$ rpki-client -vvf repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft File: 9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft (raw, json) Hash identifier: rD+piE8FcTolaFbVmaiQYA/y+d/gK8wmzjqgDDUev+Y= Subject key identifier: 09:81:35:D2:F5:69:37:34:0C:60:58:27:42:6D:C3:4F:2D:EE:11:78 Authority key identifier: 95:64:13:4E:E3:E4:CE:65:FB:9D:07:7E:90:B1:BE:B5:25:D6:99:EB Certificate issuer: /CN=9564134EE3E4CE65FB9D077E90B1BEB525D699EB Certificate serial: 2DC0B9A1EBD2577408AC0D16533BD9AD6AF4A24A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft Manifest number: FF Signing time: Mon 20 Oct 2025 18:22:19 +0000 Manifest this update: Mon 20 Oct 2025 18:17:19 +0000 Manifest next update: Fri 24 Oct 2025 03:41:19 +0000 Files and hashes: 1: 9564134EE3E4CE65FB9D077E90B1BEB525D699EB.crl (hash: E51s2YqOE9+4aIZVu1LRLA1tQ7Xac96UahIBJVZ1+So=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.crl rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:c0:b9:a1:eb:d2:57:74:08:ac:0d:16:53:3b:d9:ad:6a:f4:a2:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9564134EE3E4CE65FB9D077E90B1BEB525D699EB Validity Not Before: Oct 20 18:17:19 2025 GMT Not After : Oct 24 03:41:19 2025 GMT Subject: CN=098135D2F56937340C605827426DC34F2DEE1178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:49:f1:5d:39:97:a1:e0:3e:33:56:57:44:95: 7d:70:41:3b:f6:9d:2a:30:24:9c:26:c8:13:67:34: 4a:63:46:db:a3:85:c0:b9:1f:45:9c:e2:e7:b3:f5: 42:ec:85:94:34:38:28:eb:91:de:30:c8:c0:f5:ee: 3b:1c:e0:f0:cd:aa:1b:14:62:9b:f8:79:5e:5e:c2: e5:ee:6c:cf:66:37:ac:04:f0:a4:02:16:e8:b3:db: 02:d7:f3:42:9f:9b:09:c6:35:21:43:dc:3e:22:5a: 74:e0:9e:ec:a5:66:96:e0:97:ad:ad:2c:f8:64:b7: 0f:c5:ba:00:76:13:f9:6e:02:47:9b:28:3c:b8:9a: 46:7b:07:39:76:32:f0:55:06:41:72:5b:bf:93:e9: fc:30:3f:1e:a6:d3:08:fa:e6:06:02:90:0c:f9:e7: f2:75:ac:7b:5a:f6:d7:a8:eb:a8:61:3e:ef:85:85: bc:ae:d3:14:af:d1:90:ac:fb:14:a6:31:57:e0:83: 00:9d:0c:c2:94:15:a4:94:36:52:20:bb:4c:bd:ec: ef:b8:69:84:c8:98:1a:51:2a:28:50:01:1e:7e:c1: 86:f5:5d:ab:70:9d:aa:ee:e8:c0:25:87:26:1c:ff: b7:b8:d6:72:d5:03:cf:7b:25:d0:16:dc:1f:a7:49: 5c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:81:35:D2:F5:69:37:34:0C:60:58:27:42:6D:C3:4F:2D:EE:11:78 X509v3 Authority Key Identifier: keyid:95:64:13:4E:E3:E4:CE:65:FB:9D:07:7E:90:B1:BE:B5:25:D6:99:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:82:6e:08:31:73:e0:8b:43:d1:ef:65:09:d2:24:c1:f0:91: