$ rpki-client -vvf repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft File: 8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft (raw, json) Hash identifier: NiWwD+i+YU5pf4VBIinPGBI01QhIpwmYF15+pceppyE= Subject key identifier: A0:08:87:81:BB:44:B7:53:8B:72:53:91:95:48:B9:21:58:CE:B2:31 Authority key identifier: 8C:34:62:80:99:43:E9:E8:E8:E8:90:52:BF:9B:9C:3D:DC:60:EE:22 Certificate issuer: /CN=8C3462809943E9E8E8E89052BF9B9C3DDC60EE22 Certificate serial: 3AB19C6615A676BEFFEBC02097157EA673CA97FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft Manifest number: 0224 Signing time: Sat 14 Jun 2025 14:00:45 +0000 Manifest this update: Sat 14 Jun 2025 13:55:45 +0000 Manifest next update: Wed 18 Jun 2025 01:02:45 +0000 Files and hashes: 1: 8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.crl (hash: EtdAb6lA83reeiyCh6YAaFwV3x/eceu8hPdEIW1FvHA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.crl rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 01:02:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:b1:9c:66:15:a6:76:be:ff:eb:c0:20:97:15:7e:a6:73:ca:97:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C3462809943E9E8E8E89052BF9B9C3DDC60EE22 Validity Not Before: Jun 14 13:55:45 2025 GMT Not After : Jun 18 01:02:45 2025 GMT Subject: CN=A0088781BB44B7538B7253919548B92158CEB231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:93:68:38:49:48:9c:87:0f:41:e9:9e:05:3f: ce:76:84:6f:ff:19:8e:57:1c:5e:92:ce:ea:22:25: 44:23:bb:2b:df:7d:23:30:24:f0:0e:a2:b8:92:66: 40:5e:92:5e:35:73:50:0a:05:0b:ff:60:8b:6d:36: ef:2b:aa:b8:ff:cb:c0:6d:05:81:8a:ac:14:59:4b: 30:5b:e8:86:2c:19:5d:47:c8:c2:dd:24:60:8d:2c: 35:0d:a4:3e:3a:ee:40:dc:9d:1c:9e:66:f9:ca:2f: c3:8b:46:b8:5c:0a:12:e8:ac:35:6e:82:71:7c:f0: 0d:9b:9c:51:b5:32:76:cb:3e:0b:61:a1:a3:6a:4e: 6e:54:37:46:22:a6:bf:b1:e4:28:7e:fa:70:a6:0f: 6c:5f:ff:af:64:f8:4f:3e:14:cb:93:6f:bf:33:b5: c3:61:be:74:73:ac:c2:5e:10:d3:3c:d8:05:80:7d: f0:a7:df:37:15:6e:2d:aa:e6:8d:65:2d:cf:34:3a: 18:55:5e:7b:c3:ea:f0:9e:17:4a:5f:34:e7:af:aa: b2:fd:a6:0f:26:ba:09:6b:f3:44:b6:16:da:68:eb: 2c:4e:9f:12:67:9a:fb:65:67:cc:9b:40:85:47:b4: b1:94:22:ea:3d:f5:cc:3e:37:8f:98:29:aa:be:b9: d9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:08:87:81:BB:44:B7:53:8B:72:53:91:95:48:B9:21:58:CE:B2:31 X509v3 Authority Key Identifier: keyid:8C:34:62:80:99:43:E9:E8:E8:E8:90:52:BF:9B:9C:3D:DC:60:EE:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:e6:17:4f:4c:7d:bb:66:9f:c1:97:6f:b7:99:7c:04:15:2e: