$ rpki-client -vvf repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft File: 9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft (raw, json) Hash identifier: EJ3W8tXTb6/Zop+BNI00+c34Q9aDeCTfFTawoXBm48Q= Subject key identifier: 44:E4:02:E6:69:82:FB:64:AC:06:E8:51:9C:A4:16:6E:AB:52:D0:57 Authority key identifier: 9A:4F:69:E8:B4:60:63:63:8E:82:F1:FB:06:0A:B3:D7:25:FA:48:21 Certificate issuer: /CN=9A4F69E8B46063638E82F1FB060AB3D725FA4821 Certificate serial: 254788BE9765C9D2600E94610E1C414E7CA30CB1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A4F69E8B46063638E82F1FB060AB3D725FA4821.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft Manifest number: 02CA Signing time: Sun 10 Aug 2025 10:22:22 +0000 Manifest this update: Sun 10 Aug 2025 10:17:22 +0000 Manifest next update: Wed 13 Aug 2025 15:06:22 +0000 Files and hashes: 1: 9A4F69E8B46063638E82F1FB060AB3D725FA4821.crl (hash: JwoNNHwZNFGXM9CgCLEqCTaVVD1AR2dL2cPb42sqKrQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.crl rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A4F69E8B46063638E82F1FB060AB3D725FA4821.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 06:25:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:47:88:be:97:65:c9:d2:60:0e:94:61:0e:1c:41:4e:7c:a3:0c:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A4F69E8B46063638E82F1FB060AB3D725FA4821 Validity Not Before: Aug 10 10:17:22 2025 GMT Not After : Aug 13 15:06:22 2025 GMT Subject: CN=44E402E66982FB64AC06E8519CA4166EAB52D057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ee:96:88:bc:cf:24:be:64:19:bf:ae:0c:b1: 59:c5:76:2c:b2:c1:36:3f:34:5b:03:00:42:51:28: 50:cf:1c:dd:e1:dd:6f:2b:08:36:75:f4:e6:99:00: 1f:41:aa:c2:3d:4e:b2:07:e9:9c:67:12:27:14:03: ef:29:45:de:15:4b:3d:53:dc:82:ba:cf:d4:0d:bd: 6f:0c:af:c3:df:9e:0a:f8:19:84:0e:01:d2:3d:19: a2:54:a8:4a:66:c0:65:68:c0:06:35:df:b6:94:1e: 1a:46:03:5a:e9:ee:de:c7:a1:6a:d6:80:86:a7:cf: 4e:ee:23:c2:cd:de:ca:65:1f:79:43:c8:15:34:99: 75:73:85:40:af:44:25:9a:32:27:96:19:95:15:53: 0d:76:4c:82:85:52:c1:13:41:6c:d8:49:2c:e1:52: ff:86:82:80:d4:e8:a1:2c:11:bc:a9:61:dc:23:b7: 62:2b:39:16:a0:0c:63:1c:cb:fb:33:79:8c:7e:43: d6:b4:06:77:ac:84:ee:37:60:e8:f1:ed:f6:48:5f: 97:a2:78:5e:c5:a9:e6:4f:10:8e:33:84:d6:e2:38: f8:48:8d:6a:4c:31:5e:39:e1:12:3e:7e:3f:1a:ee: de:83:fc:19:9f:63:10:4c:1b:44:c4:f5:f1:ce:82: 43:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:E4:02:E6:69:82:FB:64:AC:06:E8:51:9C:A4:16:6E:AB:52:D0:57 X509v3 Authority Key Identifier: keyid:9A:4F:69:E8:B4:60:63:63:8E:82:F1:FB:06:0A:B3:D7:25:FA:48:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A4F69E8B46063638E82F1FB060AB3D725FA4821.