$ rpki-client -vvf repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft File: B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft (raw, json) Hash identifier: 6GZqAbvGAJrcRFZKytcJh5QCcX+ASOQ+YOcf1Kz2ZEA= Subject key identifier: 67:19:5B:7C:F8:1C:0C:07:CC:D3:C6:E5:AA:6A:B6:C3:A8:A5:2E:1D Authority key identifier: B8:C9:E3:76:A2:07:23:64:11:20:36:DA:7A:7B:BB:4C:AE:4A:C3:7C Certificate issuer: /CN=B8C9E376A2072364112036DA7A7BBB4CAE4AC37C Certificate serial: 6D5E2B48F1671BE2ABE595A2D3B2DBBF852CAE9A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft Manifest number: 0105 Signing time: Fri 13 Jun 2025 19:10:05 +0000 Manifest this update: Fri 13 Jun 2025 19:05:05 +0000 Manifest next update: Tue 17 Jun 2025 06:30:05 +0000 Files and hashes: 1: B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.crl (hash: db6WuNgpk/btymMHatTBjSC7DZ9/x7btvAnqrsWt6Cw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.crl rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 06:30:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:5e:2b:48:f1:67:1b:e2:ab:e5:95:a2:d3:b2:db:bf:85:2c:ae:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8C9E376A2072364112036DA7A7BBB4CAE4AC37C Validity Not Before: Jun 13 19:05:05 2025 GMT Not After : Jun 17 06:30:05 2025 GMT Subject: CN=67195B7CF81C0C07CCD3C6E5AA6AB6C3A8A52E1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a2:81:7f:9c:a9:4f:e6:c2:44:f8:da:52:9b: a3:65:2d:a7:af:3c:af:78:46:61:9f:0d:e1:a1:65: 1e:f9:3b:58:ce:1c:13:51:3e:4a:ff:cf:c8:ea:be: 04:9b:12:fd:16:84:74:45:2a:30:05:07:c9:4c:22: 65:b4:7c:02:a2:37:84:37:ae:68:7c:24:e3:80:83: 70:40:08:58:79:48:1a:3a:77:ad:c3:1e:d1:4e:55: 31:f9:86:43:a4:d4:19:6f:94:0a:fb:f3:b1:49:7d: 47:bc:a7:11:60:2f:c3:38:3d:30:98:96:aa:4f:05: 71:c7:99:ed:0a:33:dd:62:bf:46:68:38:03:fb:81: 96:da:b5:fa:fa:34:6b:f8:ae:a8:f6:ef:54:07:70: 62:d4:95:38:be:21:6a:10:97:b0:12:62:a9:1b:21: 7d:97:91:e2:4f:8f:8e:ee:e1:fd:bc:7d:56:7f:25: 06:f3:6f:8e:f1:d4:7c:89:93:46:8e:44:88:98:46: 9f:77:e9:42:c2:a4:a7:cc:78:97:8b:dc:0f:51:fa: 66:26:0c:42:1b:34:57:b8:76:24:86:e9:ac:7e:46: 2c:b7:41:8e:6d:a9:5e:53:14:ec:2b:42:1b:30:5e: eb:ef:01:62:dc:b8:a9:d0:14:79:4a:ba:e2:97:76: 28:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:19:5B:7C:F8:1C:0C:07:CC:D3:C6:E5:AA:6A:B6:C3:A8:A5:2E:1D X509v3 Authority Key Identifier: keyid:B8:C9:E3:76:A2:07:23:64:11:20:36:DA:7A:7B:BB:4C:AE:4A:C3:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:37:fb:2a:ab:23:b5:49:63:fd:4c:b9:e7:ec:02:85:fa:bb: