$ rpki-client -vvf repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft File: 9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft (raw, json) Hash identifier: CCNGH5It6+MT/YEbuRdQBX3wg1ZdfwhiljTsRArK1MI= Subject key identifier: 05:56:AE:E7:50:AD:41:30:57:60:93:DE:F4:B4:1B:C6:B1:FF:65:7C Authority key identifier: 94:79:B8:C5:D5:AE:8F:AB:DC:57:A9:AB:54:9A:DD:E2:0B:E8:A4:B3 Certificate issuer: /CN=9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3 Certificate serial: 5C1A7E0151D7DD0508DF96CD1905673BD3870C39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft Manifest number: 01D9 Signing time: Sat 19 Jul 2025 00:02:03 +0000 Manifest this update: Fri 18 Jul 2025 23:57:03 +0000 Manifest next update: Tue 22 Jul 2025 09:33:03 +0000 Files and hashes: 1: 9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.crl (hash: X7pPCKAkw+brsuEIh41wnL6Aoy3tJdcwD7uW2vCCOJM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.crl rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 09:33:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:1a:7e:01:51:d7:dd:05:08:df:96:cd:19:05:67:3b:d3:87:0c:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3 Validity Not Before: Jul 18 23:57:03 2025 GMT Not After : Jul 22 09:33:03 2025 GMT Subject: CN=0556AEE750AD4130576093DEF4B41BC6B1FF657C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6f:c6:82:f4:c3:0e:c2:6a:38:7a:44:df:e9: 38:fc:77:f7:c4:4e:86:95:62:fa:c3:e5:e3:f4:ec: a9:56:4d:00:c7:18:eb:14:4b:3b:0c:b4:f3:00:9b: c8:08:ec:9b:77:7e:ab:b7:dc:a1:25:8b:b0:dd:61: 6d:20:04:cd:f7:29:9b:63:3c:84:8d:50:fe:02:40: 96:61:5b:1f:7f:64:cd:83:e1:b3:1f:66:d5:a9:96: 12:96:79:c3:95:da:0a:c6:b9:32:f7:6a:58:89:75: f7:ba:55:82:e7:ca:fe:01:57:df:60:b2:b0:ec:75: 81:59:6f:8a:f5:88:9b:d3:17:d8:06:3b:d9:98:68: 0e:c0:ed:f4:57:92:28:64:82:df:1e:b3:7b:e4:fb: 2c:b5:ad:23:97:03:4c:e1:e7:4f:33:bc:45:ce:e6: 65:cb:af:40:5f:6a:38:c4:af:21:6b:60:45:97:79: 1d:12:87:ed:38:94:48:24:82:ad:c3:be:3c:30:7b: 17:14:b1:6d:35:c0:76:54:bd:0d:6a:02:00:80:e6: 6c:87:5c:53:1b:45:2e:ef:3f:53:ce:39:54:4d:e6: 90:a8:21:a6:2e:3a:91:17:5d:c7:0d:89:0c:92:65: fb:13:30:df:66:43:76:72:0d:65:ae:81:c4:e9:42: b3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:56:AE:E7:50:AD:41:30:57:60:93:DE:F4:B4:1B:C6:B1:FF:65:7C X509v3 Authority Key Identifier: keyid:94:79:B8:C5:D5:AE:8F:AB:DC:57:A9:AB:54:9A:DD:E2:0B:E8:A4:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:fd:83:8a:53:3f:56:f9:31:f7:4f:27:55:1e:b3:86:0e:13: