$ rpki-client -vvf repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.mft File: D9622F68C539A365B6FA78463F3CD3D3EC231214.mft (raw, json) Hash identifier: lUmAHqXVuoVrsP3PcyOrMuDzGFsQeqrGISqLQANXaOU= Subject key identifier: F6:65:31:C4:9A:D2:BD:AA:72:C4:B6:1E:2C:CC:34:B3:AD:BE:31:76 Authority key identifier: D9:62:2F:68:C5:39:A3:65:B6:FA:78:46:3F:3C:D3:D3:EC:23:12:14 Certificate issuer: /CN=D9622F68C539A365B6FA78463F3CD3D3EC231214 Certificate serial: 360EBC2A9724B2CAC0309841B0BF2C811218D5CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9622F68C539A365B6FA78463F3CD3D3EC231214.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.mft Manifest number: CC Signing time: Sun 19 Oct 2025 06:11:56 +0000 Manifest this update: Sun 19 Oct 2025 06:06:56 +0000 Manifest next update: Wed 22 Oct 2025 16:33:56 +0000 Files and hashes: 1: D9622F68C539A365B6FA78463F3CD3D3EC231214.crl (hash: 1XattPX7YSGckmeACh8kVS8uN/bIFE15w7w7EHIbo5c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.crl rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9622F68C539A365B6FA78463F3CD3D3EC231214.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 16:33:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:0e:bc:2a:97:24:b2:ca:c0:30:98:41:b0:bf:2c:81:12:18:d5:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9622F68C539A365B6FA78463F3CD3D3EC231214 Validity Not Before: Oct 19 06:06:56 2025 GMT Not After : Oct 22 16:33:56 2025 GMT Subject: CN=F66531C49AD2BDAA72C4B61E2CCC34B3ADBE3176 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:3d:17:9b:a5:f1:5a:13:f1:52:4d:0e:68:3e: ff:0a:08:f6:b7:1b:bd:79:9d:d9:42:45:f8:f4:f7: 1b:41:c9:80:61:35:de:d0:e3:cc:dc:33:3b:55:ee: b6:ad:91:45:7d:69:66:9d:6d:e9:fd:96:ef:95:94: d2:e8:50:cb:e8:d7:19:0a:41:a4:74:40:a5:db:9e: ef:5b:a4:73:62:2b:26:54:8b:4a:c6:57:54:80:15: 32:82:af:be:0a:15:cb:c5:cf:c1:4b:52:f0:89:80: d5:54:a4:12:bc:ac:17:48:cc:26:74:fa:9f:b5:84: ce:d7:96:e0:c6:cf:c0:e3:c7:65:b9:ac:f3:28:ce: af:3c:bd:2d:48:28:de:0e:59:aa:15:67:35:c7:ba: 3c:c6:29:9d:21:9b:62:2a:e6:66:01:21:ec:ac:36: b1:13:1d:51:21:45:65:6c:24:bc:60:6d:dd:9b:2b: bd:ce:31:c2:49:1a:9d:24:8c:10:80:35:b1:e0:50: bd:b3:a2:87:27:83:92:53:0f:d0:2c:ca:a1:23:61: 85:f4:57:84:e9:f9:22:3d:b6:cd:45:39:3c:d2:ba: 45:74:3a:3e:e3:01:1d:56:8f:0c:34:dc:7c:bc:e6: 25:c2:27:f8:10:8b:52:21:64:85:59:41:3c:fc:88: bd:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:65:31:C4:9A:D2:BD:AA:72:C4:B6:1E:2C:CC:34:B3:AD:BE:31:76 X509v3 Authority Key Identifier: keyid:D9:62:2F:68:C5:39:A3:65:B6:FA:78:46:3F:3C:D3:D3:EC:23:12:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9622F68C539A365B6FA78463F3CD3D3EC231214.