$ rpki-client -vvf repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft File: 0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft (raw, json) Hash identifier: aDXOimZ5uhNKIPe8O1ba9n9k2hXzpbs3QpSlFoVc7H0= Subject key identifier: 9D:23:0B:17:B3:EB:1B:A0:48:48:D4:58:83:A6:FA:1E:FB:CC:01:B8 Authority key identifier: 0F:BA:D9:2F:48:DF:15:47:7E:4D:D9:3C:DC:7A:52:77:FE:93:A8:EB Certificate issuer: /CN=0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB Certificate serial: 385698D9994467295B28C226BB3DDB3C51F203E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft Manifest number: 94 Signing time: Sun 07 Sep 2025 13:11:03 +0000 Manifest this update: Sun 07 Sep 2025 13:06:03 +0000 Manifest next update: Wed 10 Sep 2025 21:21:03 +0000 Files and hashes: 1: 0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.crl (hash: YD9/CKdQF0y2C12I8wEeeYstEGmXhhxVG/2rxQ9UJLQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.crl rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:56:98:d9:99:44:67:29:5b:28:c2:26:bb:3d:db:3c:51:f2:03:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB Validity Not Before: Sep 7 13:06:03 2025 GMT Not After : Sep 10 21:21:03 2025 GMT Subject: CN=9D230B17B3EB1BA04848D45883A6FA1EFBCC01B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:b2:74:97:d0:8e:b0:dc:ea:b3:b5:6a:97:b0: e0:e8:cd:e2:44:98:6b:19:23:cf:a4:3f:4b:91:45: 68:a1:df:17:61:56:ec:94:7d:c1:2d:02:97:3b:b0: 83:70:97:33:c5:45:89:7f:42:b6:19:c7:34:e1:b0: 65:9f:94:ce:a3:5e:65:c2:76:3c:e2:16:bb:d8:9d: 41:ca:5c:76:48:a1:20:62:bd:6d:9f:03:f3:9f:20: 3f:cd:45:34:91:49:0f:ed:2c:e9:4b:29:74:04:84: 1f:f6:61:dc:f7:7b:c9:7e:b1:c9:22:c5:18:d9:17: fe:16:61:37:74:3f:04:e6:74:05:1e:80:85:78:c4: 4f:2b:13:56:a6:e3:2c:f5:30:15:b0:13:61:75:6c: e2:66:37:31:02:d8:a0:51:64:fc:1f:47:cf:46:82: 97:45:d6:96:33:5d:87:c8:b9:bc:6a:74:e3:05:23: c3:b9:59:f8:4f:97:90:7e:67:e8:a2:50:dd:74:45: 4d:68:63:39:37:54:29:00:68:b3:cc:dc:0e:32:44: e9:ee:64:41:78:a9:81:c9:6e:21:c8:31:7e:82:a7: f0:81:cc:92:8e:8c:3b:50:09:01:f3:9c:2a:9e:79: 7e:da:d5:d9:da:9a:02:ac:eb:f2:df:b8:d6:04:27: cd:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:23:0B:17:B3:EB:1B:A0:48:48:D4:58:83:A6:FA:1E:FB:CC:01:B8 X509v3 Authority Key Identifier: keyid:0F:BA:D9:2F:48:DF:15:47:7E:4D:D9:3C:DC:7A:52:77:FE:93:A8:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c81af021-1c01-4a2e-b5d3-c1bbb1650c43/0/0FBAD92F48DF15477E4DD93CDC7A5277FE93A8EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:27:06:0a:a8:c9:0d:ee:2a:94:68:c9:1d:5f:72:70:25:f6: 