$ rpki-client -vvf repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft File: 901FA7FD9132963972C91517CDC7E5EE9077E078.mft (raw, json) Hash identifier: 1QbwK9A62qxBuFfJ/9qB6AYyEmkXombQ039SaoDrqH8= Subject key identifier: 54:9A:2B:5D:61:4D:F9:BC:0C:43:E1:9A:74:06:80:E8:E7:0A:22:8F Authority key identifier: 90:1F:A7:FD:91:32:96:39:72:C9:15:17:CD:C7:E5:EE:90:77:E0:78 Certificate issuer: /CN=901FA7FD9132963972C91517CDC7E5EE9077E078 Certificate serial: 5C40C891426F83EBDF51C6C6DE92D1983BBBF31B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/901FA7FD9132963972C91517CDC7E5EE9077E078.cer Subject info access: rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft Manifest number: 0115 Signing time: Tue 22 Jul 2025 01:00:46 +0000 Manifest this update: Tue 22 Jul 2025 00:55:46 +0000 Manifest next update: Fri 25 Jul 2025 05:12:46 +0000 Files and hashes: 1: 901FA7FD9132963972C91517CDC7E5EE9077E078.crl (hash: wsnZ6oHyg4HFnd1a0iyEC6nHhTTA34GD8Zm3+0jD3H0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.crl rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/901FA7FD9132963972C91517CDC7E5EE9077E078.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 03:15:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:40:c8:91:42:6f:83:eb:df:51:c6:c6:de:92:d1:98:3b:bb:f3:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=901FA7FD9132963972C91517CDC7E5EE9077E078 Validity Not Before: Jul 22 00:55:46 2025 GMT Not After : Jul 25 05:12:46 2025 GMT Subject: CN=549A2B5D614DF9BC0C43E19A740680E8E70A228F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:84:2e:fe:fc:29:ca:e5:11:9e:b2:b4:46:f5: d1:31:40:e2:1a:cd:2a:98:01:96:8a:a2:65:91:f8: 13:bb:1d:f0:69:68:ff:56:cc:4f:e9:c8:9f:12:b0: b9:c0:07:ea:85:66:73:0c:59:2e:56:91:12:ad:4e: 85:39:bf:e5:cc:dc:6b:fe:47:0f:46:76:f9:3a:57: aa:3f:dd:40:f8:80:6b:7d:29:ff:40:91:93:03:d3: ed:d2:96:58:59:de:0b:68:61:bf:6e:13:b3:88:bc: 87:8a:bd:1a:9b:3d:37:9b:99:1f:81:2d:fd:b9:f9: f2:96:4f:e1:8b:30:cf:ce:37:5b:d9:3e:2b:ab:44: fc:df:b2:c4:c7:47:2d:90:b3:37:9a:21:b8:42:7d: d5:02:96:5e:2d:37:56:b8:4d:f6:04:1b:e8:c6:37: 11:7f:4a:08:ea:5a:33:72:f8:88:c9:5a:54:ef:96: df:f1:6e:99:74:34:7c:57:d9:fc:08:32:94:5e:44: ed:1b:75:24:0e:dd:66:ec:da:da:43:ed:2e:2a:2d: 6b:fd:70:d0:39:2b:c7:f7:a4:ca:d0:1f:41:95:e5: 62:32:12:79:ff:1d:14:bc:cc:55:f9:1e:42:e9:69: d1:fd:d6:d6:dc:cf:7e:12:46:a2:3d:93:f9:cf:b3: d3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:9A:2B:5D:61:4D:F9:BC:0C:43:E1:9A:74:06:80:E8:E7:0A:22:8F X509v3 Authority Key Identifier: keyid:90:1F:A7:FD:91:32:96:39:72:C9:15:17:CD:C7:E5:EE:90:77:E0:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/901FA7FD9132963972C91517CDC7E5EE9077E078.