$ rpki-client -vvf repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.mft File: D4D0F3E6E684847D602FC73758893CE2BB05D399.mft (raw, json) Hash identifier: 3o3137olzkiK7jDDbrAAFNZXHxVQvtNVMSWYzszDVCk= Subject key identifier: 36:FC:F2:23:DD:13:6C:52:29:41:68:EE:F1:56:3D:17:7C:D3:24:68 Authority key identifier: D4:D0:F3:E6:E6:84:84:7D:60:2F:C7:37:58:89:3C:E2:BB:05:D3:99 Certificate issuer: /CN=D4D0F3E6E684847D602FC73758893CE2BB05D399 Certificate serial: 5176188C8AA8E9EDA322EE22F427993DC90B2C60 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4D0F3E6E684847D602FC73758893CE2BB05D399.cer Subject info access: rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.mft Manifest number: 01A9 Signing time: Fri 05 Sep 2025 17:20:43 +0000 Manifest this update: Fri 05 Sep 2025 17:15:43 +0000 Manifest next update: Mon 08 Sep 2025 20:22:43 +0000 Files and hashes: 1: D4D0F3E6E684847D602FC73758893CE2BB05D399.crl (hash: eph+SpF1J/Zozy3IMKBdCSbX60d7Zz9u3OtdBb7A9u8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.crl rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4D0F3E6E684847D602FC73758893CE2BB05D399.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 20:22:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:76:18:8c:8a:a8:e9:ed:a3:22:ee:22:f4:27:99:3d:c9:0b:2c:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4D0F3E6E684847D602FC73758893CE2BB05D399 Validity Not Before: Sep 5 17:15:43 2025 GMT Not After : Sep 8 20:22:43 2025 GMT Subject: CN=36FCF223DD136C52294168EEF1563D177CD32468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:fa:63:c6:fb:be:f3:e1:8c:93:3f:10:a0:92: ae:37:98:ed:43:a2:23:a7:0e:f7:64:07:9b:4f:1e: d6:7a:e6:67:48:9a:25:3a:12:5f:1a:19:22:ef:70: 2f:f6:78:00:7d:b0:6d:c5:8b:d6:49:62:da:ae:e3: 0a:46:f4:4c:82:b1:0b:02:1d:d0:a9:13:1c:1f:41: 2c:21:34:bc:fd:97:87:f3:6d:bd:82:9c:92:01:c6: 37:82:5f:74:a4:47:bb:d6:c3:28:93:52:89:77:32: b3:d6:ac:0c:73:d8:22:d1:d8:46:53:17:71:cf:51: 0b:b7:ef:75:b7:1d:ae:78:c6:ed:3c:13:ca:72:09: b1:b6:2f:fa:ef:4a:df:09:45:14:9b:46:a2:8c:f6: db:4b:24:78:f6:0e:c6:ef:6e:9e:60:ee:5d:54:08: 7f:e7:83:51:1f:fa:36:f2:e2:9b:70:74:01:28:3d: 1f:ba:76:dd:34:5d:38:30:4d:a9:30:4c:90:3e:ca: ed:60:4b:aa:0a:60:ef:9a:5e:1d:c1:60:6a:87:34: 95:cd:dc:6b:2d:88:b0:37:c9:5e:20:d7:fd:a0:8e: 48:9d:87:de:63:54:e3:b4:59:5a:4d:8a:87:67:e2: 14:03:a3:d1:9c:14:b3:25:f8:33:82:4a:5a:4c:34: 0f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:FC:F2:23:DD:13:6C:52:29:41:68:EE:F1:56:3D:17:7C:D3:24:68 X509v3 Authority Key Identifier: keyid:D4:D0:F3:E6:E6:84:84:7D:60:2F:C7:37:58:89:3C:E2:BB:05:D3:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D4D0F3E6E684847D602FC73758893CE2BB05D399.