$ rpki-client -vvf repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft File: 9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft (raw, json) Hash identifier: eh2ckKgPUpmlXSu9uZioZJllms9OxOJKNJCfwr/5ACU= Subject key identifier: 95:4D:C1:14:5E:09:5B:1C:1E:90:FE:13:40:CD:0E:4F:F6:D1:31:97 Authority key identifier: 95:64:13:4E:E3:E4:CE:65:FB:9D:07:7E:90:B1:BE:B5:25:D6:99:EB Certificate issuer: /CN=9564134EE3E4CE65FB9D077E90B1BEB525D699EB Certificate serial: 01339EA8F41F810C33D32CF581BBDC201F430C26 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft Manifest number: E9 Signing time: Sat 30 Aug 2025 12:52:20 +0000 Manifest this update: Sat 30 Aug 2025 12:47:20 +0000 Manifest next update: Wed 03 Sep 2025 00:29:20 +0000 Files and hashes: 1: 9564134EE3E4CE65FB9D077E90B1BEB525D699EB.crl (hash: 6bTcYaxDCC/nfOEKPvm4Z/eIChwuhlrEMbviy6B3OUw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.crl rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 02 Sep 2025 02:27:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:33:9e:a8:f4:1f:81:0c:33:d3:2c:f5:81:bb:dc:20:1f:43:0c:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9564134EE3E4CE65FB9D077E90B1BEB525D699EB Validity Not Before: Aug 30 12:47:20 2025 GMT Not After : Sep 3 00:29:20 2025 GMT Subject: CN=954DC1145E095B1C1E90FE1340CD0E4FF6D13197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:df:8c:99:53:fa:4e:8a:d4:e5:e3:f0:b8:57: 75:7a:03:65:84:f9:7c:39:8b:87:cf:e1:d4:c4:c8: 20:16:19:52:f6:b4:03:fd:95:8e:40:52:e0:5a:9d: 84:90:be:e5:24:8e:b0:15:5a:de:b4:fc:d3:35:9a: 4f:c4:75:e2:72:20:18:98:fb:f0:b5:87:95:64:ad: 37:ff:9f:3d:c8:e0:cc:b0:23:7e:a5:20:bd:1b:fd: 5b:66:b0:c1:64:80:d9:f0:10:70:0e:88:f3:82:e2: c5:2b:3c:f5:69:a0:e4:ae:ee:c1:31:6e:ff:a0:4c: d2:8f:c3:92:db:14:23:05:c5:f0:e0:b0:7c:42:a8: 95:fb:df:34:e7:fc:4d:26:3b:61:01:ce:2a:db:cb: 44:80:6e:5c:d3:dd:97:8d:24:97:e9:20:47:40:f4: f7:5c:ed:01:23:c4:08:a8:d2:44:7d:33:ef:bd:2b: 8d:60:98:2c:13:8a:a9:41:e2:e1:7b:a3:39:2b:d0: 3f:6c:f7:02:c6:af:4e:e9:2e:00:6d:f1:ce:24:8f: 67:9a:be:6c:b5:42:06:49:d3:17:a8:b7:97:75:c2: 39:cd:60:af:83:fc:a8:63:cd:69:15:9c:9d:d7:1e: fa:aa:a1:70:aa:60:d4:c1:62:5a:37:23:ec:2f:c9: 57:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:4D:C1:14:5E:09:5B:1C:1E:90:FE:13:40:CD:0E:4F:F6:D1:31:97 X509v3 Authority Key Identifier: keyid:95:64:13:4E:E3:E4:CE:65:FB:9D:07:7E:90:B1:BE:B5:25:D6:99:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:c6:5a:57:d9:ec:64:e6:2f:56:c0:b0:f3:c8:d6:46:8a:c0: 