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:4b:e4:d1:7e:43:67:e3:c7:e7:cd:1c:08:ff:b6:da:4e:9d: d3:f5:d8:2c:0e:75:59:4b:07:1c:3a:24:1a:29:0a:a0:e2:1f: 78:fc:cf:98:9a:0f:6e:22:c6:4e:9e:8a:0e:26:ad:25:85:bb: 8b:07:49:69:27:90:20:da:3e:14:87:b2:25:4a:e0:17:4f:3d: df:57:44:59:6a:f6:f3:9a:59:75:a7:72:fa:0f:1b:2c:96:13: 43:95:de:43:2e:1c:aa:96:0a:df:e0:48:2a:db:39:53:65:8a: 69:95:eb:ca:eb:d4:2e:29:80:ce:ca:23:91:05:79:3e:c2:66: a8:82:58:3c:5a:68:56:47:ee:cc:eb:f7:ff:56:7b:cb:28:27: 66:a4:a6:37:39:67:ce:69:1c:4d:a3:2e:98:45:83:a7:b2:d3: 3f:75:ef:11:9e:17:4a:cd:59:88:1b:ed:df:fd:f8:d6:8e:dd: 9e:bc:16:90:ed:f3:9b:78:ac:9a:af:89:92:a7:f8:c1:02:19: 26:9c:ca:0f:18:18:76:e7:f1:9a:84:c8:5a:cd:93:46:cf:6e: cc:f2:b2:0f:38:75:f0:16:55:90:d7:a9:d2:fe:f6:4a:6b:3f: ea:1e:c0:ad:9c:51:d6:fd:a1:72:bd:b0:fe:0a:ef:04:6d:17: 1a:d3:6d:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXEDIkUJvg+vfUcbG3pLRmDu78xswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTAxRkE3RkQ5MTMyOTYzOTcyQzkxNTE3Q0RDN0U1RUU5 MDc3RTA3ODAeFw0yNTA3MjIwMDU1NDZaFw0yNTA3MjUwNTEyNDZaMDMxMTAvBgNV BAMTKDU0OUEyQjVENjE0REY5QkMwQzQzRTE5QTc0MDY4MEU4RTcwQTIyOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0hC7+/CnK5RGesrRG9dExQOIa zSqYAZaKomWR+BO7HfBpaP9WzE/pyJ8SsLnAB+qFZnMMWS5WkRKtToU5v+XM3Gv+ Rw9Gdvk6V6o/3UD4gGt9Kf9AkZMD0+3SllhZ3gtoYb9uE7OIvIeKvRqbPTebmR+B Lf25+fKWT+GLMM/ON1vZPiurRPzfssTHRy2QszeaIbhCfdUCll4tN1a4TfYEG+jG NxF/SgjqWjNy+IjJWlTvlt/xbpl0NHxX2fwIMpReRO0bdSQO3Wbs2tpD7S4qLWv9 cNA5K8f3pMrQH0GV5WIyEnn/HRS8zFX5HkLpadH91tbcz34SRqI9k/nPs9PPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVJorXWFN+bwMQ+GadAaA6OcKIo8wHwYDVR0j BBgwFoAUkB+n/ZEyljlyyRUXzcfl7pB34HgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODBhOGRmZC1hNjc5LTQ0NGEtYjlhOC02ZTNjYjQ4MWEwNzkvMC85MDFGQTdGRDkx MzI5NjM5NzJDOTE1MTdDREM3RTVFRTkwNzdFMDc4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTAxRkE3RkQ5MTMyOTYzOTcyQzkxNTE3Q0RDN0U1RUU5MDc3 RTA3OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjgwYThkZmQtYTY3OS00NDRhLWI5 YTgtNmUzY2I0ODFhMDc5LzAvOTAxRkE3RkQ5MTMyOTYzOTcyQzkxNTE3Q0RDN0U1 RUU5MDc3RTA3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAARL5NF+Q2fjx+fNHAj/ttpOndP12CwOdVlL Bxw6JBopCqDiH3j8z5iaD24ixk6eig4mrSWFu4sHSWknkCDaPhSHsiVK4BdPPd9X RFlq9vOaWXWncvoPGyyWE0OV3kMuHKqWCt/gSCrbOVNlimmV68rr1C4pgM7KI5EF eT7CZqiCWDxaaFZH7szr9/9We8soJ2akpjc5Z85pHE2jLphFg6ey0z917xGeF0rN WYgb7d/9+NaO3Z68FpDt85t4rJqviZKn+MECGSacyg8YGHbn8ZqEyFrNk0bPbszy sg84dfAWVZDXqdL+9kprP+oewK2cUdb9oXK9sP4K7wRtFxrTbQA= -----END CERTIFICATE-----Generated at Tue Jul 22 04:19:11 2025 by rpki-client