$ rpki-client -vvf repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft File: 9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft (raw, json) Hash identifier: 2ad/mUu1BYhVwjJXQYd3AXhigGjHUzShSGf6Nvl/syM= Subject key identifier: 42:8C:03:8D:93:6B:E8:6B:16:01:8E:D9:DE:AE:93:34:12:C9:BB:C6 Authority key identifier: 9F:64:F1:24:BC:CF:26:E2:26:CC:EA:CE:01:1C:CF:BB:F2:4A:86:87 Certificate issuer: /CN=9F64F124BCCF26E226CCEACE011CCFBBF24A8687 Certificate serial: 4F1AAA82C4FD3BAB767AFC5135F0454AF32AFB8A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft Manifest number: FC Signing time: Wed 04 Jun 2025 11:22:12 +0000 Manifest this update: Wed 04 Jun 2025 11:17:12 +0000 Manifest next update: Sat 07 Jun 2025 19:19:12 +0000 Files and hashes: 1: 9F64F124BCCF26E226CCEACE011CCFBBF24A8687.crl (hash: rypf7IsJvHeZsAi59huMi4rvFyI34iBWJ4FeldMQdKs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.crl rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 19:19:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:1a:aa:82:c4:fd:3b:ab:76:7a:fc:51:35:f0:45:4a:f3:2a:fb:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F64F124BCCF26E226CCEACE011CCFBBF24A8687 Validity Not Before: Jun 4 11:17:12 2025 GMT Not After : Jun 7 19:19:12 2025 GMT Subject: CN=428C038D936BE86B16018ED9DEAE933412C9BBC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e8:b0:a3:76:07:45:5a:ed:bc:3b:7d:8a:fa: e7:49:38:4d:ef:d0:7f:69:43:0b:09:74:28:8b:44: d7:e4:ba:23:16:60:1b:1a:f3:15:f5:46:1f:67:6e: 58:5c:d8:56:aa:7a:88:06:14:32:9f:a3:d6:77:e7: 83:b4:4f:4d:6a:da:62:a0:a1:6b:36:07:39:62:0c: 71:a4:53:dc:d0:3a:f8:55:4f:63:21:10:76:2b:14: 35:5d:0c:8b:fb:9e:36:09:68:0a:e6:1c:3a:81:8a: 7e:5a:da:57:36:81:1f:8d:8b:d4:8f:2d:83:ba:62: e3:3b:56:36:b5:d4:47:7e:f5:9d:9a:fb:ad:30:41: 3e:c0:d6:69:a7:20:b4:11:ab:22:d7:bd:44:66:bb: a0:13:50:61:bf:a0:ef:2c:ad:37:06:aa:12:50:d6: 97:c3:7b:20:ba:39:02:9c:a8:11:e4:3d:e5:4a:fc: bd:1e:da:a5:e9:77:b6:54:fb:4d:4c:0f:be:47:f3: 22:42:6a:b2:1f:ef:d7:68:ee:55:95:4f:ce:1c:e1: e5:69:af:66:58:bb:ed:96:85:73:51:3b:2b:76:bd: 58:4b:3f:7a:68:21:c6:36:e3:1a:6b:69:06:3c:93: 64:8a:48:7e:61:c5:51:11:73:46:8b:8c:e4:77:4b: eb:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:8C:03:8D:93:6B:E8:6B:16:01:8E:D9:DE:AE:93:34:12:C9:BB:C6 X509v3 Authority Key Identifier: keyid:9F:64:F1:24:BC:CF:26:E2:26:CC:EA:CE:01:1C:CF:BB:F2:4A:86:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1f286f0c-0fcd-439c-8dfe-8065c9178901/0/9F64F124BCCF26E226CCEACE011CCFBBF24A8687.