17:a1:b3:d0:18:de:34:7b:61:d0:a9:27:9b:b2:11:b2:ab:d3: a6:fb:35:a7:12:76:c1:95:b5:1c:35:0d:ed:2b:af:48:84:40: 16:8f:2e:07:d3:9c:28:4e:c5:b5:95:4a:74:ad:8f:da:c3:39: 86:f3:75:48:07:38:b9:86:45:aa:e3:4f:da:a9:21:ca:0f:15: c4:d5:18:43:78:5e:4d:f1:f6:bc:56:d3:b7:c1:57:64:0e:00: e1:d9:16:f6:45:fc:aa:ee:e4:b7:c0:64:f3:9b:6e:3d:8f:bc: 35:2b:46:24:67:5a:ab:04:ac:df:79:4b:da:4a:5f:97:69:6b: 38:f0:39:02:9f:bf:5c:42:08:a0:31:d1:e1:47:27:5a:54:82: 4a:bb:0d:89:4d:9a:2e:82:b7:33:bc:b0:c9:fa:64:7c:d1:e2: d9:ee:47:5c:57:da:62:e8:bd:9b:97:e9:38:b1:23:95:5a:9b: 28:d0:8c:a3:03:dd:d4:08:21:df:a1:11:9e:45:4b:d9:d4:d2: 08:19:70:fe:68:c3:1d:2d:9c:34:4d:19:5a:c9:97:ae:32:0c: 39:7e:a6:b8:1d:bd:43:ec:b2:f5:9e:e8:15:42:cb:c1:30:83: 82:25:79:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUATOeqPQfgQwz0yz1gbvcIB9DDCYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU2NDEzNEVFM0U0Q0U2NUZCOUQwNzdFOTBCMUJFQjUy NUQ2OTlFQjAeFw0yNTA4MzAxMjQ3MjBaFw0yNTA5MDMwMDI5MjBaMDMxMTAvBgNV BAMTKDk1NERDMTE0NUUwOTVCMUMxRTkwRkUxMzQwQ0QwRTRGRjZEMTMxOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO34yZU/pOitTl4/C4V3V6A2WE +Xw5i4fP4dTEyCAWGVL2tAP9lY5AUuBanYSQvuUkjrAVWt60/NM1mk/EdeJyIBiY +/C1h5VkrTf/nz3I4MywI36lIL0b/VtmsMFkgNnwEHAOiPOC4sUrPPVpoOSu7sEx bv+gTNKPw5LbFCMFxfDgsHxCqJX73zTn/E0mO2EBzirby0SAblzT3ZeNJJfpIEdA 9Pdc7QEjxAio0kR9M++9K41gmCwTiqlB4uF7ozkr0D9s9wLGr07pLgBt8c4kj2ea vmy1QgZJ0xeot5d1wjnNYK+D/KhjzWkVnJ3XHvqqoXCqYNTBYlo3I+wvyVeFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlU3BFF4JWxwekP4TQM0OT/bRMZcwHwYDVR0j BBgwFoAUlWQTTuPkzmX7nQd+kLG+tSXWmeswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDg4NjQ4Zi01ZTBiLTQzMzgtOTExYy05ZDY0NjdiMDBhM2UvMC85NTY0MTM0RUUz RTRDRTY1RkI5RDA3N0U5MEIxQkVCNTI1RDY5OUVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTU2NDEzNEVFM0U0Q0U2NUZCOUQwNzdFOTBCMUJFQjUyNUQ2 OTlFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODA4ODY0OGYtNWUwYi00MzM4LTkx MWMtOWQ2NDY3YjAwYTNlLzAvOTU2NDEzNEVFM0U0Q0U2NUZCOUQwNzdFOTBCMUJF QjUyNUQ2OTlFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH/GWlfZ7GTmL1bAsPPI1kaKwBehs9AY3jR7 YdCpJ5uyEbKr06b7NacSdsGVtRw1De0rr0iEQBaPLgfTnChOxbWVSnStj9rDOYbz dUgHOLmGRarjT9qpIcoPFcTVGEN4Xk3x9rxW07fBV2QOAOHZFvZF/Kru5LfAZPOb bj2PvDUrRiRnWqsErN95S9pKX5dpazjwOQKfv1xCCKAx0eFHJ1pUgkq7DYlNmi6C tzO8sMn6ZHzR4tnuR1xX2mLovZuX6TixI5VamyjQjKMD3dQIId+hEZ5FS9nU0ggZ cP5owx0tnDRNGVrJl64yDDl+prgdvUPssvWe6BVCy8Ewg4IleeY= -----END CERTIFICATE-----Generated at Sun Aug 31 10:40:33 2025 by rpki-client