$ rpki-client -vvf repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft File: 9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft (raw, json) Hash identifier: 1IQ0Hq2V1qk+eg+OHlq1O+mUF+9xjYHI5pgmoRHSJ7g= Subject key identifier: 71:E6:DD:0C:A2:B1:A6:F0:96:A6:A7:D2:2B:3C:EA:E6:C7:E9:CA:21 Authority key identifier: 9F:0F:0B:61:BB:6A:FA:ED:E5:A1:E7:59:1E:D4:84:13:13:DF:D6:FF Certificate issuer: /CN=9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF Certificate serial: 1BC6E15DABFBA3B1C80AA628E32A177CFFBB89CA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft Manifest number: 01C2 Signing time: Tue 05 Aug 2025 04:32:01 +0000 Manifest this update: Tue 05 Aug 2025 04:27:01 +0000 Manifest next update: Fri 08 Aug 2025 09:54:01 +0000 Files and hashes: 1: 9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.crl (hash: JFUfK2fkusCrupMyqxLD5bCZdFIr7MJ5Sk7axZ2D7ns=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.crl rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 09:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:c6:e1:5d:ab:fb:a3:b1:c8:0a:a6:28:e3:2a:17:7c:ff:bb:89:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF Validity Not Before: Aug 5 04:27:01 2025 GMT Not After : Aug 8 09:54:01 2025 GMT Subject: CN=71E6DD0CA2B1A6F096A6A7D22B3CEAE6C7E9CA21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3d:19:24:82:18:63:17:88:55:42:9f:6d:ce: 2a:f2:17:bc:ad:74:24:31:0d:4f:c0:9d:90:d5:87: 32:5c:b0:af:89:f1:d2:4a:b9:35:5e:c3:84:d1:cf: ad:3d:c6:27:ca:51:d6:02:6b:98:f3:a4:86:fe:06: 5a:a4:9e:40:55:1e:ad:27:1b:c3:49:26:15:95:97: e3:a9:2f:16:48:61:92:c7:66:2a:07:45:b2:02:01: c9:80:a1:7c:73:f1:7a:65:58:20:b7:1e:6d:f3:20: 13:b8:86:01:50:16:9e:bf:b8:83:72:7e:1b:c8:93: 19:23:50:ab:9a:ba:69:9b:ac:a2:e2:09:e0:64:fc: 56:47:43:14:63:44:6d:69:ec:92:b5:ac:d5:53:a5: 49:56:4d:6c:a8:bc:64:f4:d9:8d:14:a0:a9:58:18: 65:04:37:6c:dc:36:55:c3:80:bf:d6:1d:bd:61:90: 6d:48:b3:d0:e4:3b:97:44:b1:c1:b9:bb:33:51:49: 79:44:40:3e:5e:59:1b:59:ba:20:28:c6:62:70:0d: 0e:84:f9:16:1c:2f:37:94:b2:8f:8b:91:d3:44:e6: 59:47:76:e1:41:dc:c6:32:ef:76:78:80:ec:a0:0c: b6:bb:b2:63:b9:02:37:6b:08:f5:b4:77:86:c3:16: 79:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:E6:DD:0C:A2:B1:A6:F0:96:A6:A7:D2:2B:3C:EA:E6:C7:E9:CA:21 X509v3 Authority Key Identifier: keyid:9F:0F:0B:61:BB:6A:FA:ED:E5:A1:E7:59:1E:D4:84:13:13:DF:D6:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:2e:ad:a3:c9:1f:78:64:c3:3b:cc:64:55:fa:31:90:52:44: 