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/823530ec-990e-41d7-9d78-b77e20d76bcd/0/D4D0F3E6E684847D602FC73758893CE2BB05D399.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:33:35:af:e6:47:90:41:36:04:8a:a9:d1:f2:19:e8:0e:49: 55:6c:b1:59:ed:6d:8e:63:17:e0:65:cb:1b:cf:9d:24:5f:34: a9:2a:7b:5d:d9:82:ab:48:c4:11:ff:91:e5:5e:53:13:0d:8e: cf:85:da:0a:5b:46:bf:c4:7d:57:8a:1a:72:fa:cb:3e:2e:0d: 57:7e:68:0e:f3:ec:02:17:75:b1:ce:98:0b:27:c6:fd:c7:a0: e6:d4:96:94:a4:9e:35:68:b3:7c:36:40:b0:a0:ae:6d:d1:ea: 23:93:e7:f8:3b:08:f1:d5:d0:cf:f9:4b:3b:fe:6a:cf:1f:a9: db:39:62:b0:65:33:c1:1e:44:34:67:73:4f:0f:53:9c:ee:5b: a8:67:c3:a0:08:ac:de:0f:7e:fa:3f:ca:24:4e:67:00:c5:62: 00:a9:c5:90:41:b9:e9:96:03:37:6f:a3:18:94:62:85:f8:7d: 74:f7:f0:b9:98:45:3e:10:57:1a:d1:6d:18:f4:11:e9:ec:1a: bf:80:83:c2:1b:a6:9b:70:bc:b9:a5:44:55:72:95:1d:15:b8: 52:77:71:30:7a:5b:ed:fa:a3:0a:a7:af:83:1b:2a:4d:2d:69: fc:f3:58:80:01:90:de:b5:13:e5:2b:b8:60:1c:8e:c8:5d:39: d6:76:2e:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUXYYjIqo6e2jIu4i9CeZPckLLGAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDREMEYzRTZFNjg0ODQ3RDYwMkZDNzM3NTg4OTNDRTJC QjA1RDM5OTAeFw0yNTA5MDUxNzE1NDNaFw0yNTA5MDgyMDIyNDNaMDMxMTAvBgNV BAMTKDM2RkNGMjIzREQxMzZDNTIyOTQxNjhFRUYxNTYzRDE3N0NEMzI0NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf+mPG+77z4YyTPxCgkq43mO1D oiOnDvdkB5tPHtZ65mdImiU6El8aGSLvcC/2eAB9sG3Fi9ZJYtqu4wpG9EyCsQsC HdCpExwfQSwhNLz9l4fzbb2CnJIBxjeCX3SkR7vWwyiTUol3MrPWrAxz2CLR2EZT F3HPUQu373W3Ha54xu08E8pyCbG2L/rvSt8JRRSbRqKM9ttLJHj2Dsbvbp5g7l1U CH/ng1Ef+jby4ptwdAEoPR+6dt00XTgwTakwTJA+yu1gS6oKYO+aXh3BYGqHNJXN 3GstiLA3yV4g1/2gjkidh95jVOO0WVpNiodn4hQDo9GcFLMl+DOCSlpMNA+HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNvzyI90TbFIpQWju8VY9F3zTJGgwHwYDVR0j BBgwFoAU1NDz5uaEhH1gL8c3WIk84rsF05kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MjM1MzBlYy05OTBlLTQxZDctOWQ3OC1iNzdlMjBkNzZiY2QvMC9ENEQwRjNFNkU2 ODQ4NDdENjAyRkM3Mzc1ODg5M0NFMkJCMDVEMzk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDREMEYzRTZFNjg0ODQ3RDYwMkZDNzM3NTg4OTNDRTJCQjA1 RDM5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODIzNTMwZWMtOTkwZS00MWQ3LTlk NzgtYjc3ZTIwZDc2YmNkLzAvRDREMEYzRTZFNjg0ODQ3RDYwMkZDNzM3NTg4OTND RTJCQjA1RDM5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACkzNa/mR5BBNgSKqdHyGegOSVVssVntbY5j F+BlyxvPnSRfNKkqe13ZgqtIxBH/keVeUxMNjs+F2gpbRr/EfVeKGnL6yz4uDVd+ aA7z7AIXdbHOmAsnxv3HoObUlpSknjVos3w2QLCgrm3R6iOT5/g7CPHV0M/5Szv+ as8fqds5YrBlM8EeRDRnc08PU5zuW6hnw6AIrN4Pfvo/yiROZwDFYgCpxZBBuemW AzdvoxiUYoX4fXT38LmYRT4QVxrRbRj0EensGr+Ag8IbpptwvLmlRFVylR0VuFJ3 cTB6W+36owqnr4MbKk0tafzzWIABkN61E+UruGAcjshdOdZ2Lpo= -----END CERTIFICATE-----Generated at Sun Sep 7 15:13:27 2025 by rpki-client