$ rpki-client -vvf repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.mft File: D9622F68C539A365B6FA78463F3CD3D3EC231214.mft (raw, json) Hash identifier: JCMBSgFmMK+4bK2E21BAXO/oTkSWkgXoLxc/4XqeFXM= Subject key identifier: 09:2A:98:8A:AD:AF:6F:7E:6C:16:27:68:9C:AD:8C:84:B0:C4:BD:3A Authority key identifier: D9:62:2F:68:C5:39:A3:65:B6:FA:78:46:3F:3C:D3:D3:EC:23:12:14 Certificate issuer: /CN=D9622F68C539A365B6FA78463F3CD3D3EC231214 Certificate serial: 6160918BB8083C5A57DAC46CB22240C89DD5DAC7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9622F68C539A365B6FA78463F3CD3D3EC231214.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.mft Manifest number: B2 Signing time: Thu 21 Aug 2025 22:22:01 +0000 Manifest this update: Thu 21 Aug 2025 22:17:01 +0000 Manifest next update: Mon 25 Aug 2025 00:58:01 +0000 Files and hashes: 1: D9622F68C539A365B6FA78463F3CD3D3EC231214.crl (hash: TUxwJTzwCki22EQAlJyy6NSWs2hEawJVw3TNtADq0Yg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.crl rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9622F68C539A365B6FA78463F3CD3D3EC231214.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 00:58:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:60:91:8b:b8:08:3c:5a:57:da:c4:6c:b2:22:40:c8:9d:d5:da:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9622F68C539A365B6FA78463F3CD3D3EC231214 Validity Not Before: Aug 21 22:17:01 2025 GMT Not After : Aug 25 00:58:01 2025 GMT Subject: CN=092A988AADAF6F7E6C1627689CAD8C84B0C4BD3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1e:43:2b:aa:a7:e8:2a:ee:96:28:0a:36:9a: 39:25:dc:6e:4a:d8:02:e0:af:16:4c:b9:bc:1f:32: 16:70:22:72:e3:ce:63:57:d8:27:e3:bf:12:16:7f: ae:9b:cf:e4:de:53:18:57:49:b4:c0:1c:39:5e:44: f2:94:0a:d0:66:93:1c:e6:34:df:fb:63:05:69:80: d7:bc:8c:32:e9:10:36:80:2b:bb:ab:93:26:c8:7e: 8f:b3:ef:db:0b:1a:45:46:29:4f:c4:62:66:2b:d2: 39:14:cb:1c:51:a0:5e:a6:22:22:67:26:02:6a:16: 5a:15:13:19:29:e2:68:59:e2:94:77:96:8e:fd:e1: 4f:cc:25:1c:96:96:23:2b:52:e8:38:bb:65:e0:5c: 8a:8f:3e:f0:48:73:86:ca:e7:67:7b:21:a0:dd:52: ac:2f:f9:be:95:9d:9b:19:c0:a4:c7:87:4c:22:79: 4b:a6:a3:66:f1:e5:c7:4e:4a:88:49:02:c4:b3:6f: 64:87:ee:8c:6f:77:f4:4b:51:ce:3e:50:1b:b1:f2: 4f:98:f9:1c:c7:b7:13:74:4e:69:ac:09:e4:52:c3: 80:71:40:a5:66:73:41:6a:15:ac:8e:58:75:de:1d: 85:d9:61:f5:44:d1:b8:69:ae:15:bc:e7:c5:a8:a7: 0e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:2A:98:8A:AD:AF:6F:7E:6C:16:27:68:9C:AD:8C:84:B0:C4:BD:3A X509v3 Authority Key Identifier: keyid:D9:62:2F:68:C5:39:A3:65:B6:FA:78:46:3F:3C:D3:D3:EC:23:12:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9622F68C539A365B6FA78463F3CD3D3EC231214.