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:2f:78:3d:70:8b:08:56:46:cb:d0:7e:c8:96:f7:ad:0e:92: 46:98:1b:dc:b3:c2:a6:af:65:88:71:c2:94:c5:17:52:e0:45: a9:11:9a:73:ba:a9:49:1c:82:cc:7e:dd:72:99:47:9b:7f:e1: 43:4d:76:19:55:ac:d8:33:92:77:13:1d:15:d2:e2:e8:ea:da: a3:a3:54:94:b1:90:d1:9f:9f:1a:97:db:a5:cf:4e:44:5f:8f: 44:6a:bc:53:bb:ab:7a:b3:98:26:a8:29:17:37:1d:4c:a3:3d: 02:19:15:28:d7:b1:89:6c:07:cb:1d:e3:f2:c1:b5:cc:da:e0: af:c3:4a:d4:3e:29:4e:3a:8f:44:84:93:be:b3:e9:b2:00:5b: e2:92:e9:b7:ce:07:a4:e8:b0:4a:78:f0:f5:63:9f:e6:ab:e4: 43:76:f1:66:c5:b6:71:53:62:07:4e:a8:8f:4e:42:3a:ab:de: bf:ea:7d:cc:e2:e0:52:ad:1f:dc:fe:42:88:d2:01:32:b9:e4: 80:5d:af:49:20:ae:25:84:c1:8a:c7:0e:93:5e:4b:2f:a4:29: d2:ff:6a:2d:2d:d0:0b:25:67:ac:4d:2f:e9:5e:70:88:9f:ce: 5d:07:db:5d:f9:41:3a:51:fa:db:7f:6e:f2:e9:80:50:d2:a5: a7:75:51:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTxqqgsT9O6t2evxRNfBFSvMq+4owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY2NEYxMjRCQ0NGMjZFMjI2Q0NFQUNFMDExQ0NGQkJG MjRBODY4NzAeFw0yNTA2MDQxMTE3MTJaFw0yNTA2MDcxOTE5MTJaMDMxMTAvBgNV BAMTKDQyOEMwMzhEOTM2QkU4NkIxNjAxOEVEOURFQUU5MzM0MTJDOUJCQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC46LCjdgdFWu28O32K+udJOE3v 0H9pQwsJdCiLRNfkuiMWYBsa8xX1Rh9nblhc2FaqeogGFDKfo9Z354O0T01q2mKg oWs2BzliDHGkU9zQOvhVT2MhEHYrFDVdDIv7njYJaArmHDqBin5a2lc2gR+Ni9SP LYO6YuM7Vja11Ed+9Z2a+60wQT7A1mmnILQRqyLXvURmu6ATUGG/oO8srTcGqhJQ 1pfDeyC6OQKcqBHkPeVK/L0e2qXpd7ZU+01MD75H8yJCarIf79do7lWVT84c4eVp r2ZYu+2WhXNROyt2vVhLP3poIcY24xpraQY8k2SKSH5hxVERc0aLjOR3S+uBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQowDjZNr6GsWAY7Z3q6TNBLJu8YwHwYDVR0j BBgwFoAUn2TxJLzPJuImzOrOARzPu/JKhocwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZjI4NmYwYy0wZmNkLTQzOWMtOGRmZS04MDY1YzkxNzg5MDEvMC85RjY0RjEyNEJD Q0YyNkUyMjZDQ0VBQ0UwMTFDQ0ZCQkYyNEE4Njg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY2NEYxMjRCQ0NGMjZFMjI2Q0NFQUNFMDExQ0NGQkJGMjRB ODY4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWYyODZmMGMtMGZjZC00MzljLThk ZmUtODA2NWM5MTc4OTAxLzAvOUY2NEYxMjRCQ0NGMjZFMjI2Q0NFQUNFMDExQ0NG QkJGMjRBODY4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEYveD1wiwhWRsvQfsiW960OkkaYG9yzwqav ZYhxwpTFF1LgRakRmnO6qUkcgsx+3XKZR5t/4UNNdhlVrNgzkncTHRXS4ujq2qOj VJSxkNGfnxqX26XPTkRfj0RqvFO7q3qzmCaoKRc3HUyjPQIZFSjXsYlsB8sd4/LB tcza4K/DStQ+KU46j0SEk76z6bIAW+KS6bfOB6TosEp48PVjn+ar5EN28WbFtnFT YgdOqI9OQjqr3r/qfczi4FKtH9z+QojSATK55IBdr0kgriWEwYrHDpNeSy+kKdL/ ai0t0AslZ6xNL+lecIifzl0H2135QTpR+tt/bvLpgFDSpad1UWU= -----END CERTIFICATE-----Generated at Thu Jun 5 18:11:24 2025 by rpki-client