$ rpki-client -vvf repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft File: 9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft (raw, json) Hash identifier: t7RDct54/sAo/rzJ8fBoYnHAtC1fIq/7UeZcfd8rEhE= Subject key identifier: 6A:5B:3C:CF:92:64:AC:DE:2A:1F:D9:59:F3:C5:AF:43:A9:99:05:11 Authority key identifier: 94:79:B8:C5:D5:AE:8F:AB:DC:57:A9:AB:54:9A:DD:E2:0B:E8:A4:B3 Certificate issuer: /CN=9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3 Certificate serial: 057D0D8870A331520C555A62F3DEDDCAEE30C4CB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft Manifest number: 0202 Signing time: Sun 19 Oct 2025 17:32:04 +0000 Manifest this update: Sun 19 Oct 2025 17:27:04 +0000 Manifest next update: Wed 22 Oct 2025 21:30:04 +0000 Files and hashes: 1: 9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.crl (hash: GMmeV8UGfjgxxXvqe5pIqTeWv8SVb8dIPK6hxSiStB8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.crl rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 21:30:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:7d:0d:88:70:a3:31:52:0c:55:5a:62:f3:de:dd:ca:ee:30:c4:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3 Validity Not Before: Oct 19 17:27:04 2025 GMT Not After : Oct 22 21:30:04 2025 GMT Subject: CN=6A5B3CCF9264ACDE2A1FD959F3C5AF43A9990511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e2:b2:dd:38:17:a0:04:53:a2:6e:f9:2b:a1: a4:c8:4f:63:eb:8c:1d:b0:c8:76:63:2f:b4:8e:00: 14:8a:52:e9:cf:9c:20:ea:8f:5c:6a:06:f4:89:fa: 37:0c:47:88:33:8e:03:0f:1b:6a:3d:d4:05:73:d6: 9e:19:9d:4b:bb:43:00:49:6d:44:9f:9a:07:7c:8f: f0:e0:fb:3e:94:bd:f8:65:52:2b:da:9d:c7:cd:33: 3e:4f:1d:7b:5e:f9:5c:27:13:9e:94:f8:fa:4f:b1: 3d:cb:08:42:e0:10:86:e8:20:9c:b7:5f:f6:bf:e1: 1d:10:29:ba:b4:d4:37:73:30:bb:82:1e:e4:fc:e9: 93:a0:2d:22:c5:f5:2e:04:63:5e:b5:ea:76:5d:e7: 75:8f:70:d1:4d:dd:da:18:bc:b7:d3:63:97:37:07: c4:7e:87:71:26:27:14:52:4a:53:bc:30:91:cc:20: 6b:6c:d1:40:8d:c8:f5:1a:e7:47:90:a0:b9:7a:a0: fd:c5:9a:ce:5c:43:19:eb:39:f3:9d:9e:61:c9:33: 6e:6a:cd:35:31:eb:bc:93:9b:c3:94:d0:df:a5:6f: 64:b8:06:97:49:31:ca:31:36:12:8c:e6:cc:24:0d: 3b:ef:ea:8d:5a:77:98:59:9e:55:aa:c0:92:c8:84: 6a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:5B:3C:CF:92:64:AC:DE:2A:1F:D9:59:F3:C5:AF:43:A9:99:05:11 X509v3 Authority Key Identifier: keyid:94:79:B8:C5:D5:AE:8F:AB:DC:57:A9:AB:54:9A:DD:E2:0B:E8:A4:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:ac:0d:10:1e:ff:f8:11:85:67:e2:a9:86:24:07:9f:eb:09: 