$ rpki-client -vvf repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft File: 9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft (raw, json) Hash identifier: oN0p0AYz0TJhI6WbQyqD4l9vnl6jkQ4pZeJ5c71DM2w= Subject key identifier: 91:D8:3F:7A:3F:A3:77:7A:B1:4D:46:20:67:04:8D:CE:AE:49:75:15 Authority key identifier: 9F:64:F1:24:BC:CF:26:E2:26:CC:EA:CE:01:1C:CF:BB:F2:4A:86:87 Certificate issuer: /CN=9F64F124BCCF26E226CCEACE011CCFBBF24A8687 Certificate serial: 3F17D57E7A625359E5964B5ADB4E5CCD7A3AF4EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft Manifest number: 0125 Signing time: Fri 05 Sep 2025 20:42:21 +0000 Manifest this update: Fri 05 Sep 2025 20:37:21 +0000 Manifest next update: Mon 08 Sep 2025 22:12:21 +0000 Files and hashes: 1: 9F64F124BCCF26E226CCEACE011CCFBBF24A8687.crl (hash: HCDWQC6FgohMGpaMPu/SMIQ3SGRD7rjLvbRO55fhtKc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.crl rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 22:12:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:17:d5:7e:7a:62:53:59:e5:96:4b:5a:db:4e:5c:cd:7a:3a:f4:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F64F124BCCF26E226CCEACE011CCFBBF24A8687 Validity Not Before: Sep 5 20:37:21 2025 GMT Not After : Sep 8 22:12:21 2025 GMT Subject: CN=91D83F7A3FA3777AB14D462067048DCEAE497515 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:fb:62:24:1e:df:d2:00:58:cc:1e:d8:6d:42: f6:96:5f:60:0d:35:46:81:a1:18:38:99:f3:c7:f2: 8a:87:2b:6e:55:2f:e9:79:c6:72:18:0c:59:0e:cc: 29:17:a0:75:07:6c:6d:4c:0d:30:e4:d7:ef:25:a0: d0:0d:88:93:91:0a:a7:0f:d1:44:f2:93:95:c6:0f: f4:af:d8:91:26:5f:5e:9b:dc:3a:84:89:4c:4a:7e: 50:56:f3:4b:d3:44:d3:5d:67:a9:fd:dc:58:ad:62: 8c:c4:17:95:f0:bf:84:cf:8b:6a:6e:24:bd:e2:50: ff:0e:d1:1a:25:6c:57:d4:52:97:71:de:7b:5c:d4: 80:16:5c:cb:d6:90:d7:4b:be:47:9d:12:86:4e:3d: e1:c0:e8:0f:2a:ad:c0:56:f6:03:8e:17:7a:98:d1: 75:55:34:b8:af:bd:01:ab:a0:b0:c9:73:34:0d:23: 75:6a:d1:9b:7a:ea:0f:03:98:b6:5b:fe:5d:ee:be: 15:99:46:fd:80:bb:b1:7a:44:05:2e:cf:22:39:04: e7:74:81:65:bd:cb:26:52:b9:4a:ff:f4:2e:97:b3: 94:b9:8a:6e:e9:1e:a3:85:a1:cb:e6:5c:f0:1e:b5: b7:86:45:d3:86:54:e1:8a:d3:63:e7:f3:b3:b1:b1: 42:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:D8:3F:7A:3F:A3:77:7A:B1:4D:46:20:67:04:8D:CE:AE:49:75:15 X509v3 Authority Key Identifier: keyid:9F:64:F1:24:BC:CF:26:E2:26:CC:EA:CE:01:1C:CF:BB:F2:4A:86:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:d4:87:fa:99:14:af:fa:9a:b3:2c:4f:67:0b:b2:2f:f6:41: 