$ rpki-client -vvf repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.mft File: D9622F68C539A365B6FA78463F3CD3D3EC231214.mft (raw, json) Hash identifier: gDigmXcXCW6bMWlexl6kkbP50kZKI6DbA3/OlL50G7A= Subject key identifier: B2:14:D9:D8:29:43:AA:DD:F5:6A:2C:DC:DD:3E:0A:07:D8:EA:C9:0C Authority key identifier: D9:62:2F:68:C5:39:A3:65:B6:FA:78:46:3F:3C:D3:D3:EC:23:12:14 Certificate issuer: /CN=D9622F68C539A365B6FA78463F3CD3D3EC231214 Certificate serial: 175CDE91D1785982B38CE86EB22ECB2C450D5BE8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9622F68C539A365B6FA78463F3CD3D3EC231214.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.mft Manifest number: B8 Signing time: Thu 04 Sep 2025 00:11:55 +0000 Manifest this update: Thu 04 Sep 2025 00:06:55 +0000 Manifest next update: Sun 07 Sep 2025 09:31:55 +0000 Files and hashes: 1: D9622F68C539A365B6FA78463F3CD3D3EC231214.crl (hash: OtgbqCC5xWzPDKMtEzoMyvAVfe5xiKEOhgcUuTtuOsw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.crl rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9622F68C539A365B6FA78463F3CD3D3EC231214.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 09:31:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:5c:de:91:d1:78:59:82:b3:8c:e8:6e:b2:2e:cb:2c:45:0d:5b:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9622F68C539A365B6FA78463F3CD3D3EC231214 Validity Not Before: Sep 4 00:06:55 2025 GMT Not After : Sep 7 09:31:55 2025 GMT Subject: CN=B214D9D82943AADDF56A2CDCDD3E0A07D8EAC90C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e6:2c:65:62:a9:47:d5:8f:8f:4a:b6:fe:0c: 83:df:51:d7:9a:7d:01:14:d4:3b:64:3c:40:51:1f: 52:53:ef:6e:c1:db:e7:da:b9:ae:bd:86:3b:96:e1: b6:d0:1e:99:cd:b4:c0:28:89:af:9d:00:32:8d:21: 5c:cb:a1:52:0a:c3:85:d8:0b:5b:d8:85:42:c9:9b: 09:0a:d0:c5:3b:31:23:c2:3c:95:3a:7c:37:5d:61: 78:46:bc:6a:24:cc:da:66:05:45:5c:3c:3d:94:8e: 92:cb:91:0e:8d:37:2c:e4:9e:c5:17:d6:43:e6:b5: 1a:4a:74:32:e2:e8:9f:2b:a0:80:f8:a9:38:2e:be: e4:52:db:63:fd:0d:d7:8a:7e:21:ef:d9:34:90:c5: b0:35:c6:8a:11:6f:9d:ff:b5:4e:0d:ba:e9:f7:58: d1:95:0e:f3:17:e3:7c:01:31:6a:be:3c:ee:eb:ba: cd:e2:4c:be:44:3f:26:70:de:b1:28:bb:a5:1b:6f: 6b:16:12:c3:75:cc:1a:a9:86:35:d8:56:26:58:cd: f5:3b:88:14:c4:d0:42:5b:44:22:4b:d1:fc:19:9a: 0e:5b:d3:cf:40:b0:b6:13:65:13:79:89:00:99:20: 97:57:ed:3f:6f:79:74:a3:95:74:71:2a:96:85:55: a9:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:14:D9:D8:29:43:AA:DD:F5:6A:2C:DC:DD:3E:0A:07:D8:EA:C9:0C X509v3 Authority Key Identifier: keyid:D9:62:2F:68:C5:39:A3:65:B6:FA:78:46:3F:3C:D3:D3:EC:23:12:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D9622F68C539A365B6FA78463F3CD3D3EC231214.