$ rpki-client -vvf repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft File: C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft (raw, json) Hash identifier: KVWm4mUBAA73pzNAAOitDK2ULNCQHFHnr1dXpIeLqNI= Subject key identifier: 0B:CE:4F:3A:D9:ED:DD:4E:86:A9:0C:6C:DC:51:31:8A:12:F7:CA:B5 Authority key identifier: C8:B7:60:5A:76:DB:DD:11:CC:D3:1F:65:7A:0D:E4:54:C9:79:D9:39 Certificate issuer: /CN=C8B7605A76DBDD11CCD31F657A0DE454C979D939 Certificate serial: 7053521F647A50A0AA04CED8D512E843C1D4768E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8B7605A76DBDD11CCD31F657A0DE454C979D939.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft Manifest number: 0475 Signing time: Sat 14 Jun 2025 07:41:31 +0000 Manifest this update: Sat 14 Jun 2025 07:36:31 +0000 Manifest next update: Tue 17 Jun 2025 14:25:31 +0000 Files and hashes: 1: C8B7605A76DBDD11CCD31F657A0DE454C979D939.crl (hash: Qjt8xHEbAW3Efljwy7WQtNufEXp0XXE8DhkqBB4rtuY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.crl rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8B7605A76DBDD11CCD31F657A0DE454C979D939.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 14:25:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:53:52:1f:64:7a:50:a0:aa:04:ce:d8:d5:12:e8:43:c1:d4:76:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8B7605A76DBDD11CCD31F657A0DE454C979D939 Validity Not Before: Jun 14 07:36:31 2025 GMT Not After : Jun 17 14:25:31 2025 GMT Subject: CN=0BCE4F3AD9EDDD4E86A90C6CDC51318A12F7CAB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:22:f8:6b:c5:e4:33:a3:10:08:dc:e4:87:de: 9c:e4:3f:b1:ef:e6:f1:65:4e:5c:d1:eb:70:e5:e4: eb:ea:3f:93:31:3c:40:76:93:c6:cf:eb:53:f4:bd: f7:8a:df:14:9d:13:38:8f:c8:45:f0:06:54:b9:12: cb:ce:d6:b8:4f:62:70:ad:2e:71:31:3e:41:54:fc: ef:85:cf:4d:4f:cc:ff:06:6f:76:4f:c4:00:a4:ef: de:c9:91:8c:32:40:0e:26:43:28:e4:27:8b:54:2c: 6d:a4:5d:f0:18:c1:15:80:2d:fb:41:6c:d8:3c:29: 9c:ed:4c:84:25:9e:f1:1f:9c:02:dd:0c:1b:05:94: 14:3e:de:d0:5b:ae:de:f7:04:fd:9c:7b:07:20:4a: bf:49:df:8f:eb:64:49:e0:72:d3:92:e5:a8:c2:54: d3:eb:7f:52:00:64:a1:d6:4c:38:81:c6:52:e3:4f: eb:49:c3:90:8d:0f:09:73:78:e9:50:89:65:d9:b7: 8b:d4:69:5e:e8:52:da:f6:cd:5f:e3:68:be:15:6f: 4c:dc:97:a1:a7:ce:58:f4:8a:57:45:80:93:0e:98: 83:b9:be:69:dd:24:e5:4d:45:57:81:93:dc:55:5e: 67:e7:be:5f:ce:ff:68:3a:2d:f8:35:6e:50:0b:22: 4f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:CE:4F:3A:D9:ED:DD:4E:86:A9:0C:6C:DC:51:31:8A:12:F7:CA:B5 X509v3 Authority Key Identifier: keyid:C8:B7:60:5A:76:DB:DD:11:CC:D3:1F:65:7A:0D:E4:54:C9:79:D9:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8B7605A76DBDD11CCD31F657A0DE454C979D939.