$ rpki-client -vvf repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft File: 9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft (raw, json) Hash identifier: gomphL8MTx9Y9+A1/gjVDVG2ZPl9tup/cpBW198jMZc= Subject key identifier: FF:89:E5:26:6F:E1:29:3C:07:BE:C4:58:D1:FF:F3:47:DA:FA:6C:63 Authority key identifier: 9F:0F:0B:61:BB:6A:FA:ED:E5:A1:E7:59:1E:D4:84:13:13:DF:D6:FF Certificate issuer: /CN=9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF Certificate serial: 6A3715F6E8CAC6C6120D0C6916DD435FAE8BD0AE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft Manifest number: 01A7 Signing time: Thu 05 Jun 2025 02:21:53 +0000 Manifest this update: Thu 05 Jun 2025 02:16:53 +0000 Manifest next update: Sun 08 Jun 2025 09:13:53 +0000 Files and hashes: 1: 9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.crl (hash: NNxGOp5bJY7dLJoqeTxT9Q1Pl1xlvMpsbXOBtEl34NY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.crl rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 09:13:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:37:15:f6:e8:ca:c6:c6:12:0d:0c:69:16:dd:43:5f:ae:8b:d0:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF Validity Not Before: Jun 5 02:16:53 2025 GMT Not After : Jun 8 09:13:53 2025 GMT Subject: CN=FF89E5266FE1293C07BEC458D1FFF347DAFA6C63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:66:91:dd:21:37:80:eb:50:71:1a:5f:d8:d8: 6b:da:78:8a:4d:01:0b:07:8c:d2:83:4c:b1:a2:de: c8:dd:64:b8:01:96:a7:bc:1e:2e:c8:c4:0c:04:c5: 7a:fe:88:94:43:c3:a3:d8:2b:c9:4e:c6:73:56:bd: 52:90:25:f2:32:9a:5f:5a:7d:87:68:ae:d3:5e:00: 7c:f6:59:38:39:d8:90:76:0a:30:9e:5b:1b:c6:8b: 9b:7d:38:79:bb:b2:8c:46:31:a9:42:3f:e1:04:1f: de:74:db:33:9f:71:ba:e0:67:38:25:0c:ac:7d:e6: 9a:7c:ea:d7:57:f8:b0:40:9f:b9:a3:43:60:5a:56: be:2d:62:40:64:21:e3:13:4f:8e:57:c8:06:0d:9c: f5:ea:8c:fc:4a:0f:19:e6:cc:09:6f:0c:11:34:95: 2d:d2:42:a4:57:a8:14:73:de:12:08:83:a5:50:5b: 04:71:e3:79:f4:ad:17:81:dc:df:21:96:7d:33:20: f8:17:5e:3e:33:07:8f:fd:64:d5:08:f3:67:2e:ab: e2:a2:10:00:93:b8:e2:cb:fa:07:67:0a:18:90:ac: 88:22:ac:4c:c0:a9:e5:5c:55:b6:aa:e2:63:a7:8e: 66:98:60:d4:7f:3b:f0:2b:f2:54:02:65:9e:87:bc: 90:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:89:E5:26:6F:E1:29:3C:07:BE:C4:58:D1:FF:F3:47:DA:FA:6C:63 X509v3 Authority Key Identifier: keyid:9F:0F:0B:61:BB:6A:FA:ED:E5:A1:E7:59:1E:D4:84:13:13:DF:D6:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/40f24733-e8da-42c8-846b-e794e1b439da/0/9F0F0B61BB6AFAEDE5A1E7591ED4841313DFD6FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:b4:10:bb:bb:a4:27:f8:07:bf:9a:5f:3f:eb:07:4e:8b:22: 