50:af:3e:8f:e3:bd:1b:cf:57:f7:44:ff:98:a4:b7:44:0d:6f: b2:65:40:01:f4:b0:56:4a:a1:20:31:25:2e:52:85:47:9c:db: a5:3d:7d:5c:26:6a:4e:b0:61:61:b1:a8:50:56:9e:2f:4f:1c: 72:ab:ac:81:02:f5:3b:82:c4:bf:1e:c6:d1:4e:b1:b4:b8:f8: bc:62:07:2f:a4:00:d7:62:49:9b:de:f1:40:fa:22:a1:ac:14: 87:0d:1e:e7:5e:fd:3f:71:c1:2a:82:91:29:6f:a0:ea:ce:de: ed:5b:0c:1b:35:e0:59:30:01:b4:15:3a:17:cd:b5:fe:73:2b: 1d:c1:ae:fd:61:c8:9c:ad:39:5c:2b:84:df:c8:d2:83:8d:85: 27:2f:6e:56:af:b9:ba:f2:f6:eb:82:22:27:2d:a9:cd:4f:aa: d1:fa:9f:f2:a5:d2:c2:f9:18:8a:c4:de:8e:05:16:cb:a5:9c: 95:30:78:4b:eb:1d:65:61:85:36:cb:49:fa:bf:7c:56:1a:fe: d6:f6:cb:f4:38:0a:72:c3:d4:3e:8f:9f:6d:5f:0a:33:aa:c6: 06:07:c8:fe:29:2e:48:5e:d7:e2:bb:47:86:b5:59:13:92:04: fa:94:20:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBX0NiHCjMVIMVVpi897dyu4wxMswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ3OUI4QzVENUFFOEZBQkRDNTdBOUFCNTQ5QURERTIw QkU4QTRCMzAeFw0yNTEwMTkxNzI3MDRaFw0yNTEwMjIyMTMwMDRaMDMxMTAvBgNV BAMTKDZBNUIzQ0NGOTI2NEFDREUyQTFGRDk1OUYzQzVBRjQzQTk5OTA1MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ4rLdOBegBFOibvkroaTIT2Pr jB2wyHZjL7SOABSKUunPnCDqj1xqBvSJ+jcMR4gzjgMPG2o91AVz1p4ZnUu7QwBJ bUSfmgd8j/Dg+z6UvfhlUivancfNMz5PHXte+VwnE56U+PpPsT3LCELgEIboIJy3 X/a/4R0QKbq01DdzMLuCHuT86ZOgLSLF9S4EY1616nZd53WPcNFN3doYvLfTY5c3 B8R+h3EmJxRSSlO8MJHMIGts0UCNyPUa50eQoLl6oP3Fms5cQxnrOfOdnmHJM25q zTUx67yTm8OU0N+lb2S4BpdJMcoxNhKM5swkDTvv6o1ad5hZnlWqwJLIhGpNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUals8z5JkrN4qH9lZ88WvQ6mZBREwHwYDVR0j BBgwFoAUlHm4xdWuj6vcV6mrVJrd4gvopLMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTBhYTE1OC02NTgxLTRjYmUtYjZjZS1kODcyMWM3MTlmYTAvMC85NDc5QjhDNUQ1 QUU4RkFCREM1N0E5QUI1NDlBRERFMjBCRThBNEIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTQ3OUI4QzVENUFFOEZBQkRDNTdBOUFCNTQ5QURERTIwQkU4 QTRCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTkwYWExNTgtNjU4MS00Y2JlLWI2 Y2UtZDg3MjFjNzE5ZmEwLzAvOTQ3OUI4QzVENUFFOEZBQkRDNTdBOUFCNTQ5QURE RTIwQkU4QTRCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL+sDRAe//gRhWfiqYYkB5/rCVCvPo/jvRvP V/dE/5ikt0QNb7JlQAH0sFZKoSAxJS5ShUec26U9fVwmak6wYWGxqFBWni9PHHKr rIEC9TuCxL8extFOsbS4+LxiBy+kANdiSZve8UD6IqGsFIcNHude/T9xwSqCkSlv oOrO3u1bDBs14FkwAbQVOhfNtf5zKx3Brv1hyJytOVwrhN/I0oONhScvblavubry 9uuCIictqc1PqtH6n/Kl0sL5GIrE3o4FFsulnJUweEvrHWVhhTbLSfq/fFYa/tb2 y/Q4CnLD1D6Pn21fCjOqxgYHyP4pLkhe1+K7R4a1WROSBPqUICk= -----END CERTIFICATE-----Generated at Mon Oct 20 10:06:28 2025 by rpki-client