$ rpki-client -vvf repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.mft File: B8E13B8031811FE78FA73151056FBFABEE076814.mft (raw, json) Hash identifier: 5kIlks7rAFNNkThFcCBBwBc72QHyySRqNF2iCVVVaF8= Subject key identifier: 39:17:54:DE:FC:AD:93:A3:22:82:6E:91:0E:CF:7B:9B:E9:26:9B:57 Authority key identifier: B8:E1:3B:80:31:81:1F:E7:8F:A7:31:51:05:6F:BF:AB:EE:07:68:14 Certificate issuer: /CN=B8E13B8031811FE78FA73151056FBFABEE076814 Certificate serial: 417154DAFBA38357FD7DA170787D503E24955495 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E13B8031811FE78FA73151056FBFABEE076814.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.mft Manifest number: 1E Signing time: Thu 07 Aug 2025 13:22:08 +0000 Manifest this update: Thu 07 Aug 2025 13:17:08 +0000 Manifest next update: Mon 11 Aug 2025 00:42:08 +0000 Files and hashes: 1: B8E13B8031811FE78FA73151056FBFABEE076814.crl (hash: JE56p5vXhQBCNbllNBws3rPmRNVzEqlVT5IWM5EMeYw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.crl rsync://repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E13B8031811FE78FA73151056FBFABEE076814.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 00:42:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:71:54:da:fb:a3:83:57:fd:7d:a1:70:78:7d:50:3e:24:95:54:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8E13B8031811FE78FA73151056FBFABEE076814 Validity Not Before: Aug 7 13:17:08 2025 GMT Not After : Aug 11 00:42:08 2025 GMT Subject: CN=391754DEFCAD93A322826E910ECF7B9BE9269B57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2a:57:7f:05:73:b3:6e:e0:0a:e3:c9:d5:cd: c4:20:4a:3c:d6:33:bb:a8:b7:03:98:77:20:5c:7e: 23:10:e2:c8:21:3f:ef:23:4b:c1:9a:79:2e:5f:f2: 52:4d:8b:98:d1:41:ba:b4:5a:8f:a8:9b:5d:da:a9: a4:8b:d0:b8:c5:aa:12:04:bf:66:c0:4f:46:f4:fc: 77:0c:e9:11:8d:9d:d7:b3:e3:85:7f:b3:e8:ed:53: 31:48:ec:09:8c:d0:4c:86:62:a3:60:3d:3f:e4:23: f1:46:39:81:e4:b1:cc:0e:eb:fa:7d:86:7a:ce:5f: 35:9e:3f:ff:d7:6e:96:cf:33:0e:e3:e0:69:5c:e4: 8a:dd:ea:2e:5e:e8:72:f7:ff:39:30:84:f3:20:c0: a8:91:7e:f7:d9:53:bb:58:e0:d2:10:de:6f:a1:e5: 68:c5:7c:c2:4f:8e:7f:f1:a1:6e:b2:bf:13:f0:6f: 29:1d:64:35:1c:a4:83:4c:50:c9:c2:dd:6c:91:3f: 9b:29:c4:0b:50:9e:3e:ac:32:76:dd:2c:16:fa:c5: 5a:34:45:68:db:e6:07:07:80:62:0c:7a:d6:90:60: 74:87:5a:a1:ab:d9:ab:da:e2:e5:f8:30:23:32:4a: 61:d5:ea:2c:d0:63:c8:86:07:a7:08:ba:f3:a8:84: ec:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:17:54:DE:FC:AD:93:A3:22:82:6E:91:0E:CF:7B:9B:E9:26:9B:57 X509v3 Authority Key Identifier: keyid:B8:E1:3B:80:31:81:1F:E7:8F:A7:31:51:05:6F:BF:AB:EE:07:68:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E13B8031811FE78FA73151056FBFABEE076814.