$ rpki-client -vvf repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft File: 9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft (raw, json) Hash identifier: oMtH456alxAbvw2pE/IeugYJVvn10sY/xXctqRSQGg8= Subject key identifier: 12:A4:D2:92:BF:48:48:83:4F:12:2F:7D:A0:D4:9D:BD:4C:BD:02:3A Authority key identifier: 9F:64:F1:24:BC:CF:26:E2:26:CC:EA:CE:01:1C:CF:BB:F2:4A:86:87 Certificate issuer: /CN=9F64F124BCCF26E226CCEACE011CCFBBF24A8687 Certificate serial: 585D225E6FBFC96A33B9A8D2276A62F250434661 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft Manifest number: 0117 Signing time: Tue 05 Aug 2025 03:42:17 +0000 Manifest this update: Tue 05 Aug 2025 03:37:17 +0000 Manifest next update: Fri 08 Aug 2025 13:47:17 +0000 Files and hashes: 1: 9F64F124BCCF26E226CCEACE011CCFBBF24A8687.crl (hash: 6vVX31PNddR7hv4Iy3GHUAIjVKDq3Npw+ItOMbw3dSM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.crl rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 13:47:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:5d:22:5e:6f:bf:c9:6a:33:b9:a8:d2:27:6a:62:f2:50:43:46:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F64F124BCCF26E226CCEACE011CCFBBF24A8687 Validity Not Before: Aug 5 03:37:17 2025 GMT Not After : Aug 8 13:47:17 2025 GMT Subject: CN=12A4D292BF4848834F122F7DA0D49DBD4CBD023A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:0b:72:3a:40:66:38:a5:9f:0f:33:12:df:14: e7:0d:13:c4:17:a5:4b:d2:1d:ef:f8:d0:75:c2:df: 8c:35:08:7d:67:ad:d7:5c:44:75:2c:67:ff:28:ca: 2f:fd:e8:dd:d3:3d:a5:0f:a3:72:ba:da:a3:a0:d9: 5e:3a:8d:7f:c8:03:73:3a:b8:96:93:eb:1c:33:30: 8e:29:fc:e8:7d:fd:ba:93:6d:71:56:d4:e4:fd:be: 57:ef:b9:f9:7b:8f:15:24:86:22:85:5d:38:2d:c9: 27:39:7d:3c:f5:d3:b7:60:20:a2:fc:d4:f5:d5:79: 44:14:0c:e4:c5:4e:89:67:a7:ca:e0:b7:ec:aa:b9: dd:5f:f8:90:e6:0f:50:7d:7b:cc:28:96:79:ab:cf: 4e:ed:fb:9e:24:ec:f2:3b:66:90:0c:53:20:6e:70: 05:48:85:52:a7:84:bf:12:9e:0c:f5:7d:9d:15:43: b1:df:02:6b:68:72:95:c6:27:86:5a:db:98:99:8a: 46:8e:5c:17:95:6c:3c:4a:03:45:c3:59:f8:2e:56: 06:3d:f2:d9:ba:8b:f7:ff:7f:b0:a6:f9:9f:43:b5: c2:2c:05:85:d1:fd:96:1b:00:5a:aa:f1:b3:46:80: 63:a0:a3:a7:df:8a:2b:b6:1e:a3:2c:a3:f0:7c:59: ed:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:A4:D2:92:BF:48:48:83:4F:12:2F:7D:A0:D4:9D:BD:4C:BD:02:3A X509v3 Authority Key Identifier: keyid:9F:64:F1:24:BC:CF:26:E2:26:CC:EA:CE:01:1C:CF:BB:F2:4A:86:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:49:f7:db:29:84:14:52:06:92:85:d6:db:5a:31:82:22:b4: 