$ rpki-client -vvf repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft File: C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft (raw, json) Hash identifier: 4Hsx+N1vN3Trgs2Oh8WJEZXgq7OWG29IV1hEhqZvBJI= Subject key identifier: 0D:7E:8F:36:78:D1:0D:5C:98:C3:95:34:F2:30:60:59:51:08:2C:84 Authority key identifier: C9:BA:44:08:64:54:B8:8A:BD:ED:EF:D6:01:08:86:1D:DD:AA:37:86 Certificate issuer: /CN=C9BA44086454B88ABDEDEFD60108861DDDAA3786 Certificate serial: 51CA868E20933522E15B4F4127F58C2FD2C6D537 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9BA44086454B88ABDEDEFD60108861DDDAA3786.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft Manifest number: F0 Signing time: Mon 21 Jul 2025 16:20:35 +0000 Manifest this update: Mon 21 Jul 2025 16:15:35 +0000 Manifest next update: Fri 25 Jul 2025 01:37:35 +0000 Files and hashes: 1: C9BA44086454B88ABDEDEFD60108861DDDAA3786.crl (hash: yfqWGvHNi1FtdOKKxyqWTBdn+sfDB1lbKP6SlNYH8w8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.crl rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9BA44086454B88ABDEDEFD60108861DDDAA3786.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 22:22:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:ca:86:8e:20:93:35:22:e1:5b:4f:41:27:f5:8c:2f:d2:c6:d5:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C9BA44086454B88ABDEDEFD60108861DDDAA3786 Validity Not Before: Jul 21 16:15:35 2025 GMT Not After : Jul 25 01:37:35 2025 GMT Subject: CN=0D7E8F3678D10D5C98C39534F230605951082C84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ae:06:e3:c2:fa:1d:99:5a:e7:98:62:9d:a1: 79:13:08:aa:dc:cd:16:93:e4:45:dc:90:55:e3:d1: f6:e8:45:5c:00:9e:35:fe:52:cf:b3:ef:3a:e2:bf: c0:0b:90:46:1d:fb:3b:78:74:68:3c:6c:9f:ad:91: cc:bd:50:51:11:f3:f4:ec:d0:6c:6e:3f:1d:ea:a5: a2:d7:08:6c:7a:3c:7c:f6:f2:e9:0e:0e:f5:ef:f0: ea:b6:8a:49:4c:48:77:a5:b9:29:70:6e:e1:3f:de: 2e:48:a1:53:0c:c8:d9:4a:40:dd:20:41:23:cb:4d: e0:44:e9:3a:97:76:ec:fd:0c:09:03:8a:4e:e2:f6: c5:01:18:91:54:b0:87:6d:5a:bf:b2:50:8e:71:fa: c8:01:04:d4:64:ee:d5:93:ee:65:39:d3:29:30:9f: 73:a9:82:d5:62:2a:8a:64:24:64:1a:45:ef:5d:f8: 18:90:37:0c:c8:fa:ce:71:dd:d8:68:68:f0:07:26: 7b:11:fa:d8:eb:4e:ef:da:a5:45:e8:3e:b0:3d:2c: 58:9e:f2:0d:e5:4c:f2:d3:c7:7f:b7:04:2a:bd:e6: db:a2:6d:bf:54:6c:48:86:20:a0:bf:bb:21:72:33: 4c:ab:8b:e7:4b:0e:64:45:ba:61:e7:e8:79:13:58: 06:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:7E:8F:36:78:D1:0D:5C:98:C3:95:34:F2:30:60:59:51:08:2C:84 X509v3 Authority Key Identifier: keyid:C9:BA:44:08:64:54:B8:8A:BD:ED:EF:D6:01:08:86:1D:DD:AA:37:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9BA44086454B88ABDEDEFD60108861DDDAA3786.