a6:c4:cb:15:14:6b:d6:98:48:78:56:f3:ea:0c:6a:21:f7:d6: 12:ff:4b:26:a3:da:52:dd:9b:9f:01:53:f2:3f:f5:11:a8:48: de:ce:17:ee:c0:79:f4:63:2c:d1:d4:54:a0:e8:42:13:9b:8b: ba:9b:00:9c:af:4c:04:95:e0:c3:51:95:f4:5c:33:98:22:82: 84:14:2a:41:cb:d8:d8:d0:ca:8b:31:13:5c:ac:8d:3b:80:22: cd:a4:e9:93:7a:d9:81:7c:fe:83:e6:ba:1a:b7:f2:70:c5:26: 2a:5f:9c:d5:ce:a9:b3:35:ee:67:4f:9a:23:de:5a:49:9a:8d: 0f:c1:eb:29:2d:6f:df:99:4f:13:63:f6:61:8a:5e:c4:a8:ee: 66:a9:51:51:45:2a:2b:77:40:a9:92:34:73:0d:cf:66:60:2c: ab:79:b9:39:f9:ab:b5:c3:50:dd:fd:86:09:f8:1e:13:2b:34: 91:0b:0b:20:d2:b7:9e:18:fb:f2:f4:d0:84:c4:1c:c0:3b:fb: 11:da:f9:56:e2:11:e9:97:c0:44:34:91:90:e2:15:9d:3c:f3: 64:8e:21:1a:74:db:ea:5b:d3:50:da:09:14:d5:18:27:2d:2b: 99:62:45:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXBp+AVHX3QUI35bNGQVnO9OHDDkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ3OUI4QzVENUFFOEZBQkRDNTdBOUFCNTQ5QURERTIw QkU4QTRCMzAeFw0yNTA3MTgyMzU3MDNaFw0yNTA3MjIwOTMzMDNaMDMxMTAvBgNV BAMTKDA1NTZBRUU3NTBBRDQxMzA1NzYwOTNERUY0QjQxQkM2QjFGRjY1N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFb8aC9MMOwmo4ekTf6Tj8d/fE ToaVYvrD5eP07KlWTQDHGOsUSzsMtPMAm8gI7Jt3fqu33KEli7DdYW0gBM33KZtj PISNUP4CQJZhWx9/ZM2D4bMfZtWplhKWecOV2grGuTL3aliJdfe6VYLnyv4BV99g srDsdYFZb4r1iJvTF9gGO9mYaA7A7fRXkihkgt8es3vk+yy1rSOXA0zh508zvEXO 5mXLr0BfajjEryFrYEWXeR0Sh+04lEgkgq3DvjwwexcUsW01wHZUvQ1qAgCA5myH XFMbRS7vP1POOVRN5pCoIaYuOpEXXccNiQySZfsTMN9mQ3ZyDWWugcTpQrPfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBVau51CtQTBXYJPe9LQbxrH/ZXwwHwYDVR0j BBgwFoAUlHm4xdWuj6vcV6mrVJrd4gvopLMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTBhYTE1OC02NTgxLTRjYmUtYjZjZS1kODcyMWM3MTlmYTAvMC85NDc5QjhDNUQ1 QUU4RkFCREM1N0E5QUI1NDlBRERFMjBCRThBNEIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTQ3OUI4QzVENUFFOEZBQkRDNTdBOUFCNTQ5QURERTIwQkU4 QTRCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTkwYWExNTgtNjU4MS00Y2JlLWI2 Y2UtZDg3MjFjNzE5ZmEwLzAvOTQ3OUI4QzVENUFFOEZBQkRDNTdBOUFCNTQ5QURE RTIwQkU4QTRCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAv9g4pTP1b5MfdPJ1Ues4YOE6bEyxUUa9aY SHhW8+oMaiH31hL/Syaj2lLdm58BU/I/9RGoSN7OF+7AefRjLNHUVKDoQhObi7qb AJyvTASV4MNRlfRcM5gigoQUKkHL2NjQyosxE1ysjTuAIs2k6ZN62YF8/oPmuhq3 8nDFJipfnNXOqbM17mdPmiPeWkmajQ/B6yktb9+ZTxNj9mGKXsSo7mapUVFFKit3 QKmSNHMNz2ZgLKt5uTn5q7XDUN39hgn4HhMrNJELCyDSt54Y+/L00ITEHMA7+xHa +VbiEemXwEQ0kZDiFZ0882SOIRp02+pb01DaCRTVGCctK5liRYQ= -----END CERTIFICATE-----Generated at Mon Jul 21 07:28:39 2025 by rpki-client