$ rpki-client -vvf repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft File: A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft (raw, json) Hash identifier: jDMcKf286rDMl6VfCwQx6YCTIepMB7TWSkEaTMqdBzA= Subject key identifier: F6:FA:4B:69:3C:82:01:5E:65:49:C3:81:08:5F:C4:15:12:D0:B9:3C Authority key identifier: A8:CD:D5:76:A9:B5:E4:48:A8:69:BE:A4:D5:16:BA:FC:5A:87:95:03 Certificate issuer: /CN=A8CDD576A9B5E448A869BEA4D516BAFC5A879503 Certificate serial: 1B8D480A6A5C0FD5FC091D3CB9CE47D3D421C1D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft Manifest number: B7 Signing time: Mon 04 Aug 2025 19:02:36 +0000 Manifest this update: Mon 04 Aug 2025 18:57:36 +0000 Manifest next update: Fri 08 Aug 2025 06:52:36 +0000 Files and hashes: 1: A8CDD576A9B5E448A869BEA4D516BAFC5A879503.crl (hash: aWZC5Yx7n+LIG5BwIBFFHIxTZRDvJ58Im8KcW2jCDlU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.crl rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 06:52:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:8d:48:0a:6a:5c:0f:d5:fc:09:1d:3c:b9:ce:47:d3:d4:21:c1:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8CDD576A9B5E448A869BEA4D516BAFC5A879503 Validity Not Before: Aug 4 18:57:36 2025 GMT Not After : Aug 8 06:52:36 2025 GMT Subject: CN=F6FA4B693C82015E6549C381085FC41512D0B93C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ff:d3:8b:53:f8:bb:2c:f4:bb:83:df:fb:1d: 06:b8:d6:aa:7b:39:91:04:36:b2:6e:5b:a1:53:24: 4d:e4:fd:49:f3:74:52:97:c7:02:9c:c6:d9:b2:e5: 3f:5d:d5:d8:c0:87:18:03:21:57:7b:2d:73:da:5f: a9:d5:33:8d:4e:bc:5d:17:ae:b6:02:65:28:4a:88: 8e:5d:2d:47:6d:89:b7:4c:a1:39:da:b2:52:bf:08: 67:81:5f:bf:5f:38:0e:1f:4c:19:c5:45:51:37:b2: 56:0f:b4:ae:6d:88:c0:89:96:de:86:f2:1d:0c:da: 2c:1a:13:ce:ed:c3:c7:a6:58:ed:af:70:c6:32:d3: 93:e3:cd:cd:af:0f:d6:c0:62:81:77:43:11:d1:82: f8:9a:34:dc:86:0e:1d:63:2d:55:19:28:35:05:ca: f1:23:09:80:3a:e9:57:a1:97:ae:6e:a0:58:f0:a9: 24:58:74:30:9c:ae:f8:66:3d:e9:4a:3b:04:39:c5: da:79:c4:f4:10:13:9d:0a:84:f4:4f:42:00:d1:34: 87:f3:91:d7:67:78:7a:01:19:5d:59:b4:3d:ab:a5: 3c:53:37:e7:aa:b3:8c:a1:e0:72:f7:24:fc:84:67: 37:c7:52:1f:00:a2:76:c7:1d:e2:fe:ba:50:0a:de: 87:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:FA:4B:69:3C:82:01:5E:65:49:C3:81:08:5F:C4:15:12:D0:B9:3C X509v3 Authority Key Identifier: keyid:A8:CD:D5:76:A9:B5:E4:48:A8:69:BE:A4:D5:16:BA:FC:5A:87:95:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:55:e4:94:1a:8c:63:f8:9a:ad:a6:a1:46:7e:66:23:24:f0: 