$ rpki-client -vvf repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft File: 9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft (raw, json) Hash identifier: eMykUSEhFaMEPgBm0eMlfUTDMJimvrPs6LDY0q1njqo= Subject key identifier: D0:0D:6B:5C:74:EA:0E:68:96:76:80:79:A9:F6:E0:C2:ED:0D:AA:BD Authority key identifier: 9A:4F:69:E8:B4:60:63:63:8E:82:F1:FB:06:0A:B3:D7:25:FA:48:21 Certificate issuer: /CN=9A4F69E8B46063638E82F1FB060AB3D725FA4821 Certificate serial: 79AED31ABF24F01EF2C4FDFB702B486817359B6F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A4F69E8B46063638E82F1FB060AB3D725FA4821.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft Manifest number: 02C2 Signing time: Wed 23 Jul 2025 00:32:16 +0000 Manifest this update: Wed 23 Jul 2025 00:27:16 +0000 Manifest next update: Sat 26 Jul 2025 11:04:16 +0000 Files and hashes: 1: 9A4F69E8B46063638E82F1FB060AB3D725FA4821.crl (hash: +IwpKjqZsLnfRi71eXX0nenAfJ+rPZelQUPSVR+c8OU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.crl rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A4F69E8B46063638E82F1FB060AB3D725FA4821.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 11:04:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:ae:d3:1a:bf:24:f0:1e:f2:c4:fd:fb:70:2b:48:68:17:35:9b:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A4F69E8B46063638E82F1FB060AB3D725FA4821 Validity Not Before: Jul 23 00:27:16 2025 GMT Not After : Jul 26 11:04:16 2025 GMT Subject: CN=D00D6B5C74EA0E6896768079A9F6E0C2ED0DAABD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e6:31:fe:3a:37:be:10:11:43:3a:7e:35:11: 7b:66:cd:d6:31:84:09:f0:f9:92:46:7b:60:7a:76: 2d:81:bb:e6:e6:90:7a:09:8d:c2:84:05:96:7b:af: df:27:b2:55:87:ad:d3:14:75:25:d8:b3:b3:8d:06: 08:9e:fd:e9:59:9e:f4:91:48:5a:99:eb:00:4c:5c: 0d:c1:dc:61:20:91:df:f1:be:eb:14:50:2a:ef:d9: 45:37:9e:e6:5b:3a:5d:21:0d:d8:2a:2b:ea:3c:95: 44:e9:e8:d9:0b:3e:a1:66:0d:51:f0:99:f1:58:02: 85:53:d8:f0:a1:84:f1:d2:14:07:46:d1:59:19:2d: 11:46:e2:8f:c5:88:65:ce:18:0b:0d:35:a7:48:53: 93:46:27:18:bd:3e:4a:40:ab:12:97:81:11:5b:a4: 4f:ce:c8:6a:b6:e4:fe:44:1f:77:21:1a:61:a2:60: 53:f7:0d:36:51:ff:d1:08:ef:46:9e:33:71:ed:a6: 01:8e:ff:48:b7:68:53:9e:0f:8c:e0:cf:3e:e6:a4: e3:5d:c7:bf:1c:2c:1c:9c:ad:17:ea:6b:60:bd:3c: a5:0d:cb:39:d8:79:61:8b:42:7c:3d:ec:58:e7:e7: 78:db:a1:c9:b2:15:7c:ec:09:e6:b9:6b:43:13:e9: df:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:0D:6B:5C:74:EA:0E:68:96:76:80:79:A9:F6:E0:C2:ED:0D:AA:BD X509v3 Authority Key Identifier: keyid:9A:4F:69:E8:B4:60:63:63:8E:82:F1:FB:06:0A:B3:D7:25:FA:48:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A4F69E8B46063638E82F1FB060AB3D725FA4821.