$ rpki-client -vvf repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft File: 9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft (raw, json) Hash identifier: 03EiPXWepTIS2EMoPbOwRAUft7TOPXbxAalwt6AHhCs= Subject key identifier: B1:F5:85:12:7E:E8:B5:58:FC:B4:0C:B8:C3:F0:FA:EF:41:44:F6:D9 Authority key identifier: 9F:0F:0B:61:BB:6A:FA:ED:E5:A1:E7:59:1E:D4:84:13:13:DF:D6:FF Certificate issuer: /CN=9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF Certificate serial: 2EE7C2E0AC49783635B81D658F8E0A342075FB37 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft Manifest number: 01AB Signing time: Sat 14 Jun 2025 08:41:53 +0000 Manifest this update: Sat 14 Jun 2025 08:36:53 +0000 Manifest next update: Tue 17 Jun 2025 13:15:53 +0000 Files and hashes: 1: 9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.crl (hash: Klr7vAJ555HxCjGIjOn0xq0RSFxxezxQSLd6gyR9BoY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.crl rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 13:15:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:e7:c2:e0:ac:49:78:36:35:b8:1d:65:8f:8e:0a:34:20:75:fb:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF Validity Not Before: Jun 14 08:36:53 2025 GMT Not After : Jun 17 13:15:53 2025 GMT Subject: CN=B1F585127EE8B558FCB40CB8C3F0FAEF4144F6D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:82:b3:63:8d:0f:ba:12:cc:01:70:ff:52:d5: c7:1b:2b:a0:72:1b:b8:9f:8f:93:9a:4b:c7:9b:29: e5:4f:56:55:79:38:a3:04:1c:07:27:f8:80:64:4f: 97:c2:80:2e:9e:65:cb:cb:bb:10:0a:60:0b:8c:ec: 77:c9:3d:ae:58:cf:54:d6:1f:77:24:03:70:ea:b4: 81:cc:14:00:6e:91:d2:f9:9f:f7:2f:ae:93:8e:26: 64:82:e4:79:a5:b7:2c:51:03:7d:3e:43:2e:ef:94: c6:f7:31:9d:df:4b:6c:5e:8f:d2:25:eb:2d:16:29: cb:fe:8d:83:40:7d:b7:fa:8b:eb:61:dd:ff:5d:60: b2:a6:45:26:7a:cd:d6:1e:d7:79:1a:cd:57:42:51: a2:25:b4:ad:d1:ac:df:b5:6c:c7:d9:de:92:18:08: 07:0a:c8:22:72:20:0a:23:74:13:61:6b:d6:46:60: f0:af:6c:f4:db:85:4c:95:4d:7e:64:04:47:2e:0b: 9e:6e:60:7c:82:4c:14:41:c7:97:bd:87:41:c0:80: 64:fd:d6:b4:22:ab:4d:52:ab:ee:6f:41:ae:70:30: 64:a3:33:a6:da:98:4d:de:e3:16:3d:a9:c6:ad:79: e8:75:b5:f7:6a:ab:9e:fc:b6:98:ee:b8:ef:99:fd: cd:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:F5:85:12:7E:E8:B5:58:FC:B4:0C:B8:C3:F0:FA:EF:41:44:F6:D9 X509v3 Authority Key Identifier: keyid:9F:0F:0B:61:BB:6A:FA:ED:E5:A1:E7:59:1E:D4:84:13:13:DF:D6:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:8c:62:c9:40:5f:4e:f2:b2:39:ca:94:f8:18:24:bd:b5:65: 