80:c2:01:fa:c6:71:57:4a:02:7d:2d:b5:8a:e9:a2:13:15:af: 12:25:47:75:cf:69:3f:a3:76:7b:ee:ed:5b:e7:8b:9c:67:64: 9d:90:be:a4:c2:1a:ca:94:f7:fc:16:23:33:8b:b6:c1:66:34: 61:b5:1a:ed:0b:a5:1a:de:0b:e9:96:44:16:81:3b:8d:8a:a7: 22:eb:f1:9a:dc:e5:88:e4:4b:71:67:c8:4b:b9:59:6f:6a:86: 82:a4:f1:68:4c:a3:c9:26:3a:fb:4d:d2:37:b1:03:87:fc:78: 08:0a:30:f2:e4:bc:f2:0d:ff:77:a2:9f:83:63:0d:a1:27:aa: 01:f8:cf:36:f7:49:72:4b:20:1f:06:22:97:96:36:12:98:3d: 75:98:d0:73:42:5b:d7:e1:24:da:4a:f6:95:9a:cf:81:59:a6: 46:59:4e:f4:b5:f8:15:c8:4b:56:80:5e:09:20:d3:22:0d:01: 94:9d:4f:4d:41:df:f7:9a:97:ee:a5:7a:da:7e:86:78:67:f7: ef:17:71:13:8a:83:ca:35:20:28:95:4e:b2:8b:52:16:e5:3b: 61:f7:95:80:64:c3:f3:93:13:40:a8:99:56:b6:dc:6c:f6:03: f3:9a:fb:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWF0iXm+/yWozuajSJ2pi8lBDRmEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY2NEYxMjRCQ0NGMjZFMjI2Q0NFQUNFMDExQ0NGQkJG MjRBODY4NzAeFw0yNTA4MDUwMzM3MTdaFw0yNTA4MDgxMzQ3MTdaMDMxMTAvBgNV BAMTKDEyQTREMjkyQkY0ODQ4ODM0RjEyMkY3REEwRDQ5REJENENCRDAyM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPC3I6QGY4pZ8PMxLfFOcNE8QX pUvSHe/40HXC34w1CH1nrddcRHUsZ/8oyi/96N3TPaUPo3K62qOg2V46jX/IA3M6 uJaT6xwzMI4p/Oh9/bqTbXFW1OT9vlfvufl7jxUkhiKFXTgtySc5fTz107dgIKL8 1PXVeUQUDOTFTolnp8rgt+yqud1f+JDmD1B9e8wolnmrz07t+54k7PI7ZpAMUyBu cAVIhVKnhL8Sngz1fZ0VQ7HfAmtocpXGJ4Za25iZikaOXBeVbDxKA0XDWfguVgY9 8tm6i/f/f7Cm+Z9DtcIsBYXR/ZYbAFqq8bNGgGOgo6ffiiu2HqMso/B8We0BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEqTSkr9ISINPEi99oNSdvUy9AjowHwYDVR0j BBgwFoAUn2TxJLzPJuImzOrOARzPu/JKhocwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZjI4NmYwYy0wZmNkLTQzOWMtOGRmZS04MDY1YzkxNzg5MDEvMC85RjY0RjEyNEJD Q0YyNkUyMjZDQ0VBQ0UwMTFDQ0ZCQkYyNEE4Njg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY2NEYxMjRCQ0NGMjZFMjI2Q0NFQUNFMDExQ0NGQkJGMjRB ODY4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWYyODZmMGMtMGZjZC00MzljLThk ZmUtODA2NWM5MTc4OTAxLzAvOUY2NEYxMjRCQ0NGMjZFMjI2Q0NFQUNFMDExQ0NG QkJGMjRBODY4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABlJ99sphBRSBpKF1ttaMYIitIDCAfrGcVdK An0ttYrpohMVrxIlR3XPaT+jdnvu7Vvni5xnZJ2QvqTCGsqU9/wWIzOLtsFmNGG1 Gu0LpRreC+mWRBaBO42KpyLr8Zrc5YjkS3FnyEu5WW9qhoKk8WhMo8kmOvtN0jex A4f8eAgKMPLkvPIN/3ein4NjDaEnqgH4zzb3SXJLIB8GIpeWNhKYPXWY0HNCW9fh JNpK9pWaz4FZpkZZTvS1+BXIS1aAXgkg0yINAZSdT01B3/eal+6letp+hnhn9+8X cROKg8o1ICiVTrKLUhblO2H3lYBkw/OTE0ComVa23Gz2A/Oa+70= -----END CERTIFICATE-----Generated at Thu Aug 7 00:27:05 2025 by rpki-client