$ rpki-client -vvf repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft File: 901FA7FD9132963972C91517CDC7E5EE9077E078.mft (raw, json) Hash identifier: oH3/TlJN+EwZ1ynfuAbu5O+yS7BrSCK60AEjHblAkQ4= Subject key identifier: C8:3D:5D:9C:C4:4B:CA:42:3A:EC:08:1C:76:DC:7C:BE:B8:EA:47:48 Authority key identifier: 90:1F:A7:FD:91:32:96:39:72:C9:15:17:CD:C7:E5:EE:90:77:E0:78 Certificate issuer: /CN=901FA7FD9132963972C91517CDC7E5EE9077E078 Certificate serial: 01E77283777E31CCD29AEEE6C1B1FF150582548E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/901FA7FD9132963972C91517CDC7E5EE9077E078.cer Subject info access: rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft Manifest number: 011C Signing time: Wed 06 Aug 2025 10:30:47 +0000 Manifest this update: Wed 06 Aug 2025 10:25:47 +0000 Manifest next update: Sat 09 Aug 2025 12:18:47 +0000 Files and hashes: 1: 901FA7FD9132963972C91517CDC7E5EE9077E078.crl (hash: +3kwXzq0NoZ9SssbZ5P9GHOrhuvwv3P2ZeGbRDOZroA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.crl rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/901FA7FD9132963972C91517CDC7E5EE9077E078.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 12:18:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:e7:72:83:77:7e:31:cc:d2:9a:ee:e6:c1:b1:ff:15:05:82:54:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=901FA7FD9132963972C91517CDC7E5EE9077E078 Validity Not Before: Aug 6 10:25:47 2025 GMT Not After : Aug 9 12:18:47 2025 GMT Subject: CN=C83D5D9CC44BCA423AEC081C76DC7CBEB8EA4748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3b:c5:d4:dd:83:05:2b:53:b8:3d:7f:cd:a1: 49:43:ca:2a:cf:b0:c1:14:77:67:ed:c2:a4:d4:13: e4:45:60:6d:7e:d7:ac:9b:55:46:1f:f8:bf:72:e4: ce:23:58:7d:e5:bc:6d:83:e9:8a:8e:a2:bb:12:51: ce:9f:1c:34:6d:da:ee:8e:52:c6:51:17:23:0c:eb: d8:04:3f:74:c0:08:8b:87:ba:70:3f:3c:c1:7c:e5: f0:a1:c3:51:46:75:7b:52:a1:48:18:1e:19:28:8d: 08:1c:eb:c3:fc:d5:7b:de:27:68:68:87:ce:7d:55: a2:67:1e:6a:14:29:2b:9c:20:45:0c:98:68:b4:38: e7:9d:cc:4e:0b:16:d3:a3:6e:21:b1:d3:e1:b9:61: 3d:cf:99:61:87:11:00:14:38:91:93:e7:24:41:62: df:94:7c:09:8a:6b:56:45:29:fa:59:ca:7e:31:33: 94:48:a2:aa:4b:c8:06:76:b5:20:e5:a8:cc:d1:23: b6:c3:f8:41:22:2d:18:5f:83:04:43:0a:fc:16:ed: 09:cc:5b:4e:99:ba:5b:ef:ab:99:2b:a9:96:e1:98: cb:74:f6:a2:8b:a8:2c:7a:5e:2e:36:25:b7:a0:d9: 9b:00:24:26:dc:40:c3:2c:94:49:50:d2:1a:a6:a3: 3c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:3D:5D:9C:C4:4B:CA:42:3A:EC:08:1C:76:DC:7C:BE:B8:EA:47:48 X509v3 Authority Key Identifier: keyid:90:1F:A7:FD:91:32:96:39:72:C9:15:17:CD:C7:E5:EE:90:77:E0:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/901FA7FD9132963972C91517CDC7E5EE9077E078.