08:66:4b:28:73:1a:c4:29:b7:02:b9:0f:c1:d1:39:2c:96:99: 7d:2a:04:35:6a:65:a0:fb:b2:ea:72:e2:ec:11:76:b4:76:cd: b7:6a:92:c7:b3:f4:9f:ca:e2:1e:10:e7:19:d8:8c:2b:6f:f4: 0a:2e:b2:06:af:45:f2:ee:85:34:df:83:c6:24:b6:9b:74:62: 33:5e:70:fb:a5:57:20:73:57:07:fd:30:1c:b9:45:d1:83:08: 1e:ba:e0:40:4e:19:4d:34:21:fb:b3:fe:f5:3b:aa:40:eb:6a: 91:01:2a:57:40:87:ca:10:e4:84:bb:3d:b7:96:f6:ba:47:69: 62:0b:d0:6b:34:08:c7:d5:7d:61:1e:8a:7c:e0:c6:b3:19:be: 85:36:e1:ce:ca:2a:83:1e:46:5f:57:4a:8d:57:0f:8a:cc:54: f3:7d:07:d6:b2:97:8a:8d:41:7f:4a:16:8c:3a:8e:97:2a:24: 2b:5c:74:43:da:c4:05:c3:50:15:12:2d:28:9a:e0:77:2a:24: 8d:9f:52:71:83:d3:96:c5:ec:e4:5e:49:fd:84:a5:61:92:33: cb:85:d7:e7:72:eb:d3:d5:da:02:3e:b9:11:3b:ab:4f:36:ea: 46:83:9d:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUajcV9ujKxsYSDQxpFt1DX66L0K4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYwRjBCNjFCQjZBRkFFREU1QTFFNzU5MUVENDg0MTMx M0RGRDZGRjAeFw0yNTA2MDUwMjE2NTNaFw0yNTA2MDgwOTEzNTNaMDMxMTAvBgNV BAMTKEZGODlFNTI2NkZFMTI5M0MwN0JFQzQ1OEQxRkZGMzQ3REFGQTZDNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5ZpHdITeA61BxGl/Y2GvaeIpN AQsHjNKDTLGi3sjdZLgBlqe8Hi7IxAwExXr+iJRDw6PYK8lOxnNWvVKQJfIyml9a fYdortNeAHz2WTg52JB2CjCeWxvGi5t9OHm7soxGMalCP+EEH9502zOfcbrgZzgl DKx95pp86tdX+LBAn7mjQ2BaVr4tYkBkIeMTT45XyAYNnPXqjPxKDxnmzAlvDBE0 lS3SQqRXqBRz3hIIg6VQWwRx43n0rReB3N8hln0zIPgXXj4zB4/9ZNUI82cuq+Ki EACTuOLL+gdnChiQrIgirEzAqeVcVbaq4mOnjmaYYNR/O/Ar8lQCZZ6HvJBtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/4nlJm/hKTwHvsRY0f/zR9r6bGMwHwYDVR0j BBgwFoAUnw8LYbtq+u3loedZHtSEExPf1v8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MGYyNDczMy1lOGRhLTQyYzgtODQ2Yi1lNzk0ZTFiNDM5ZGEvMC85RjBGMEI2MUJC NkFGQUVERTVBMUU3NTkxRUQ0ODQxMzEzREZENkZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUYwRjBCNjFCQjZBRkFFREU1QTFFNzU5MUVENDg0MTMxM0RG RDZGRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDBmMjQ3MzMtZThkYS00MmM4LTg0 NmItZTc5NGUxYjQzOWRhLzAvOUYwRjBCNjFCQjZBRkFFREU1QTFFNzU5MUVENDg0 MTMxM0RGRDZGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMO0ELu7pCf4B7+aXz/rB06LIghmSyhzGsQp twK5D8HROSyWmX0qBDVqZaD7supy4uwRdrR2zbdqksez9J/K4h4Q5xnYjCtv9Aou sgavRfLuhTTfg8Yktpt0YjNecPulVyBzVwf9MBy5RdGDCB664EBOGU00Ifuz/vU7 qkDrapEBKldAh8oQ5IS7PbeW9rpHaWIL0Gs0CMfVfWEeinzgxrMZvoU24c7KKoMe Rl9XSo1XD4rMVPN9B9ayl4qNQX9KFow6jpcqJCtcdEPaxAXDUBUSLSia4HcqJI2f UnGD05bF7OReSf2EpWGSM8uF1+dy69PV2gI+uRE7q0826kaDncw= -----END CERTIFICATE-----Generated at Sat Jun 7 04:17:44 2025 by rpki-client