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:bb:bd:9c:2d:2a:54:8d:b9:1c:d1:54:b8:49:4c:e8:3a:2f: 9f:82:b2:c8:cb:3b:0a:97:10:e6:7a:e2:ea:d7:e4:0b:1a:61: f7:55:16:93:63:c2:f9:40:f6:37:1a:a3:05:76:01:78:8d:4b: 78:e4:2e:32:5d:ca:ed:20:9c:bb:31:17:1c:9d:97:c1:f9:d1: 54:ea:9d:6e:9d:d9:ff:de:97:c3:11:7a:fe:90:49:2d:d5:5d: 6d:7f:82:ba:cc:07:94:9a:2a:80:c1:6a:a8:8f:1c:7e:bd:28: dd:0c:8f:01:cf:26:b8:65:4c:8d:22:f4:64:50:fa:b3:dc:9a: fe:ee:cc:25:9a:1a:71:aa:b8:f8:04:f0:4b:e5:6f:a3:3a:5d: 6f:ab:bb:4c:e0:34:25:37:04:37:7c:68:88:6c:37:d0:a1:88: e9:94:9e:4c:15:85:2b:89:df:e1:39:94:e5:37:0e:7e:ff:05: 96:6a:c8:10:b1:10:ec:3e:88:d2:a4:34:04:e6:f4:07:e3:58: 1b:e5:c1:a1:e9:df:c7:5e:a6:db:ea:cd:63:5d:a8:37:fc:94: a4:72:37:e1:49:ad:75:8f:c4:6c:33:9a:7b:3f:6d:fa:f5:46: e6:fe:81:c8:5e:51:c3:fe:91:33:d1:97:9c:56:73:e1:32:44: 74:67:d2:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNg68KpckssrAMJhBsL8sgRIY1c8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDk2MjJGNjhDNTM5QTM2NUI2RkE3ODQ2M0YzQ0QzRDNF QzIzMTIxNDAeFw0yNTEwMTkwNjA2NTZaFw0yNTEwMjIxNjMzNTZaMDMxMTAvBgNV BAMTKEY2NjUzMUM0OUFEMkJEQUE3MkM0QjYxRTJDQ0MzNEIzQURCRTMxNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZPRebpfFaE/FSTQ5oPv8KCPa3 G715ndlCRfj09xtByYBhNd7Q48zcMztV7ratkUV9aWadben9lu+VlNLoUMvo1xkK QaR0QKXbnu9bpHNiKyZUi0rGV1SAFTKCr74KFcvFz8FLUvCJgNVUpBK8rBdIzCZ0 +p+1hM7XluDGz8Djx2W5rPMozq88vS1IKN4OWaoVZzXHujzGKZ0hm2Iq5mYBIeys NrETHVEhRWVsJLxgbd2bK73OMcJJGp0kjBCANbHgUL2zoocng5JTD9AsyqEjYYX0 V4Tp+SI9ts1FOTzSukV0Oj7jAR1Wjww03Hy85iXCJ/gQi1IhZIVZQTz8iL2bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9mUxxJrSvapyxLYeLMw0s62+MXYwHwYDVR0j BBgwFoAU2WIvaMU5o2W2+nhGPzzT0+wjEhQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YmE2ZDA3Mi04MzYxLTRkZGYtODAwYS0xY2UxNWM0NzU5MmMvMC9EOTYyMkY2OEM1 MzlBMzY1QjZGQTc4NDYzRjNDRDNEM0VDMjMxMjE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDk2MjJGNjhDNTM5QTM2NUI2RkE3ODQ2M0YzQ0QzRDNFQzIz MTIxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGJhNmQwNzItODM2MS00ZGRmLTgw MGEtMWNlMTVjNDc1OTJjLzAvRDk2MjJGNjhDNTM5QTM2NUI2RkE3ODQ2M0YzQ0Qz RDNFQzIzMTIxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJO7vZwtKlSNuRzRVLhJTOg6L5+CssjLOwqX EOZ64urX5AsaYfdVFpNjwvlA9jcaowV2AXiNS3jkLjJdyu0gnLsxFxydl8H50VTq nW6d2f/el8MRev6QSS3VXW1/grrMB5SaKoDBaqiPHH69KN0MjwHPJrhlTI0i9GRQ +rPcmv7uzCWaGnGquPgE8Evlb6M6XW+ru0zgNCU3BDd8aIhsN9ChiOmUnkwVhSuJ 3+E5lOU3Dn7/BZZqyBCxEOw+iNKkNATm9AfjWBvlwaHp38deptvqzWNdqDf8lKRy N+FJrXWPxGwzmns/bfr1Rub+gcheUcP+kTPRl5xWc+EyRHRn0gw= -----END CERTIFICATE-----Generated at Mon Oct 20 12:56:56 2025 by rpki-client