$ rpki-client -vvf repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.mft File: D9622F68C539A365B6FA78463F3CD3D3EC231214.mft (raw, json) Hash identifier: K7CgRGrutv/HRST4V4HP9hegvrItPI42h0n1lWtpHLg= Subject key identifier: C2:91:F7:08:12:B0:FE:EF:05:11:DF:FF:91:E0:CF:E0:09:E7:B6:D1 Authority key identifier: D9:62:2F:68:C5:39:A3:65:B6:FA:78:46:3F:3C:D3:D3:EC:23:12:14 Certificate issuer: /CN=D9622F68C539A365B6FA78463F3CD3D3EC231214 Certificate serial: 4CBEA3B1F2E8E9312F79507290A0F9B61A0AD03D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9622F68C539A365B6FA78463F3CD3D3EC231214.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.mft Manifest number: A3 Signing time: Sat 19 Jul 2025 20:41:58 +0000 Manifest this update: Sat 19 Jul 2025 20:36:58 +0000 Manifest next update: Wed 23 Jul 2025 01:04:58 +0000 Files and hashes: 1: D9622F68C539A365B6FA78463F3CD3D3EC231214.crl (hash: e03SU8uX2X1pCBQ35bghw+WCgAVx3TdPXAijCgBuiqM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.crl rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9622F68C539A365B6FA78463F3CD3D3EC231214.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 01:04:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:be:a3:b1:f2:e8:e9:31:2f:79:50:72:90:a0:f9:b6:1a:0a:d0:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9622F68C539A365B6FA78463F3CD3D3EC231214 Validity Not Before: Jul 19 20:36:58 2025 GMT Not After : Jul 23 01:04:58 2025 GMT Subject: CN=C291F70812B0FEEF0511DFFF91E0CFE009E7B6D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a5:00:ec:bb:07:00:25:32:43:5a:b5:0d:b2: 00:b8:9a:a8:45:41:84:33:05:5b:cb:20:9e:88:8d: 6c:74:35:52:31:c5:4f:ea:e0:56:7b:c0:f7:91:71: fe:db:61:d7:5c:05:2d:d7:d5:93:c2:f9:fa:fc:6f: 71:5e:3d:ac:ca:a2:95:eb:80:bb:74:7d:7f:e1:e2: 0c:09:36:f5:be:99:44:dd:de:14:4c:76:e1:19:16: f4:8f:48:1c:ae:67:21:65:5f:17:23:e2:d8:9b:12: b6:3d:d7:04:d1:19:9b:b1:67:f2:bf:16:1f:08:71: c3:95:98:e7:64:9d:4b:f6:0f:bf:01:ab:28:dd:9a: 65:9f:be:00:45:3f:1c:e8:96:b6:68:d7:34:4a:a8: cb:0c:af:3f:3d:f2:5f:32:a4:ea:40:d6:b3:f3:ef: bd:61:ac:37:a2:85:5c:89:60:a6:f0:26:2f:6b:c0: f5:dc:e0:da:c1:c9:57:eb:2a:a4:76:70:2a:c2:b7: 7e:fe:a5:43:92:71:fd:c9:f7:40:52:3a:29:62:b7: f9:15:15:4a:eb:54:d1:b5:42:8d:70:fb:40:86:10: 07:ce:2b:38:e4:3a:8e:46:5c:36:fc:c2:79:77:3d: 6b:c9:00:5e:07:04:f3:75:6c:99:14:e2:02:d6:18: be:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:91:F7:08:12:B0:FE:EF:05:11:DF:FF:91:E0:CF:E0:09:E7:B6:D1 X509v3 Authority Key Identifier: keyid:D9:62:2F:68:C5:39:A3:65:B6:FA:78:46:3F:3C:D3:D3:EC:23:12:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9622F68C539A365B6FA78463F3CD3D3EC231214.