$ rpki-client -vvf repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft File: 9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft (raw, json) Hash identifier: a6XpZ9UiWX7H3euMCm9bpffORLx7rS9tCDOxdK57ibs= Subject key identifier: 17:DD:76:8A:8B:B0:04:B0:52:12:11:9F:AA:EF:16:03:2D:E3:1D:48 Authority key identifier: 94:79:B8:C5:D5:AE:8F:AB:DC:57:A9:AB:54:9A:DD:E2:0B:E8:A4:B3 Certificate issuer: /CN=9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3 Certificate serial: 2EF9B9E2FEADA2A14FC64272C93149EF272F9DF0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft Manifest number: 01EE Signing time: Thu 04 Sep 2025 16:02:03 +0000 Manifest this update: Thu 04 Sep 2025 15:57:03 +0000 Manifest next update: Sun 07 Sep 2025 17:34:03 +0000 Files and hashes: 1: 9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.crl (hash: 3QVzmP0sTP25D+8S+4+nHr7ljvvMr0mw7EkAJkK7gvA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.crl rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 17:34:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:f9:b9:e2:fe:ad:a2:a1:4f:c6:42:72:c9:31:49:ef:27:2f:9d:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3 Validity Not Before: Sep 4 15:57:03 2025 GMT Not After : Sep 7 17:34:03 2025 GMT Subject: CN=17DD768A8BB004B05212119FAAEF16032DE31D48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e9:6e:32:36:30:aa:43:3d:82:f5:b1:6f:b2: 21:66:55:bc:ec:77:0a:65:68:6e:d3:27:15:b1:3f: 6b:f5:30:8a:67:88:f5:a7:12:df:2c:b2:26:4a:5d: 11:6d:29:c7:c1:de:46:57:a7:4b:29:80:ec:82:b2: a8:d2:94:5c:42:46:93:01:29:1f:d6:2b:48:33:bf: 0a:05:29:de:be:32:43:ed:eb:21:6e:c2:d5:e0:5c: df:81:80:c6:72:4f:f2:ca:05:0b:ff:b1:82:18:4c: 9a:42:7b:b2:34:ce:a5:56:07:68:f8:4e:2c:be:e9: bc:8b:15:af:29:62:a2:43:7f:47:a1:12:1a:0e:b6: f2:6c:7d:0d:ef:f5:d5:48:f1:9e:88:9f:a7:d2:8e: 64:cc:43:6d:46:fc:ed:da:ee:2d:4e:a9:88:ca:00: e2:ac:77:32:4c:ed:80:be:84:dc:ab:64:cf:0c:57: f6:7f:20:cb:a1:e4:d9:e9:eb:40:be:ad:9e:d5:3b: 85:dd:cd:47:a5:e7:97:f7:54:05:b3:87:c6:f0:25: 60:d5:d6:87:90:29:62:48:53:e1:2a:e7:10:cf:f7: c8:2f:d9:28:c2:b6:90:cd:9f:8b:dd:b5:18:89:32: a3:59:99:85:2e:55:be:c4:12:d8:5d:82:66:33:26: 03:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:DD:76:8A:8B:B0:04:B0:52:12:11:9F:AA:EF:16:03:2D:E3:1D:48 X509v3 Authority Key Identifier: keyid:94:79:B8:C5:D5:AE:8F:AB:DC:57:A9:AB:54:9A:DD:E2:0B:E8:A4:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a90aa158-6581-4cbe-b6ce-d8721c719fa0/0/9479B8C5D5AE8FABDC57A9AB549ADDE20BE8A4B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:e9:52:fc:64:cc:28:e8:47:b8:07:63:e8:84:70:c1:00:8a: 