$ rpki-client -vvf repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.mft File: 9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.mft (raw, json) Hash identifier: Ppiv+B3l+Kx+XV5iJBYhirj8WUfO0TRSId1W/G0ooOY= Subject key identifier: 11:59:06:58:8B:FD:25:96:A8:DF:87:BE:88:D0:93:5B:BD:43:8F:D1 Authority key identifier: 9F:5F:18:EC:02:2F:5E:04:65:72:CD:5F:5C:C4:21:FA:9D:AF:FA:EA Certificate issuer: /CN=9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA Certificate serial: 4075F237886A1EB3E750615DB0D8E9092C3819E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.mft Manifest number: 72 Signing time: Sat 06 Sep 2025 02:10:03 +0000 Manifest this update: Sat 06 Sep 2025 02:05:03 +0000 Manifest next update: Tue 09 Sep 2025 06:23:03 +0000 Files and hashes: 1: 9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.crl (hash: kscmiHTNrl8PVXe5zYuRG5vvMOj2Q3DI6od1bVtSAks=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.crl rsync://repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 06:23:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:75:f2:37:88:6a:1e:b3:e7:50:61:5d:b0:d8:e9:09:2c:38:19:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA Validity Not Before: Sep 6 02:05:03 2025 GMT Not After : Sep 9 06:23:03 2025 GMT Subject: CN=115906588BFD2596A8DF87BE88D0935BBD438FD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:90:90:a6:95:46:96:e7:c9:42:f4:87:ca:6a: 07:38:43:ac:e5:ff:11:ca:f8:19:be:94:3f:7a:45: 80:dd:8b:ec:48:7c:ce:49:ba:19:e1:84:f5:ce:ae: 9e:7f:b4:2f:b0:a1:c0:6f:41:dc:88:2b:20:70:49: 38:57:6c:4b:12:85:1a:ae:05:3e:66:77:73:8b:88: 82:67:ae:a5:1c:fe:21:8e:4a:d7:ab:0a:e1:9d:84: 6a:aa:51:d0:b4:e8:ce:2d:22:e5:4e:54:53:dd:e8: 03:13:0b:de:09:fa:c0:f1:ea:6f:e2:27:4c:d4:ce: 67:ef:34:b1:b3:20:46:73:2c:9e:e9:fa:10:d1:c2: a1:62:ad:03:3f:3e:0e:f0:3e:e6:3e:9b:3c:57:9c: 41:f6:e8:f4:cb:48:eb:59:0e:04:8e:a2:bf:8d:e7: 47:df:d6:b2:50:4a:2e:70:8c:1d:d5:ee:cc:fd:bb: a1:02:63:8f:cb:9e:69:9e:06:cc:f5:06:6d:11:49: 3f:62:08:d7:bd:46:bb:95:7a:88:f4:ff:ad:12:c3: 80:c4:18:a3:47:37:a1:78:7e:a9:c3:2e:dc:6b:39: f4:fd:1e:62:da:8a:b8:0d:b2:4e:96:b1:c3:c6:39: 1d:b8:37:7b:9b:e9:00:0e:09:f9:ac:a0:f3:ab:eb: 0a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:59:06:58:8B:FD:25:96:A8:DF:87:BE:88:D0:93:5B:BD:43:8F:D1 X509v3 Authority Key Identifier: keyid:9F:5F:18:EC:02:2F:5E:04:65:72:CD:5F:5C:C4:21:FA:9D:AF:FA:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/9F5F18EC022F5E046572CD5F5CC421FA9DAFFAEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:32:40:61:32:f3:bb:3a:63:41:0b:e2:3d:42:34:01:02:c0: b0:97:25:e2:42:4e:83:8a:57:3d:ec:4f:99:99:50:b6:6f:b1: 00:63:a1:f3:f7:49:4b:58:ce:6b:3a:1d:73:e6:1d:26:04:d8: 7e:18:3b:67:40:69:ed:34:e0:49:65:34:66:6e:07:15:cd:2c: 82:25:47:af:44:cd:a1:1a:47:2f:fc:53:4d:f3:42:b8:a3:54: 3f:ee:07:9c:86:3d:11:cb:89:ca:f0:96:b7:08:ab:eb:e3:f0: d4:e3:17:89:86:50:9b:c9:b2:03:ea:33:b0:2a:10:d9:92:7b: f4:b8:89:8e:00:05:0a:44:a0:ba:bc:40:3f:c4:88:89:b4:e3: 64:66:f3:53:7f:ba:48:b9:46:b7:3e:93:d8:14:68:e0:da:ff: 34:68:f7:e9:96:1d:c7:cf:60:41:f3:21:37:2c:40:65:d2:58: 8f:58:9f:c6:a8:21:d2:45:78:c8:ba:a3:8c:d7:e5:e5:c6:2b: 48:21:fa:f0:a7:37:81:87:8e:71:c1:67:e5:f2:20:8a:82:65: 87:63:eb:e7:0e:df:cc:49:5d:c7:6f:9e:19:29:e2:da:9e:10: 24:42:d4:24:a9:4d:84:6c:ce:ab:28:c9:e2:9f:7e:8d:a8:e1: 28:50:e2:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQHXyN4hqHrPnUGFdsNjpCSw4GegwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUY1RjE4RUMwMjJGNUUwNDY1NzJDRDVGNUNDNDIxRkE5 REFGRkFFQTAeFw0yNTA5MDYwMjA1MDNaFw0yNTA5MDkwNjIzMDNaMDMxMTAvBgNV BAMTKDExNTkwNjU4OEJGRDI1OTZBOERGODdCRTg4RDA5MzVCQkQ0MzhGRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzkJCmlUaW58lC9IfKagc4Q6zl /xHK+Bm+lD96RYDdi+xIfM5JuhnhhPXOrp5/tC+wocBvQdyIKyBwSThXbEsShRqu BT5md3OLiIJnrqUc/iGOSterCuGdhGqqUdC06M4tIuVOVFPd6AMTC94J+sDx6m/i J0zUzmfvNLGzIEZzLJ7p+hDRwqFirQM/Pg7wPuY+mzxXnEH26PTLSOtZDgSOor+N 50ff1rJQSi5wjB3V7sz9u6ECY4/LnmmeBsz1Bm0RST9iCNe9RruVeoj0/60Sw4DE GKNHN6F4fqnDLtxrOfT9HmLairgNsk6WscPGOR24N3ub6QAOCfmsoPOr6wqvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEVkGWIv9JZao34e+iNCTW71Dj9EwHwYDVR0j BBgwFoAUn18Y7AIvXgRlcs1fXMQh+p2v+uowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MmFlNWUyMS0wOGNjLTRjYTQtYjk5Yy01ZmY1YTBkNDY0OTAvMC85RjVGMThFQzAy MkY1RTA0NjU3MkNENUY1Q0M0MjFGQTlEQUZGQUVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUY1RjE4RUMwMjJGNUUwNDY1NzJDRDVGNUNDNDIxRkE5REFG RkFFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjJhZTVlMjEtMDhjYy00Y2E0LWI5 OWMtNWZmNWEwZDQ2NDkwLzAvOUY1RjE4RUMwMjJGNUUwNDY1NzJDRDVGNUNDNDIx RkE5REFGRkFFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIIyQGEy87s6Y0EL4j1CNAECwLCXJeJCToOK Vz3sT5mZULZvsQBjofP3SUtYzms6HXPmHSYE2H4YO2dAae004EllNGZuBxXNLIIl R69EzaEaRy/8U03zQrijVD/uB5yGPRHLicrwlrcIq+vj8NTjF4mGUJvJsgPqM7Aq ENmSe/S4iY4ABQpEoLq8QD/EiIm042Rm81N/uki5Rrc+k9gUaODa/zRo9+mWHcfP YEHzITcsQGXSWI9Yn8aoIdJFeMi6o4zX5eXGK0gh+vCnN4GHjnHBZ+XyIIqCZYdj 6+cO38xJXcdvnhkp4tqeECRC1CSpTYRszqsoyeKffo2o4ShQ4uc= -----END CERTIFICATE-----Generated at Sun Sep 7 15:17:02 2025 by rpki-client