f8:70:7e:50:0d:22:0d:76:f7:3e:90:26:c2:a1:6f:b9:1d:66: 19:c4:67:d8:bf:ac:96:df:c8:a8:14:f2:00:fe:ec:a2:99:43: ac:52:23:98:5e:9a:10:7d:f2:c8:01:ce:bd:4c:12:1b:40:c8: 37:5f:c7:5c:ef:81:5f:a4:31:f4:5d:3e:a7:3c:06:88:df:91: 1c:e0:ec:da:84:fc:e7:63:b4:02:b7:7f:48:82:6c:a2:6d:26: 73:a4:a2:72:96:17:eb:92:6c:52:3b:47:9e:28:2a:fd:ae:2a: 19:2f:e1:df:e7:28:47:0e:48:a7:62:72:3e:d9:a9:1a:40:6d: dd:14:25:28:6d:93:3d:30:46:74:0a:a1:2d:38:67:42:9f:cb: be:76:6f:16:77:14:60:64:bd:36:b0:70:a2:f1:03:d5:99:dd: de:c8:69:a1:34:08:2d:4e:d1:92:d6:0c:a8:fb:63:f9:f5:d5: f4:70:38:ed:6f:0d:e5:9a:86:19:2c:b0:2b:62:34:aa:ce:f6: fe:68:1c:01:89:d6:c3:56:7b:4c:fc:59:ce:c2:68:42:72:5d: f7:d5:a9:c4:ed:19:91:39:d3:3a:a4:a7:a4:8a:51:1e:89:53: f7:67:e4:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbV4rSPFnG+Kr5ZWi07Lbv4UsrpowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhDOUUzNzZBMjA3MjM2NDExMjAzNkRBN0E3QkJCNENB RTRBQzM3QzAeFw0yNTA2MTMxOTA1MDVaFw0yNTA2MTcwNjMwMDVaMDMxMTAvBgNV BAMTKDY3MTk1QjdDRjgxQzBDMDdDQ0QzQzZFNUFBNkFCNkMzQThBNTJFMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvooF/nKlP5sJE+NpSm6NlLaev PK94RmGfDeGhZR75O1jOHBNRPkr/z8jqvgSbEv0WhHRFKjAFB8lMImW0fAKiN4Q3 rmh8JOOAg3BACFh5SBo6d63DHtFOVTH5hkOk1BlvlAr787FJfUe8pxFgL8M4PTCY lqpPBXHHme0KM91iv0ZoOAP7gZbatfr6NGv4rqj271QHcGLUlTi+IWoQl7ASYqkb IX2XkeJPj47u4f28fVZ/JQbzb47x1HyJk0aORIiYRp936ULCpKfMeJeL3A9R+mYm DEIbNFe4diSG6ax+Riy3QY5tqV5TFOwrQhswXuvvAWLcuKnQFHlKuuKXdiipAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZxlbfPgcDAfM08blqmq2w6ilLh0wHwYDVR0j BBgwFoAUuMnjdqIHI2QRIDbaenu7TK5Kw3wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzYzZTcxYS05Yzg1LTQxNzYtOGZhNC1iN2EyOWFmYjk3N2QvMC9COEM5RTM3NkEy MDcyMzY0MTEyMDM2REE3QTdCQkI0Q0FFNEFDMzdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhDOUUzNzZBMjA3MjM2NDExMjAzNkRBN0E3QkJCNENBRTRB QzM3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzc2M2U3MWEtOWM4NS00MTc2LThm YTQtYjdhMjlhZmI5NzdkLzAvQjhDOUUzNzZBMjA3MjM2NDExMjAzNkRBN0E3QkJC NENBRTRBQzM3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAg3+yqrI7VJY/1MuefsAoX6u/hwflANIg12 9z6QJsKhb7kdZhnEZ9i/rJbfyKgU8gD+7KKZQ6xSI5hemhB98sgBzr1MEhtAyDdf x1zvgV+kMfRdPqc8BojfkRzg7NqE/OdjtAK3f0iCbKJtJnOkonKWF+uSbFI7R54o Kv2uKhkv4d/nKEcOSKdicj7ZqRpAbd0UJShtkz0wRnQKoS04Z0Kfy752bxZ3FGBk vTawcKLxA9WZ3d7IaaE0CC1O0ZLWDKj7Y/n11fRwOO1vDeWahhkssCtiNKrO9v5o HAGJ1sNWe0z8Wc7CaEJyXffVqcTtGZE50zqkp6SKUR6JU/dn5AY= -----END CERTIFICATE-----Generated at Sun Jun 15 15:29:35 2025 by rpki-client