$ rpki-client -vvf repo-rpki.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.mft File: 8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.mft (raw, json) Hash identifier: FrCG1qZnract6NQ31+5hOGskgdcpQ+4zGYDnEFAuUTk= Subject key identifier: DC:B5:9C:EE:80:7E:83:D2:13:19:EB:45:5C:C0:75:57:74:C8:EC:D6 Authority key identifier: 8C:C7:E4:A2:46:27:D0:11:FC:35:B3:FE:8B:6E:9A:25:C9:93:C6:EC Certificate issuer: /CN=8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC Certificate serial: 53F501AD0C5A5C760A2242D18393DEB864DAD0C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.mft Manifest number: 06 Signing time: Sat 14 Jun 2025 22:01:10 +0000 Manifest this update: Sat 14 Jun 2025 21:56:10 +0000 Manifest next update: Wed 18 Jun 2025 06:45:10 +0000 Files and hashes: 1: 8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.crl (hash: TWRKCcdPOIrbIcenmuYUCVCr9tY2SJgz0l3j262+eeA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.crl rsync://repo-rpki.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 06:45:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:f5:01:ad:0c:5a:5c:76:0a:22:42:d1:83:93:de:b8:64:da:d0:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC Validity Not Before: Jun 14 21:56:10 2025 GMT Not After : Jun 18 06:45:10 2025 GMT Subject: CN=DCB59CEE807E83D21319EB455CC0755774C8ECD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:4e:1a:0b:38:e9:1c:72:dc:28:63:48:79:af: 2b:2f:10:d8:ba:3f:0a:6c:4a:85:22:e8:49:c1:7b: bc:65:50:53:0f:5f:2f:bb:db:4f:f2:fb:22:54:79: ac:30:48:2b:8b:e9:ab:92:8c:eb:d2:7b:ef:77:cb: 1d:88:29:59:bc:8a:93:fc:f8:4a:a0:7f:01:92:d8: ea:19:4d:de:8f:3a:6a:49:63:1c:8b:44:1d:95:02: c3:b4:1d:d6:71:6c:f7:ec:0d:90:02:45:c4:98:cc: a9:c8:b3:4d:de:50:bd:0f:c7:df:00:b5:30:25:5b: c2:21:c7:e8:5d:a7:6e:20:6d:e9:95:ab:c0:e5:8a: ed:86:2a:e3:dc:b7:69:0e:da:5b:45:a8:d9:97:f9: dd:6e:8c:33:22:78:ec:5b:c1:db:84:7d:1c:4f:34: c5:de:f1:e3:65:e8:16:d4:dc:eb:52:c7:2f:76:dd: 89:10:78:7d:5f:b6:bf:18:f6:1b:0c:dc:96:2a:ad: 61:2f:f7:6d:93:8b:24:6e:c7:cd:75:73:2c:80:50: cc:5c:4e:27:68:06:ea:c7:c0:b5:4f:dc:84:1d:44: 92:39:de:21:e8:50:3f:d8:e7:36:05:02:b9:b4:00: 6d:b4:d9:bb:6b:a2:a1:8c:a7:67:dd:b2:8f:0c:3e: 3e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:B5:9C:EE:80:7E:83:D2:13:19:EB:45:5C:C0:75:57:74:C8:EC:D6 X509v3 Authority Key Identifier: keyid:8C:C7:E4:A2:46:27:D0:11:FC:35:B3:FE:8B:6E:9A:25:C9:93:C6:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:0d:a9:08:ad:5f:83:77:24:c2:84:84:51:21:a1:b7:e0:cb: 