$ rpki-client -vvf repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft File: 901FA7FD9132963972C91517CDC7E5EE9077E078.mft (raw, json) Hash identifier: lCILXwLbz0GqW5+Owrfr18xD94lVOgxOAL6gR3LETLQ= Subject key identifier: 33:65:61:87:19:1D:D3:F7:53:19:B8:BF:91:12:54:61:4B:48:D4:9A Authority key identifier: 90:1F:A7:FD:91:32:96:39:72:C9:15:17:CD:C7:E5:EE:90:77:E0:78 Certificate issuer: /CN=901FA7FD9132963972C91517CDC7E5EE9077E078 Certificate serial: 457EC04E2B772AF4A531E2879EC9C71FEB48D4D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/901FA7FD9132963972C91517CDC7E5EE9077E078.cer Subject info access: rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft Manifest number: 012A Signing time: Sun 07 Sep 2025 12:00:47 +0000 Manifest this update: Sun 07 Sep 2025 11:55:47 +0000 Manifest next update: Wed 10 Sep 2025 21:07:47 +0000 Files and hashes: 1: 901FA7FD9132963972C91517CDC7E5EE9077E078.crl (hash: LdXMsos9v6dSMzA7J3zSiQg5fHZVlzs8rp0/5IrXj1o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.crl rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/901FA7FD9132963972C91517CDC7E5EE9077E078.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:7e:c0:4e:2b:77:2a:f4:a5:31:e2:87:9e:c9:c7:1f:eb:48:d4:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=901FA7FD9132963972C91517CDC7E5EE9077E078 Validity Not Before: Sep 7 11:55:47 2025 GMT Not After : Sep 10 21:07:47 2025 GMT Subject: CN=33656187191DD3F75319B8BF911254614B48D49A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:93:0c:d5:ac:9c:0a:fc:a8:a3:09:b2:d7:5b: 71:fd:c4:2a:c6:1e:ba:d2:6c:bb:48:46:23:f8:39: 87:8f:01:29:5e:35:93:f5:8e:98:b9:bf:8c:6d:09: 95:32:5a:04:0c:11:d4:dd:93:de:ca:1e:26:46:71: 11:9d:d2:68:fc:ce:05:3e:21:3d:83:4f:44:bf:1c: 5c:5b:47:34:0c:02:9d:80:de:19:5e:96:12:60:7f: cd:7b:ad:0e:65:d4:ee:bf:5c:c1:17:24:df:b8:11: 7a:b5:ba:cd:3a:05:ff:1d:de:80:12:c4:0d:34:27: ea:db:01:d1:fd:be:99:9f:d4:0f:6c:91:98:cc:a4: 5d:a6:93:e6:40:1f:b8:76:a3:12:84:d3:4f:00:2f: 93:69:37:f7:9e:25:1c:9c:ea:1f:e1:f7:b1:82:fa: ac:c1:7c:ff:7c:ef:da:e3:c4:46:ce:51:a1:cc:e3: c4:84:de:24:99:c1:64:32:d4:a8:76:ce:6c:39:16: ab:23:b0:03:d2:3a:d0:22:c5:53:de:14:2a:dc:4b: cf:2d:75:56:d1:ea:51:48:3b:3f:de:58:7c:c6:21: 47:02:f6:99:86:96:53:0d:4a:08:82:26:a1:a7:2a: 66:73:09:69:85:6e:2f:21:20:dd:44:f6:b5:31:e3: 04:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:65:61:87:19:1D:D3:F7:53:19:B8:BF:91:12:54:61:4B:48:D4:9A X509v3 Authority Key Identifier: keyid:90:1F:A7:FD:91:32:96:39:72:C9:15:17:CD:C7:E5:EE:90:77:E0:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/901FA7FD9132963972C91517CDC7E5EE9077E078.