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:c9:6a:47:f2:7b:f4:5a:4c:9d:10:65:dd:83:c7:16:e6:09: 9d:ca:76:13:37:29:3e:9d:2c:d8:fd:de:7b:a5:41:fe:a2:dc: 3c:7a:64:40:2a:8c:27:45:4e:f1:c3:34:88:37:0f:fd:72:82: b6:33:65:43:c8:cb:98:89:e1:4d:1c:cf:c9:47:58:4d:f8:53: 3d:b1:d5:b3:7f:b9:60:bd:cf:0b:b0:0f:6e:60:4a:6e:91:4b: ef:96:00:b3:3b:1a:14:55:80:67:90:4a:de:6a:e9:70:d1:4f: 81:9f:4e:69:1c:cb:11:a1:1a:58:1f:e1:d6:67:ea:00:b6:5b: 5a:fa:82:7c:5b:b3:6e:0b:92:3c:c4:51:8b:65:80:e1:fd:b8: 02:97:32:0a:dd:ee:be:b5:a1:d2:e2:d4:8f:a4:6f:00:e1:9e: d1:84:c4:9e:3c:6d:df:b2:4d:d3:ea:81:d2:1c:ee:ab:3d:74: 2a:fe:a4:29:a9:d3:ff:35:77:95:8b:a8:10:e9:fe:5d:b2:a7: 74:ff:51:97:ba:f3:15:68:57:ce:86:8c:42:99:2d:14:94:1f: 83:58:91:00:90:44:5f:83:0d:a6:56:cc:50:b7:e3:c4:40:2e: 61:48:94:01:48:ab:48:4d:e0:c1:d9:57:0f:f7:cd:74:1c:1c: 98:44:b5:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAedyg3d+MczSmu7mwbH/FQWCVI4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTAxRkE3RkQ5MTMyOTYzOTcyQzkxNTE3Q0RDN0U1RUU5 MDc3RTA3ODAeFw0yNTA4MDYxMDI1NDdaFw0yNTA4MDkxMjE4NDdaMDMxMTAvBgNV BAMTKEM4M0Q1RDlDQzQ0QkNBNDIzQUVDMDgxQzc2REM3Q0JFQjhFQTQ3NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+O8XU3YMFK1O4PX/NoUlDyirP sMEUd2ftwqTUE+RFYG1+16ybVUYf+L9y5M4jWH3lvG2D6YqOorsSUc6fHDRt2u6O UsZRFyMM69gEP3TACIuHunA/PMF85fChw1FGdXtSoUgYHhkojQgc68P81XveJ2ho h859VaJnHmoUKSucIEUMmGi0OOedzE4LFtOjbiGx0+G5YT3PmWGHEQAUOJGT5yRB Yt+UfAmKa1ZFKfpZyn4xM5RIoqpLyAZ2tSDlqMzRI7bD+EEiLRhfgwRDCvwW7QnM W06Zulvvq5krqZbhmMt09qKLqCx6Xi42Jbeg2ZsAJCbcQMMslElQ0hqmozz3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyD1dnMRLykI67Agcdtx8vrjqR0gwHwYDVR0j BBgwFoAUkB+n/ZEyljlyyRUXzcfl7pB34HgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODBhOGRmZC1hNjc5LTQ0NGEtYjlhOC02ZTNjYjQ4MWEwNzkvMC85MDFGQTdGRDkx MzI5NjM5NzJDOTE1MTdDREM3RTVFRTkwNzdFMDc4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTAxRkE3RkQ5MTMyOTYzOTcyQzkxNTE3Q0RDN0U1RUU5MDc3 RTA3OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjgwYThkZmQtYTY3OS00NDRhLWI5 YTgtNmUzY2I0ODFhMDc5LzAvOTAxRkE3RkQ5MTMyOTYzOTcyQzkxNTE3Q0RDN0U1 RUU5MDc3RTA3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHnJakfye/RaTJ0QZd2DxxbmCZ3KdhM3KT6d LNj93nulQf6i3Dx6ZEAqjCdFTvHDNIg3D/1ygrYzZUPIy5iJ4U0cz8lHWE34Uz2x 1bN/uWC9zwuwD25gSm6RS++WALM7GhRVgGeQSt5q6XDRT4GfTmkcyxGhGlgf4dZn 6gC2W1r6gnxbs24LkjzEUYtlgOH9uAKXMgrd7r61odLi1I+kbwDhntGExJ48bd+y TdPqgdIc7qs9dCr+pCmp0/81d5WLqBDp/l2yp3T/UZe68xVoV86GjEKZLRSUH4NY kQCQRF+DDaZWzFC348RALmFIlAFIq0hN4MHZVw/3zXQcHJhEtSk= -----END CERTIFICATE-----Generated at Thu Aug 7 00:32:20 2025 by rpki-client