$ rpki-client -vvf repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft File: 8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft (raw, json) Hash identifier: 1RmjJFmDbQW6BU1c4sszrTbz24UwKDb1a0+fbld/6YI= Subject key identifier: 1B:3F:CF:F4:1A:B7:D4:DB:B0:38:41:E3:1F:98:29:F7:27:1A:93:F8 Authority key identifier: 8D:5A:49:C9:E4:2E:37:1B:FD:1E:67:AC:E1:B3:D5:5E:C1:AB:F7:3F Certificate issuer: /CN=8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F Certificate serial: 09450176BD068CB0F2E5F4E2E3C81EB19A30CF08 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft Manifest number: 8C Signing time: Tue 05 Aug 2025 08:20:53 +0000 Manifest this update: Tue 05 Aug 2025 08:15:53 +0000 Manifest next update: Fri 08 Aug 2025 17:22:53 +0000 Files and hashes: 1: 8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.crl (hash: NeGiBWupBTUWoPnZr1HllKTJYpeV6yrMpXg1O4NZenc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.crl rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 17:22:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:45:01:76:bd:06:8c:b0:f2:e5:f4:e2:e3:c8:1e:b1:9a:30:cf:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F Validity Not Before: Aug 5 08:15:53 2025 GMT Not After : Aug 8 17:22:53 2025 GMT Subject: CN=1B3FCFF41AB7D4DBB03841E31F9829F7271A93F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:01:2c:5b:ac:65:58:4d:d1:bb:f8:0c:8a:8e: 71:21:9f:75:ed:4b:18:80:ec:d4:e4:e5:c6:11:9b: 5e:07:92:ae:96:47:99:47:fa:92:43:8c:1e:c4:15: a2:ac:00:32:54:1d:3b:1d:2c:92:d8:a0:07:ac:fa: ac:b8:98:42:c2:2f:97:eb:cc:a2:6c:e8:ee:0d:fc: 88:46:9a:ed:46:f4:d0:1e:7f:7f:c3:c6:7a:64:03: ea:29:72:bb:5b:58:c2:9d:23:1b:b0:07:02:3a:82: 3e:3c:d2:46:ed:1c:c7:93:cf:ce:ce:9e:9a:04:9d: 08:2a:fe:87:a9:cc:bb:a9:a9:8f:b5:fe:e6:68:fc: 66:3e:f8:88:39:b9:5e:01:fa:06:6a:bd:33:eb:ac: 04:58:bf:17:41:c2:a3:fc:87:f8:37:2b:37:15:43: 67:12:3e:32:c2:4e:7d:14:8e:e6:2f:8f:d8:b5:7a: b1:93:ae:e7:34:50:cc:3e:57:1c:f8:f8:2b:57:a7: a8:a5:a7:f7:3f:fe:42:b7:ed:73:8e:c0:71:eb:08: 55:8f:25:c2:d1:eb:68:39:8e:f4:7e:1f:15:f7:1c: e9:b1:ad:b8:68:fa:cb:70:02:c6:75:6c:66:cf:66: fb:2e:f1:1e:ca:6c:b5:55:1a:0e:9a:39:55:bf:96: 13:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:3F:CF:F4:1A:B7:D4:DB:B0:38:41:E3:1F:98:29:F7:27:1A:93:F8 X509v3 Authority Key Identifier: keyid:8D:5A:49:C9:E4:2E:37:1B:FD:1E:67:AC:E1:B3:D5:5E:C1:AB:F7:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:bd:22:94:b5:44:82:0c:83:f3:f6:fa:ee:62:92:11:91:56: f9:16:ca:ad:9a:10:ca:e1:6c:a4:b5:c0:47:c5:01:c5:e6:0e: c8:27:8d:e5:93:07:52:17:8f:09:b8:c1:2d:2d:6d:74:6b:30: 80:8d:f2:82:94:b5:80:9c:d4:0c:f7:bd:c5:62:6f:3f:a7:ed: 64:c7:66:92:69:e5:49:b0:27:ef:fd:24:fd:11:9c:9f:e6:a0: 47:78:5b:aa:dc:14:33:90:2b:1b:5c:47:a9:3f:01:cb:f7:b7: 98:9e:78:6f:6f:a7:58:d3:cf:dc:75:9d:cf:a2:91:48:ad:96: ae:71:7c:8e:10:2f:8c:b7:cd:67:b0:5b:c2:e5:02:13:3c:f5: 35:68:66:72:ab:60:26:7c:ec:9d:82:2d:d2:c7:8f:1e:a9:8d: 4e:6a:fa:d5:eb:83:18:ac:e2:0f:d0:df:81:b2:59:37:7a:86: e1:60:a6:a5:66:a2:a8:14:f3:11:d8:58:56:79:7d:61:7b:35: 8b:97:e0:33:3c:cb:90:03:b1:ff:7e:4c:10:f5:19:fc:51:3a: 72:b0:34:e4:3b:c1:54:6d:08:76:15:25:d8:14:0e:aa:1d:ea: be:d9:53:e2:5a:57:af:df:9b:8e:9e:9f:66:de:11:5f:34:ce: 1b:a0:fd:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCUUBdr0GjLDy5fTi48gesZowzwgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ1QTQ5QzlFNDJFMzcxQkZEMUU2N0FDRTFCM0Q1NUVD MUFCRjczRjAeFw0yNTA4MDUwODE1NTNaFw0yNTA4MDgxNzIyNTNaMDMxMTAvBgNV BAMTKDFCM0ZDRkY0MUFCN0Q0REJCMDM4NDFFMzFGOTgyOUY3MjcxQTkzRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSASxbrGVYTdG7+AyKjnEhn3Xt SxiA7NTk5cYRm14Hkq6WR5lH+pJDjB7EFaKsADJUHTsdLJLYoAes+qy4mELCL5fr zKJs6O4N/IhGmu1G9NAef3/DxnpkA+opcrtbWMKdIxuwBwI6gj480kbtHMeTz87O npoEnQgq/oepzLupqY+1/uZo/GY++Ig5uV4B+gZqvTPrrARYvxdBwqP8h/g3KzcV Q2cSPjLCTn0UjuYvj9i1erGTruc0UMw+Vxz4+CtXp6ilp/c//kK37XOOwHHrCFWP JcLR62g5jvR+HxX3HOmxrbho+stwAsZ1bGbPZvsu8R7KbLVVGg6aOVW/lhOzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGz/P9Bq31NuwOEHjH5gp9ycak/gwHwYDVR0j BBgwFoAUjVpJyeQuNxv9Hmes4bPVXsGr9z8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmY1OTg2Yi1jNzY0LTRjZDctYjQxNC1hMjViZDA1YzNmOTIvMC84RDVBNDlDOUU0 MkUzNzFCRkQxRTY3QUNFMUIzRDU1RUMxQUJGNzNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQ1QTQ5QzlFNDJFMzcxQkZEMUU2N0FDRTFCM0Q1NUVDMUFC RjczRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjJmNTk4NmItYzc2NC00Y2Q3LWI0 MTQtYTI1YmQwNWMzZjkyLzAvOEQ1QTQ5QzlFNDJFMzcxQkZEMUU2N0FDRTFCM0Q1 NUVDMUFCRjczRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHi9IpS1RIIMg/P2+u5ikhGRVvkWyq2aEMrh bKS1wEfFAcXmDsgnjeWTB1IXjwm4wS0tbXRrMICN8oKUtYCc1Az3vcVibz+n7WTH ZpJp5UmwJ+/9JP0RnJ/moEd4W6rcFDOQKxtcR6k/Acv3t5ieeG9vp1jTz9x1nc+i kUitlq5xfI4QL4y3zWewW8LlAhM89TVoZnKrYCZ87J2CLdLHjx6pjU5q+tXrgxis 4g/Q34GyWTd6huFgpqVmoqgU8xHYWFZ5fWF7NYuX4DM8y5ADsf9+TBD1GfxROnKw NOQ7wVRtCHYVJdgUDqod6r7ZU+JaV6/fm46en2beEV80zhug/TU= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:06 2025 by rpki-client