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption f1:c3:77:96:77:16:07:3d:98:bd:6c:d1:9d:d4:b7:10:81:63: 7b:1b:8e:d4:01:25:c2:b5:26:89:a8:d0:74:1b:8f:c9:64:a0: 0a:f4:46:49:d3:40:93:bc:3c:79:fd:db:e2:2c:e9:4c:69:23: 65:86:b6:d7:4d:ce:31:8f:8d:ca:48:85:2c:4f:00:18:2d:6c: 8f:50:e6:dc:b8:88:3a:db:e1:09:84:a4:9a:e1:f8:f7:0a:51: b1:ea:ee:91:f4:12:cd:7f:7a:77:2e:3a:bc:d1:8a:63:e9:b1: e4:3c:db:78:33:4c:54:ac:1f:8a:67:bb:0c:b2:af:8e:23:59: 7d:e3:05:bc:65:c0:c1:61:76:a3:16:85:a7:45:ce:fb:94:c8: 5e:cf:b5:63:bc:77:43:a2:d9:8a:ff:b3:0a:6e:ae:15:26:71: bb:24:72:b2:25:ea:f2:42:b1:43:af:af:2c:17:8d:30:5e:84: 19:74:6c:ae:72:73:57:b4:a1:9e:fd:97:82:8d:6d:f2:8a:64: 55:32:47:78:06:4b:65:4c:18:ed:fc:83:7c:c5:07:ad:ad:df: b7:86:67:09:2d:be:09:63:73:3a:1a:f3:ba:25:a4:94:3e:cc: 51:41:04:94:ea:42:da:f8:bc:d9:6c:67:67:b1:50:2e:e3:2f: eb:65:92:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYWCRi7gIPFpX2sRssiJAyJ3V2scwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDk2MjJGNjhDNTM5QTM2NUI2RkE3ODQ2M0YzQ0QzRDNF QzIzMTIxNDAeFw0yNTA4MjEyMjE3MDFaFw0yNTA4MjUwMDU4MDFaMDMxMTAvBgNV BAMTKDA5MkE5ODhBQURBRjZGN0U2QzE2Mjc2ODlDQUQ4Qzg0QjBDNEJEM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtHkMrqqfoKu6WKAo2mjkl3G5K 2ALgrxZMubwfMhZwInLjzmNX2CfjvxIWf66bz+TeUxhXSbTAHDleRPKUCtBmkxzm NN/7YwVpgNe8jDLpEDaAK7urkybIfo+z79sLGkVGKU/EYmYr0jkUyxxRoF6mIiJn JgJqFloVExkp4mhZ4pR3lo794U/MJRyWliMrUug4u2XgXIqPPvBIc4bK52d7IaDd Uqwv+b6VnZsZwKTHh0wieUumo2bx5cdOSohJAsSzb2SH7oxvd/RLUc4+UBux8k+Y +RzHtxN0TmmsCeRSw4BxQKVmc0FqFayOWHXeHYXZYfVE0bhprhW858Wopw5NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCSqYiq2vb35sFidonK2MhLDEvTowHwYDVR0j BBgwFoAU2WIvaMU5o2W2+nhGPzzT0+wjEhQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YmE2ZDA3Mi04MzYxLTRkZGYtODAwYS0xY2UxNWM0NzU5MmMvMC9EOTYyMkY2OEM1 MzlBMzY1QjZGQTc4NDYzRjNDRDNEM0VDMjMxMjE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDk2MjJGNjhDNTM5QTM2NUI2RkE3ODQ2M0YzQ0QzRDNFQzIz MTIxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGJhNmQwNzItODM2MS00ZGRmLTgw MGEtMWNlMTVjNDc1OTJjLzAvRDk2MjJGNjhDNTM5QTM2NUI2RkE3ODQ2M0YzQ0Qz RDNFQzIzMTIxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAPHDd5Z3Fgc9mL1s0Z3UtxCBY3sbjtQBJcK1 Jomo0HQbj8lkoAr0RknTQJO8PHn92+Is6UxpI2WGttdNzjGPjcpIhSxPABgtbI9Q 5ty4iDrb4QmEpJrh+PcKUbHq7pH0Es1/encuOrzRimPpseQ823gzTFSsH4pnuwyy r44jWX3jBbxlwMFhdqMWhadFzvuUyF7PtWO8d0Oi2Yr/swpurhUmcbskcrIl6vJC sUOvrywXjTBehBl0bK5yc1e0oZ79l4KNbfKKZFUyR3gGS2VMGO38g3zFB62t37eG Zwktvgljczoa87olpJQ+zFFBBJTqQtr4vNlsZ2exUC7jL+tlkm4= -----END CERTIFICATE-----Generated at Sat Aug 23 10:17:35 2025 by rpki-client