$ rpki-client -vvf repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.mft File: 8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.mft (raw, json) Hash identifier: XgSLR1RZ8LQNtUuBFGOj5PpSEKof2DEkCcLzeUYY5Gg= Subject key identifier: 6C:C6:32:19:54:D0:B3:6E:B4:63:20:1E:08:75:B2:9D:24:1E:83:9D Authority key identifier: 86:94:CD:BB:52:F4:AE:A8:9A:F4:6C:A5:BF:A5:A6:39:97:3D:73:02 Certificate issuer: /CN=8694CDBB52F4AEA89AF46CA5BFA5A639973D7302 Certificate serial: 74CB124FE4FA7F2A1CA656B6AA9AC4DAC2A66D9E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.mft Manifest number: 3C Signing time: Thu 07 Aug 2025 01:41:40 +0000 Manifest this update: Thu 07 Aug 2025 01:36:40 +0000 Manifest next update: Sun 10 Aug 2025 10:10:40 +0000 Files and hashes: 1: 8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.crl (hash: V66+rfe3TrsKSflmckDbOHVrFTqEHuOBEnrvHSPoIx4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.crl rsync://repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 10:10:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:cb:12:4f:e4:fa:7f:2a:1c:a6:56:b6:aa:9a:c4:da:c2:a6:6d:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8694CDBB52F4AEA89AF46CA5BFA5A639973D7302 Validity Not Before: Aug 7 01:36:40 2025 GMT Not After : Aug 10 10:10:40 2025 GMT Subject: CN=6CC6321954D0B36EB463201E0875B29D241E839D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2a:5a:eb:d2:33:a9:72:6f:32:65:17:d8:40: 6e:f8:c0:4b:3b:79:3a:f0:df:2f:42:c9:eb:57:65: 71:ed:cd:b1:ef:d8:44:4b:41:85:9a:53:37:1d:69: 08:02:db:7f:06:a2:11:e3:91:e5:02:6d:9b:80:3a: aa:9b:24:ad:fd:06:3f:34:5d:4f:2e:f0:92:c1:0a: 9e:ef:28:9f:e4:8a:d6:99:ac:c6:55:cc:22:58:ad: 25:16:54:3b:02:36:fb:e7:98:63:8b:c5:61:2b:87: 07:4c:f1:0b:cc:33:4f:a4:a9:99:1b:35:f9:a2:1d: f6:c9:fa:f3:01:f7:bc:64:97:cb:ad:cd:07:d3:69: d5:7d:0c:21:58:ea:d0:50:b2:af:a1:92:b6:d6:db: 2a:87:81:a4:72:13:a0:1c:09:66:00:ee:a7:49:7d: 0c:40:bb:1f:26:ad:59:80:f0:64:c5:60:35:91:7c: e4:37:a5:58:ea:6f:65:d6:f8:3e:2e:e8:1d:e6:5f: 2d:bd:50:51:c2:10:0d:48:8b:dc:3b:ba:8b:50:f9: d7:d3:b1:6e:f1:31:6c:35:97:3e:09:a0:91:7f:a5: 2d:05:ca:df:b1:d8:17:ca:3e:63:cd:0a:e6:32:73: ca:8b:be:3f:8b:7f:f4:9f:f9:d4:64:71:a3:9b:cb: db:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:C6:32:19:54:D0:B3:6E:B4:63:20:1E:08:75:B2:9D:24:1E:83:9D X509v3 Authority Key Identifier: keyid:86:94:CD:BB:52:F4:AE:A8:9A:F4:6C:A5:BF:A5:A6:39:97:3D:73:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:33:46:0f:a5:57:91:9e:68:76:9f:7e:31:39:97:04:e8:ca: cb:e9:b3:d6:51:bc:18:f2:9c:61:8e:38:e9:2d:9b:20:e8:d9: 79:29:b6:ce:84:42:7b:04:ff:79:52:1b:40:e2:9f:6c:f0:79: 9a:06:b7:2d:f9:a4:82:ea:62:71:ef:2d:c2:0a:ba:d1:9b:ad: 0b:bd:de:ea:54:4b:ea:86:da:b8:43:e9:2c:48:35:dd:6a:86: 8e:1a:f2:8b:37:cd:88:d0:83:78:2a:46:a4:b9:83:e5:27:19: ba:71:bb:df:40:81:4f:43:52:25:5b:18:be:9f:56:9a:18:b1: ae:36:72:8e:1e:2e:65:f7:f9:89:4d:1a:9f:7d:a7:a2:6e:7b: ac:69:da:f5:ea:37:81:88:a3:50:bc:f2:e6:36:9f:c8:96:f1: 0f:b3:28:27:d7:08:eb:22:24:2a:7b:22:24:47:c6:cd:03:dd: af:69:59:c3:27:fd:10:2a:64:e2:e3:d8:4f:4f:8c:b5:f4:97: fa:dd:67:2c:08:13:b3:4e:b4:0b:6a:bd:ec:fb:1e:45:0c:83: 94:89:90:78:dc:3a:bf:d8:f2:ec:82:cb:4c:e5:b8:27:b6:c9: ca:ca:c0:d1:6a:68:4b:ad:53:26:61:78:4a:46:e5:4e:8d:33: 2b:78:ea:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdMsST+T6fyocpla2qprE2sKmbZ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY5NENEQkI1MkY0QUVBODlBRjQ2Q0E1QkZBNUE2Mzk5 NzNENzMwMjAeFw0yNTA4MDcwMTM2NDBaFw0yNTA4MTAxMDEwNDBaMDMxMTAvBgNV BAMTKDZDQzYzMjE5NTREMEIzNkVCNDYzMjAxRTA4NzVCMjlEMjQxRTgzOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIKlrr0jOpcm8yZRfYQG74wEs7 eTrw3y9CyetXZXHtzbHv2ERLQYWaUzcdaQgC238GohHjkeUCbZuAOqqbJK39Bj80 XU8u8JLBCp7vKJ/kitaZrMZVzCJYrSUWVDsCNvvnmGOLxWErhwdM8QvMM0+kqZkb NfmiHfbJ+vMB97xkl8utzQfTadV9DCFY6tBQsq+hkrbW2yqHgaRyE6AcCWYA7qdJ fQxAux8mrVmA8GTFYDWRfOQ3pVjqb2XW+D4u6B3mXy29UFHCEA1Ii9w7uotQ+dfT sW7xMWw1lz4JoJF/pS0Fyt+x2BfKPmPNCuYyc8qLvj+Lf/Sf+dRkcaOby9sHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbMYyGVTQs260YyAeCHWynSQeg50wHwYDVR0j BBgwFoAUhpTNu1L0rqia9Gylv6WmOZc9cwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Y2YwMGY4YS01Y2JkLTQ2MGYtYmZjNi1iZDg5NDJiNjUzN2MvMC84Njk0Q0RCQjUy RjRBRUE4OUFGNDZDQTVCRkE1QTYzOTk3M0Q3MzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODY5NENEQkI1MkY0QUVBODlBRjQ2Q0E1QkZBNUE2Mzk5NzNE NzMwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGNmMDBmOGEtNWNiZC00NjBmLWJm YzYtYmQ4OTQyYjY1MzdjLzAvODY5NENEQkI1MkY0QUVBODlBRjQ2Q0E1QkZBNUE2 Mzk5NzNENzMwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKgzRg+lV5GeaHaffjE5lwToysvps9ZRvBjy nGGOOOktmyDo2Xkpts6EQnsE/3lSG0Din2zweZoGty35pILqYnHvLcIKutGbrQu9 3upUS+qG2rhD6SxINd1qho4a8os3zYjQg3gqRqS5g+UnGbpxu99AgU9DUiVbGL6f VpoYsa42co4eLmX3+YlNGp99p6Jue6xp2vXqN4GIo1C88uY2n8iW8Q+zKCfXCOsi JCp7IiRHxs0D3a9pWcMn/RAqZOLj2E9PjLX0l/rdZywIE7NOtAtqvez7HkUMg5SJ kHjcOr/Y8uyCy0zluCe2ycrKwNFqaEutUyZheEpG5U6NMyt46sQ= -----END CERTIFICATE-----Generated at Sat Aug 9 01:24:05 2025 by rpki-client