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/9A4F69E8B46063638E82F1FB060AB3D725FA4821.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:56:2d:18:ad:13:5a:a2:7b:3e:a5:ad:08:f9:26:25:f8:07: ee:21:bd:a9:c9:30:57:e8:18:06:b9:75:e7:99:1a:dc:ab:98: 17:9b:d5:56:61:03:1d:3d:e2:81:06:06:65:1c:cd:da:75:72: ab:c3:5d:89:40:d4:c2:67:a6:62:5a:27:9f:b8:27:20:1a:34: 25:21:63:69:80:04:75:f0:bb:95:a6:4d:0f:ea:0c:47:80:1d: c2:61:25:4f:83:ad:b9:43:f9:39:e8:55:fd:1a:87:a8:4e:dd: c0:67:8a:26:f8:45:6b:57:f6:e3:2b:46:77:3d:54:b5:a6:92: f6:9c:51:7d:be:9b:e7:ed:43:ea:78:6a:6a:41:31:c0:fb:3a: bf:13:3d:96:5a:a6:af:cb:15:fe:40:b0:ad:06:95:ef:5d:7c: b8:8a:70:d7:00:53:b1:9a:a0:b4:9b:8a:ed:28:b1:93:27:32: c0:82:9d:fb:be:5d:e5:85:0c:e1:3c:a6:8e:6d:53:52:61:8f: ef:e4:47:c4:52:4c:db:bd:96:65:f8:ad:f9:31:2b:0e:f1:75: 23:18:c8:2f:16:35:c0:ae:15:62:2c:21:57:af:73:4b:b2:58: 7f:19:2b:5f:57:05:e7:e6:7d:23:94:65:39:1b:99:c1:84:29: 91:26:2d:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUea7TGr8k8B7yxP37cCtIaBc1m28wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUE0RjY5RThCNDYwNjM2MzhFODJGMUZCMDYwQUIzRDcy NUZBNDgyMTAeFw0yNTA3MjMwMDI3MTZaFw0yNTA3MjYxMTA0MTZaMDMxMTAvBgNV BAMTKEQwMEQ2QjVDNzRFQTBFNjg5Njc2ODA3OUE5RjZFMEMyRUQwREFBQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR5jH+Oje+EBFDOn41EXtmzdYx hAnw+ZJGe2B6di2Bu+bmkHoJjcKEBZZ7r98nslWHrdMUdSXYs7ONBgie/elZnvSR SFqZ6wBMXA3B3GEgkd/xvusUUCrv2UU3nuZbOl0hDdgqK+o8lUTp6NkLPqFmDVHw mfFYAoVT2PChhPHSFAdG0VkZLRFG4o/FiGXOGAsNNadIU5NGJxi9PkpAqxKXgRFb pE/OyGq25P5EH3chGmGiYFP3DTZR/9EI70aeM3HtpgGO/0i3aFOeD4zgzz7mpONd x78cLBycrRfqa2C9PKUNyznYeWGLQnw97Fjn53jbocmyFXzsCea5a0MT6d/pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0A1rXHTqDmiWdoB5qfbgwu0Nqr0wHwYDVR0j BBgwFoAUmk9p6LRgY2OOgvH7Bgqz1yX6SCEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NjM4YmQyMS1iZTU2LTQyYjQtODI3OC0wNTQwNWRjZTVlODgvMC85QTRGNjlFOEI0 NjA2MzYzOEU4MkYxRkIwNjBBQjNENzI1RkE0ODIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUE0RjY5RThCNDYwNjM2MzhFODJGMUZCMDYwQUIzRDcyNUZB NDgyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDYzOGJkMjEtYmU1Ni00MmI0LTgy NzgtMDU0MDVkY2U1ZTg4LzAvOUE0RjY5RThCNDYwNjM2MzhFODJGMUZCMDYwQUIz RDcyNUZBNDgyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADRWLRitE1qiez6lrQj5JiX4B+4hvanJMFfo GAa5deeZGtyrmBeb1VZhAx094oEGBmUczdp1cqvDXYlA1MJnpmJaJ5+4JyAaNCUh Y2mABHXwu5WmTQ/qDEeAHcJhJU+DrblD+TnoVf0ah6hO3cBniib4RWtX9uMrRnc9 VLWmkvacUX2+m+ftQ+p4ampBMcD7Or8TPZZapq/LFf5AsK0Gle9dfLiKcNcAU7Ga oLSbiu0osZMnMsCCnfu+XeWFDOE8po5tU1Jhj+/kR8RSTNu9lmX4rfkxKw7xdSMY yC8WNcCuFWIsIVevc0uyWH8ZK19XBefmfSOUZTkbmcGEKZEmLZM= -----END CERTIFICATE-----Generated at Wed Jul 23 02:18:24 2025 by rpki-client