$ rpki-client -vvf repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft File: C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft (raw, json) Hash identifier: epPrtecL+fqvYwLClh3uRFSevCV0IEiWoCzttsJY35s= Subject key identifier: 4C:9E:FF:D0:D9:D8:4E:EB:71:44:3E:32:59:ED:59:34:E4:4C:E4:92 Authority key identifier: C8:C5:B7:81:B7:F4:3C:62:74:BD:AA:C3:FD:8A:E1:91:4A:BE:ED:88 Certificate issuer: /CN=C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88 Certificate serial: 4DC9AF332CA53AFFDDCB16FD659C1E9A1E506882 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft Manifest number: 63 Signing time: Sat 14 Jun 2025 02:11:50 +0000 Manifest this update: Sat 14 Jun 2025 02:06:50 +0000 Manifest next update: Tue 17 Jun 2025 05:06:50 +0000 Files and hashes: 1: C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.crl (hash: Bh4T3G2GaWaVEVMSxl4QGp8l7HB/ourFKaK6IeJ4Xk4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.crl rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 05:06:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:c9:af:33:2c:a5:3a:ff:dd:cb:16:fd:65:9c:1e:9a:1e:50:68:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88 Validity Not Before: Jun 14 02:06:50 2025 GMT Not After : Jun 17 05:06:50 2025 GMT Subject: CN=4C9EFFD0D9D84EEB71443E3259ED5934E44CE492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:23:da:84:55:4f:f4:8e:9b:3f:b7:4f:a2:b4: 37:19:4c:de:a8:07:14:e6:9f:14:9d:d4:27:0f:e9: dd:76:49:dd:60:c4:d3:57:1c:e4:67:a3:e8:48:f3: 18:32:b3:8a:fd:48:c0:fd:1a:75:9d:c4:0a:3c:36: 2f:f9:80:37:1e:ad:27:a0:42:cc:5b:82:1c:a3:49: fb:36:95:17:91:0a:6c:2b:53:49:36:80:c2:94:84: 51:7b:da:ed:5b:42:81:52:f7:15:17:f9:33:67:87: 2e:e1:78:09:4e:51:d4:79:b1:e1:89:81:1a:ab:4b: 9c:27:97:53:63:9a:32:88:fc:a8:f5:2e:14:e5:7e: b6:0e:49:63:75:80:26:4c:38:6a:63:7c:0f:cb:51: 05:ff:40:6b:1b:f8:41:34:3a:a6:12:34:8a:20:f4: 39:49:c9:26:b2:d5:5c:83:c0:ac:c1:bd:78:06:53: 80:ca:73:23:37:e5:bf:3d:2c:ac:87:b5:75:0c:42: c3:5f:4e:18:21:d6:ff:8a:73:69:29:41:0f:46:e1: 1e:81:bb:89:73:3b:88:06:c6:51:c3:ce:08:96:a5: be:fa:7f:89:70:e9:50:e8:27:36:cb:10:02:ce:db: c3:b6:f7:80:77:28:84:13:c2:45:b5:40:28:26:9a: 9b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:9E:FF:D0:D9:D8:4E:EB:71:44:3E:32:59:ED:59:34:E4:4C:E4:92 X509v3 Authority Key Identifier: keyid:C8:C5:B7:81:B7:F4:3C:62:74:BD:AA:C3:FD:8A:E1:91:4A:BE:ED:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:2d:a1:c8:ee:fa:e6:cd:cc:e2:8d:2f:51:d0:65:7a:45:2a: 