$ rpki-client -vvf repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft File: D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft (raw, json) Hash identifier: C7xP9mLW0f0ZLWDeWloQ84bvVQ2oO+I6vaQLLHefX4U= Subject key identifier: D1:22:75:A9:38:EC:60:3C:AF:DB:48:3F:C3:DF:6C:88:87:1B:C1:01 Authority key identifier: D7:F2:3D:7B:54:89:0F:0E:EC:F5:50:FF:A4:27:99:B6:4D:9B:D4:C9 Certificate issuer: /CN=D7F23D7B54890F0EECF550FFA42799B64D9BD4C9 Certificate serial: 3351215E4E643A6649D5FB688D4C34A984013E5E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft Manifest number: F9 Signing time: Sat 23 Aug 2025 07:51:19 +0000 Manifest this update: Sat 23 Aug 2025 07:46:19 +0000 Manifest next update: Tue 26 Aug 2025 12:27:19 +0000 Files and hashes: 1: D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.crl (hash: a/BDLPfN2uvd9q9Y97l9BxHew8rS8xuldWbCSF8+rus=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.crl rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 12:27:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:51:21:5e:4e:64:3a:66:49:d5:fb:68:8d:4c:34:a9:84:01:3e:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7F23D7B54890F0EECF550FFA42799B64D9BD4C9 Validity Not Before: Aug 23 07:46:19 2025 GMT Not After : Aug 26 12:27:19 2025 GMT Subject: CN=D12275A938EC603CAFDB483FC3DF6C88871BC101 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:02:ea:da:a4:d5:97:c9:1a:75:da:dd:72:8c: 3b:2a:4d:c8:cf:fa:9e:25:7f:76:f7:8c:c5:48:22: 09:80:72:5a:f0:75:72:2b:c4:f1:1d:6b:1d:6f:2b: ff:76:fd:07:33:a7:2d:a2:52:ce:38:d4:7b:11:a0: 35:a3:db:17:9c:78:e4:4a:dd:11:1c:3a:b7:3e:5d: 21:01:06:7c:a4:0d:00:d1:42:83:9d:d8:c7:35:5e: 9c:72:46:b4:cf:45:78:c3:e2:e8:63:97:ff:0b:04: dd:ea:ae:93:97:f8:4d:97:32:fa:5e:a5:40:a6:0b: e7:8e:3c:e2:f0:cd:8e:b2:e7:71:b8:e1:16:40:f9: 4c:29:d1:f1:35:68:3d:90:f8:13:d2:74:75:b4:bd: 2b:53:fe:72:e9:36:a5:97:54:ac:fa:13:62:20:9f: 4c:44:74:2c:05:9e:94:68:f8:9c:c2:cd:7c:9b:48: 62:2a:55:bb:05:64:41:98:b5:17:f6:80:78:03:78: 3a:1d:40:d5:0e:47:98:7e:af:c3:cc:7f:f6:ec:d1: 00:cf:b1:05:5c:4a:25:d7:f4:66:a7:61:85:e1:1e: e3:9f:56:4e:9a:fc:d5:0e:6c:3e:a6:8d:88:13:0f: 36:9a:dc:a7:e9:2f:d7:5b:ba:05:1e:05:a5:58:8b: 0f:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:22:75:A9:38:EC:60:3C:AF:DB:48:3F:C3:DF:6C:88:87:1B:C1:01 X509v3 Authority Key Identifier: keyid:D7:F2:3D:7B:54:89:0F:0E:EC:F5:50:FF:A4:27:99:B6:4D:9B:D4:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:34:2c:87:02:d7:ed:e0:78:51:84:7d:db:c9:c3:d8:71:57: 