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:73:20:c7:7e:d1:4f:7e:82:c7:b5:05:e6:ce:55:d3:10:e3: 89:38:af:aa:3c:2b:c6:6c:33:cb:97:32:01:9a:6b:e6:c4:48: f5:b1:55:a1:aa:aa:09:c4:5f:9e:ce:87:51:43:43:d4:a1:f5: 9d:2f:c7:ae:13:e8:7e:49:81:15:5d:26:ad:46:04:ff:90:d7: 8d:95:28:18:59:e9:1e:15:98:fe:f8:24:6d:e5:13:31:ea:70: 0d:c8:9e:e4:50:1e:b9:92:51:1d:09:a9:bb:7b:79:fb:a3:41: 2e:88:28:0a:c4:b7:5e:0d:e5:ab:c8:0d:5e:9a:91:de:8a:44: c1:cb:a0:0d:62:a5:b6:df:92:fd:97:ab:38:4f:e4:1d:d6:ba: be:55:a0:45:61:22:bb:0d:3a:45:15:75:2e:f6:93:6b:2f:b2: 3a:12:b1:25:58:ef:a5:39:f6:4c:a0:03:ab:d4:1d:91:4c:82: 0a:56:c1:73:97:72:cb:14:bc:5b:bb:47:e2:66:cc:2f:84:c7: b2:b1:f8:e3:9e:2e:44:3e:03:24:dc:bc:a1:eb:5f:f5:b9:c5: eb:27:05:ae:5d:ea:df:4e:e3:6c:dc:e9:4f:a6:d0:09:b9:0a: 1d:62:ba:a8:c5:f2:91:4a:22:0c:0a:b7:d6:28:71:f3:2d:a2: 83:dd:a9:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJUeIvpdlydJgDpRhDhxBTnyjDLEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE0RjY5RThCNDYwNjM2MzhFODJGMUZCMDYwQUIzRDcy NUZBNDgyMTAeFw0yNTA4MTAxMDE3MjJaFw0yNTA4MTMxNTA2MjJaMDMxMTAvBgNV BAMTKDQ0RTQwMkU2Njk4MkZCNjRBQzA2RTg1MTlDQTQxNjZFQUI1MkQwNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL7paIvM8kvmQZv64MsVnFdiyy wTY/NFsDAEJRKFDPHN3h3W8rCDZ19OaZAB9BqsI9TrIH6ZxnEicUA+8pRd4VSz1T 3IK6z9QNvW8Mr8Pfngr4GYQOAdI9GaJUqEpmwGVowAY137aUHhpGA1rp7t7HoWrW gIanz07uI8LN3splH3lDyBU0mXVzhUCvRCWaMieWGZUVUw12TIKFUsETQWzYSSzh Uv+GgoDU6KEsEbypYdwjt2IrORagDGMcy/szeYx+Q9a0BneshO43YOjx7fZIX5ei eF7FqeZPEI4zhNbiOPhIjWpMMV454RI+fj8a7t6D/BmfYxBMG0TE9fHOgkP3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUROQC5mmC+2SsBuhRnKQWbqtS0FcwHwYDVR0j BBgwFoAUmk9p6LRgY2OOgvH7Bgqz1yX6SCEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NjM4YmQyMS1iZTU2LTQyYjQtODI3OC0wNTQwNWRjZTVlODgvMC85QTRGNjlFOEI0 NjA2MzYzOEU4MkYxRkIwNjBBQjNENzI1RkE0ODIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE0RjY5RThCNDYwNjM2MzhFODJGMUZCMDYwQUIzRDcyNUZB NDgyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDYzOGJkMjEtYmU1Ni00MmI0LTgy NzgtMDU0MDVkY2U1ZTg4LzAvOUE0RjY5RThCNDYwNjM2MzhFODJGMUZCMDYwQUIz RDcyNUZBNDgyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACFzIMd+0U9+gse1BebOVdMQ44k4r6o8K8Zs M8uXMgGaa+bESPWxVaGqqgnEX57Oh1FDQ9Sh9Z0vx64T6H5JgRVdJq1GBP+Q142V KBhZ6R4VmP74JG3lEzHqcA3InuRQHrmSUR0Jqbt7efujQS6IKArEt14N5avIDV6a kd6KRMHLoA1ipbbfkv2XqzhP5B3Wur5VoEVhIrsNOkUVdS72k2svsjoSsSVY76U5 9kygA6vUHZFMggpWwXOXcssUvFu7R+JmzC+Ex7Kx+OOeLkQ+AyTcvKHrX/W5xesn Ba5d6t9O42zc6U+m0Am5Ch1iuqjF8pFKIgwKt9YocfMtooPdqXM= -----END CERTIFICATE-----Generated at Sun Aug 10 13:52:40 2025 by rpki-client