$ rpki-client -vvf repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft File: B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft (raw, json) Hash identifier: 4TR0zbKYX8CY0jmeojMTtq44t/uWNJZjKwP0TTdvNbA= Subject key identifier: 50:8B:2B:6C:98:2B:62:B4:13:86:0D:F7:D1:96:4C:6F:C9:12:4D:A9 Authority key identifier: B8:C9:E3:76:A2:07:23:64:11:20:36:DA:7A:7B:BB:4C:AE:4A:C3:7C Certificate issuer: /CN=B8C9E376A2072364112036DA7A7BBB4CAE4AC37C Certificate serial: 0FD4A56789B0E933FF01E774100AB7943FEB10FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft Manifest number: 011C Signing time: Tue 05 Aug 2025 04:10:05 +0000 Manifest this update: Tue 05 Aug 2025 04:05:05 +0000 Manifest next update: Fri 08 Aug 2025 13:48:05 +0000 Files and hashes: 1: B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.crl (hash: DBR/+fLR247WXEIwm6/mnMAFO0r71GgWpUrdEN4i0u8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.crl rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 13:48:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:d4:a5:67:89:b0:e9:33:ff:01:e7:74:10:0a:b7:94:3f:eb:10:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8C9E376A2072364112036DA7A7BBB4CAE4AC37C Validity Not Before: Aug 5 04:05:05 2025 GMT Not After : Aug 8 13:48:05 2025 GMT Subject: CN=508B2B6C982B62B413860DF7D1964C6FC9124DA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:04:86:58:2c:f7:4b:99:c7:80:79:49:81:46: 1e:b2:22:48:b0:18:8f:86:a8:57:ee:bd:b4:21:c8: 7e:b3:bb:8f:d1:2e:c1:09:cb:85:8a:c5:3e:5e:dc: d3:b3:21:b5:c2:2d:df:ee:55:9f:8d:31:ef:94:a8: bc:24:01:c1:8a:9a:af:2a:ef:08:a5:4a:b0:d5:af: 2b:3b:a1:a1:d6:fa:72:25:e7:eb:f1:cc:33:c3:92: 5f:d6:84:5a:0c:2e:ea:78:40:4b:11:cc:78:1b:4f: fe:37:3f:a1:94:d5:44:7b:da:39:fd:93:f9:8f:37: 33:fb:0b:89:c7:65:57:37:09:d8:41:8b:23:8d:79: e6:24:56:ef:20:20:d3:09:fc:d8:b5:68:2a:e8:72: 3c:13:9e:14:07:8c:04:bb:51:94:dd:91:a8:fe:71: 80:e1:2a:bf:50:24:a2:d1:6d:18:3e:93:d0:9c:e0: 74:22:27:22:d5:57:29:7f:7e:8d:ec:0d:ee:18:2f: 38:ad:d0:fa:78:54:a0:9e:f7:98:c4:2e:df:f0:bb: 84:19:53:a5:4a:f1:93:b3:00:cf:6f:cb:83:f4:67: c9:f0:7c:c2:ea:ea:a5:9d:2c:86:eb:da:2b:a0:31: 75:be:bf:65:00:16:0c:8c:c3:c4:be:8c:c4:ce:dd: f3:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:8B:2B:6C:98:2B:62:B4:13:86:0D:F7:D1:96:4C:6F:C9:12:4D:A9 X509v3 Authority Key Identifier: keyid:B8:C9:E3:76:A2:07:23:64:11:20:36:DA:7A:7B:BB:4C:AE:4A:C3:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:47:86:d3:e5:12:8c:dc:25:76:49:b7:ea:b0:30:51:c1:a5: