$ rpki-client -vvf repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft File: 9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft (raw, json) Hash identifier: HYZDNwFmsgiMUlU7ueB2fpj7tQWMrlSZzE6yTmV3dFc= Subject key identifier: 7A:14:B3:F5:AE:37:16:61:7E:ED:E1:FA:2D:C0:3E:87:E7:8C:A8:F0 Authority key identifier: 94:79:B8:C5:D5:AE:8F:AB:DC:57:A9:AB:54:9A:DD:E2:0B:E8:A4:B3 Certificate issuer: /CN=9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3 Certificate serial: 350CF5DBEB590744BB597B105F9C9BC04A78B071 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft Manifest number: 01E2 Signing time: Fri 08 Aug 2025 12:22:03 +0000 Manifest this update: Fri 08 Aug 2025 12:17:03 +0000 Manifest next update: Mon 11 Aug 2025 14:25:03 +0000 Files and hashes: 1: 9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.crl (hash: osncLtQTGjRXuTHGfTbmWx78HxduqcvFMrqNK22Ees4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.crl rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 14:25:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:0c:f5:db:eb:59:07:44:bb:59:7b:10:5f:9c:9b:c0:4a:78:b0:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3 Validity Not Before: Aug 8 12:17:03 2025 GMT Not After : Aug 11 14:25:03 2025 GMT Subject: CN=7A14B3F5AE3716617EEDE1FA2DC03E87E78CA8F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8f:50:2e:64:05:b8:43:2b:b1:d3:a8:70:64: cf:98:e5:28:0c:2a:12:e5:83:ba:c6:06:d6:d4:14: d8:5e:de:8f:53:42:2b:03:20:97:2f:4a:7e:ff:6f: 7c:97:97:72:81:cd:a3:3e:28:f3:97:5f:48:d9:ce: 30:4f:46:02:55:b2:ad:ff:08:37:5c:48:8e:37:2b: 7f:15:2d:cc:2f:69:df:78:c1:45:e2:22:31:1e:e0: b9:6d:a9:f8:a4:df:7e:d2:74:e5:87:62:ec:6b:55: f2:d5:0d:07:b4:45:6a:fd:91:c1:08:5c:f7:81:54: a8:5a:8c:06:31:4f:b7:94:34:e7:47:53:3b:56:4a: f2:c4:c0:cd:27:4a:51:9d:9c:d4:9d:e2:ef:77:e8: b1:1a:10:66:90:05:06:93:fc:27:77:9a:12:17:47: 60:98:c9:4d:8d:1e:51:a8:fd:16:35:74:c0:3f:c2: 93:cb:57:17:44:14:bb:51:a3:4f:65:9b:e3:77:54: 88:fd:5b:6b:02:a0:ec:9e:b8:4d:c8:23:83:17:d9: 09:c1:b0:df:4c:4b:83:dc:1a:02:bf:25:30:0f:5a: b2:a8:96:bc:d6:5a:7f:3f:fe:b1:9b:8a:f4:c7:d4: b0:39:e2:80:b1:b8:18:33:0c:79:a3:48:f1:63:9a: 28:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:14:B3:F5:AE:37:16:61:7E:ED:E1:FA:2D:C0:3E:87:E7:8C:A8:F0 X509v3 Authority Key Identifier: keyid:94:79:B8:C5:D5:AE:8F:AB:DC:57:A9:AB:54:9A:DD:E2:0B:E8:A4:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:7b:5e:47:38:ad:e9:f7:aa:cf:13:52:68:9d:9b:cf:06:42: 