83:37:74:4e:e9:4d:c4:2c:c0:27:1e:fe:05:5e:4b:2b:91:2a: 5c:52:28:be:86:3a:c4:85:c0:97:5c:ff:60:50:ca:c3:ce:18: 4c:fd:00:37:dc:4e:0c:d4:d2:e3:26:95:8d:76:8c:96:96:f4: 74:28:da:da:75:e1:ee:87:26:2b:0f:14:c2:22:95:9d:6a:a2: a9:94:3f:df:fd:3b:5a:63:7e:6d:71:0f:4b:64:d2:96:dd:12: 48:cd:6d:09:2f:7f:88:d4:4d:99:84:d8:24:35:a0:05:4f:73: dd:66:bb:8d:cc:65:16:f0:f3:4d:cb:61:29:94:21:23:ae:0c: 31:cf:a8:45:c7:53:54:8e:eb:19:4f:05:d8:9d:a9:62:d1:5b: 36:45:1a:91:49:37:3b:32:41:e3:c7:33:09:eb:38:81:f5:e1: 89:16:5d:26:8e:80:8d:90:2b:78:c8:42:98:e8:3c:95:05:a9: 3a:64:bc:ea:b7:bc:0e:a8:d9:4c:10:3e:38:07:2d:74:40:8a: f0:b3:32:d4:1e:8c:5e:1e:8d:ea:7c:c9:26:6f:82:15:e4:bc: 7f:a1:30:b8:5a:5a:d1:66:ca:f4:1d:b1:17:46:93:b7:be:72: 33:a5:8a:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTcmvMyylOv/dyxb9ZZwemh5QaIIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhDNUI3ODFCN0Y0M0M2Mjc0QkRBQUMzRkQ4QUUxOTE0 QUJFRUQ4ODAeFw0yNTA2MTQwMjA2NTBaFw0yNTA2MTcwNTA2NTBaMDMxMTAvBgNV BAMTKDRDOUVGRkQwRDlEODRFRUI3MTQ0M0UzMjU5RUQ1OTM0RTQ0Q0U0OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxI9qEVU/0jps/t0+itDcZTN6o BxTmnxSd1CcP6d12Sd1gxNNXHORno+hI8xgys4r9SMD9GnWdxAo8Ni/5gDcerSeg QsxbghyjSfs2lReRCmwrU0k2gMKUhFF72u1bQoFS9xUX+TNnhy7heAlOUdR5seGJ gRqrS5wnl1NjmjKI/Kj1LhTlfrYOSWN1gCZMOGpjfA/LUQX/QGsb+EE0OqYSNIog 9DlJySay1VyDwKzBvXgGU4DKcyM35b89LKyHtXUMQsNfThgh1v+Kc2kpQQ9G4R6B u4lzO4gGxlHDzgiWpb76f4lw6VDoJzbLEALO28O294B3KIQTwkW1QCgmmptHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTJ7/0NnYTutxRD4yWe1ZNORM5JIwHwYDVR0j BBgwFoAUyMW3gbf0PGJ0varD/YrhkUq+7YgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ODg1M2FhYi04ZDZjLTQ1N2YtOWQ1Ny00ODRhY2FjZWE5ZDgvMS9DOEM1Qjc4MUI3 RjQzQzYyNzRCREFBQzNGRDhBRTE5MTRBQkVFRDg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhDNUI3ODFCN0Y0M0M2Mjc0QkRBQUMzRkQ4QUUxOTE0QUJF RUQ4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTg4NTNhYWItOGQ2Yy00NTdmLTlk NTctNDg0YWNhY2VhOWQ4LzEvQzhDNUI3ODFCN0Y0M0M2Mjc0QkRBQUMzRkQ4QUUx OTE0QUJFRUQ4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEUtocju+ubNzOKNL1HQZXpFKoM3dE7pTcQs wCce/gVeSyuRKlxSKL6GOsSFwJdc/2BQysPOGEz9ADfcTgzU0uMmlY12jJaW9HQo 2tp14e6HJisPFMIilZ1qoqmUP9/9O1pjfm1xD0tk0pbdEkjNbQkvf4jUTZmE2CQ1 oAVPc91mu43MZRbw803LYSmUISOuDDHPqEXHU1SO6xlPBdidqWLRWzZFGpFJNzsy QePHMwnrOIH14YkWXSaOgI2QK3jIQpjoPJUFqTpkvOq3vA6o2UwQPjgHLXRAivCz MtQejF4ejep8ySZvghXkvH+hMLhaWtFmyvQdsRdGk7e+cjOlilw= -----END CERTIFICATE-----Generated at Sun Jun 15 15:23:16 2025 by rpki-client