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ba6d072-8361-4ddf-800a-1ce15c47592c/0/D9622F68C539A365B6FA78463F3CD3D3EC231214.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e1:0d:83:7e:35:17:f6:5a:c3:55:16:54:f9:2f:a7:6d:cb:21: 3b:73:e9:65:5f:f8:a7:d2:a0:42:b7:f4:69:bd:14:11:42:eb: c1:1a:a1:ec:34:0f:e2:51:d5:ef:c8:55:bf:df:e0:86:af:95: 77:ff:b4:04:da:99:85:13:06:fa:40:bb:2f:52:71:46:48:1d: b6:74:af:e3:4e:8c:c3:e4:70:d8:33:d3:f1:97:38:55:ac:2d: 1f:84:13:de:e2:f8:6f:d2:19:24:b0:c7:55:79:d0:98:fe:fb: 7a:71:80:c3:94:4c:be:f0:7b:a5:db:55:c3:ac:bd:f1:c0:a7: dd:ee:b6:0b:fb:ef:f2:0f:fe:90:a0:88:3c:f1:90:e8:d1:a9: 00:e3:50:37:93:ff:6a:28:72:02:73:a5:31:47:7a:59:0b:e8: 10:cd:38:dc:dd:ce:3c:32:59:e0:7f:61:29:df:b6:9d:e6:32: 10:cf:90:e5:7d:5c:29:dc:54:a8:4b:6d:bd:7a:1f:02:e0:c1: 07:ac:bf:b9:61:b6:f0:ed:e3:6b:29:f4:96:c9:4e:51:09:91: be:ee:1a:a4:a0:25:7a:3a:7b:3d:eb:a2:d4:9f:14:5d:d0:fa: 8d:ac:93:6d:99:53:20:98:0e:7d:81:e5:95:48:18:90:77:28: 18:f0:a6:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF1zekdF4WYKzjOhusi7LLEUNW+gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDk2MjJGNjhDNTM5QTM2NUI2RkE3ODQ2M0YzQ0QzRDNF QzIzMTIxNDAeFw0yNTA5MDQwMDA2NTVaFw0yNTA5MDcwOTMxNTVaMDMxMTAvBgNV BAMTKEIyMTREOUQ4Mjk0M0FBRERGNTZBMkNEQ0REM0UwQTA3RDhFQUM5MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv5ixlYqlH1Y+PSrb+DIPfUdea fQEU1DtkPEBRH1JT727B2+faua69hjuW4bbQHpnNtMAoia+dADKNIVzLoVIKw4XY C1vYhULJmwkK0MU7MSPCPJU6fDddYXhGvGokzNpmBUVcPD2UjpLLkQ6NNyzknsUX 1kPmtRpKdDLi6J8roID4qTguvuRS22P9DdeKfiHv2TSQxbA1xooRb53/tU4Nuun3 WNGVDvMX43wBMWq+PO7rus3iTL5EPyZw3rEou6Ubb2sWEsN1zBqphjXYViZYzfU7 iBTE0EJbRCJL0fwZmg5b089AsLYTZRN5iQCZIJdX7T9veXSjlXRxKpaFVanbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUshTZ2ClDqt31aizc3T4KB9jqyQwwHwYDVR0j BBgwFoAU2WIvaMU5o2W2+nhGPzzT0+wjEhQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YmE2ZDA3Mi04MzYxLTRkZGYtODAwYS0xY2UxNWM0NzU5MmMvMC9EOTYyMkY2OEM1 MzlBMzY1QjZGQTc4NDYzRjNDRDNEM0VDMjMxMjE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDk2MjJGNjhDNTM5QTM2NUI2RkE3ODQ2M0YzQ0QzRDNFQzIz MTIxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGJhNmQwNzItODM2MS00ZGRmLTgw MGEtMWNlMTVjNDc1OTJjLzAvRDk2MjJGNjhDNTM5QTM2NUI2RkE3ODQ2M0YzQ0Qz RDNFQzIzMTIxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOENg341F/Zaw1UWVPkvp23LITtz6WVf+KfS oEK39Gm9FBFC68Eaoew0D+JR1e/IVb/f4IavlXf/tATamYUTBvpAuy9ScUZIHbZ0 r+NOjMPkcNgz0/GXOFWsLR+EE97i+G/SGSSwx1V50Jj++3pxgMOUTL7we6XbVcOs vfHAp93utgv77/IP/pCgiDzxkOjRqQDjUDeT/2oocgJzpTFHelkL6BDNONzdzjwy WeB/YSnftp3mMhDPkOV9XCncVKhLbb16HwLgwQesv7lhtvDt42sp9JbJTlEJkb7u GqSgJXo6ez3rotSfFF3Q+o2sk22ZUyCYDn2B5ZVIGJB3KBjwplw= -----END CERTIFICATE-----Generated at Fri Sep 5 12:47:00 2025 by rpki-client