f6:da:e3:f5:c8:7a:5e:5b:33:af:e8:15:76:d5:9e:b3:e6:b9: 53:b8:6c:20:a4:a4:5e:c3:03:a7:6b:92:c7:08:32:89:70:ff: e2:a4:c7:14:6d:6d:07:20:8b:e9:2b:ae:f5:43:30:7a:77:d2: 3a:77:59:18:36:c9:1e:68:f8:f3:2e:02:e2:0d:b7:85:c8:74: 78:2f:60:59:4a:49:10:89:69:d1:c7:5e:69:8d:ef:fc:7f:d2: ef:8c:b9:3d:00:d9:aa:9f:0f:f4:c5:7a:88:ab:b4:03:0d:af: d3:ca:28:fb:c1:a9:a7:00:77:8c:c7:b7:1d:e1:a5:32:dd:e8: d7:a8:37:25:7b:75:00:6c:0c:7d:a5:70:ce:45:f4:4c:06:b3: 20:b4:8b:a8:e7:a8:4b:b8:26:cb:81:cd:b0:a4:40:97:43:cf: e3:be:dd:d6:4c:04:f8:5e:43:66:98:92:2a:4c:7f:cc:f9:8b: 5c:39:6b:81:dc:1d:61:62:20:04:d1:a6:60:f8:8e:f9:dc:a7: c8:2e:08:d1:2e:e6:dd:d7:f2:57:83:f1:d4:0e:6e:53:25:a0: 25:b9:f8:55:74:d4:45:d0:d6:11:b7:3a:31:08:1f:4a:03:f3: 83:7f:80:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOrGcZhWmdr7/68AglxV+pnPKl/owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEMzNDYyODA5OTQzRTlFOEU4RTg5MDUyQkY5QjlDM0RE QzYwRUUyMjAeFw0yNTA2MTQxMzU1NDVaFw0yNTA2MTgwMTAyNDVaMDMxMTAvBgNV BAMTKEEwMDg4NzgxQkI0NEI3NTM4QjcyNTM5MTk1NDhCOTIxNThDRUIyMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4k2g4SUichw9B6Z4FP852hG// GY5XHF6SzuoiJUQjuyvffSMwJPAOoriSZkBekl41c1AKBQv/YIttNu8rqrj/y8Bt BYGKrBRZSzBb6IYsGV1HyMLdJGCNLDUNpD467kDcnRyeZvnKL8OLRrhcChLorDVu gnF88A2bnFG1MnbLPgthoaNqTm5UN0Yipr+x5Ch++nCmD2xf/69k+E8+FMuTb78z tcNhvnRzrMJeENM82AWAffCn3zcVbi2q5o1lLc80OhhVXnvD6vCeF0pfNOevqrL9 pg8muglr80S2Ftpo6yxOnxJnmvtlZ8ybQIVHtLGUIuo99cw+N4+YKaq+udlVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoAiHgbtEt1OLclORlUi5IVjOsjEwHwYDVR0j BBgwFoAUjDRigJlD6ejo6JBSv5ucPdxg7iIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzM4YmRhZC1kMmRkLTRmMDctYWU4NC1jNTQwNjEyYmFmNmEvMC84QzM0NjI4MDk5 NDNFOUU4RThFODkwNTJCRjlCOUMzRERDNjBFRTIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEMzNDYyODA5OTQzRTlFOEU4RTg5MDUyQkY5QjlDM0REQzYw RUUyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTMzOGJkYWQtZDJkZC00ZjA3LWFl ODQtYzU0MDYxMmJhZjZhLzAvOEMzNDYyODA5OTQzRTlFOEU4RTg5MDUyQkY5QjlD M0REQzYwRUUyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHbmF09Mfbtmn8GXb7eZfAQVLvba4/XIel5b M6/oFXbVnrPmuVO4bCCkpF7DA6drkscIMolw/+KkxxRtbQcgi+krrvVDMHp30jp3 WRg2yR5o+PMuAuINt4XIdHgvYFlKSRCJadHHXmmN7/x/0u+MuT0A2aqfD/TFeoir tAMNr9PKKPvBqacAd4zHtx3hpTLd6NeoNyV7dQBsDH2lcM5F9EwGsyC0i6jnqEu4 JsuBzbCkQJdDz+O+3dZMBPheQ2aYkipMf8z5i1w5a4HcHWFiIATRpmD4jvncp8gu CNEu5t3X8leD8dQOblMloCW5+FV01EXQ1hG3OjEIH0oD84N/gFE= -----END CERTIFICATE-----Generated at Mon Jun 16 22:02:53 2025 by rpki-client