11:34:a7:08:98:c1:2f:2c:2d:b3:f6:c8:25:c2:b8:25:2a:b6: 93:01:9e:27:99:ec:b3:1f:78:54:d8:06:27:53:9c:fb:ef:1a: eb:06:a4:62:84:f8:ca:5a:31:3d:7a:11:84:d7:a1:f9:a6:c3: d7:15:98:64:4f:e3:16:dc:0b:1f:dc:7c:af:fb:0e:fd:28:7e: 38:a0:f8:0a:f4:c5:8a:04:7c:54:dd:17:05:13:f2:6b:24:6b: f8:7d:5f:a8:84:cb:1a:ad:69:fd:56:90:bf:36:e2:7c:8c:a6: 82:4b:37:3d:77:86:34:6c:f0:13:e0:c0:ac:fb:4f:3c:5a:8d: b8:3b:3b:9f:20:e6:71:db:c9:24:50:22:52:95:73:2c:cd:25: e5:a9:4e:5c:6e:84:97:47:b0:58:33:5c:f3:8b:23:5d:cc:a4: 9f:54:3b:87:3e:fd:64:bd:c3:7d:7c:95:e6:87:17:40:15:8b: 82:ee:bd:92:d6:8d:9c:49:7a:f3:87:4b:4d:39:5b:39:87:b9: 8a:b9:89:06:5f:71:a2:a9:ac:44:f8:31:33:f3:9e:27:d9:45: 2c:da:67:e9:9d:d1:e9:97:e5:85:a4:72:3d:87:2d:bf:05:6c: 88:96:9d:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOFaY2ZlEZylbKMImuz3bPFHyA+QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEZCQUQ5MkY0OERGMTU0NzdFNEREOTNDREM3QTUyNzdG RTkzQThFQjAeFw0yNTA5MDcxMzA2MDNaFw0yNTA5MTAyMTIxMDNaMDMxMTAvBgNV BAMTKDlEMjMwQjE3QjNFQjFCQTA0ODQ4RDQ1ODgzQTZGQTFFRkJDQzAxQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrsnSX0I6w3OqztWqXsODozeJE mGsZI8+kP0uRRWih3xdhVuyUfcEtApc7sINwlzPFRYl/QrYZxzThsGWflM6jXmXC djziFrvYnUHKXHZIoSBivW2fA/OfID/NRTSRSQ/tLOlLKXQEhB/2Ydz3e8l+scki xRjZF/4WYTd0PwTmdAUegIV4xE8rE1am4yz1MBWwE2F1bOJmNzEC2KBRZPwfR89G gpdF1pYzXYfIubxqdOMFI8O5WfhPl5B+Z+iiUN10RU1oYzk3VCkAaLPM3A4yROnu ZEF4qYHJbiHIMX6Cp/CBzJKOjDtQCQHznCqeeX7a1dnamgKs6/LfuNYEJ82bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnSMLF7PrG6BISNRYg6b6HvvMAbgwHwYDVR0j BBgwFoAUD7rZL0jfFUd+Tdk83HpSd/6TqOswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODFhZjAyMS0xYzAxLTRhMmUtYjVkMy1jMWJiYjE2NTBjNDMvMC8wRkJBRDkyRjQ4 REYxNTQ3N0U0REQ5M0NEQzdBNTI3N0ZFOTNBOEVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEZCQUQ5MkY0OERGMTU0NzdFNEREOTNDREM3QTUyNzdGRTkz QThFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzgxYWYwMjEtMWMwMS00YTJlLWI1 ZDMtYzFiYmIxNjUwYzQzLzAvMEZCQUQ5MkY0OERGMTU0NzdFNEREOTNDREM3QTUy NzdGRTkzQThFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFMnBgqoyQ3uKpRoyR1fcnAl9hE0pwiYwS8s LbP2yCXCuCUqtpMBnieZ7LMfeFTYBidTnPvvGusGpGKE+MpaMT16EYTXofmmw9cV mGRP4xbcCx/cfK/7Dv0ofjig+Ar0xYoEfFTdFwUT8mska/h9X6iEyxqtaf1WkL82 4nyMpoJLNz13hjRs8BPgwKz7Tzxajbg7O58g5nHbySRQIlKVcyzNJeWpTlxuhJdH sFgzXPOLI13MpJ9UO4c+/WS9w318leaHF0AVi4LuvZLWjZxJevOHS005WzmHuYq5 iQZfcaKprET4MTPznifZRSzaZ+md0emX5YWkcj2HLb8FbIiWnXw= -----END CERTIFICATE-----Generated at Sun Sep 7 15:13:28 2025 by rpki-client