17:a5:68:80:12:6a:30:c4:85:a2:b9:c5:2c:d5:97:07:61:83: 20:31:6c:df:e0:63:d5:fe:21:a5:13:47:f8:3d:ea:59:49:88: f1:13:cf:d6:61:dc:ef:6e:94:2d:6e:b1:59:9b:5c:be:39:d4: df:00:ca:5e:cd:3b:54:58:a0:87:ec:9b:43:09:80:d1:43:a5: 5f:18:ff:9d:75:57:14:e7:b2:8f:4f:d6:2e:12:62:bd:91:09: 0f:7a:8a:fe:b8:26:ed:59:ce:11:c2:1a:b7:9c:22:15:c4:fd: 9d:47:c1:6d:b8:3c:9f:f4:4f:dc:fd:46:61:02:aa:4b:02:dd: ee:ae:39:17:12:71:38:c6:97:28:0e:35:f5:da:46:ff:b2:f1: 35:88:c1:40:9c:df:be:2d:a2:a5:dc:42:99:e9:0a:d9:5c:d1: 7c:b0:0a:69:ec:d1:75:d1:37:52:29:c5:8f:0a:42:e1:17:0c: 8b:7d:69:2a:a9:24:87:25:82:fc:89:f9:50:b6:a5:1d:51:35: 94:f6:15:2e:34:ac:37:da:1f:b8:c0:65:b9:ed:09:ac:e6:6f: 86:77:3b:fd:63:29:9c:bc:5f:ce:de:5e:d7:f4:20:3b:dc:38: 71:44:9d:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG41ICmpcD9X8CR08uc5H09QhwdUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThDREQ1NzZBOUI1RTQ0OEE4NjlCRUE0RDUxNkJBRkM1 QTg3OTUwMzAeFw0yNTA4MDQxODU3MzZaFw0yNTA4MDgwNjUyMzZaMDMxMTAvBgNV BAMTKEY2RkE0QjY5M0M4MjAxNUU2NTQ5QzM4MTA4NUZDNDE1MTJEMEI5M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT/9OLU/i7LPS7g9/7HQa41qp7 OZEENrJuW6FTJE3k/UnzdFKXxwKcxtmy5T9d1djAhxgDIVd7LXPaX6nVM41OvF0X rrYCZShKiI5dLUdtibdMoTnaslK/CGeBX79fOA4fTBnFRVE3slYPtK5tiMCJlt6G 8h0M2iwaE87tw8emWO2vcMYy05Pjzc2vD9bAYoF3QxHRgviaNNyGDh1jLVUZKDUF yvEjCYA66Vehl65uoFjwqSRYdDCcrvhmPelKOwQ5xdp5xPQQE50KhPRPQgDRNIfz kddneHoBGV1ZtD2rpTxTN+eqs4yh4HL3JPyEZzfHUh8AonbHHeL+ulAK3of1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9vpLaTyCAV5lScOBCF/EFRLQuTwwHwYDVR0j BBgwFoAUqM3Vdqm15Eioab6k1Ra6/FqHlQMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MmU1ZmY4MS1iMDgyLTQzMzQtYWQyOS01NWRjOGQxZTUzYjkvMC9BOENERDU3NkE5 QjVFNDQ4QTg2OUJFQTRENTE2QkFGQzVBODc5NTAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQThDREQ1NzZBOUI1RTQ0OEE4NjlCRUE0RDUxNkJBRkM1QTg3 OTUwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTJlNWZmODEtYjA4Mi00MzM0LWFk MjktNTVkYzhkMWU1M2I5LzAvQThDREQ1NzZBOUI1RTQ0OEE4NjlCRUE0RDUxNkJB RkM1QTg3OTUwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ5V5JQajGP4mq2moUZ+ZiMk8BelaIASajDE haK5xSzVlwdhgyAxbN/gY9X+IaUTR/g96llJiPETz9Zh3O9ulC1usVmbXL451N8A yl7NO1RYoIfsm0MJgNFDpV8Y/511VxTnso9P1i4SYr2RCQ96iv64Ju1ZzhHCGrec IhXE/Z1HwW24PJ/0T9z9RmECqksC3e6uORcScTjGlygONfXaRv+y8TWIwUCc374t oqXcQpnpCtlc0XywCmns0XXRN1IpxY8KQuEXDIt9aSqpJIclgvyJ+VC2pR1RNZT2 FS40rDfaH7jAZbntCazmb4Z3O/1jKZy8X87eXtf0IDvcOHFEnWA= -----END CERTIFICATE-----Generated at Tue Aug 5 19:54:01 2025 by rpki-client