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:65:50:96:72:da:75:ed:58:1c:21:58:d2:e5:db:c4:a8:a9: 43:ea:86:9e:0b:a5:c1:ca:8b:45:e7:d1:68:b1:cf:14:36:7a: c3:27:a3:c9:2c:01:2a:2a:5b:91:d3:68:79:11:1f:1e:6d:ba: d7:0d:6f:db:45:ad:cd:ae:d3:89:04:43:ba:41:b2:8b:56:5b: 33:0c:cf:f7:d0:a0:a2:37:29:8f:aa:3a:8d:4f:2b:8f:92:dc: 35:13:21:04:e0:2e:3d:ce:ee:7a:58:1a:7e:b8:38:6b:c7:5b: c7:f8:73:7d:bf:38:1b:10:6a:29:a3:d7:1a:de:cd:bd:b2:b1: fc:85:b3:af:15:c4:99:df:31:67:4b:b6:a6:3c:3f:6b:fa:36: 17:db:3e:4e:00:47:12:b2:c1:e6:31:7d:e9:63:7f:e1:55:65: 62:ba:6a:ac:61:c9:f5:dc:78:4e:cd:63:1f:b7:fa:69:48:18: ea:74:f9:4c:38:86:bd:dc:bf:50:8a:b5:ef:d1:7c:a4:35:77: 86:0a:3c:e5:22:8e:46:18:33:8f:d1:88:ec:33:43:bc:e2:6e: 6f:da:c0:2b:93:1a:39:ad:94:14:90:45:9e:d8:f9:e5:56:1f: 00:1f:15:62:59:ee:5d:8e:e0:1b:52:ee:54:20:ca:92:87:46: 13:7c:b8:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQXFU2vujg1f9faFweH1QPiSVVJUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhFMTNCODAzMTgxMUZFNzhGQTczMTUxMDU2RkJGQUJF RTA3NjgxNDAeFw0yNTA4MDcxMzE3MDhaFw0yNTA4MTEwMDQyMDhaMDMxMTAvBgNV BAMTKDM5MTc1NERFRkNBRDkzQTMyMjgyNkU5MTBFQ0Y3QjlCRTkyNjlCNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Kld/BXOzbuAK48nVzcQgSjzW M7uotwOYdyBcfiMQ4sghP+8jS8GaeS5f8lJNi5jRQbq0Wo+om13aqaSL0LjFqhIE v2bAT0b0/HcM6RGNndez44V/s+jtUzFI7AmM0EyGYqNgPT/kI/FGOYHkscwO6/p9 hnrOXzWeP//XbpbPMw7j4Glc5Ird6i5e6HL3/zkwhPMgwKiRfvfZU7tY4NIQ3m+h 5WjFfMJPjn/xoW6yvxPwbykdZDUcpINMUMnC3WyRP5spxAtQnj6sMnbdLBb6xVo0 RWjb5gcHgGIMetaQYHSHWqGr2ava4uX4MCMySmHV6izQY8iGB6cIuvOohOw9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUORdU3vytk6Migm6RDs97m+kmm1cwHwYDVR0j BBgwFoAUuOE7gDGBH+ePpzFRBW+/q+4HaBQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODdjMmI3ZS0yNjYzLTRkNjgtYjI1YS01ZmNmMDVlMDdiYjQvMC9COEUxM0I4MDMx ODExRkU3OEZBNzMxNTEwNTZGQkZBQkVFMDc2ODE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhFMTNCODAzMTgxMUZFNzhGQTczMTUxMDU2RkJGQUJFRTA3 NjgxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTg3YzJiN2UtMjY2My00ZDY4LWIy NWEtNWZjZjA1ZTA3YmI0LzAvQjhFMTNCODAzMTgxMUZFNzhGQTczMTUxMDU2RkJG QUJFRTA3NjgxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHRlUJZy2nXtWBwhWNLl28SoqUPqhp4LpcHK i0Xn0WixzxQ2esMno8ksASoqW5HTaHkRHx5tutcNb9tFrc2u04kEQ7pBsotWWzMM z/fQoKI3KY+qOo1PK4+S3DUTIQTgLj3O7npYGn64OGvHW8f4c32/OBsQaimj1xre zb2ysfyFs68VxJnfMWdLtqY8P2v6NhfbPk4ARxKyweYxfeljf+FVZWK6aqxhyfXc eE7NYx+3+mlIGOp0+Uw4hr3cv1CKte/RfKQ1d4YKPOUijkYYM4/RiOwzQ7zibm/a wCuTGjmtlBSQRZ7Y+eVWHwAfFWJZ7l2O4BtS7lQgypKHRhN8uEE= -----END CERTIFICATE-----Generated at Sat Aug 9 22:36:59 2025 by rpki-client