$ rpki-client -vvf repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft File: 9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft (raw, json) Hash identifier: yb1bBJQqBgpyQbTd5CWq4c2jO2cqA6oySknP7sjaxbg= Subject key identifier: 80:0F:14:75:22:5A:FF:78:BE:83:64:0E:16:63:46:8A:BB:A2:1D:1B Authority key identifier: 95:64:13:4E:E3:E4:CE:65:FB:9D:07:7E:90:B1:BE:B5:25:D6:99:EB Certificate issuer: /CN=9564134EE3E4CE65FB9D077E90B1BEB525D699EB Certificate serial: 1F83234BE7958CE0ED7737BB1CF585D9D3D79BFB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft Manifest number: E5 Signing time: Thu 21 Aug 2025 18:32:17 +0000 Manifest this update: Thu 21 Aug 2025 18:27:17 +0000 Manifest next update: Mon 25 Aug 2025 04:17:17 +0000 Files and hashes: 1: 9564134EE3E4CE65FB9D077E90B1BEB525D699EB.crl (hash: d2soWl+gnH0OQa28es1/GCdYyIsfxPqne6ZbDkoRA5A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.crl rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 04:17:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:83:23:4b:e7:95:8c:e0:ed:77:37:bb:1c:f5:85:d9:d3:d7:9b:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9564134EE3E4CE65FB9D077E90B1BEB525D699EB Validity Not Before: Aug 21 18:27:17 2025 GMT Not After : Aug 25 04:17:17 2025 GMT Subject: CN=800F1475225AFF78BE83640E1663468ABBA21D1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:6c:8b:d3:8e:99:da:de:db:37:a7:81:f9:27: a8:f8:be:32:5c:dd:d9:72:af:52:31:e1:f4:ed:dc: c8:4c:47:d8:9e:83:f1:3c:f4:1c:a7:17:2e:65:c6: c8:3e:e9:76:ab:e8:3a:94:1e:cc:7c:5d:f2:17:61: d7:37:be:c2:20:21:65:8e:cb:16:a3:38:d0:23:63: 75:83:35:1b:de:04:83:87:74:51:82:88:ed:bb:ec: 99:10:5e:73:a4:d9:11:7b:47:68:80:01:27:78:d3: e4:95:eb:7c:92:5e:ac:30:a0:72:cb:66:13:17:df: 35:82:dd:cd:05:fe:cc:da:60:16:e8:8f:45:e2:00: 5e:01:c6:0f:39:7d:ce:72:19:a1:71:cd:ab:24:7b: 6b:d4:97:ee:7a:2f:d6:6f:f7:a6:9d:42:5d:1b:52: 93:0c:c1:55:7f:2f:c1:ab:b6:5d:35:03:89:de:ae: 3c:f1:33:cc:07:c3:87:3a:dd:58:b4:ca:58:42:5b: 7e:30:29:e5:e1:60:6a:8f:8e:54:c6:2d:85:a6:e8: f0:e3:db:0b:d7:31:8b:83:d5:20:56:46:ce:d2:1f: 8f:9b:49:dd:2c:ac:8b:32:32:3d:4e:58:6d:2f:4a: fd:b9:fa:e2:79:58:0f:d9:e0:a2:f1:49:48:4e:80: 08:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:0F:14:75:22:5A:FF:78:BE:83:64:0E:16:63:46:8A:BB:A2:1D:1B X509v3 Authority Key Identifier: keyid:95:64:13:4E:E3:E4:CE:65:FB:9D:07:7E:90:B1:BE:B5:25:D6:99:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:d7:78:ba:30:95:1e:c7:72:d4:8f:26:99:40:95:6c:23:5b: 