d9:cd:d8:c1:3b:16:03:88:0f:fa:6c:38:2d:eb:5e:a6:cf:05: 9a:c1:e3:2e:43:ac:e7:20:80:19:6d:53:00:c5:a2:a4:d3:21: 18:38:73:b9:57:0b:41:2b:9d:75:9b:65:59:73:33:61:e4:d7: 4b:2b:99:f1:16:76:93:19:9c:68:d1:19:70:b5:97:73:0b:f7: e4:13:b7:65:47:21:ef:3b:99:3b:77:c0:fe:32:a1:cd:7b:30: 4a:b3:7c:a7:d1:f8:15:12:10:b1:4d:f8:6c:7a:44:3b:18:2e: 6f:61:02:2f:e5:dd:e3:27:05:10:3b:ff:1a:1c:90:79:68:92: ab:ee:db:87:16:7f:b7:c8:d0:b6:d6:e9:95:bf:cd:9c:4f:1c: b2:98:4b:8f:16:77:32:15:da:a1:01:f2:3c:0a:b3:02:5b:a1: c0:f7:db:34:aa:5d:5d:9c:11:d8:df:a2:e5:7d:33:f2:e7:d6: 1b:9d:8f:28:ba:ad:34:a1:31:21:f4:86:e1:32:eb:7e:67:54: 91:b5:79:e6:bf:9d:f6:9d:3f:0d:c3:de:7c:71:f4:af:0c:8e: 28:6d:d0:df:a8:3e:94:ef:37:08:17:2e:5b:ad:9e:a9:44:d2: a0:98:3d:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULcC5oevSV3QIrA0WUzvZrWr0okowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU2NDEzNEVFM0U0Q0U2NUZCOUQwNzdFOTBCMUJFQjUy NUQ2OTlFQjAeFw0yNTEwMjAxODE3MTlaFw0yNTEwMjQwMzQxMTlaMDMxMTAvBgNV BAMTKDA5ODEzNUQyRjU2OTM3MzQwQzYwNTgyNzQyNkRDMzRGMkRFRTExNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPSfFdOZeh4D4zVldElX1wQTv2 nSowJJwmyBNnNEpjRtujhcC5H0Wc4uez9ULshZQ0OCjrkd4wyMD17jsc4PDNqhsU Ypv4eV5ewuXubM9mN6wE8KQCFuiz2wLX80KfmwnGNSFD3D4iWnTgnuylZpbgl62t LPhktw/FugB2E/luAkebKDy4mkZ7Bzl2MvBVBkFyW7+T6fwwPx6m0wj65gYCkAz5 5/J1rHta9teo66hhPu+Fhbyu0xSv0ZCs+xSmMVfggwCdDMKUFaSUNlIgu0y97O+4 aYTImBpRKihQAR5+wYb1Xatwnaru6MAlhyYc/7e41nLVA897JdAW3B+nSVz7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCYE10vVpNzQMYFgnQm3DTy3uEXgwHwYDVR0j BBgwFoAUlWQTTuPkzmX7nQd+kLG+tSXWmeswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDg4NjQ4Zi01ZTBiLTQzMzgtOTExYy05ZDY0NjdiMDBhM2UvMC85NTY0MTM0RUUz RTRDRTY1RkI5RDA3N0U5MEIxQkVCNTI1RDY5OUVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTU2NDEzNEVFM0U0Q0U2NUZCOUQwNzdFOTBCMUJFQjUyNUQ2 OTlFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODA4ODY0OGYtNWUwYi00MzM4LTkx MWMtOWQ2NDY3YjAwYTNlLzAvOTU2NDEzNEVFM0U0Q0U2NUZCOUQwNzdFOTBCMUJF QjUyNUQ2OTlFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACqCbggxc+CLQ9HvZQnSJMHwkdnN2ME7FgOI D/psOC3rXqbPBZrB4y5DrOcggBltUwDFoqTTIRg4c7lXC0ErnXWbZVlzM2Hk10sr mfEWdpMZnGjRGXC1l3ML9+QTt2VHIe87mTt3wP4yoc17MEqzfKfR+BUSELFN+Gx6 RDsYLm9hAi/l3eMnBRA7/xockHlokqvu24cWf7fI0LbW6ZW/zZxPHLKYS48WdzIV 2qEB8jwKswJbocD32zSqXV2cEdjfouV9M/Ln1hudjyi6rTShMSH0huEy635nVJG1 eea/nfadPw3D3nxx9K8Mjiht0N+oPpTvNwgXLlutnqlE0qCYPcM= -----END CERTIFICATE-----Generated at Tue Oct 21 00:14:15 2025 by rpki-client