40:51:fb:93:7d:a3:cc:68:1d:9d:b6:5c:85:60:d5:cf:48:ac: ff:80:84:67:ab:f8:0c:a4:58:7c:08:91:67:a6:c3:fc:8d:0b: 76:85:37:29:06:b0:86:7d:69:78:a8:2c:99:bf:34:e3:de:53: cc:00:37:69:2b:b4:23:43:52:0c:f9:da:67:ab:b7:5b:af:3b: 13:be:87:79:df:9f:0b:97:88:1b:52:63:54:71:f5:54:ff:a3: 2b:9e:dd:a7:92:a3:84:70:da:d9:b5:8b:12:12:df:15:df:e4: 72:09:95:d0:b3:dc:80:3e:46:d8:00:a1:f8:d6:2b:f2:64:4e: 30:45:65:2a:a5:92:4f:57:a4:ae:a5:12:11:be:b4:4e:ea:79: 3c:a4:dc:fb:ec:dd:79:71:15:b9:58:56:44:8f:d5:80:43:26: 52:f4:40:e2:6b:00:09:44:69:b9:f1:c3:65:e3:49:ec:27:a0: 6c:12:29:33:80:5a:73:53:f4:59:d3:83:66:5d:9d:80:b0:e2: df:5f:b4:72:e3:24:1f:66:09:bd:5e:d9:ee:51:7a:e8:15:96: 59:34:5a:65:1a:92:aa:b6:02:82:0d:81:4c:62:4c:c7:cd:c4: 6c:69:9a:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNQz12+tZB0S7WXsQX5ybwEp4sHEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ3OUI4QzVENUFFOEZBQkRDNTdBOUFCNTQ5QURERTIw QkU4QTRCMzAeFw0yNTA4MDgxMjE3MDNaFw0yNTA4MTExNDI1MDNaMDMxMTAvBgNV BAMTKDdBMTRCM0Y1QUUzNzE2NjE3RUVERTFGQTJEQzAzRTg3RTc4Q0E4RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMj1AuZAW4Qyux06hwZM+Y5SgM KhLlg7rGBtbUFNhe3o9TQisDIJcvSn7/b3yXl3KBzaM+KPOXX0jZzjBPRgJVsq3/ CDdcSI43K38VLcwvad94wUXiIjEe4Lltqfik337SdOWHYuxrVfLVDQe0RWr9kcEI XPeBVKhajAYxT7eUNOdHUztWSvLEwM0nSlGdnNSd4u936LEaEGaQBQaT/Cd3mhIX R2CYyU2NHlGo/RY1dMA/wpPLVxdEFLtRo09lm+N3VIj9W2sCoOyeuE3II4MX2QnB sN9MS4PcGgK/JTAPWrKolrzWWn8//rGbivTH1LA54oCxuBgzDHmjSPFjmiglAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUehSz9a43FmF+7eH6LcA+h+eMqPAwHwYDVR0j BBgwFoAUlHm4xdWuj6vcV6mrVJrd4gvopLMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTBhYTE1OC02NTgxLTRjYmUtYjZjZS1kODcyMWM3MTlmYTAvMC85NDc5QjhDNUQ1 QUU4RkFCREM1N0E5QUI1NDlBRERFMjBCRThBNEIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTQ3OUI4QzVENUFFOEZBQkRDNTdBOUFCNTQ5QURERTIwQkU4 QTRCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTkwYWExNTgtNjU4MS00Y2JlLWI2 Y2UtZDg3MjFjNzE5ZmEwLzAvOTQ3OUI4QzVENUFFOEZBQkRDNTdBOUFCNTQ5QURE RTIwQkU4QTRCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADZ7Xkc4ren3qs8TUmidm88GQkBR+5N9o8xo HZ22XIVg1c9IrP+AhGer+AykWHwIkWemw/yNC3aFNykGsIZ9aXioLJm/NOPeU8wA N2krtCNDUgz52mert1uvOxO+h3nfnwuXiBtSY1Rx9VT/oyue3aeSo4Rw2tm1ixIS 3xXf5HIJldCz3IA+RtgAofjWK/JkTjBFZSqlkk9XpK6lEhG+tE7qeTyk3Pvs3Xlx FblYVkSP1YBDJlL0QOJrAAlEabnxw2XjSewnoGwSKTOAWnNT9FnTg2ZdnYCw4t9f tHLjJB9mCb1e2e5ReugVllk0WmUakqq2AoINgUxiTMfNxGxpmqo= -----END CERTIFICATE-----Generated at Sat Aug 9 20:34:07 2025 by rpki-client