$ rpki-client -vvf repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft File: 9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft (raw, json) Hash identifier: IcIUC8XOH45ZQsJ8w/BmvGVWbsIolP1RSAACeRzYtLg= Subject key identifier: 94:BC:2C:28:90:8E:AE:DF:41:44:30:42:A8:88:D1:DB:87:0C:CE:3D Authority key identifier: 95:64:13:4E:E3:E4:CE:65:FB:9D:07:7E:90:B1:BE:B5:25:D6:99:EB Certificate issuer: /CN=9564134EE3E4CE65FB9D077E90B1BEB525D699EB Certificate serial: 06F3134ED3E74B35CF7B1A814117E293EB4F4F89 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft Manifest number: 0106 Signing time: Wed 05 Nov 2025 08:32:22 +0000 Manifest this update: Wed 05 Nov 2025 08:27:22 +0000 Manifest next update: Sat 08 Nov 2025 09:02:22 +0000 Files and hashes: 1: 9564134EE3E4CE65FB9D077E90B1BEB525D699EB.crl (hash: ZRPbNTF/SXHEmg+CnAa6l37kfRH0XokxbujxBeqnBEg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.crl rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 09:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:f3:13:4e:d3:e7:4b:35:cf:7b:1a:81:41:17:e2:93:eb:4f:4f:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9564134EE3E4CE65FB9D077E90B1BEB525D699EB Validity Not Before: Nov 5 08:27:22 2025 GMT Not After : Nov 8 09:02:22 2025 GMT Subject: CN=94BC2C28908EAEDF41443042A888D1DB870CCE3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e2:24:f2:dc:43:40:27:56:ef:5c:df:9f:05: 2b:b9:c7:d4:67:a8:56:52:12:95:77:1a:1a:94:8b: a5:68:36:07:94:0e:b5:5b:83:64:da:ff:0d:9b:8c: dd:12:9d:66:0a:3e:dd:4f:cb:16:f5:f6:2e:72:e3: 5f:eb:22:0c:4e:b1:77:a1:f4:a6:b3:18:50:ff:74: 4b:86:e5:16:25:f9:f4:90:41:18:35:43:ad:8d:f9: 54:f7:46:6c:bf:ef:48:14:e9:dc:e0:78:ae:af:fa: a4:b2:6d:6d:23:c2:9a:eb:43:c8:56:25:6f:9f:06: 81:17:cf:7c:a5:77:fb:49:4d:5c:4b:d5:1c:a7:98: fd:fa:20:52:54:51:48:35:a5:58:d3:2a:74:72:08: 11:3b:56:a0:d0:d8:57:dd:d5:e7:d0:5e:ec:2a:a7: 7c:80:a9:77:32:e1:4d:70:a4:26:97:85:9f:b3:bf: 5b:9c:f5:6d:fb:1d:2f:1b:ae:ca:62:87:b6:a1:76: 95:1d:ae:7a:d1:1a:d5:c9:1e:97:71:38:d7:9f:c5: 9d:1a:5c:f6:0e:9c:d2:39:41:6f:7f:85:46:b8:b6: ed:91:b5:ce:91:2d:e4:63:13:8a:07:1f:42:02:77: b8:c8:10:f1:37:c6:31:b5:ff:3d:88:c0:54:57:4f: 16:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:BC:2C:28:90:8E:AE:DF:41:44:30:42:A8:88:D1:DB:87:0C:CE:3D X509v3 Authority Key Identifier: keyid:95:64:13:4E:E3:E4:CE:65:FB:9D:07:7E:90:B1:BE:B5:25:D6:99:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:16:cc:bd:54:5f:b7:34:c4:2d:3b:71:fb:f4:dc:df:63:5d: e7:82:e2:43:e8:a5:76:39:5b:b0:e9:a6:df:1e:ef:32:b3:67: 10:69:b0:a3:6a:1c:be:95:8b:7a:26:11:62:09:4f:93:1f:16: 6d:2b:aa:5c:99:53:09:87:e1:6c:5b:2b:e8:96:0f:1c:b4:36: 97:22:19:e9:23:6d:0b:4f:2a:27:93:7b:63:49:bf:1f:32:28: de:20:f7:27:38:93:2f:bd:6e:79:9e:a1:d3:84:0a:5b:76:13: c6:81:09:d9:4a:89:b3:61:1c:74:c1:5a:05:7f:e5:37:90:d3: 5a:13:af:e4:6c:3a:02:51:b4:72:af:ae:63:af:b0:0c:00:01: 4f:f6:d9:21:53:08:7c:39:17:d9:4c:25:e0:1a:83:51:00:3b: 64:c6:4d:75:b7:78:40:9c:a4:05:d4:d0:54:2e:f8:71:a8:fb: d9:a5:33:19:9c:3b:4f:1a:c8:98:62:de:37:f3:bf:66:6a:ad: 93:c1:87:cd:a9:83:58:cb:1f:fe:4a:7f:35:29:82:de:85:9b: 74:68:19:b5:a8:62:62:bc:9d:ab:13:30:47:2e:b7:f4:f4:9d: 6e:43:1f:86:bb:07:8e:81:8a:aa:09:1d:12:62:80:be:97:85: 25:34:3f:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBvMTTtPnSzXPexqBQRfik+tPT4kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU2NDEzNEVFM0U0Q0U2NUZCOUQwNzdFOTBCMUJFQjUy NUQ2OTlFQjAeFw0yNTExMDUwODI3MjJaFw0yNTExMDgwOTAyMjJaMDMxMTAvBgNV BAMTKDk0QkMyQzI4OTA4RUFFREY0MTQ0MzA0MkE4ODhEMURCODcwQ0NFM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc4iTy3ENAJ1bvXN+fBSu5x9Rn qFZSEpV3GhqUi6VoNgeUDrVbg2Ta/w2bjN0SnWYKPt1Pyxb19i5y41/rIgxOsXeh 9KazGFD/dEuG5RYl+fSQQRg1Q62N+VT3Rmy/70gU6dzgeK6v+qSybW0jwprrQ8hW JW+fBoEXz3yld/tJTVxL1RynmP36IFJUUUg1pVjTKnRyCBE7VqDQ2Ffd1efQXuwq p3yAqXcy4U1wpCaXhZ+zv1uc9W37HS8brspih7ahdpUdrnrRGtXJHpdxONefxZ0a XPYOnNI5QW9/hUa4tu2Rtc6RLeRjE4oHH0ICd7jIEPE3xjG1/z2IwFRXTxaNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlLwsKJCOrt9BRDBCqIjR24cMzj0wHwYDVR0j BBgwFoAUlWQTTuPkzmX7nQd+kLG+tSXWmeswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDg4NjQ4Zi01ZTBiLTQzMzgtOTExYy05ZDY0NjdiMDBhM2UvMC85NTY0MTM0RUUz RTRDRTY1RkI5RDA3N0U5MEIxQkVCNTI1RDY5OUVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTU2NDEzNEVFM0U0Q0U2NUZCOUQwNzdFOTBCMUJFQjUyNUQ2 OTlFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODA4ODY0OGYtNWUwYi00MzM4LTkx MWMtOWQ2NDY3YjAwYTNlLzAvOTU2NDEzNEVFM0U0Q0U2NUZCOUQwNzdFOTBCMUJF QjUyNUQ2OTlFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAwWzL1UX7c0xC07cfv03N9jXeeC4kPopXY5 W7Dppt8e7zKzZxBpsKNqHL6Vi3omEWIJT5MfFm0rqlyZUwmH4WxbK+iWDxy0Npci GekjbQtPKieTe2NJvx8yKN4g9yc4ky+9bnmeodOEClt2E8aBCdlKibNhHHTBWgV/ 5TeQ01oTr+RsOgJRtHKvrmOvsAwAAU/22SFTCHw5F9lMJeAag1EAO2TGTXW3eECc pAXU0FQu+HGo+9mlMxmcO08ayJhi3jfzv2ZqrZPBh82pg1jLH/5KfzUpgt6Fm3Ro GbWoYmK8nasTMEcut/T0nW5DH4a7B46BiqoJHRJigL6XhSU0P/U= -----END CERTIFICATE-----Generated at Wed Nov 5 16:10:13 2025 by rpki-client