$ rpki-client -vvf repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft File: 9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft (raw, json) Hash identifier: SbaIW/xmZJSVWf3S4Ocq8Npq59YAmfQE1bgNllOd7sw= Subject key identifier: DF:18:2D:04:BD:A3:AB:FB:D2:F9:4A:68:80:B5:4E:F4:DA:BA:7D:0C Authority key identifier: 94:79:B8:C5:D5:AE:8F:AB:DC:57:A9:AB:54:9A:DD:E2:0B:E8:A4:B3 Certificate issuer: /CN=9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3 Certificate serial: 730BFF7779E0EBE6D8EA53F0AFDB007D7E136A58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft Manifest number: 01E8 Signing time: Fri 22 Aug 2025 07:02:05 +0000 Manifest this update: Fri 22 Aug 2025 06:57:05 +0000 Manifest next update: Mon 25 Aug 2025 14:12:05 +0000 Files and hashes: 1: 9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.crl (hash: azU7Usx4+qbea+RYvkr+gdZSSHATapZU9yAm8b3Zf4I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.crl rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 14:12:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:0b:ff:77:79:e0:eb:e6:d8:ea:53:f0:af:db:00:7d:7e:13:6a:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3 Validity Not Before: Aug 22 06:57:05 2025 GMT Not After : Aug 25 14:12:05 2025 GMT Subject: CN=DF182D04BDA3ABFBD2F94A6880B54EF4DABA7D0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a2:6e:00:b0:3a:79:cf:32:30:62:fd:ba:33: ba:4d:b3:81:15:03:1b:c8:e6:10:0d:1e:af:b2:e5: 74:ec:4d:f9:30:a7:cb:1b:de:95:40:a9:5d:23:f6: 62:eb:ca:d1:cb:e5:db:6c:f9:50:d0:27:54:6d:44: 46:ee:4d:e1:d1:fd:38:5f:96:74:51:21:be:51:01: b2:b4:fb:3f:ac:e3:f8:54:bc:77:17:50:d9:68:45: 43:d8:a9:52:37:06:87:53:b2:4a:c4:dd:8b:9e:15: bf:02:68:22:52:42:e5:1c:4f:7c:69:1b:21:1a:39: 0e:d2:36:31:0d:bc:91:09:c3:34:38:ab:5d:c4:10: 69:f2:cb:6a:3e:4f:48:2e:02:64:0e:17:43:83:57: 07:59:f4:14:ce:95:e9:f8:20:61:09:9b:03:9a:30: 0d:1a:a9:ad:33:06:93:da:14:48:27:c4:25:b2:4f: 90:28:53:64:81:8a:be:7d:20:b0:00:29:53:9f:29: 94:45:28:b3:6a:cc:a3:fc:8c:85:9a:35:34:31:97: 97:39:70:00:a8:84:c2:70:13:8b:05:ce:9d:13:f7: cd:26:b7:73:4b:41:40:ec:c0:5e:3f:d8:2f:9e:5f: 34:c8:81:b0:12:2b:07:65:c2:1b:0a:33:ea:bf:a5: 30:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:18:2D:04:BD:A3:AB:FB:D2:F9:4A:68:80:B5:4E:F4:DA:BA:7D:0C X509v3 Authority Key Identifier: keyid:94:79:B8:C5:D5:AE:8F:AB:DC:57:A9:AB:54:9A:DD:E2:0B:E8:A4:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:dc:a8:4b:3c:64:84:d2:f2:d8:59:c0:a0:53:4e:9f:d0:68: 