96:0d:53:9a:b7:5d:6d:7a:c5:5e:b5:fc:4c:bb:22:37:a2:bd: b1:ad:4e:5d:d1:48:fe:44:9b:cf:7d:c5:36:b0:2f:c9:6f:c1: a6:c1:3e:12:0e:94:d1:a0:4b:1f:50:0e:c5:6e:82:3a:ab:65: 91:7f:6a:6b:b6:2a:60:37:29:8e:07:fd:5e:1f:09:e6:ad:d4: be:1b:64:9c:da:c6:9c:49:57:4f:a3:fd:a1:7c:15:82:fd:f6: 53:16:b2:b8:38:2f:99:ce:1f:7a:04:d4:ec:84:02:af:43:3c: e1:90:9d:ce:65:a6:5b:fe:a8:06:e5:53:83:ff:bb:bf:ee:8f: 36:bb:26:62:95:6d:15:69:70:62:90:36:12:fc:7f:e5:68:48: e8:6a:98:c9:28:c0:35:3b:f1:65:69:67:86:af:4c:72:d7:fa: 22:b2:1c:f5:fb:28:a2:05:8e:a3:af:70:c4:ca:39:44:f9:3d: 75:79:6d:36:7e:c6:f4:05:27:db:9b:c4:47:8c:11:21:60:10: 6d:f8:4c:c5:86:db:4c:95:3c:47:9c:a6:39:c0:35:8f:71:f7: 97:4d:3e:a3:c4:d8:67:63:41:d1:47:5b:4f:e2:31:30:e7:c5: 61:0e:a8:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULvm54v6toqFPxkJyyTFJ7ycvnfAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ3OUI4QzVENUFFOEZBQkRDNTdBOUFCNTQ5QURERTIw QkU4QTRCMzAeFw0yNTA5MDQxNTU3MDNaFw0yNTA5MDcxNzM0MDNaMDMxMTAvBgNV BAMTKDE3REQ3NjhBOEJCMDA0QjA1MjEyMTE5RkFBRUYxNjAzMkRFMzFENDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk6W4yNjCqQz2C9bFvsiFmVbzs dwplaG7TJxWxP2v1MIpniPWnEt8ssiZKXRFtKcfB3kZXp0spgOyCsqjSlFxCRpMB KR/WK0gzvwoFKd6+MkPt6yFuwtXgXN+BgMZyT/LKBQv/sYIYTJpCe7I0zqVWB2j4 Tiy+6byLFa8pYqJDf0ehEhoOtvJsfQ3v9dVI8Z6In6fSjmTMQ21G/O3a7i1OqYjK AOKsdzJM7YC+hNyrZM8MV/Z/IMuh5Nnp60C+rZ7VO4XdzUel55f3VAWzh8bwJWDV 1oeQKWJIU+Eq5xDP98gv2SjCtpDNn4vdtRiJMqNZmYUuVb7EEthdgmYzJgPVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF912iouwBLBSEhGfqu8WAy3jHUgwHwYDVR0j BBgwFoAUlHm4xdWuj6vcV6mrVJrd4gvopLMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTBhYTE1OC02NTgxLTRjYmUtYjZjZS1kODcyMWM3MTlmYTAvMC85NDc5QjhDNUQ1 QUU4RkFCREM1N0E5QUI1NDlBRERFMjBCRThBNEIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTQ3OUI4QzVENUFFOEZBQkRDNTdBOUFCNTQ5QURERTIwQkU4 QTRCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTkwYWExNTgtNjU4MS00Y2JlLWI2 Y2UtZDg3MjFjNzE5ZmEwLzAvOTQ3OUI4QzVENUFFOEZBQkRDNTdBOUFCNTQ5QURE RTIwQkU4QTRCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACLpUvxkzCjoR7gHY+iEcMEAipYNU5q3XW16 xV61/Ey7IjeivbGtTl3RSP5Em899xTawL8lvwabBPhIOlNGgSx9QDsVugjqrZZF/ amu2KmA3KY4H/V4fCeat1L4bZJzaxpxJV0+j/aF8FYL99lMWsrg4L5nOH3oE1OyE Aq9DPOGQnc5lplv+qAblU4P/u7/ujza7JmKVbRVpcGKQNhL8f+VoSOhqmMkowDU7 8WVpZ4avTHLX+iKyHPX7KKIFjqOvcMTKOUT5PXV5bTZ+xvQFJ9ubxEeMESFgEG34 TMWG20yVPEecpjnANY9x95dNPqPE2GdjQdFHW0/iMTDnxWEOqPk= -----END CERTIFICATE-----Generated at Fri Sep 5 10:13:44 2025 by rpki-client