18:8c:4e:e0:4b:da:bf:1a:83:3f:0f:f9:d7:9e:46:58:b1:c7: 7c:06:dd:07:76:98:ba:6a:1b:cc:b3:4e:46:36:98:d6:4f:c7: ea:87:3e:c4:16:2e:8d:25:42:af:ab:e8:3d:06:7f:55:38:10: 71:22:af:a9:78:4b:2a:d5:ea:28:f4:9e:a2:5e:13:e6:63:c4: 41:b5:63:b9:22:d4:3d:cc:38:e0:be:16:12:f0:60:a9:01:66: 4a:4a:62:b1:ee:01:e0:c3:97:7e:08:e3:18:f1:d8:0f:4b:d2: ed:3c:6f:2d:21:dc:22:d2:37:b2:4c:22:a1:a8:f8:49:fa:e4: f5:84:d4:cc:38:ec:43:b3:41:ee:00:98:a8:1e:4d:e8:8a:71: 55:0e:3a:d0:92:17:2a:cc:34:e0:56:83:a3:a7:69:bd:05:ca: ba:25:b1:91:68:b3:8c:8e:e4:51:ad:17:b7:b6:48:6b:4e:e1: 7e:cf:49:06:2f:fa:47:0c:4a:10:58:96:af:39:20:cf:0b:cb: a3:84:4d:ca:2e:f9:74:56:fa:a7:27:6b:c0:4b:c3:d9:8a:14: 20:f1:3b:9f:fd:97:ff:88:b3:68:ac:81:5b:15:2f:33:fa:2d: 28:5f:a8:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH4MjS+eVjODtdze7HPWF2dPXm/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU2NDEzNEVFM0U0Q0U2NUZCOUQwNzdFOTBCMUJFQjUy NUQ2OTlFQjAeFw0yNTA4MjExODI3MTdaFw0yNTA4MjUwNDE3MTdaMDMxMTAvBgNV BAMTKDgwMEYxNDc1MjI1QUZGNzhCRTgzNjQwRTE2NjM0NjhBQkJBMjFEMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDibIvTjpna3ts3p4H5J6j4vjJc 3dlyr1Ix4fTt3MhMR9ieg/E89BynFy5lxsg+6Xar6DqUHsx8XfIXYdc3vsIgIWWO yxajONAjY3WDNRveBIOHdFGCiO277JkQXnOk2RF7R2iAASd40+SV63ySXqwwoHLL ZhMX3zWC3c0F/szaYBboj0XiAF4Bxg85fc5yGaFxzaske2vUl+56L9Zv96adQl0b UpMMwVV/L8Grtl01A4nerjzxM8wHw4c63Vi0ylhCW34wKeXhYGqPjlTGLYWm6PDj 2wvXMYuD1SBWRs7SH4+bSd0srIsyMj1OWG0vSv25+uJ5WA/Z4KLxSUhOgAhDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgA8UdSJa/3i+g2QOFmNGiruiHRswHwYDVR0j BBgwFoAUlWQTTuPkzmX7nQd+kLG+tSXWmeswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDg4NjQ4Zi01ZTBiLTQzMzgtOTExYy05ZDY0NjdiMDBhM2UvMC85NTY0MTM0RUUz RTRDRTY1RkI5RDA3N0U5MEIxQkVCNTI1RDY5OUVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTU2NDEzNEVFM0U0Q0U2NUZCOUQwNzdFOTBCMUJFQjUyNUQ2 OTlFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODA4ODY0OGYtNWUwYi00MzM4LTkx MWMtOWQ2NDY3YjAwYTNlLzAvOTU2NDEzNEVFM0U0Q0U2NUZCOUQwNzdFOTBCMUJF QjUyNUQ2OTlFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHHXeLowlR7HctSPJplAlWwjWxiMTuBL2r8a gz8P+deeRlixx3wG3Qd2mLpqG8yzTkY2mNZPx+qHPsQWLo0lQq+r6D0Gf1U4EHEi r6l4SyrV6ij0nqJeE+ZjxEG1Y7ki1D3MOOC+FhLwYKkBZkpKYrHuAeDDl34I4xjx 2A9L0u08by0h3CLSN7JMIqGo+En65PWE1Mw47EOzQe4AmKgeTeiKcVUOOtCSFyrM NOBWg6Onab0FyrolsZFos4yO5FGtF7e2SGtO4X7PSQYv+kcMShBYlq85IM8Ly6OE Tcou+XRW+qcna8BLw9mKFCDxO5/9l/+Is2isgVsVLzP6LShfqNg= -----END CERTIFICATE-----Generated at Sat Aug 23 18:06:48 2025 by rpki-client