$ rpki-client -vvf repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft File: DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft (raw, json) Hash identifier: t+Ola+bd/aiBajKcMspTUR1TLOulNZXX13eBtoKw4cw= Subject key identifier: 99:06:FB:47:D0:DC:56:AF:41:21:74:33:4E:10:FE:38:4A:C9:2D:FC Authority key identifier: DE:5F:8F:89:EA:28:57:71:91:25:EA:66:66:F5:93:A8:27:9B:3C:D9 Certificate issuer: /CN=DE5F8F89EA2857719125EA6666F593A8279B3CD9 Certificate serial: 3BF65FA3E91C891BB5D2E55D968C63B798383207 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE5F8F89EA2857719125EA6666F593A8279B3CD9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft Manifest number: 9C Signing time: Tue 01 Jul 2025 09:50:48 +0000 Manifest this update: Tue 01 Jul 2025 09:45:48 +0000 Manifest next update: Fri 04 Jul 2025 13:56:48 +0000 Files and hashes: 1: DE5F8F89EA2857719125EA6666F593A8279B3CD9.crl (hash: jhMfBUpTsBF2T5Li54HVl9s5Q8cDNX/t2DrXhK6U6AE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.crl rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE5F8F89EA2857719125EA6666F593A8279B3CD9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 13:56:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:f6:5f:a3:e9:1c:89:1b:b5:d2:e5:5d:96:8c:63:b7:98:38:32:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE5F8F89EA2857719125EA6666F593A8279B3CD9 Validity Not Before: Jul 1 09:45:48 2025 GMT Not After : Jul 4 13:56:48 2025 GMT Subject: CN=9906FB47D0DC56AF412174334E10FE384AC92DFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:85:d0:1f:f0:23:55:50:e9:18:16:aa:99:fb: 15:db:c0:f4:89:b5:07:1d:b9:79:b9:ba:28:d8:a2: 2a:0c:56:a6:53:8c:08:15:4c:2e:c6:34:8a:ff:3d: 71:be:16:89:d3:5f:48:92:a0:6b:d4:88:d4:5a:44: bc:c7:cf:c6:89:aa:fd:5d:80:68:03:44:2d:6b:e8: dd:d7:1b:1b:9b:2d:2d:50:76:25:09:c3:b7:df:1b: fe:c0:5c:08:8e:a1:9d:9e:a1:a9:92:da:7b:7c:dd: 1a:56:5b:98:1a:f7:ee:22:75:f3:34:d7:ba:9f:62: 9b:16:5e:14:00:4c:98:6d:42:fa:3c:83:02:9b:80: b7:02:dd:fa:e9:5e:84:bf:78:c4:f3:d8:cb:ef:fd: 9e:19:3e:c0:a3:9b:db:40:69:d1:0d:4f:ab:00:9a: f2:01:7d:b3:ba:61:6d:79:0a:51:bc:81:f5:b9:e2: 04:7f:3f:74:47:43:55:ce:a5:9a:eb:73:74:b4:ae: c0:4d:a7:6e:7c:1b:5d:82:0a:1f:95:02:01:3c:b4: f5:2e:2b:e0:d3:38:00:9d:90:1d:9f:93:5e:f9:32: dc:cf:5e:b8:26:76:00:48:5d:f6:23:2f:3a:1e:40: c2:d3:a1:c8:b8:7d:7c:57:11:01:a9:4f:ba:8d:b3: 8e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:06:FB:47:D0:DC:56:AF:41:21:74:33:4E:10:FE:38:4A:C9:2D:FC X509v3 Authority Key Identifier: keyid:DE:5F:8F:89:EA:28:57:71:91:25:EA:66:66:F5:93:A8:27:9B:3C:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE5F8F89EA2857719125EA6666F593A8279B3CD9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8fd6eaca-f5fd-4acb-85a5-eb8d370823af/0/DE5F8F89EA2857719125EA6666F593A8279B3CD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:01:3f:44:1b:bb:c0:54:b9:ad:4f:b5:7f:30:33:fb:f3:ad: a7:f6:4a:a1:26:c1:59:b4:19:e6:19:4d:3a:89:1d:f7:f0:7f: 74:50:a2:00:da:06:d1:66:3e:2a:a7:bb:ed:5d:46:b5:e0:10: f0:0e:d5:c0:0e:c6:84:72:9f:6b:8a:f6:6d:d6:c7:a2:df:4b: 9f:e1:9f:d8:d1:f0:35:84:ee:8d:10:a5:87:50:d2:99:5f:6e: 9e:3c:b6:17:de:df:32:36:8e:00:1d:91:d8:8b:b0:5f:0c:69: 84:3a:c9:85:56:c9:25:fe:ae:b3:aa:83:09:07:6c:5d:63:13: 66:a0:63:89:27:f5:9b:a5:5c:4b:a8:23:af:ca:f7:e2:5b:ec: d1:76:36:48:18:36:57:f5:4a:00:48:2e:78:7b:1a:9f:d7:45: e0:00:77:f5:eb:e3:78:df:78:0c:25:09:2a:14:11:b3:1f:32: 7d:11:17:1c:35:c0:37:a4:3e:b7:96:86:68:7b:2f:e8:f0:a5: 8d:9a:67:64:c9:bf:88:0e:9d:4a:86:1a:5a:40:d0:85:b8:d9: 0e:a9:5e:68:e7:c9:d9:96:a2:04:06:78:03:3d:ee:ef:b5:aa: 5a:41:f5:d1:10:bf:1e:f9:72:e3:12:92:d9:cd:54:62:16:19: 59:aa:ac:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO/Zfo+kciRu10uVdloxjt5g4MgcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU1RjhGODlFQTI4NTc3MTkxMjVFQTY2NjZGNTkzQTgy NzlCM0NEOTAeFw0yNTA3MDEwOTQ1NDhaFw0yNTA3MDQxMzU2NDhaMDMxMTAvBgNV BAMTKDk5MDZGQjQ3RDBEQzU2QUY0MTIxNzQzMzRFMTBGRTM4NEFDOTJERkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXhdAf8CNVUOkYFqqZ+xXbwPSJ tQcduXm5uijYoioMVqZTjAgVTC7GNIr/PXG+FonTX0iSoGvUiNRaRLzHz8aJqv1d gGgDRC1r6N3XGxubLS1QdiUJw7ffG/7AXAiOoZ2eoamS2nt83RpWW5ga9+4idfM0 17qfYpsWXhQATJhtQvo8gwKbgLcC3frpXoS/eMTz2Mvv/Z4ZPsCjm9tAadENT6sA mvIBfbO6YW15ClG8gfW54gR/P3RHQ1XOpZrrc3S0rsBNp258G12CCh+VAgE8tPUu K+DTOACdkB2fk175MtzPXrgmdgBIXfYjLzoeQMLToci4fXxXEQGpT7qNs46xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmQb7R9DcVq9BIXQzThD+OErJLfwwHwYDVR0j BBgwFoAU3l+PieooV3GRJepmZvWTqCebPNkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZmQ2ZWFjYS1mNWZkLTRhY2ItODVhNS1lYjhkMzcwODIzYWYvMC9ERTVGOEY4OUVB Mjg1NzcxOTEyNUVBNjY2NkY1OTNBODI3OUIzQ0Q5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREU1RjhGODlFQTI4NTc3MTkxMjVFQTY2NjZGNTkzQTgyNzlC M0NEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGZkNmVhY2EtZjVmZC00YWNiLTg1 YTUtZWI4ZDM3MDgyM2FmLzAvREU1RjhGODlFQTI4NTc3MTkxMjVFQTY2NjZGNTkz QTgyNzlCM0NEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB4BP0Qbu8BUua1PtX8wM/vzraf2SqEmwVm0 GeYZTTqJHffwf3RQogDaBtFmPiqnu+1dRrXgEPAO1cAOxoRyn2uK9m3Wx6LfS5/h n9jR8DWE7o0QpYdQ0plfbp48thfe3zI2jgAdkdiLsF8MaYQ6yYVWySX+rrOqgwkH bF1jE2agY4kn9ZulXEuoI6/K9+Jb7NF2NkgYNlf1SgBILnh7Gp/XReAAd/Xr43jf eAwlCSoUEbMfMn0RFxw1wDekPreWhmh7L+jwpY2aZ2TJv4gOnUqGGlpA0IW42Q6p XmjnydmWogQGeAM97u+1qlpB9dEQvx75cuMSktnNVGIWGVmqrJI= -----END CERTIFICATE-----Generated at Thu Jul 3 13:15:08 2025 by rpki-client