6f:a4:fe:4d:5b:d8:4a:58:bd:da:56:a9:6d:2c:e5:7e:77:5a: aa:b8:d1:05:72:a2:a8:ae:b0:f7:d1:b4:dc:63:e4:95:72:11: fa:6c:e1:5e:8e:c8:f0:10:e9:fa:69:9e:45:15:84:65:70:7a: ca:c4:22:4c:16:17:e8:94:17:5f:40:35:de:0e:10:fb:9d:20: de:bd:df:2d:e0:38:10:98:47:67:80:cd:d7:7f:52:85:72:f0: 5d:64:9d:26:d6:cc:4b:64:4f:5a:97:8e:bb:de:d8:e0:e2:63: 5f:7c:6a:70:83:6a:09:ed:60:10:03:d8:f0:5f:ef:1d:4c:dd: 1d:c4:4b:22:dd:b5:c5:89:d5:62:40:ef:c0:9a:78:d1:67:5c: f7:d8:0f:08:41:d1:89:66:c7:b9:18:f4:e0:7d:bf:18:d8:b9: 67:e7:69:c7:86:b6:06:de:d9:5e:59:df:7e:8a:35:b3:fe:ec: ed:ef:ee:c8:c9:89:58:b7:b8:88:99:1f:f8:26:f2:b1:a9:88: 67:dd:0d:8c:48:9d:96:dc:49:22:df:1e:f1:a4:55:7f:15:80: b7:99:e1:7e:31:52:eb:cd:fa:6f:9f:cb:a1:93:37:1b:9d:58: b9:0e:cf:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPxfVfnpiU1nllkta205czXo69O4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY2NEYxMjRCQ0NGMjZFMjI2Q0NFQUNFMDExQ0NGQkJG MjRBODY4NzAeFw0yNTA5MDUyMDM3MjFaFw0yNTA5MDgyMjEyMjFaMDMxMTAvBgNV BAMTKDkxRDgzRjdBM0ZBMzc3N0FCMTRENDYyMDY3MDQ4RENFQUU0OTc1MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6+2IkHt/SAFjMHthtQvaWX2AN NUaBoRg4mfPH8oqHK25VL+l5xnIYDFkOzCkXoHUHbG1MDTDk1+8loNANiJORCqcP 0UTyk5XGD/Sv2JEmX16b3DqEiUxKflBW80vTRNNdZ6n93FitYozEF5Xwv4TPi2pu JL3iUP8O0RolbFfUUpdx3ntc1IAWXMvWkNdLvkedEoZOPeHA6A8qrcBW9gOOF3qY 0XVVNLivvQGroLDJczQNI3Vq0Zt66g8DmLZb/l3uvhWZRv2Au7F6RAUuzyI5BOd0 gWW9yyZSuUr/9C6Xs5S5im7pHqOFocvmXPAetbeGRdOGVOGK02Pn87OxsUIjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkdg/ej+jd3qxTUYgZwSNzq5JdRUwHwYDVR0j BBgwFoAUn2TxJLzPJuImzOrOARzPu/JKhocwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZjI4NmYwYy0wZmNkLTQzOWMtOGRmZS04MDY1YzkxNzg5MDEvMC85RjY0RjEyNEJD Q0YyNkUyMjZDQ0VBQ0UwMTFDQ0ZCQkYyNEE4Njg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY2NEYxMjRCQ0NGMjZFMjI2Q0NFQUNFMDExQ0NGQkJGMjRB ODY4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWYyODZmMGMtMGZjZC00MzljLThk ZmUtODA2NWM5MTc4OTAxLzAvOUY2NEYxMjRCQ0NGMjZFMjI2Q0NFQUNFMDExQ0NG QkJGMjRBODY4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKDUh/qZFK/6mrMsT2cLsi/2QW+k/k1b2EpY vdpWqW0s5X53Wqq40QVyoqiusPfRtNxj5JVyEfps4V6OyPAQ6fppnkUVhGVwesrE IkwWF+iUF19ANd4OEPudIN693y3gOBCYR2eAzdd/UoVy8F1knSbWzEtkT1qXjrve 2ODiY198anCDagntYBAD2PBf7x1M3R3ESyLdtcWJ1WJA78CaeNFnXPfYDwhB0Ylm x7kY9OB9vxjYuWfnaceGtgbe2V5Z336KNbP+7O3v7sjJiVi3uIiZH/gm8rGpiGfd DYxInZbcSSLfHvGkVX8VgLeZ4X4xUuvN+m+fy6GTNxudWLkOz3A= -----END CERTIFICATE-----Generated at Sun Sep 7 15:34:22 2025 by rpki-client