:18:1e:71:3b: 31:8d:04:c2:19:39:3c:85:fd:bd:31:dc:bf:3f:63: 8a:eb:e5:a4:b4:05:97:0e:88:b8:45:da:49:93:fc: 3a:e9:44:5f:70:5c:d3:5d:3c:46:dc:f8:ba:17:8a: ff:79:41:bf:7b:66:2c:fe:44:a0:17:8f:32:e0:48: e6:ac:48:72:51:3a:99:ea:99:48:62:92:48:4d:25: 15:45:54:93:bd:f0:6e:08:ad:40:cb:f7:63:5f:8c: 4e:77:22:e8:c1:fb:a0:4f:b3:a5:72:ce:ac:04:69: 01:8c:16:d7:be:d6:24:4d:e7:b9:29:7a:7d:46:e3: 86:a1:a9:36:55:b5:e4:ca:cf:30:c4:5c:8f:1e:38: b0:01:18:e1:7e:07:10:8a:ad:8f:f6:6b:71:44:95: b2:63:72:f1:c3:b7:ba:ed:d8:3b:11:d4:54:ad:4d: 71:76:f3:73:1f:fd:d6:0a:da:ec:17:c0:45:86:5e: 8f:e2:09:92:9a:c6:ec:48:4d:15:53:f9:dc:70:97: ae:c8:3f:a5:62:33:8e:a5:99:0b:9d:76:20:0b:8e: 59:f3:39:16:8a:f0:ce:04:77:20:e2:3e:90:de:77: 98:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:B9:E8:EA:D8:8B:15:44:A6:95:6D:C4:10:26:FC:B5:38:61:9D:E7 X509v3 Authority Key Identifier: keyid:C9:BA:44:08:64:54:B8:8A:BD:ED:EF:D6:01:08:86:1D:DD:AA:37:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9BA44086454B88ABDEDEFD60108861DDDAA3786.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:d8:8c:c2:80:cc:dc:6b:67:f4:77:47:5b:4a:fb:24:69:67: 75:cc:90:9f:19:62:51:07:d5:4f:84:55:16:4d:d6:ed:66:f7: 25:da:de:09:c9:44:bd:f0:0c:1a:cf:e5:79:cd:87:83:06:01: 49:82:68:c5:b5:58:cd:9b:37:e8:f7:5f:02:a8:8e:16:8e:fe: e0:c7:02:53:aa:e7:29:92:03:ac:f2:e9:5b:1b:a4:2e:64:23: 80:93:28:eb:1d:70:5b:b8:8f:e1:f9:91:ea:02:0a:1d:26:fa: d5:d7:b2:61:27:1a:00:15:93:a9:8b:7d:ef:b3:ad:f1:3f:f1: 73:f4:af:a3:da:ad:e3:8c:6f:0c:9c:d4:b7:62:f2:45:49:e1: d4:d1:29:7d:95:ab:14:40:fa:dc:64:93:c4:b8:9e:6e:b6:d4: aa:7f:1e:c6:dc:e4:e4:25:c0:20:7d:8c:d5:63:87:63:05:da: c3:c9:31:8f:4c:47:76:45:2e:4c:cc:42:13:ba:39:cf:83:6b: ac:fa:c7:e7:2c:52:e2:d1:78:05:54:e6:16:19:e6:f3:a4:7f: 9f:5f:9b:10:8e:59:70:84:de:99:6b:d1:1c:62:f6:54:e2:d4: ee:5a:60:93:0b:15:14:9e:c5:a5:8a:e9:23:6e:4d:3e:aa:d3: d2:eb:bc:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS3AWEAKdfD9600tawzPQuXRsuggwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlCQTQ0MDg2NDU0Qjg4QUJERURFRkQ2MDEwODg2MURE REFBMzc4NjAeFw0yNTA4MjIxMzA1MzZaFw0yNTA4MjUxNTEyMzZaMDMxMTAvBgNV BAMTKDdGQjlFOEVBRDg4QjE1NDRBNjk1NkRDNDEwMjZGQ0I1Mzg2MTlERTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM4UfJZL4EOA9JY9hyvcHdbc49 SwtojtovGB5xOzGNBMIZOTyF/b0x3L8/Y4rr5aS0BZcOiLhF2kmT/DrpRF9wXNNd PEbc+LoXiv95Qb97Ziz+RKAXjzLgSOasSHJROpnqmUhikkhNJRVFVJO98G4IrUDL 92NfjE53IujB+6BPs6VyzqwEaQGMFte+1iRN57kpen1G44ahqTZVteTKzzDEXI8e OLABGOF+BxCKrY/2a3FElbJjcvHDt7rt2DsR1FStTXF283Mf/dYK2uwXwEWGXo/i CZKaxuxITRVT+dxwl67IP6ViM46lmQuddiALjlnzORaK8M4EdyDiPpDed5hnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf7no6tiLFUSmlW3EECb8tThhnecwHwYDVR0j BBgwFoAUybpECGRUuIq97e/WAQiGHd2qN4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTFlNmFjNC1hMmM0LTQxYTctYjBkYi02ZmE3OGIwY2E4YjAvMC9DOUJBNDQwODY0 NTRCODhBQkRFREVGRDYwMTA4ODYxREREQUEzNzg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzlCQTQ0MDg2NDU0Qjg4QUJERURFRkQ2MDEwODg2MUREREFB Mzc4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWExZTZhYzQtYTJjNC00MWE3LWIw ZGItNmZhNzhiMGNhOGIwLzAvQzlCQTQ0MDg2NDU0Qjg4QUJERURFRkQ2MDEwODg2 MUREREFBMzc4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJLYjMKAzNxrZ/R3R1tK+yRpZ3XMkJ8ZYlEH 1U+EVRZN1u1m9yXa3gnJRL3wDBrP5XnNh4MGAUmCaMW1WM2bN+j3XwKojhaO/uDH AlOq5ymSA6zy6VsbpC5kI4CTKOsdcFu4j+H5keoCCh0m+tXXsmEnGgAVk6mLfe+z rfE/8XP0r6PareOMbwyc1Ldi8kVJ4dTRKX2VqxRA+txkk8S4nm621Kp/Hsbc5OQl wCB9jNVjh2MF2sPJMY9MR3ZFLkzMQhO6Oc+Da6z6x+csUuLReAVU5hYZ5vOkf59f mxCOWXCE3plr0Rxi9lTi1O5aYJMLFRSexaWK6SNuTT6q09LrvDQ= -----END CERTIFICATE-----Generated at Sat Aug 23 22:46:05 2025 by rpki-client