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:8a:6e:a4:a2:d7:7a:e5:f0:ff:5b:b7:bf:50:41:db:51:65: 4e:16:34:ee:05:71:a2:7e:49:ef:ab:aa:07:a0:2e:3c:64:51: 6b:b5:8b:89:0e:4f:81:e5:93:16:ae:e6:e2:53:bf:01:95:b3: dd:45:69:6e:72:9f:32:77:87:38:ee:5a:b2:7e:cb:e9:90:5d: 61:80:8b:7e:47:ae:74:b7:51:8a:7c:68:e0:0a:d3:ab:6b:97: f2:b2:2b:6f:fd:59:57:ec:49:48:22:71:f7:60:21:1e:51:c3: da:8f:69:5a:77:cc:3c:5e:c3:5f:bb:0c:f9:2b:80:5c:77:68: 81:e0:8c:82:57:5b:b7:04:fc:80:35:63:98:34:ea:38:05:66: 14:d1:5c:18:2d:b1:d6:15:2a:b6:53:75:cf:be:ae:5c:c7:ab: f7:1e:26:28:a7:40:3e:a2:b7:c9:10:f6:9e:04:14:c0:b8:c6: 7c:cf:f6:14:c0:55:c3:3e:a4:99:fc:9a:a5:a0:1f:aa:92:f2: 13:9b:d1:e3:cc:2b:da:52:3f:88:ed:f6:e4:1e:f0:81:d5:a1: 87:19:24:23:c9:90:87:ab:84:c9:6a:4b:7b:6c:67:52:5b:b7: e2:af:7f:5d:a5:3e:18:ce:cd:29:7c:7a:f9:6c:67:82:8b:85: 5e:02:bd:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTL6jsfLo6TEveVBykKD5thoK0D0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDk2MjJGNjhDNTM5QTM2NUI2RkE3ODQ2M0YzQ0QzRDNF QzIzMTIxNDAeFw0yNTA3MTkyMDM2NThaFw0yNTA3MjMwMTA0NThaMDMxMTAvBgNV BAMTKEMyOTFGNzA4MTJCMEZFRUYwNTExREZGRjkxRTBDRkUwMDlFN0I2RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZpQDsuwcAJTJDWrUNsgC4mqhF QYQzBVvLIJ6IjWx0NVIxxU/q4FZ7wPeRcf7bYddcBS3X1ZPC+fr8b3FePazKopXr gLt0fX/h4gwJNvW+mUTd3hRMduEZFvSPSByuZyFlXxcj4tibErY91wTRGZuxZ/K/ Fh8IccOVmOdknUv2D78BqyjdmmWfvgBFPxzolrZo1zRKqMsMrz898l8ypOpA1rPz 771hrDeihVyJYKbwJi9rwPXc4NrByVfrKqR2cCrCt37+pUOScf3J90BSOilit/kV FUrrVNG1Qo1w+0CGEAfOKzjkOo5GXDb8wnl3PWvJAF4HBPN1bJkU4gLWGL4tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwpH3CBKw/u8FEd//keDP4AnnttEwHwYDVR0j BBgwFoAU2WIvaMU5o2W2+nhGPzzT0+wjEhQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YmE2ZDA3Mi04MzYxLTRkZGYtODAwYS0xY2UxNWM0NzU5MmMvMC9EOTYyMkY2OEM1 MzlBMzY1QjZGQTc4NDYzRjNDRDNEM0VDMjMxMjE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDk2MjJGNjhDNTM5QTM2NUI2RkE3ODQ2M0YzQ0QzRDNFQzIz MTIxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGJhNmQwNzItODM2MS00ZGRmLTgw MGEtMWNlMTVjNDc1OTJjLzAvRDk2MjJGNjhDNTM5QTM2NUI2RkE3ODQ2M0YzQ0Qz RDNFQzIzMTIxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALiKbqSi13rl8P9bt79QQdtRZU4WNO4FcaJ+ Se+rqgegLjxkUWu1i4kOT4Hlkxau5uJTvwGVs91FaW5ynzJ3hzjuWrJ+y+mQXWGA i35HrnS3UYp8aOAK06trl/KyK2/9WVfsSUgicfdgIR5Rw9qPaVp3zDxew1+7DPkr gFx3aIHgjIJXW7cE/IA1Y5g06jgFZhTRXBgtsdYVKrZTdc++rlzHq/ceJiinQD6i t8kQ9p4EFMC4xnzP9hTAVcM+pJn8mqWgH6qS8hOb0ePMK9pSP4jt9uQe8IHVoYcZ JCPJkIerhMlqS3tsZ1Jbt+Kvf12lPhjOzSl8evlsZ4KLhV4CvV8= -----END CERTIFICATE-----Generated at Mon Jul 21 02:05:45 2025 by rpki-client