$ rpki-client -vvf repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft File: 9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft (raw, json) Hash identifier: /1ptYAIj5ET1OEAnr+PgZavHkBd4iqfbYM9hvt/9nu0= Subject key identifier: 5E:FF:08:3C:44:C4:AD:EC:4D:58:28:08:AE:20:60:E4:45:3A:47:0D Authority key identifier: 9F:0F:0B:61:BB:6A:FA:ED:E5:A1:E7:59:1E:D4:84:13:13:DF:D6:FF Certificate issuer: /CN=9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF Certificate serial: 2327058DC58D3C1BBB915111C158712A27A14703 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft Manifest number: 01D1 Signing time: Sun 07 Sep 2025 09:31:56 +0000 Manifest this update: Sun 07 Sep 2025 09:26:56 +0000 Manifest next update: Wed 10 Sep 2025 13:47:56 +0000 Files and hashes: 1: 9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.crl (hash: n3YtsArPvHhcVseZaFS6whrgyVSv0SBNYdsc3je/Ajk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.crl rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:27:05:8d:c5:8d:3c:1b:bb:91:51:11:c1:58:71:2a:27:a1:47:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF Validity Not Before: Sep 7 09:26:56 2025 GMT Not After : Sep 10 13:47:56 2025 GMT Subject: CN=5EFF083C44C4ADEC4D582808AE2060E4453A470D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d6:3e:c6:48:16:c3:a5:5a:19:ba:39:27:f4: ca:04:d4:a3:3d:2c:8f:72:11:7c:6e:e6:30:81:25: 5f:66:13:ca:42:1d:6a:d3:af:af:40:df:6b:84:a4: 0f:db:22:c7:12:2e:5a:38:bb:f6:21:f6:27:8c:85: 49:d9:8e:91:06:a8:c0:17:6a:9f:1a:1a:bf:3a:c2: f6:9b:02:ab:e8:3d:53:62:a8:4f:43:61:31:67:4c: 7d:e5:13:c2:cb:a3:3f:5c:70:fd:ab:0e:65:72:2c: 03:a3:43:82:3a:5b:cc:bc:06:73:47:4c:94:42:64: 61:11:65:92:f3:e8:2c:42:33:38:69:d3:ae:f0:eb: 74:04:e0:ce:4e:6f:21:de:57:e0:a3:99:8e:24:64: 15:2f:d4:81:0c:3c:62:17:e3:5b:ee:38:83:af:d1: 11:b4:b6:38:97:c2:0b:ba:67:6f:39:d8:ae:e6:d7: 36:9c:a5:3c:79:32:39:6e:0b:c5:9a:8c:44:5a:02: f8:57:fe:90:f4:f5:c6:7c:06:77:5c:bf:96:58:89: c5:d1:2c:d1:b5:ce:2e:40:11:de:ba:a8:4b:22:ab: e4:ba:fd:d4:72:be:5a:a2:d2:a4:c5:05:b1:d1:44: 22:27:6d:e0:2a:1d:99:33:3f:19:a0:c4:d7:b4:ff: 08:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:FF:08:3C:44:C4:AD:EC:4D:58:28:08:AE:20:60:E4:45:3A:47:0D X509v3 Authority Key Identifier: keyid:9F:0F:0B:61:BB:6A:FA:ED:E5:A1:E7:59:1E:D4:84:13:13:DF:D6:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:f6:81:55:d0:3f:43:42:13:a3:a9:da:be:b1:7c:cc:b3:d2: 4a:d9:92:c7:42:c3:0d:72:a0:c2:ae:46:a8:4f:cf:66:c6:87: 