3d:ad:ff:bf:14:11:d8:03:b9:70:18:95:98:31:20:04:76:ea: 89:f8:b7:73:64:d5:6d:c2:c9:73:5f:8c:77:dd:c6:82:7c:c5: 7b:ee:41:4d:bc:49:67:e7:c6:b0:de:a2:4a:57:be:cf:f3:be: d8:96:8d:92:7f:20:09:5c:ab:ca:af:97:8a:49:b3:3b:89:f9: 65:01:03:3f:e1:04:9e:9c:1a:0c:eb:a8:eb:ef:d8:62:8d:50: 88:5c:9d:a7:ca:a3:59:d4:f3:9d:8e:73:99:ee:58:9d:08:fb: 06:ad:4a:78:5c:c1:29:60:b8:f7:e9:58:d7:d8:d9:60:52:af: 81:59:29:b1:6b:b1:7f:4e:d9:17:a3:04:0e:24:51:7c:fd:70: fc:28:92:c8:a1:6c:a7:b4:a7:b2:c9:46:eb:c3:ff:64:d1:a2: c8:e5:c7:71:aa:f8:fd:a4:da:20:e3:dc:7b:5c:b9:e4:4f:a4: fb:4e:2a:cc:53:29:23:f7:73:13:c4:6e:4f:55:c4:71:24:fa: 83:d2:04:ac:02:73:b8:87:e0:93:ba:60:c1:04:89:31:97:88: ce:99:09:bd:88:2b:28:1f:3f:35:04:d4:4b:f2:73:bb:92:2c: 9c:13:86:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG8bhXav7o7HICqYo4yoXfP+7icowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYwRjBCNjFCQjZBRkFFREU1QTFFNzU5MUVENDg0MTMx M0RGRDZGRjAeFw0yNTA4MDUwNDI3MDFaFw0yNTA4MDgwOTU0MDFaMDMxMTAvBgNV BAMTKDcxRTZERDBDQTJCMUE2RjA5NkE2QTdEMjJCM0NFQUU2QzdFOUNBMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqPRkkghhjF4hVQp9tziryF7yt dCQxDU/AnZDVhzJcsK+J8dJKuTVew4TRz609xifKUdYCa5jzpIb+BlqknkBVHq0n G8NJJhWVl+OpLxZIYZLHZioHRbICAcmAoXxz8XplWCC3Hm3zIBO4hgFQFp6/uINy fhvIkxkjUKuaummbrKLiCeBk/FZHQxRjRG1p7JK1rNVTpUlWTWyovGT02Y0UoKlY GGUEN2zcNlXDgL/WHb1hkG1Is9DkO5dEscG5uzNRSXlEQD5eWRtZuiAoxmJwDQ6E +RYcLzeUso+LkdNE5llHduFB3MYy73Z4gOygDLa7smO5AjdrCPW0d4bDFnm3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcebdDKKxpvCWpqfSKzzq5sfpyiEwHwYDVR0j BBgwFoAUnw8LYbtq+u3loedZHtSEExPf1v8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MGYyNDczMy1lOGRhLTQyYzgtODQ2Yi1lNzk0ZTFiNDM5ZGEvMC85RjBGMEI2MUJC NkFGQUVERTVBMUU3NTkxRUQ0ODQxMzEzREZENkZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUYwRjBCNjFCQjZBRkFFREU1QTFFNzU5MUVENDg0MTMxM0RG RDZGRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDBmMjQ3MzMtZThkYS00MmM4LTg0 NmItZTc5NGUxYjQzOWRhLzAvOUYwRjBCNjFCQjZBRkFFREU1QTFFNzU5MUVENDg0 MTMxM0RGRDZGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHwuraPJH3hkwzvMZFX6MZBSRD2t/78UEdgD uXAYlZgxIAR26on4t3Nk1W3CyXNfjHfdxoJ8xXvuQU28SWfnxrDeokpXvs/zvtiW jZJ/IAlcq8qvl4pJszuJ+WUBAz/hBJ6cGgzrqOvv2GKNUIhcnafKo1nU852Oc5nu WJ0I+watSnhcwSlguPfpWNfY2WBSr4FZKbFrsX9O2RejBA4kUXz9cPwoksihbKe0 p7LJRuvD/2TRosjlx3Gq+P2k2iDj3HtcueRPpPtOKsxTKSP3cxPEbk9VxHEk+oPS BKwCc7iH4JO6YMEEiTGXiM6ZCb2IKygfPzUE1Evyc7uSLJwThg8= -----END CERTIFICATE-----Generated at Thu Aug 7 00:31:11 2025 by rpki-client