$ rpki-client -vvf repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft File: C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft (raw, json) Hash identifier: LM4LJ5dpjm970EmqZv8LNnWhj4uNdd8I043FuEdZPs4= Subject key identifier: B7:55:81:4F:89:60:F4:86:0B:DD:D5:72:99:A7:66:B0:00:C6:84:E8 Authority key identifier: C9:BA:44:08:64:54:B8:8A:BD:ED:EF:D6:01:08:86:1D:DD:AA:37:86 Certificate issuer: /CN=C9BA44086454B88ABDEDEFD60108861DDDAA3786 Certificate serial: 6DC7BABCC8FF76C1C4EF626DD55BECC031C24CF5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9BA44086454B88ABDEDEFD60108861DDDAA3786.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft Manifest number: F6 Signing time: Mon 04 Aug 2025 16:00:36 +0000 Manifest this update: Mon 04 Aug 2025 15:55:36 +0000 Manifest next update: Fri 08 Aug 2025 02:54:36 +0000 Files and hashes: 1: C9BA44086454B88ABDEDEFD60108861DDDAA3786.crl (hash: ziJzinfQ/4x70LjEcZHmOhdzfODhexa6t0lDDsMfpk0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.crl rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9BA44086454B88ABDEDEFD60108861DDDAA3786.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 02:54:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:c7:ba:bc:c8:ff:76:c1:c4:ef:62:6d:d5:5b:ec:c0:31:c2:4c:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9BA44086454B88ABDEDEFD60108861DDDAA3786 Validity Not Before: Aug 4 15:55:36 2025 GMT Not After : Aug 8 02:54:36 2025 GMT Subject: CN=B755814F8960F4860BDDD57299A766B000C684E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:93:63:96:c2:13:3f:39:76:93:b5:47:d2:d7: c8:c0:34:1f:f2:b8:a2:88:ad:b3:a3:20:73:b5:1b: 39:95:15:c4:7d:66:79:6c:2f:db:81:5c:17:a4:8c: e6:de:87:18:5b:65:ba:31:00:f1:50:e4:96:26:41: 23:74:2c:bd:9f:9b:35:6b:7e:1e:e8:6e:d1:1a:b0: 6e:c8:d4:b0:32:b0:f6:0d:cb:a2:44:f0:ec:6b:5f: 07:6c:93:99:87:0d:c3:a0:7d:b1:10:d1:2f:cb:02: d0:24:ee:14:7d:1c:ba:3c:9c:df:a7:99:28:ca:bd: bc:5f:05:8d:42:df:ad:11:d8:e5:7e:62:e8:64:a0: fb:a1:08:bb:ff:24:0c:26:3d:0b:3e:1e:6e:11:28: db:09:45:36:c8:97:fb:73:1e:9c:b4:38:41:0d:1f: 35:ff:81:f4:95:d8:3c:2a:5f:8d:5a:cf:c4:85:9b: e4:b3:8f:d6:b9:12:72:9d:c7:39:61:70:4f:6e:93: 59:15:ff:78:2b:75:93:31:b0:21:21:06:3c:92:c7: f0:8e:cc:79:c3:08:c6:84:10:05:2f:23:d2:73:eb: e7:04:c6:6e:7a:0a:07:4f:ba:ba:14:c5:0b:1f:e5: 79:d1:eb:e8:74:04:b5:62:f2:fa:96:de:78:25:9a: 09:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:55:81:4F:89:60:F4:86:0B:DD:D5:72:99:A7:66:B0:00:C6:84:E8 X509v3 Authority Key Identifier: keyid:C9:BA:44:08:64:54:B8:8A:BD:ED:EF:D6:01:08:86:1D:DD:AA:37:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9BA44086454B88ABDEDEFD60108861DDDAA3786.