$ rpki-client -vvf repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft File: 0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft (raw, json) Hash identifier: 6XQ8uOrUqnsEWxlhhSesPgTiMYMDAzT4WIK2pQNMkYg= Subject key identifier: 62:D9:95:A8:73:75:12:C5:86:67:96:42:2A:77:1D:19:CC:3B:05:C0 Authority key identifier: 0F:44:BF:25:8D:75:F2:D1:C4:45:D5:29:C3:01:5F:9F:E5:1B:28:0F Certificate issuer: /CN=0F44BF258D75F2D1C445D529C3015F9FE51B280F Certificate serial: 72996BADD230AC24C5138463810FE0104F939B1E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0F44BF258D75F2D1C445D529C3015F9FE51B280F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft Manifest number: 6F Signing time: Sat 09 Aug 2025 23:51:17 +0000 Manifest this update: Sat 09 Aug 2025 23:46:17 +0000 Manifest next update: Wed 13 Aug 2025 02:58:17 +0000 Files and hashes: 1: 0F44BF258D75F2D1C445D529C3015F9FE51B280F.crl (hash: STxQTOxfkIX83ZVGCdnwh/qK8CHAAlW4l+SbE/tn/mc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.crl rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0F44BF258D75F2D1C445D529C3015F9FE51B280F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 13:41:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:99:6b:ad:d2:30:ac:24:c5:13:84:63:81:0f:e0:10:4f:93:9b:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0F44BF258D75F2D1C445D529C3015F9FE51B280F Validity Not Before: Aug 9 23:46:17 2025 GMT Not After : Aug 13 02:58:17 2025 GMT Subject: CN=62D995A8737512C5866796422A771D19CC3B05C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:0c:31:b2:29:09:4b:73:27:0d:93:32:6f:ad: a3:d7:12:00:e7:96:6e:38:02:f4:09:11:ec:26:fe: 48:07:d3:4e:7f:e3:05:b2:02:43:aa:cc:0c:01:b1: 2f:b5:d6:18:6f:36:fa:41:18:a7:c4:ea:fd:cf:11: 14:fe:c3:d4:1e:3e:15:7f:36:17:2a:62:8d:39:71: 9a:4f:5a:5a:fc:12:c4:ae:49:59:8f:a9:f0:41:c9: d0:72:d0:78:8d:a9:e6:e6:bd:c5:b5:6a:2d:3d:6b: c0:45:83:14:ba:5c:6b:3f:7d:5e:2d:97:fc:e1:2e: 16:ac:0f:3a:03:ab:45:e7:30:4e:a7:ba:a2:2e:74: 1b:c2:6b:cc:56:4d:68:4d:6e:2e:f2:09:bd:f9:cc: 82:98:56:18:bf:c0:a2:69:61:67:38:8f:f9:11:54: 84:39:aa:c1:9f:04:bc:38:58:5e:76:8d:2f:14:c5: e2:eb:32:ac:d4:7b:c6:9a:64:a5:c9:ff:98:f9:e8: f2:5f:d7:79:b7:f8:9a:21:27:25:86:e3:27:35:83: 23:8c:7f:a6:f7:29:67:01:40:c1:4c:8d:7c:eb:ad: ab:1d:c3:1d:a2:94:46:47:38:3b:33:8d:34:d6:96: a1:31:51:a3:f3:d2:9e:d0:5e:c1:d0:15:78:48:f1: 88:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:D9:95:A8:73:75:12:C5:86:67:96:42:2A:77:1D:19:CC:3B:05:C0 X509v3 Authority Key Identifier: keyid:0F:44:BF:25:8D:75:F2:D1:C4:45:D5:29:C3:01:5F:9F:E5:1B:28:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0F44BF258D75F2D1C445D529C3015F9FE51B280F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/0/0F44BF258D75F2D1C445D529C3015F9FE51B280F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:57:fb:4d:3b:df:5d:c1:b4:17:bb:74:ed:85:b9:a1:1c:87: ff:45:2d:65:84:6d:d4:b7:51:45:c2:f7:d9:3a:40:fb:c8:a9: cd:4a:24:be:7a:a6:4b:68:e7:5e:9c:55:16:51:87:72:ee:6c: 92:22:35:db:18:0f:eb:2c:54:e8:82:f4:74:17:8f:26:b9:61: a8:02:d9:10:07:9f:9f:7e:30:fc:10:cb:8b:45:95:9e:d0:08: 37:bd:a9:89:8c:03:18:05:7e:4a:fa:16:e5:c1:bd:cb:00:9c: 1a:e4:1e:d4:06:8f:e8:ff:e2:ac:ea:87:93:3d:8e:b1:89:b4: 26:91:e0:05:10:ce:b7:2c:4e:4e:a6:b8:6a:0e:19:8f:65:17: cf:58:25:45:4e:34:10:d5:c0:b4:5a:85:c6:92:2d:34:72:1c: 06:65:9c:d1:96:9e:a9:8f:5c:0b:70:e5:fc:d8:b1:a1:08:a3: e2:f0:f4:e7:54:f9:c9:a2:78:5f:1f:23:79:ed:07:be:8f:7c: b2:b9:f9:a9:e7:b7:3b:57:7e:b5:84:80:bf:c1:6a:7b:02:fc: ca:bb:3f:ab:c3:3f:a4:b8:d3:77:40:49:92:6b:cc:8f:4b:3f: 20:37:d2:c9:af:8b:4d:77:b6:f9:ad:07:7b:65:e5:28:f3:72: a3:4b:99:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcplrrdIwrCTFE4RjgQ/gEE+Tmx4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEY0NEJGMjU4RDc1RjJEMUM0NDVENTI5QzMwMTVGOUZF NTFCMjgwRjAeFw0yNTA4MDkyMzQ2MTdaFw0yNTA4MTMwMjU4MTdaMDMxMTAvBgNV BAMTKDYyRDk5NUE4NzM3NTEyQzU4NjY3OTY0MjJBNzcxRDE5Q0MzQjA1QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbDDGyKQlLcycNkzJvraPXEgDn lm44AvQJEewm/kgH005/4wWyAkOqzAwBsS+11hhvNvpBGKfE6v3PERT+w9QePhV/ NhcqYo05cZpPWlr8EsSuSVmPqfBBydBy0HiNqebmvcW1ai09a8BFgxS6XGs/fV4t l/zhLhasDzoDq0XnME6nuqIudBvCa8xWTWhNbi7yCb35zIKYVhi/wKJpYWc4j/kR VIQ5qsGfBLw4WF52jS8UxeLrMqzUe8aaZKXJ/5j56PJf13m3+JohJyWG4yc1gyOM f6b3KWcBQMFMjXzrrasdwx2ilEZHODszjTTWlqExUaPz0p7QXsHQFXhI8YjNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYtmVqHN1EsWGZ5ZCKncdGcw7BcAwHwYDVR0j BBgwFoAUD0S/JY118tHERdUpwwFfn+UbKA8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTNkZTNlYy00ZDNjLTQ0MDItYTdiOC04YTFiOTYyMjZlNzUvMC8wRjQ0QkYyNThE NzVGMkQxQzQ0NUQ1MjlDMzAxNUY5RkU1MUIyODBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMEY0NEJGMjU4RDc1RjJEMUM0NDVENTI5QzMwMTVGOUZFNTFC MjgwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTEzZGUzZWMtNGQzYy00NDAyLWE3 YjgtOGExYjk2MjI2ZTc1LzAvMEY0NEJGMjU4RDc1RjJEMUM0NDVENTI5QzMwMTVG OUZFNTFCMjgwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ1X+007313BtBe7dO2FuaEch/9FLWWEbdS3 UUXC99k6QPvIqc1KJL56pkto516cVRZRh3LubJIiNdsYD+ssVOiC9HQXjya5YagC 2RAHn59+MPwQy4tFlZ7QCDe9qYmMAxgFfkr6FuXBvcsAnBrkHtQGj+j/4qzqh5M9 jrGJtCaR4AUQzrcsTk6muGoOGY9lF89YJUVONBDVwLRahcaSLTRyHAZlnNGWnqmP XAtw5fzYsaEIo+Lw9OdU+cmieF8fI3ntB76PfLK5+anntztXfrWEgL/BansC/Mq7 P6vDP6S403dASZJrzI9LPyA30smvi013tvmtB3tl5SjzcqNLmRw= -----END CERTIFICATE-----Generated at Sun Aug 10 13:43:27 2025 by rpki-client