7b:22:ca:7d:b4:fe:79:e1:c7:13:e4:92:5f:36:38:97:37:45: e2:23:b3:f6:47:01:8a:39:dd:79:69:a3:4e:79:10:fe:be:35: 66:1c:7d:99:9b:78:1b:41:8e:b6:ba:3f:4f:6c:a2:96:8b:7f: b7:19:47:4d:ac:10:fe:a0:2a:94:35:9f:e4:0c:5f:a2:7a:c8: 0b:ba:79:62:5d:c1:36:e6:8f:5b:84:bb:d8:4f:c8:ce:95:d1: 48:71:1d:3b:7a:91:fd:83:13:92:0e:4c:84:eb:77:f1:25:e3: 2d:7e:b2:ba:52:58:3b:26:d7:9d:bb:9b:06:ea:01:58:d5:11: 74:cd:b3:42:04:6d:fa:ee:3a:b8:96:27:6a:03:e1:32:d6:eb: fd:76:ab:7f:39:f0:af:ee:40:73:20:3e:f4:c5:56:89:24:59: 6f:d2:fb:68:14:02:c4:be:75:6c:5b:4c:81:b5:49:65:42:7b: 97:e3:74:52:f4:46:ae:25:6a:1a:41:d3:d6:ae:51:77:72:fb: 43:c5:95:ec:ab:a5:da:97:ab:18:64:9b:63:d0:69:67:f3:de: c0:f3:b7:e7:fa:5c:7e:e6:aa:39:ae:9e:ec:72:64:15:89:26: d0:cf:3e:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULufC4KxJeDY1uB1lj44KNCB1+zcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYwRjBCNjFCQjZBRkFFREU1QTFFNzU5MUVENDg0MTMx M0RGRDZGRjAeFw0yNTA2MTQwODM2NTNaFw0yNTA2MTcxMzE1NTNaMDMxMTAvBgNV BAMTKEIxRjU4NTEyN0VFOEI1NThGQ0I0MENCOEMzRjBGQUVGNDE0NEY2RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHgrNjjQ+6EswBcP9S1ccbK6By G7ifj5OaS8ebKeVPVlV5OKMEHAcn+IBkT5fCgC6eZcvLuxAKYAuM7HfJPa5Yz1TW H3ckA3DqtIHMFABukdL5n/cvrpOOJmSC5HmltyxRA30+Qy7vlMb3MZ3fS2xej9Il 6y0WKcv+jYNAfbf6i+th3f9dYLKmRSZ6zdYe13kazVdCUaIltK3RrN+1bMfZ3pIY CAcKyCJyIAojdBNha9ZGYPCvbPTbhUyVTX5kBEcuC55uYHyCTBRBx5e9h0HAgGT9 1rQiq01Sq+5vQa5wMGSjM6bamE3e4xY9qcateeh1tfdqq578tpjuuO+Z/c0BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsfWFEn7otVj8tAy4w/D670FE9tkwHwYDVR0j BBgwFoAUnw8LYbtq+u3loedZHtSEExPf1v8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MGYyNDczMy1lOGRhLTQyYzgtODQ2Yi1lNzk0ZTFiNDM5ZGEvMC85RjBGMEI2MUJC NkFGQUVERTVBMUU3NTkxRUQ0ODQxMzEzREZENkZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUYwRjBCNjFCQjZBRkFFREU1QTFFNzU5MUVENDg0MTMxM0RG RDZGRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDBmMjQ3MzMtZThkYS00MmM4LTg0 NmItZTc5NGUxYjQzOWRhLzAvOUYwRjBCNjFCQjZBRkFFREU1QTFFNzU5MUVENDg0 MTMxM0RGRDZGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG6MYslAX07ysjnKlPgYJL21ZXsiyn20/nnh xxPkkl82OJc3ReIjs/ZHAYo53Xlpo055EP6+NWYcfZmbeBtBjra6P09sopaLf7cZ R02sEP6gKpQ1n+QMX6J6yAu6eWJdwTbmj1uEu9hPyM6V0UhxHTt6kf2DE5IOTITr d/El4y1+srpSWDsm1527mwbqAVjVEXTNs0IEbfruOriWJ2oD4TLW6/12q3858K/u QHMgPvTFVokkWW/S+2gUAsS+dWxbTIG1SWVCe5fjdFL0Rq4lahpB09auUXdy+0PF leyrpdqXqxhkm2PQaWfz3sDzt+f6XH7mqjmunuxyZBWJJtDPPiQ= -----END CERTIFICATE-----Generated at Mon Jun 16 02:06:25 2025 by rpki-client