02:56:6f:e7:f1:c9:57:f3:cb:e4:1f:df:a4:0c:47:f7:84:7e: b7:22:60:76:d5:eb:0f:19:13:f9:4e:8e:7a:ca:93:e7:c1:f7: ed:22:f2:dd:e3:55:42:60:51:29:9a:96:42:4b:2a:d0:0c:5d: 11:4f:30:71:84:a1:d0:d9:6c:74:d5:86:48:17:c0:12:26:ab: 13:27:58:2a:78:5e:69:7b:6e:aa:75:ae:5e:37:b3:f5:a5:96: 83:9d:f2:91:ad:28:75:06:74:dd:e7:e8:4e:e7:65:71:fe:ac: 68:c7:9f:d9:a9:52:cd:fc:29:54:a5:0e:50:15:b1:f9:8d:96: 19:c6:f6:05:c2:ec:f9:95:2b:7c:09:57:6b:4e:a7:4e:c9:c5: 56:ff:5e:c8:5e:0a:ba:4c:1f:ba:ae:d1:ec:5a:1f:1e:13:cb: f1:ef:e2:d0:ae:67:6f:44:77:62:0a:1c:e6:f4:c3:c1:b1:f9: f9:cc:36:93:c0:91:e3:cb:ac:f5:cf:6d:8b:68:54:5d:ed:d4: 0d:c7:b2:d2:37:63:f0:35:98:01:d1:e0:cc:60:de:a7:3b:8b: c8:82:00:fb:01:71:b2:48:6f:f4:b0:3f:50:67:69:0d:8c:1a: ce:0b:e7:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcwv/d3ng6+bY6lPwr9sAfX4TalgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ3OUI4QzVENUFFOEZBQkRDNTdBOUFCNTQ5QURERTIw QkU4QTRCMzAeFw0yNTA4MjIwNjU3MDVaFw0yNTA4MjUxNDEyMDVaMDMxMTAvBgNV BAMTKERGMTgyRDA0QkRBM0FCRkJEMkY5NEE2ODgwQjU0RUY0REFCQTdEMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaom4AsDp5zzIwYv26M7pNs4EV AxvI5hANHq+y5XTsTfkwp8sb3pVAqV0j9mLrytHL5dts+VDQJ1RtREbuTeHR/Thf lnRRIb5RAbK0+z+s4/hUvHcXUNloRUPYqVI3BodTskrE3YueFb8CaCJSQuUcT3xp GyEaOQ7SNjENvJEJwzQ4q13EEGnyy2o+T0guAmQOF0ODVwdZ9BTOlen4IGEJmwOa MA0aqa0zBpPaFEgnxCWyT5AoU2SBir59ILAAKVOfKZRFKLNqzKP8jIWaNTQxl5c5 cACohMJwE4sFzp0T980mt3NLQUDswF4/2C+eXzTIgbASKwdlwhsKM+q/pTBVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3xgtBL2jq/vS+UpogLVO9Nq6fQwwHwYDVR0j BBgwFoAUlHm4xdWuj6vcV6mrVJrd4gvopLMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTBhYTE1OC02NTgxLTRjYmUtYjZjZS1kODcyMWM3MTlmYTAvMC85NDc5QjhDNUQ1 QUU4RkFCREM1N0E5QUI1NDlBRERFMjBCRThBNEIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTQ3OUI4QzVENUFFOEZBQkRDNTdBOUFCNTQ5QURERTIwQkU4 QTRCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTkwYWExNTgtNjU4MS00Y2JlLWI2 Y2UtZDg3MjFjNzE5ZmEwLzAvOTQ3OUI4QzVENUFFOEZBQkRDNTdBOUFCNTQ5QURE RTIwQkU4QTRCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJXcqEs8ZITS8thZwKBTTp/QaAJWb+fxyVfz y+Qf36QMR/eEfrciYHbV6w8ZE/lOjnrKk+fB9+0i8t3jVUJgUSmalkJLKtAMXRFP MHGEodDZbHTVhkgXwBImqxMnWCp4Xml7bqp1rl43s/WlloOd8pGtKHUGdN3n6E7n ZXH+rGjHn9mpUs38KVSlDlAVsfmNlhnG9gXC7PmVK3wJV2tOp07JxVb/XsheCrpM H7qu0exaHx4Ty/Hv4tCuZ29Ed2IKHOb0w8Gx+fnMNpPAkePLrPXPbYtoVF3t1A3H stI3Y/A1mAHR4Mxg3qc7i8iCAPsBcbJIb/SwP1BnaQ2MGs4L58w= -----END CERTIFICATE-----Generated at Sat Aug 23 13:59:24 2025 by rpki-client