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a1e6ac4-a2c4-41a7-b0db-6fa78b0ca8b0/0/C9BA44086454B88ABDEDEFD60108861DDDAA3786.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:3c:91:28:3a:70:09:d5:be:e4:94:f3:6f:f0:8b:ba:21:02: e3:64:a0:2a:27:46:d5:bf:c7:af:59:4e:73:f1:03:21:16:b9: 0d:0f:47:f9:98:02:25:51:42:55:26:50:99:0d:78:4a:60:4c: 1f:e6:cb:1b:4a:60:dc:7d:7d:68:c7:a1:b0:81:da:26:b8:42: 72:e1:5c:f3:3e:39:d6:51:27:bd:e3:ed:4a:36:68:03:a7:69: df:e2:3c:38:08:7d:25:fb:35:56:5b:22:6e:02:d4:fe:9e:55: a1:b5:ed:e2:85:1c:7a:90:59:1c:32:db:27:cb:b3:65:e4:fb: dd:83:0c:b8:0a:55:65:8d:21:e3:7a:65:44:c9:ea:2c:af:a7: 6d:5e:03:fa:15:0c:e4:b3:e9:f0:80:ce:dc:60:1d:75:d8:62: 4e:e0:ec:6c:3c:f2:13:2e:65:2b:7e:44:c3:be:f5:b1:13:f4: af:d7:20:11:ac:12:3e:67:a3:be:ff:41:02:50:2b:5b:f5:4b: ca:fa:8c:70:63:a7:e2:e7:82:13:b5:45:ed:0a:6c:cc:d9:9c: a2:3b:32:63:95:c8:31:14:5a:4e:bc:34:b0:7f:29:54:71:da: bd:32:36:1f:af:e1:ba:f4:90:c7:85:9c:f2:42:6d:a4:99:e6: a1:93:06:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUcqGjiCTNSLhW09BJ/WML9LG1TcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzlCQTQ0MDg2NDU0Qjg4QUJERURFRkQ2MDEwODg2MURE REFBMzc4NjAeFw0yNTA3MjExNjE1MzVaFw0yNTA3MjUwMTM3MzVaMDMxMTAvBgNV BAMTKDBEN0U4RjM2NzhEMTBENUM5OEMzOTUzNEYyMzA2MDU5NTEwODJDODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNrgbjwvodmVrnmGKdoXkTCKrc zRaT5EXckFXj0fboRVwAnjX+Us+z7zriv8ALkEYd+zt4dGg8bJ+tkcy9UFER8/Ts 0GxuPx3qpaLXCGx6PHz28ukODvXv8Oq2iklMSHeluSlwbuE/3i5IoVMMyNlKQN0g QSPLTeBE6TqXduz9DAkDik7i9sUBGJFUsIdtWr+yUI5x+sgBBNRk7tWT7mU50ykw n3OpgtViKopkJGQaRe9d+BiQNwzI+s5x3dhoaPAHJnsR+tjrTu/apUXoPrA9LFie 8g3lTPLTx3+3BCq95tuibb9UbEiGIKC/uyFyM0yri+dLDmRFumHn6HkTWAY1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDX6PNnjRDVyYw5U08jBgWVEILIQwHwYDVR0j BBgwFoAUybpECGRUuIq97e/WAQiGHd2qN4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YTFlNmFjNC1hMmM0LTQxYTctYjBkYi02ZmE3OGIwY2E4YjAvMC9DOUJBNDQwODY0 NTRCODhBQkRFREVGRDYwMTA4ODYxREREQUEzNzg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzlCQTQ0MDg2NDU0Qjg4QUJERURFRkQ2MDEwODg2MUREREFB Mzc4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWExZTZhYzQtYTJjNC00MWE3LWIw ZGItNmZhNzhiMGNhOGIwLzAvQzlCQTQ0MDg2NDU0Qjg4QUJERURFRkQ2MDEwODg2 MUREREFBMzc4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ88kSg6cAnVvuSU82/wi7ohAuNkoConRtW/ x69ZTnPxAyEWuQ0PR/mYAiVRQlUmUJkNeEpgTB/myxtKYNx9fWjHobCB2ia4QnLh XPM+OdZRJ73j7Uo2aAOnad/iPDgIfSX7NVZbIm4C1P6eVaG17eKFHHqQWRwy2yfL s2Xk+92DDLgKVWWNIeN6ZUTJ6iyvp21eA/oVDOSz6fCAztxgHXXYYk7g7Gw88hMu ZSt+RMO+9bET9K/XIBGsEj5no77/QQJQK1v1S8r6jHBjp+LnghO1Re0KbMzZnKI7 MmOVyDEUWk68NLB/KVRx2r0yNh+v4br0kMeFnPJCbaSZ5qGTBjY= -----END CERTIFICATE-----Generated at Mon Jul 21 18:03:34 2025 by rpki-client