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:9c:72:9a:1a:a7:70:8e:f3:be:2b:73:43:12:a4:65:54:d2: 39:b7:9a:08:fc:94:c8:d4:4f:db:40:04:81:63:78:f4:57:e5: e2:95:65:7d:50:ec:28:d1:af:76:3b:ff:77:13:27:f0:37:a7: 78:f9:ed:b2:e4:f8:a3:d8:09:fa:f7:18:74:cd:e7:58:83:2a: da:b7:2b:5d:ea:0d:15:6e:b3:1b:ac:aa:1a:23:78:bc:56:8e: d2:c6:00:6c:34:55:78:bd:de:51:97:26:f6:c6:2a:a3:aa:3e: 2c:b6:14:08:e5:0f:1b:42:8f:81:aa:0d:6c:ae:3c:ec:86:7f: b1:62:43:75:f5:e5:24:04:be:3f:c2:5c:d0:6e:f9:00:57:5d: 92:c8:f3:9d:ec:96:c5:5d:13:90:6c:41:39:f2:0b:da:29:66: 08:c0:c8:96:b2:22:cc:6e:81:0b:a4:c5:c5:33:21:7d:09:f9: f7:37:63:9d:28:9a:34:b0:0a:cb:6e:e9:dc:14:1d:44:15:f2: 5c:c4:ae:da:fa:2a:10:ab:64:72:e6:58:4a:0d:73:5b:74:e5: df:75:02:62:02:e4:18:67:61:d8:f6:7c:f8:cb:4d:66:31:b5: 4e:a7:b3:37:10:86:78:7f:ca:1c:a9:d7:00:76:15:d6:89:93: 0e:2b:d7:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcFNSH2R6UKCqBM7Y1RLoQ8HUdo4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhCNzYwNUE3NkRCREQxMUNDRDMxRjY1N0EwREU0NTRD OTc5RDkzOTAeFw0yNTA2MTQwNzM2MzFaFw0yNTA2MTcxNDI1MzFaMDMxMTAvBgNV BAMTKDBCQ0U0RjNBRDlFRERENEU4NkE5MEM2Q0RDNTEzMThBMTJGN0NBQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgIvhrxeQzoxAI3OSH3pzkP7Hv 5vFlTlzR63Dl5OvqP5MxPEB2k8bP61P0vfeK3xSdEziPyEXwBlS5EsvO1rhPYnCt LnExPkFU/O+Fz01PzP8Gb3ZPxACk797JkYwyQA4mQyjkJ4tULG2kXfAYwRWALftB bNg8KZztTIQlnvEfnALdDBsFlBQ+3tBbrt73BP2cewcgSr9J34/rZEngctOS5ajC VNPrf1IAZKHWTDiBxlLjT+tJw5CNDwlzeOlQiWXZt4vUaV7oUtr2zV/jaL4Vb0zc l6Gnzlj0ildFgJMOmIO5vmndJOVNRVeBk9xVXmfnvl/O/2g6Lfg1blALIk/vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC85POtnt3U6GqQxs3FExihL3yrUwHwYDVR0j BBgwFoAUyLdgWnbb3RHM0x9leg3kVMl52TkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ODM0OWNkNC1jMDc5LTQxZmYtYWE5ZS0zNmYzZDQ0ODI2NDUvMC9DOEI3NjA1QTc2 REJERDExQ0NEMzFGNjU3QTBERTQ1NEM5NzlEOTM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhCNzYwNUE3NkRCREQxMUNDRDMxRjY1N0EwREU0NTRDOTc5 RDkzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDgzNDljZDQtYzA3OS00MWZmLWFh OWUtMzZmM2Q0NDgyNjQ1LzAvQzhCNzYwNUE3NkRCREQxMUNDRDMxRjY1N0EwREU0 NTRDOTc5RDkzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADqccpoap3CO874rc0MSpGVU0jm3mgj8lMjU T9tABIFjePRX5eKVZX1Q7CjRr3Y7/3cTJ/A3p3j57bLk+KPYCfr3GHTN51iDKtq3 K13qDRVusxusqhojeLxWjtLGAGw0VXi93lGXJvbGKqOqPiy2FAjlDxtCj4GqDWyu POyGf7FiQ3X15SQEvj/CXNBu+QBXXZLI853slsVdE5BsQTnyC9opZgjAyJayIsxu gQukxcUzIX0J+fc3Y50omjSwCstu6dwUHUQV8lzErtr6KhCrZHLmWEoNc1t05d91 AmIC5BhnYdj2fPjLTWYxtU6nszcQhnh/yhyp1wB2FdaJkw4r104= -----END CERTIFICATE-----Generated at Mon Jun 16 00:39:20 2025 by rpki-client