$ rpki-client -vvf repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.mft File: D9622F68C539A365B6FA78463F3CD3D3EC231214.mft (raw, json) Hash identifier: hTrSkavJL2dhMKp0/VsXcK147pro8IrKja2sxPByhUw= Subject key identifier: DA:25:3B:E7:F1:C9:66:B9:07:6A:9D:3A:4F:B4:2F:E8:89:57:32:4A Authority key identifier: D9:62:2F:68:C5:39:A3:65:B6:FA:78:46:3F:3C:D3:D3:EC:23:12:14 Certificate issuer: /CN=D9622F68C539A365B6FA78463F3CD3D3EC231214 Certificate serial: 3C7D3B11AB5999425680F9C8383AC4AB9E00BBAF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9622F68C539A365B6FA78463F3CD3D3EC231214.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.mft Manifest number: 9A Signing time: Mon 30 Jun 2025 04:11:54 +0000 Manifest this update: Mon 30 Jun 2025 04:06:54 +0000 Manifest next update: Thu 03 Jul 2025 08:59:54 +0000 Files and hashes: 1: D9622F68C539A365B6FA78463F3CD3D3EC231214.crl (hash: 4RGJXOmTP/91XpQEIhiZgsXfHs+1uSzEP+OHnO1ilb4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.crl rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9622F68C539A365B6FA78463F3CD3D3EC231214.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 08:59:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:7d:3b:11:ab:59:99:42:56:80:f9:c8:38:3a:c4:ab:9e:00:bb:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9622F68C539A365B6FA78463F3CD3D3EC231214 Validity Not Before: Jun 30 04:06:54 2025 GMT Not After : Jul 3 08:59:54 2025 GMT Subject: CN=DA253BE7F1C966B9076A9D3A4FB42FE88957324A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f9:44:5c:e0:34:82:4b:f4:27:bc:08:f1:a4: 15:21:0a:57:0d:1e:0d:86:21:5b:34:73:fa:02:9a: de:55:6b:6b:fc:ab:91:c0:84:cd:bd:cb:f1:47:14: dd:de:b8:3b:ed:d5:5c:11:89:71:48:39:f3:64:8a: 3d:9b:78:93:1f:52:ee:4f:6f:eb:ad:fd:89:87:b9: 1b:a4:3a:76:15:17:86:9c:04:ca:c1:4c:ac:40:a5: dd:dc:8e:05:17:37:24:1c:d3:d3:9c:30:60:02:87: a0:00:9b:dd:ce:56:ff:ef:b8:6b:1a:78:b6:09:23: cd:83:96:d4:c4:f1:1d:bd:78:c0:c9:59:1d:cf:c4: 30:a7:4a:cd:c2:49:31:33:be:43:9e:fe:05:7c:6e: 5d:fa:7e:77:26:4a:cc:a0:dd:3f:52:43:dc:67:5d: ab:0c:eb:fa:46:3c:3b:ff:cd:81:e1:d1:1a:b6:41: 05:6b:0b:45:a7:fd:81:22:4c:75:70:64:2b:15:e8: c9:b6:07:85:bb:af:7e:81:02:a7:dc:b3:5d:2f:bb: e6:0f:eb:01:21:31:c6:d6:c6:5f:d5:60:72:ad:f2: 5d:07:bf:75:cc:23:04:72:59:4c:a2:a4:4e:b7:d3: 8c:f9:5e:55:10:98:15:f5:73:a1:75:ae:82:db:78: c5:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:25:3B:E7:F1:C9:66:B9:07:6A:9D:3A:4F:B4:2F:E8:89:57:32:4A X509v3 Authority Key Identifier: keyid:D9:62:2F:68:C5:39:A3:65:B6:FA:78:46:3F:3C:D3:D3:EC:23:12:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9622F68C539A365B6FA78463F3CD3D3EC231214.