$ rpki-client -vvf repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft File: D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft (raw, json) Hash identifier: 5RbZJe3WlgrH7Mz1B0iuDeR3fV0HF4+q7/HoRcnuEt0= Subject key identifier: 1C:88:4C:34:47:45:72:65:8E:3D:21:6C:3E:0B:60:0E:A9:DC:C1:C2 Authority key identifier: D7:F2:3D:7B:54:89:0F:0E:EC:F5:50:FF:A4:27:99:B6:4D:9B:D4:C9 Certificate issuer: /CN=D7F23D7B54890F0EECF550FFA42799B64D9BD4C9 Certificate serial: 06DE6CEE00DE0132506835CE6102F627855F0E2C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft Manifest number: FF Signing time: Sat 06 Sep 2025 03:01:20 +0000 Manifest this update: Sat 06 Sep 2025 02:56:20 +0000 Manifest next update: Tue 09 Sep 2025 13:51:20 +0000 Files and hashes: 1: D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.crl (hash: u6CHDMEZhf+rwlOjuXYlm/S7lujLcxw+c9OAKnFEjqQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.crl rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 13:51:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:de:6c:ee:00:de:01:32:50:68:35:ce:61:02:f6:27:85:5f:0e:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7F23D7B54890F0EECF550FFA42799B64D9BD4C9 Validity Not Before: Sep 6 02:56:20 2025 GMT Not After : Sep 9 13:51:20 2025 GMT Subject: CN=1C884C34474572658E3D216C3E0B600EA9DCC1C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f1:cd:02:da:26:59:76:c8:76:85:97:ba:d2: 67:28:0b:37:bc:73:cb:b9:48:ae:34:62:de:fc:83: 63:0f:50:0e:5e:77:fc:06:77:b3:ca:03:f1:02:02: 56:cc:d2:4d:81:7b:c0:76:0e:c0:e3:c4:5b:c1:0b: 89:c0:2b:8d:33:fb:fb:b4:a0:6e:e0:07:b2:a3:e1: 1b:ba:ed:6d:f9:2b:d9:28:11:05:2f:ce:ba:b4:1d: f1:88:df:a7:ff:cf:b4:a4:4d:4f:1b:25:19:82:a0: 87:c4:33:5b:64:39:77:76:0f:2c:c4:cf:cb:62:25: 98:b8:7d:a9:99:b4:9d:60:b5:79:bd:a7:c0:22:66: 79:4b:98:16:a1:11:c1:19:8f:ac:65:31:de:37:fa: 35:7a:2a:3b:7f:3b:d5:45:5f:b7:a4:76:9c:7a:81: 52:4d:77:1b:60:de:3e:03:b7:94:e2:30:d5:46:00: f5:c7:89:73:35:5a:79:6e:78:b3:c3:fc:e5:94:ff: 7a:36:30:36:76:94:cf:a5:5f:a5:b3:57:35:96:17: f3:e8:6d:8e:5d:6f:d7:9e:2f:81:4d:41:44:10:e8: 10:8f:0c:33:62:53:c6:c7:34:40:5b:99:a1:54:b5: 1a:e1:d3:dc:42:8b:df:33:5a:a7:0d:c2:dc:2f:dd: 15:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:88:4C:34:47:45:72:65:8E:3D:21:6C:3E:0B:60:0E:A9:DC:C1:C2 X509v3 Authority Key Identifier: keyid:D7:F2:3D:7B:54:89:0F:0E:EC:F5:50:FF:A4:27:99:B6:4D:9B:D4:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bb9851b1-5a6d-4e75-9fff-c03a9c49cf69/0/D7F23D7B54890F0EECF550FFA42799B64D9BD4C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:4f:e8:81:22:99:c7:1e:de:3d:8a:f9:52:5c:cb:dc:2c:06: 