c4:2f:d9:13:d0:8d:ad:03:d1:53:ce:69:5a:33:bc:e5:2f:df: bb:f6:25:8a:23:48:6d:4e:cc:0c:79:58:58:62:85:97:8c:2d: 85:d8:4b:b5:fb:53:79:d7:02:bf:83:55:2e:04:82:d2:72:03: 1e:16:60:51:bc:88:27:f5:77:71:f7:81:c4:3a:da:a6:f0:70: 61:f3:8a:35:46:34:9d:fb:dd:b9:bb:5e:b2:c9:a2:15:02:9a: 67:54:ae:98:88:0c:cb:5d:16:aa:1c:d6:dd:36:48:ac:43:2e: 56:53:3b:88:70:b4:ed:4d:b7:fe:ed:9c:be:ad:17:b7:bb:ef: 0d:ee:c4:9b:82:40:3b:15:42:31:e9:99:81:1d:f7:19:20:be: 03:f2:72:f2:65:37:8d:dd:76:a1:21:dc:25:be:ed:78:9f:77: e9:b6:34:9b:f7:04:ea:a9:7e:59:fb:7e:5f:b1:45:17:56:69: f2:f3:4a:15:7b:4e:59:cc:0f:21:18:c8:29:4d:01:b3:f6:06: 6c:d1:7d:9b:9d:d5:98:ed:a3:5d:ef:07:63:25:cd:53:4c:eb: f4:bf:03:f0:c8:b9:1d:76:80:b7:60:42:5f:66:ea:7c:ac:03: 7b:ff:ce:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD9SlZ4mw6TP/Aed0EAq3lD/rEP4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhDOUUzNzZBMjA3MjM2NDExMjAzNkRBN0E3QkJCNENB RTRBQzM3QzAeFw0yNTA4MDUwNDA1MDVaFw0yNTA4MDgxMzQ4MDVaMDMxMTAvBgNV BAMTKDUwOEIyQjZDOTgyQjYyQjQxMzg2MERGN0QxOTY0QzZGQzkxMjREQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaBIZYLPdLmceAeUmBRh6yIkiw GI+GqFfuvbQhyH6zu4/RLsEJy4WKxT5e3NOzIbXCLd/uVZ+NMe+UqLwkAcGKmq8q 7wilSrDVrys7oaHW+nIl5+vxzDPDkl/WhFoMLup4QEsRzHgbT/43P6GU1UR72jn9 k/mPNzP7C4nHZVc3CdhBiyONeeYkVu8gINMJ/Ni1aCrocjwTnhQHjAS7UZTdkaj+ cYDhKr9QJKLRbRg+k9Cc4HQiJyLVVyl/fo3sDe4YLzit0Pp4VKCe95jELt/wu4QZ U6VK8ZOzAM9vy4P0Z8nwfMLq6qWdLIbr2iugMXW+v2UAFgyMw8S+jMTO3fPXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUIsrbJgrYrQThg330ZZMb8kSTakwHwYDVR0j BBgwFoAUuMnjdqIHI2QRIDbaenu7TK5Kw3wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzYzZTcxYS05Yzg1LTQxNzYtOGZhNC1iN2EyOWFmYjk3N2QvMC9COEM5RTM3NkEy MDcyMzY0MTEyMDM2REE3QTdCQkI0Q0FFNEFDMzdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhDOUUzNzZBMjA3MjM2NDExMjAzNkRBN0E3QkJCNENBRTRB QzM3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzc2M2U3MWEtOWM4NS00MTc2LThm YTQtYjdhMjlhZmI5NzdkLzAvQjhDOUUzNzZBMjA3MjM2NDExMjAzNkRBN0E3QkJC NENBRTRBQzM3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALlHhtPlEozcJXZJt+qwMFHBpcQv2RPQja0D 0VPOaVozvOUv37v2JYojSG1OzAx5WFhihZeMLYXYS7X7U3nXAr+DVS4EgtJyAx4W YFG8iCf1d3H3gcQ62qbwcGHzijVGNJ373bm7XrLJohUCmmdUrpiIDMtdFqoc1t02 SKxDLlZTO4hwtO1Nt/7tnL6tF7e77w3uxJuCQDsVQjHpmYEd9xkgvgPycvJlN43d dqEh3CW+7Xifd+m2NJv3BOqpfln7fl+xRRdWafLzShV7TlnMDyEYyClNAbP2BmzR fZud1Zjto13vB2MlzVNM6/S/A/DIuR12gLdgQl9m6nysA3v/zsE= -----END CERTIFICATE-----Generated at Wed Aug 6 12:29:02 2025 by rpki-client