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:ee:25:3e:f1:83:d5:f1:40:ad:ef:cb:07:69:a3:29:24:db: c0:8d:a5:91:aa:c1:81:5e:c5:a4:5f:9f:7c:ef:b3:78:fc:12: 85:ed:b1:78:dd:76:f1:b9:5f:e7:8b:f3:af:bd:dd:8e:00:8a: fd:07:e1:6b:3f:5c:fa:01:1f:9b:72:c8:e8:62:b2:2f:a0:fe: 62:e6:7d:69:b8:22:3c:d0:ca:dd:87:df:03:c2:23:97:9d:4d: 42:63:4c:f8:3b:0c:8c:b4:79:4b:de:a6:70:c6:de:ba:07:3f: 88:8c:73:b5:d9:da:cf:02:50:8b:f5:ec:8c:43:4b:b8:b6:16: 49:3a:2a:f7:5b:70:40:33:e8:4d:c2:d5:d5:5f:ed:ba:12:46: b9:36:0e:73:95:bf:80:1c:0e:92:a3:01:29:fd:f2:7c:d7:84: ee:a5:06:64:79:c7:b9:69:92:45:91:d3:e7:06:be:b5:c2:5c: ca:5f:e8:ff:8b:b4:1f:bc:73:58:49:f8:b2:e4:77:0e:c2:32: 9e:e4:20:a6:2b:bb:8d:83:7b:d3:dc:76:b5:b8:c3:0c:1d:b5: 8e:c2:39:86:41:d5:66:44:56:c3:13:cd:f3:ea:d0:60:cf:67: de:5f:85:ea:cb:cd:3c:64:87:51:84:c6:28:e1:d8:8c:ab:71: cd:28:bb:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbce6vMj/dsHE72Jt1VvswDHCTPUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlCQTQ0MDg2NDU0Qjg4QUJERURFRkQ2MDEwODg2MURE REFBMzc4NjAeFw0yNTA4MDQxNTU1MzZaFw0yNTA4MDgwMjU0MzZaMDMxMTAvBgNV BAMTKEI3NTU4MTRGODk2MEY0ODYwQkRERDU3Mjk5QTc2NkIwMDBDNjg0RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJk2OWwhM/OXaTtUfS18jANB/y uKKIrbOjIHO1GzmVFcR9ZnlsL9uBXBekjObehxhbZboxAPFQ5JYmQSN0LL2fmzVr fh7obtEasG7I1LAysPYNy6JE8OxrXwdsk5mHDcOgfbEQ0S/LAtAk7hR9HLo8nN+n mSjKvbxfBY1C360R2OV+YuhkoPuhCLv/JAwmPQs+Hm4RKNsJRTbIl/tzHpy0OEEN HzX/gfSV2DwqX41az8SFm+Szj9a5EnKdxzlhcE9uk1kV/3grdZMxsCEhBjySx/CO zHnDCMaEEAUvI9Jz6+cExm56CgdPuroUxQsf5XnR6+h0BLVi8vqW3nglmgltAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt1WBT4lg9IYL3dVymadmsADGhOgwHwYDVR0j BBgwFoAUybpECGRUuIq97e/WAQiGHd2qN4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTFlNmFjNC1hMmM0LTQxYTctYjBkYi02ZmE3OGIwY2E4YjAvMC9DOUJBNDQwODY0 NTRCODhBQkRFREVGRDYwMTA4ODYxREREQUEzNzg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzlCQTQ0MDg2NDU0Qjg4QUJERURFRkQ2MDEwODg2MUREREFB Mzc4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWExZTZhYzQtYTJjNC00MWE3LWIw ZGItNmZhNzhiMGNhOGIwLzAvQzlCQTQ0MDg2NDU0Qjg4QUJERURFRkQ2MDEwODg2 MUREREFBMzc4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFruJT7xg9XxQK3vywdpoykk28CNpZGqwYFe xaRfn3zvs3j8EoXtsXjddvG5X+eL86+93Y4Aiv0H4Ws/XPoBH5tyyOhisi+g/mLm fWm4IjzQyt2H3wPCI5edTUJjTPg7DIy0eUvepnDG3roHP4iMc7XZ2s8CUIv17IxD S7i2Fkk6KvdbcEAz6E3C1dVf7boSRrk2DnOVv4AcDpKjASn98nzXhO6lBmR5x7lp kkWR0+cGvrXCXMpf6P+LtB+8c1hJ+LLkdw7CMp7kIKYru42De9PcdrW4wwwdtY7C OYZB1WZEVsMTzfPq0GDPZ95fherLzTxkh1GExijh2Iyrcc0ouwE= -----END CERTIFICATE-----Generated at Thu Aug 7 00:27:17 2025 by rpki-client