76:db:22:96:ce:32:12:3f:41:b4:6d:77:86:af:01:c7:ba:b5: c8:ee:53:0c:49:24:b6:72:d6:29:51:37:da:b2:4e:7a:71:26: 08:b5:02:c1:6d:92:43:e5:75:99:90:c0:c2:4e:15:18:bb:35: 2e:e3:14:73:5a:cf:76:12:1e:e5:7e:8f:6e:7e:b8:f5:96:eb: 15:f5:fb:f4:2f:0e:df:86:45:7a:44:e1:61:2f:12:bb:40:68: b7:be:1c:07:7c:cc:ba:0b:41:65:61:a5:8b:ae:ab:06:72:0e: 3d:9f:87:89:7d:23:0e:53:1e:c4:e6:4b:4f:7f:2e:e5:31:c3: de:5a:fc:e5:47:97:c4:53:ef:41:34:db:3b:06:e7:b1:c1:fb: 26:6e:eb:38:d3:1b:a0:15:89:61:4f:24:47:18:02:5e:ce:d0: c3:57:8d:16:73:e4:34:c6:aa:54:c5:0c:1b:2f:7b:e1:10:dc: 66:0b:6f:8d:32:41:9a:6f:50:90:fc:ea:d0:a4:95:7f:70:21: 23:b8:1a:3c:20:fc:a5:fe:b5:70:d2:9a:25:d4:26:f8:95:47: ad:56:9a:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIycFjcWNPBu7kVERwVhxKiehRwMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYwRjBCNjFCQjZBRkFFREU1QTFFNzU5MUVENDg0MTMx M0RGRDZGRjAeFw0yNTA5MDcwOTI2NTZaFw0yNTA5MTAxMzQ3NTZaMDMxMTAvBgNV BAMTKDVFRkYwODNDNDRDNEFERUM0RDU4MjgwOEFFMjA2MEU0NDUzQTQ3MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk1j7GSBbDpVoZujkn9MoE1KM9 LI9yEXxu5jCBJV9mE8pCHWrTr69A32uEpA/bIscSLlo4u/Yh9ieMhUnZjpEGqMAX ap8aGr86wvabAqvoPVNiqE9DYTFnTH3lE8LLoz9ccP2rDmVyLAOjQ4I6W8y8BnNH TJRCZGERZZLz6CxCMzhp067w63QE4M5ObyHeV+CjmY4kZBUv1IEMPGIX41vuOIOv 0RG0tjiXwgu6Z2852K7m1zacpTx5MjluC8WajERaAvhX/pD09cZ8Bndcv5ZYicXR LNG1zi5AEd66qEsiq+S6/dRyvlqi0qTFBbHRRCInbeAqHZkzPxmgxNe0/wgNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXv8IPETErexNWCgIriBg5EU6Rw0wHwYDVR0j BBgwFoAUnw8LYbtq+u3loedZHtSEExPf1v8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MGYyNDczMy1lOGRhLTQyYzgtODQ2Yi1lNzk0ZTFiNDM5ZGEvMC85RjBGMEI2MUJC NkFGQUVERTVBMUU3NTkxRUQ0ODQxMzEzREZENkZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUYwRjBCNjFCQjZBRkFFREU1QTFFNzU5MUVENDg0MTMxM0RG RDZGRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDBmMjQ3MzMtZThkYS00MmM4LTg0 NmItZTc5NGUxYjQzOWRhLzAvOUYwRjBCNjFCQjZBRkFFREU1QTFFNzU5MUVENDg0 MTMxM0RGRDZGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMD2gVXQP0NCE6Op2r6xfMyz0krZksdCww1y oMKuRqhPz2bGh3bbIpbOMhI/QbRtd4avAce6tcjuUwxJJLZy1ilRN9qyTnpxJgi1 AsFtkkPldZmQwMJOFRi7NS7jFHNaz3YSHuV+j25+uPWW6xX1+/QvDt+GRXpE4WEv ErtAaLe+HAd8zLoLQWVhpYuuqwZyDj2fh4l9Iw5THsTmS09/LuUxw95a/OVHl8RT 70E02zsG57HB+yZu6zjTG6AViWFPJEcYAl7O0MNXjRZz5DTGqlTFDBsve+EQ3GYL b40yQZpvUJD86tCklX9wISO4Gjwg/KX+tXDSmiXUJviVR61Wmno= -----END CERTIFICATE-----Generated at Sun Sep 7 14:04:47 2025 by rpki-client