7a:c0:4d:12:80:b8:80:09:dd:f3:9e:76:f0:a8:0b:3b:9e:71: 3b:de:41:75:1c:ed:57:79:d9:75:f7:97:35:08:e6:a3:8c:5f: 61:11:0a:51:79:2f:ee:73:1e:8e:3c:4d:89:1d:b7:a4:df:41: cb:97:1e:53:fb:88:89:71:85:d3:b7:1e:8a:8a:23:8f:54:87: 7c:7e:79:59:a7:fb:a0:21:22:4b:11:69:12:68:3c:22:5c:2e: 3b:e6:da:1d:f8:fd:2c:44:d3:da:0d:5d:63:6a:3f:15:d5:6c: 31:44:ed:13:4e:6b:a5:51:a3:ba:60:78:1b:c0:42:66:9c:e0: 57:7b:83:66:f7:2a:12:51:c3:3f:ae:dc:6f:40:b8:5a:11:61: a0:38:03:e1:df:00:82:c5:04:25:31:f1:e4:75:a3:22:49:88: c6:4c:61:54:01:2f:81:ca:48:f4:80:23:b9:d0:7c:14:8e:9e: 25:4a:31:92:4b:b8:75:ab:da:5b:6e:e8:18:b2:ee:7f:99:0e: 7f:de:f2:0b:2d:2c:0e:a1:ef:d9:36:75:20:8f:c7:6e:5d:ad: 2e:3f:c4:5f:11:14:0d:50:f6:38:97:d3:07:2c:90:21:60:1d: 2d:df:ff:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM1EhXk5kOmZJ1ftojUw0qYQBPl4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdGMjNEN0I1NDg5MEYwRUVDRjU1MEZGQTQyNzk5QjY0 RDlCRDRDOTAeFw0yNTA4MjMwNzQ2MTlaFw0yNTA4MjYxMjI3MTlaMDMxMTAvBgNV BAMTKEQxMjI3NUE5MzhFQzYwM0NBRkRCNDgzRkMzREY2Qzg4ODcxQkMxMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCAurapNWXyRp12t1yjDsqTcjP +p4lf3b3jMVIIgmAclrwdXIrxPEdax1vK/92/Qczpy2iUs441HsRoDWj2xeceORK 3REcOrc+XSEBBnykDQDRQoOd2Mc1XpxyRrTPRXjD4uhjl/8LBN3qrpOX+E2XMvpe pUCmC+eOPOLwzY6y53G44RZA+Uwp0fE1aD2Q+BPSdHW0vStT/nLpNqWXVKz6E2Ig n0xEdCwFnpRo+JzCzXybSGIqVbsFZEGYtRf2gHgDeDodQNUOR5h+r8PMf/bs0QDP sQVcSiXX9GanYYXhHuOfVk6a/NUObD6mjYgTDzaa3KfpL9dbugUeBaVYiw+vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0SJ1qTjsYDyv20g/w99siIcbwQEwHwYDVR0j BBgwFoAU1/I9e1SJDw7s9VD/pCeZtk2b1MkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Yjk4NTFiMS01YTZkLTRlNzUtOWZmZi1jMDNhOWM0OWNmNjkvMC9EN0YyM0Q3QjU0 ODkwRjBFRUNGNTUwRkZBNDI3OTlCNjREOUJENEM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDdGMjNEN0I1NDg5MEYwRUVDRjU1MEZGQTQyNzk5QjY0RDlC RDRDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmI5ODUxYjEtNWE2ZC00ZTc1LTlm ZmYtYzAzYTljNDljZjY5LzAvRDdGMjNEN0I1NDg5MEYwRUVDRjU1MEZGQTQyNzk5 QjY0RDlCRDRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALw0LIcC1+3geFGEfdvJw9hxV3rATRKAuIAJ 3fOedvCoCzuecTveQXUc7Vd52XX3lzUI5qOMX2ERClF5L+5zHo48TYkdt6TfQcuX HlP7iIlxhdO3HoqKI49Uh3x+eVmn+6AhIksRaRJoPCJcLjvm2h34/SxE09oNXWNq PxXVbDFE7RNOa6VRo7pgeBvAQmac4Fd7g2b3KhJRwz+u3G9AuFoRYaA4A+HfAILF BCUx8eR1oyJJiMZMYVQBL4HKSPSAI7nQfBSOniVKMZJLuHWr2ltu6Biy7n+ZDn/e 8gstLA6h79k2dSCPx25drS4/xF8RFA1Q9jiX0wcskCFgHS3f/4I= -----END CERTIFICATE-----Generated at Sat Aug 23 15:50:58 2025 by rpki-client