7e:2b:8c:b1:3f:d4:80:25:79:a5:1e:8c:84:c5:dd:11:3c:6c: 58:98:5a:33:6d:39:ac:63:6d:7d:19:a3:90:9b:12:01:ef:26: 19:22:a4:a5:24:b0:b3:db:e5:3a:d4:a6:b6:f5:1f:e9:aa:59: 61:04:14:ca:7c:a9:bc:63:6f:24:11:fa:1b:13:8e:27:6c:d1: 5c:94:95:b6:77:61:f9:a1:d6:4d:0c:46:da:07:6a:41:71:64: 3b:b0:5b:fe:ee:c9:ea:d7:8d:1a:40:89:36:23:cf:16:8f:77: df:a7:f5:c7:c8:55:ac:dd:57:7a:3f:09:72:82:da:b2:b1:74: 70:0f:da:41:18:1b:98:9b:0e:d7:50:9d:b6:ad:de:90:4b:07: 11:97:50:d7:71:7f:01:c7:1b:0c:eb:1a:a7:7a:9c:00:45:6c: aa:c6:3d:1d:1c:36:53:26:88:96:34:4a:4c:d3:8d:90:4a:88: e0:e3:2f:6a:07:fe:ba:56:a3:5a:2f:e4:c4:86:0b:58:03:9f: fe:17:df:0a:f8:6e:f0:ca:bb:09:69:97:1e:bd:e8:f3:8d:9f: 0f:0e:fa:04:5a:25:a2:28:d6:50:5b:a7:4e:50:82:04:5a:dd: c3:4c:6e:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU/UBrQxaXHYKIkLRg5PeuGTa0MgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENDN0U0QTI0NjI3RDAxMUZDMzVCM0ZFOEI2RTlBMjVD OTkzQzZFQzAeFw0yNTA2MTQyMTU2MTBaFw0yNTA2MTgwNjQ1MTBaMDMxMTAvBgNV BAMTKERDQjU5Q0VFODA3RTgzRDIxMzE5RUI0NTVDQzA3NTU3NzRDOEVDRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjThoLOOkcctwoY0h5rysvENi6 PwpsSoUi6EnBe7xlUFMPXy+720/y+yJUeawwSCuL6auSjOvSe+93yx2IKVm8ipP8 +EqgfwGS2OoZTd6POmpJYxyLRB2VAsO0HdZxbPfsDZACRcSYzKnIs03eUL0Px98A tTAlW8Ihx+hdp24gbemVq8Dliu2GKuPct2kO2ltFqNmX+d1ujDMieOxbwduEfRxP NMXe8eNl6BbU3OtSxy923YkQeH1ftr8Y9hsM3JYqrWEv922TiyRux811cyyAUMxc TidoBurHwLVP3IQdRJI53iHoUD/Y5zYFArm0AG202btroqGMp2fdso8MPj77AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3LWc7oB+g9ITGetFXMB1V3TI7NYwHwYDVR0j BBgwFoAUjMfkokYn0BH8NbP+i26aJcmTxuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Y2QyNTFjYS1hMDVlLTRmYmUtOTNiYi1iNTQ2OWFlZjk2YTIvMC84Q0M3RTRBMjQ2 MjdEMDExRkMzNUIzRkU4QjZFOUEyNUM5OTNDNkVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENDN0U0QTI0NjI3RDAxMUZDMzVCM0ZFOEI2RTlBMjVDOTkz QzZFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWNkMjUxY2EtYTA1ZS00ZmJlLTkz YmItYjU0NjlhZWY5NmEyLzAvOENDN0U0QTI0NjI3RDAxMUZDMzVCM0ZFOEI2RTlB MjVDOTkzQzZFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA4NqQitX4N3JMKEhFEhobfgy34rjLE/1IAl eaUejITF3RE8bFiYWjNtOaxjbX0Zo5CbEgHvJhkipKUksLPb5TrUprb1H+mqWWEE FMp8qbxjbyQR+hsTjids0VyUlbZ3Yfmh1k0MRtoHakFxZDuwW/7uyerXjRpAiTYj zxaPd9+n9cfIVazdV3o/CXKC2rKxdHAP2kEYG5ibDtdQnbat3pBLBxGXUNdxfwHH GwzrGqd6nABFbKrGPR0cNlMmiJY0SkzTjZBKiODjL2oH/rpWo1ov5MSGC1gDn/4X 3wr4bvDKuwlplx696PONnw8O+gRaJaIo1lBbp05QggRa3cNMbvM= -----END CERTIFICATE-----Generated at Mon Jun 16 02:04:47 2025 by rpki-client