82:ca:eb:58:ea:aa:a6:d2:a4:18:e9:9c:5c:ed:95:87:a2:aa: 0c:ae:85:a8:70:e9:8a:ef:7e:0e:d0:cd:11:dc:56:05:f2:e5: 9c:49:a4:c7:a8:a6:08:01:75:1b:b9:dd:42:cf:16:55:16:0a: e1:6f:77:a0:77:55:6e:c9:b1:67:8a:d6:48:59:ae:67:47:82: a1:5b:20:de:32:6c:6a:c3:cb:90:3f:d9:b6:a3:b9:1b:5f:cb: 54:b9:3e:05:d2:75:46:a5:7c:85:74:f5:14:80:90:3c:cc:91: 2d:e9:f2:8e:77:f1:8d:70:2f:fe:62:33:1b:3c:90:a1:49:ea: 37:3a:35:20:61:34:ab:2c:a7:f1:26:1f:4d:0d:c9:63:d1:71: fc:05:95:42:de:0f:c3:d8:ee:f4:58:dc:0a:ea:dc:5b:0e:c4: 07:63:72:86:56:74:36:1d:94:19:22:0c:a4:63:fc:e6:79:16: 3c:3b:fa:9c:ab:ec:1f:4d:7a:e8:8f:ae:12:62:6a:40:87:f6: e8:b6:a7:aa:c8:3e:62:15:a5:15:03:4d:eb:bc:eb:b8:fa:01: a5:52:f4:c9:ca:a3:da:85:96:91:47:b1:eb:9e:31:a3:70:8f: a2:f9:ef:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBt5s7gDeATJQaDXOYQL2J4VfDiwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdGMjNEN0I1NDg5MEYwRUVDRjU1MEZGQTQyNzk5QjY0 RDlCRDRDOTAeFw0yNTA5MDYwMjU2MjBaFw0yNTA5MDkxMzUxMjBaMDMxMTAvBgNV BAMTKDFDODg0QzM0NDc0NTcyNjU4RTNEMjE2QzNFMEI2MDBFQTlEQ0MxQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC88c0C2iZZdsh2hZe60mcoCze8 c8u5SK40Yt78g2MPUA5ed/wGd7PKA/ECAlbM0k2Be8B2DsDjxFvBC4nAK40z+/u0 oG7gB7Kj4Ru67W35K9koEQUvzrq0HfGI36f/z7SkTU8bJRmCoIfEM1tkOXd2DyzE z8tiJZi4famZtJ1gtXm9p8AiZnlLmBahEcEZj6xlMd43+jV6Kjt/O9VFX7ekdpx6 gVJNdxtg3j4Dt5TiMNVGAPXHiXM1WnlueLPD/OWU/3o2MDZ2lM+lX6WzVzWWF/Po bY5db9eeL4FNQUQQ6BCPDDNiU8bHNEBbmaFUtRrh09xCi98zWqcNwtwv3RXDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHIhMNEdFcmWOPSFsPgtgDqncwcIwHwYDVR0j BBgwFoAU1/I9e1SJDw7s9VD/pCeZtk2b1MkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Yjk4NTFiMS01YTZkLTRlNzUtOWZmZi1jMDNhOWM0OWNmNjkvMC9EN0YyM0Q3QjU0 ODkwRjBFRUNGNTUwRkZBNDI3OTlCNjREOUJENEM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDdGMjNEN0I1NDg5MEYwRUVDRjU1MEZGQTQyNzk5QjY0RDlC RDRDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmI5ODUxYjEtNWE2ZC00ZTc1LTlm ZmYtYzAzYTljNDljZjY5LzAvRDdGMjNEN0I1NDg5MEYwRUVDRjU1MEZGQTQyNzk5 QjY0RDlCRDRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL5P6IEimcce3j2K+VJcy9wsBoLK61jqqqbS pBjpnFztlYeiqgyuhahw6Yrvfg7QzRHcVgXy5ZxJpMeopggBdRu53ULPFlUWCuFv d6B3VW7JsWeK1khZrmdHgqFbIN4ybGrDy5A/2bajuRtfy1S5PgXSdUalfIV09RSA kDzMkS3p8o538Y1wL/5iMxs8kKFJ6jc6NSBhNKssp/EmH00NyWPRcfwFlULeD8PY 7vRY3Arq3FsOxAdjcoZWdDYdlBkiDKRj/OZ5Fjw7+pyr7B9NeuiPrhJiakCH9ui2 p6rIPmIVpRUDTeu867j6AaVS9MnKo9qFlpFHseueMaNwj6L574I= -----END CERTIFICATE-----Generated at Sun Sep 7 15:31:11 2025 by rpki-client