$ rpki-client -vvf repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.mft File: D9622F68C539A365B6FA78463F3CD3D3EC231214.mft (raw, json) Hash identifier: cyYa9qkikABu7ZZ85f8u0H20DqWI7GTrCaXM5oopmDc= Subject key identifier: A9:7E:64:3F:E2:E7:95:B4:3E:49:84:E1:8B:6C:74:BD:37:3C:5A:D8 Authority key identifier: D9:62:2F:68:C5:39:A3:65:B6:FA:78:46:3F:3C:D3:D3:EC:23:12:14 Certificate issuer: /CN=D9622F68C539A365B6FA78463F3CD3D3EC231214 Certificate serial: 74EB90F3878523E193E2BA2FC6556B3C07E47FEF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9622F68C539A365B6FA78463F3CD3D3EC231214.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.mft Manifest number: AB Signing time: Wed 06 Aug 2025 08:51:57 +0000 Manifest this update: Wed 06 Aug 2025 08:46:57 +0000 Manifest next update: Sat 09 Aug 2025 10:10:57 +0000 Files and hashes: 1: D9622F68C539A365B6FA78463F3CD3D3EC231214.crl (hash: 6zvBBetVRx4YQzZWS+oY6m5tfbb9iFYbWyB171BlRhs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.crl rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9622F68C539A365B6FA78463F3CD3D3EC231214.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 10:10:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:eb:90:f3:87:85:23:e1:93:e2:ba:2f:c6:55:6b:3c:07:e4:7f:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9622F68C539A365B6FA78463F3CD3D3EC231214 Validity Not Before: Aug 6 08:46:57 2025 GMT Not After : Aug 9 10:10:57 2025 GMT Subject: CN=A97E643FE2E795B43E4984E18B6C74BD373C5AD8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:eb:53:9c:1d:46:ad:e3:af:7c:a9:0c:02:e2: b3:fe:88:bc:d9:3d:68:e3:9c:0b:0b:fa:0d:11:b9: fb:4c:67:ec:16:cd:96:fa:ff:5c:db:11:95:47:24: 2b:fc:14:88:e2:a6:b6:df:82:4a:d5:24:1a:ed:d1: dc:8b:4b:e9:a8:95:48:71:15:78:57:b5:25:d4:fa: 84:c0:64:9d:d0:32:91:ab:28:57:cf:23:77:6e:6a: fd:47:d3:80:52:c7:6c:bf:60:3c:d5:da:a2:76:11: 5a:97:7a:d2:5c:7c:5d:9d:59:c6:1a:31:16:6e:69: bd:06:be:f1:86:2c:8b:e1:88:83:12:59:40:bb:44: 45:46:9a:67:c1:1d:4b:bd:ce:cb:07:01:5e:22:e5: a5:c8:3c:5d:f0:1f:2c:1b:22:9f:90:7d:d9:20:1b: 6a:8a:4c:f2:51:88:e3:0c:55:2b:d6:81:32:34:d0: a0:8d:81:0b:c8:bb:50:5c:82:ad:47:ab:96:ef:4e: 25:d3:a2:18:7f:39:ff:b7:89:a2:93:b4:4a:72:0d: 78:1f:af:e0:75:87:8a:18:a6:89:d4:18:17:15:a4: af:f8:6e:93:1e:7d:cb:e9:c4:bc:c4:a4:84:5b:02: ab:b2:b4:15:ff:50:0f:40:ae:73:23:04:2d:2e:31: 18:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:7E:64:3F:E2:E7:95:B4:3E:49:84:E1:8B:6C:74:BD:37:3C:5A:D8 X509v3 Authority Key Identifier: keyid:D9:62:2F:68:C5:39:A3:65:B6:FA:78:46:3F:3C:D3:D3:EC:23:12:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9622F68C539A365B6FA78463F3CD3D3EC231214.