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:d9:c8:9c:e5:a5:70:00:e9:df:7d:23:c0:1e:01:af:b6:cf: 78:bb:67:24:66:7b:1e:7c:78:72:76:8b:9c:74:fb:8d:55:4b: 5f:34:42:5c:d2:c5:b9:5f:ef:94:47:e6:50:bc:1f:99:88:df: 39:7b:e7:24:2b:d9:42:f8:a6:b6:1a:f2:af:e3:de:ff:18:22: 58:bb:3f:6e:c3:ad:78:03:da:84:c2:d4:7c:e9:c4:ad:eb:e5: 5b:60:36:c9:04:65:44:ed:47:3d:19:e4:f8:20:4a:c0:87:58: 4e:bf:a3:a9:6b:89:5c:41:3c:43:5a:34:b0:70:45:fd:98:e7: 80:09:9e:67:c3:8c:f2:e0:41:8b:2c:58:26:6d:7f:dc:ab:2c: 72:7a:99:31:55:d5:ac:6f:8a:9a:76:6f:17:a8:68:1c:de:70: eb:b6:40:36:c4:b7:0c:42:3e:85:68:0b:05:79:fa:52:e0:3b: fd:f9:9f:70:2b:c8:d9:92:4a:3c:92:0e:f8:a7:bf:24:4d:76: ca:e9:d4:b5:0d:10:e6:6d:76:a6:f4:b9:bc:ca:16:f0:e1:ae: 82:50:f9:ad:cf:eb:64:e5:6d:68:fb:96:22:50:b3:4d:d8:c9: 76:f3:1d:cf:37:31:f6:fc:95:bc:ee:cb:fa:89:f4:63:d3:04: ae:96:3d:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPH07EatZmUJWgPnIODrEq54Au68wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDk2MjJGNjhDNTM5QTM2NUI2RkE3ODQ2M0YzQ0QzRDNF QzIzMTIxNDAeFw0yNTA2MzAwNDA2NTRaFw0yNTA3MDMwODU5NTRaMDMxMTAvBgNV BAMTKERBMjUzQkU3RjFDOTY2QjkwNzZBOUQzQTRGQjQyRkU4ODk1NzMyNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy+URc4DSCS/QnvAjxpBUhClcN Hg2GIVs0c/oCmt5Va2v8q5HAhM29y/FHFN3euDvt1VwRiXFIOfNkij2beJMfUu5P b+ut/YmHuRukOnYVF4acBMrBTKxApd3cjgUXNyQc09OcMGACh6AAm93OVv/vuGsa eLYJI82DltTE8R29eMDJWR3PxDCnSs3CSTEzvkOe/gV8bl36fncmSsyg3T9SQ9xn XasM6/pGPDv/zYHh0Rq2QQVrC0Wn/YEiTHVwZCsV6Mm2B4W7r36BAqfcs10vu+YP 6wEhMcbWxl/VYHKt8l0Hv3XMIwRyWUyipE6304z5XlUQmBX1c6F1roLbeMXxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2iU75/HJZrkHap06T7Qv6IlXMkowHwYDVR0j BBgwFoAU2WIvaMU5o2W2+nhGPzzT0+wjEhQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YmE2ZDA3Mi04MzYxLTRkZGYtODAwYS0xY2UxNWM0NzU5MmMvMC9EOTYyMkY2OEM1 MzlBMzY1QjZGQTc4NDYzRjNDRDNEM0VDMjMxMjE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDk2MjJGNjhDNTM5QTM2NUI2RkE3ODQ2M0YzQ0QzRDNFQzIz MTIxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGJhNmQwNzItODM2MS00ZGRmLTgw MGEtMWNlMTVjNDc1OTJjLzAvRDk2MjJGNjhDNTM5QTM2NUI2RkE3ODQ2M0YzQ0Qz RDNFQzIzMTIxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALnZyJzlpXAA6d99I8AeAa+2z3i7ZyRmex58 eHJ2i5x0+41VS180QlzSxblf75RH5lC8H5mI3zl75yQr2UL4prYa8q/j3v8YIli7 P27DrXgD2oTC1HzpxK3r5VtgNskEZUTtRz0Z5PggSsCHWE6/o6lriVxBPENaNLBw Rf2Y54AJnmfDjPLgQYssWCZtf9yrLHJ6mTFV1axvipp2bxeoaBzecOu2QDbEtwxC PoVoCwV5+lLgO/35n3AryNmSSjySDvinvyRNdsrp1LUNEOZtdqb0ubzKFvDhroJQ +a3P62TlbWj7liJQs03YyXbzHc83Mfb8lbzuy/qJ9GPTBK6WPaY= -----END CERTIFICATE-----Generated at Mon Jun 30 22:17:02 2025 by rpki-client