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/280a8dfd-a679-444a-b9a8-6e3cb481a079/0/901FA7FD9132963972C91517CDC7E5EE9077E078.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:75:f3:a9:63:97:a9:f2:49:58:5b:a7:ff:7d:31:d6:10:65: 78:a5:18:49:46:a7:b7:d1:fb:09:bd:da:20:ca:bb:4b:4f:59: 6c:25:d6:72:17:4b:fc:f0:31:90:da:7d:70:f2:55:d4:87:fb: 59:37:2c:47:ce:73:47:cb:5c:7f:fb:2c:19:24:4e:ed:2b:32: d7:20:fd:db:24:22:4d:0b:b8:94:f8:2d:89:cf:7e:c1:f0:c5: e0:20:70:74:9a:ed:22:3c:31:90:37:08:ee:49:15:b7:3f:ee: 20:31:7c:3c:23:71:2c:dc:12:a1:7d:7d:03:11:34:b8:cf:b4: d9:87:02:cb:ac:f2:02:8e:21:49:1c:ae:29:61:4c:88:4c:20: a7:f7:cf:b5:c9:f7:87:cb:51:d2:a5:c1:74:0b:9e:13:97:f5: fb:b6:d8:5c:27:dc:0f:3d:24:48:05:2b:d8:1d:e3:42:4a:f9: 82:f5:c9:df:cd:0b:09:25:4f:18:6d:47:54:45:48:d5:97:82: 51:c2:0d:77:7a:64:ca:8d:8e:2e:61:6e:d2:76:24:69:6e:f1: b5:dd:22:c3:25:99:bb:da:e3:d2:92:70:ac:84:e1:b1:ea:76: 26:68:3a:b3:98:0d:0f:93:ab:f8:92:ae:1b:b9:5b:eb:ed:ac: ab:75:70:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURX7ATit3KvSlMeKHnsnHH+tI1NAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTAxRkE3RkQ5MTMyOTYzOTcyQzkxNTE3Q0RDN0U1RUU5 MDc3RTA3ODAeFw0yNTA5MDcxMTU1NDdaFw0yNTA5MTAyMTA3NDdaMDMxMTAvBgNV BAMTKDMzNjU2MTg3MTkxREQzRjc1MzE5QjhCRjkxMTI1NDYxNEI0OEQ0OUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhkwzVrJwK/KijCbLXW3H9xCrG HrrSbLtIRiP4OYePASleNZP1jpi5v4xtCZUyWgQMEdTdk97KHiZGcRGd0mj8zgU+ IT2DT0S/HFxbRzQMAp2A3hlelhJgf817rQ5l1O6/XMEXJN+4EXq1us06Bf8d3oAS xA00J+rbAdH9vpmf1A9skZjMpF2mk+ZAH7h2oxKE008AL5NpN/eeJRyc6h/h97GC +qzBfP9879rjxEbOUaHM48SE3iSZwWQy1Kh2zmw5FqsjsAPSOtAixVPeFCrcS88t dVbR6lFIOz/eWHzGIUcC9pmGllMNSgiCJqGnKmZzCWmFbi8hIN1E9rUx4wR9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM2Vhhxkd0/dTGbi/kRJUYUtI1JowHwYDVR0j BBgwFoAUkB+n/ZEyljlyyRUXzcfl7pB34HgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODBhOGRmZC1hNjc5LTQ0NGEtYjlhOC02ZTNjYjQ4MWEwNzkvMC85MDFGQTdGRDkx MzI5NjM5NzJDOTE1MTdDREM3RTVFRTkwNzdFMDc4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTAxRkE3RkQ5MTMyOTYzOTcyQzkxNTE3Q0RDN0U1RUU5MDc3 RTA3OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjgwYThkZmQtYTY3OS00NDRhLWI5 YTgtNmUzY2I0ODFhMDc5LzAvOTAxRkE3RkQ5MTMyOTYzOTcyQzkxNTE3Q0RDN0U1 RUU5MDc3RTA3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHN186ljl6nySVhbp/99MdYQZXilGElGp7fR +wm92iDKu0tPWWwl1nIXS/zwMZDafXDyVdSH+1k3LEfOc0fLXH/7LBkkTu0rMtcg /dskIk0LuJT4LYnPfsHwxeAgcHSa7SI8MZA3CO5JFbc/7iAxfDwjcSzcEqF9fQMR NLjPtNmHAsus8gKOIUkcrilhTIhMIKf3z7XJ94fLUdKlwXQLnhOX9fu22Fwn3A89 JEgFK9gd40JK+YL1yd/NCwklTxhtR1RFSNWXglHCDXd6ZMqNji5hbtJ2JGlu8bXd IsMlmbva49KScKyE4bHqdiZoOrOYDQ+Tq/iSrhu5W+vtrKt1cDk= -----END CERTIFICATE-----Generated at Sun Sep 7 14:04:42 2025 by rpki-client