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:93:45:c1:8f:11:fa:a0:77:4f:df:10:70:cf:33:0e:dd:fa: b3:c2:8f:f1:ec:d8:32:97:57:4e:6d:4c:4c:4b:7a:c3:f8:0b: 3f:22:32:17:c7:87:50:04:18:30:23:d0:2a:cf:15:e5:50:f1: 57:3f:46:74:9a:e8:d2:d9:2d:04:ee:bf:3d:a4:84:82:97:eb: d3:7d:1d:49:71:da:bc:49:22:cc:9f:f6:0b:0d:54:20:dd:df: 1d:f1:d2:1b:01:5b:98:fd:2f:9a:b9:5e:a9:31:d3:51:23:8f: 0c:de:6b:6c:09:0a:66:b7:8a:21:5d:fe:5a:a5:10:c2:cb:2b: af:6a:15:4b:fc:f3:2b:d8:cc:36:eb:a9:74:de:d7:e6:0f:d2: e4:68:59:1d:db:a8:41:ef:50:87:ff:d8:c7:01:c3:72:58:c2: b5:0f:d6:d3:da:38:ba:a7:f7:cf:57:cb:fe:50:b7:02:b0:fc: 7d:f7:2e:2c:b4:7f:26:26:f0:08:db:51:5c:f7:0a:06:97:63: c9:4a:dd:bc:7f:44:af:71:94:84:5f:af:1f:07:bd:02:92:6f: 15:1c:eb:99:95:95:5a:37:60:bb:12:99:96:d2:4f:26:c4:6e: 62:73:d8:d6:58:c8:b5:ae:ef:5b:aa:7d:8e:d0:4f:12:ef:72: b0:ef:76:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdOuQ84eFI+GT4rovxlVrPAfkf+8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDk2MjJGNjhDNTM5QTM2NUI2RkE3ODQ2M0YzQ0QzRDNF QzIzMTIxNDAeFw0yNTA4MDYwODQ2NTdaFw0yNTA4MDkxMDEwNTdaMDMxMTAvBgNV BAMTKEE5N0U2NDNGRTJFNzk1QjQzRTQ5ODRFMThCNkM3NEJEMzczQzVBRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg61OcHUat4698qQwC4rP+iLzZ PWjjnAsL+g0RuftMZ+wWzZb6/1zbEZVHJCv8FIjiprbfgkrVJBrt0dyLS+molUhx FXhXtSXU+oTAZJ3QMpGrKFfPI3duav1H04BSx2y/YDzV2qJ2EVqXetJcfF2dWcYa MRZuab0GvvGGLIvhiIMSWUC7REVGmmfBHUu9zssHAV4i5aXIPF3wHywbIp+Qfdkg G2qKTPJRiOMMVSvWgTI00KCNgQvIu1Bcgq1Hq5bvTiXTohh/Of+3iaKTtEpyDXgf r+B1h4oYponUGBcVpK/4bpMefcvpxLzEpIRbAquytBX/UA9ArnMjBC0uMRhVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqX5kP+LnlbQ+SYThi2x0vTc8WtgwHwYDVR0j BBgwFoAU2WIvaMU5o2W2+nhGPzzT0+wjEhQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YmE2ZDA3Mi04MzYxLTRkZGYtODAwYS0xY2UxNWM0NzU5MmMvMC9EOTYyMkY2OEM1 MzlBMzY1QjZGQTc4NDYzRjNDRDNEM0VDMjMxMjE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDk2MjJGNjhDNTM5QTM2NUI2RkE3ODQ2M0YzQ0QzRDNFQzIz MTIxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGJhNmQwNzItODM2MS00ZGRmLTgw MGEtMWNlMTVjNDc1OTJjLzAvRDk2MjJGNjhDNTM5QTM2NUI2RkE3ODQ2M0YzQ0Qz RDNFQzIzMTIxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHOTRcGPEfqgd0/fEHDPMw7d+rPCj/Hs2DKX V05tTExLesP4Cz8iMhfHh1AEGDAj0CrPFeVQ8Vc/RnSa6NLZLQTuvz2khIKX69N9 HUlx2rxJIsyf9gsNVCDd3x3x0hsBW5j9L5q5Xqkx01Ejjwzea2wJCma3iiFd/lql EMLLK69qFUv88yvYzDbrqXTe1+YP0uRoWR3bqEHvUIf/2McBw3JYwrUP1tPaOLqn 989Xy/5QtwKw/H33Liy0fyYm8AjbUVz3CgaXY8lK3bx/RK9xlIRfrx8HvQKSbxUc 65mVlVo3YLsSmZbSTybEbmJz2NZYyLWu71uqfY7QTxLvcrDvdlg= -----END CERTIFICATE-----Generated at Thu Aug 7 14:33:58 2025 by rpki-client