$ rpki-client -vvf repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft File: 8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft (raw, json) Hash identifier: sYHbbgzpcLNXIr4opQPEBQXYzep0kqfVVt2Ah4JmGOg= Subject key identifier: 7D:87:D7:9A:2B:FA:C3:30:EA:6E:59:97:E5:76:FC:06:F0:A4:B9:41 Authority key identifier: 8D:5A:49:C9:E4:2E:37:1B:FD:1E:67:AC:E1:B3:D5:5E:C1:AB:F7:3F Certificate issuer: /CN=8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F Certificate serial: 77DAEAAC1FA90D9983FBF6C159E0292C124E7684 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft Manifest number: 85 Signing time: Sun 20 Jul 2025 10:20:52 +0000 Manifest this update: Sun 20 Jul 2025 10:15:52 +0000 Manifest next update: Wed 23 Jul 2025 15:24:52 +0000 Files and hashes: 1: 8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.crl (hash: q6ZspPH2IA1dh3Gkr/yK8AspPWhvQXsBibLtqI+Imqs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.crl rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 15:24:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:da:ea:ac:1f:a9:0d:99:83:fb:f6:c1:59:e0:29:2c:12:4e:76:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F Validity Not Before: Jul 20 10:15:52 2025 GMT Not After : Jul 23 15:24:52 2025 GMT Subject: CN=7D87D79A2BFAC330EA6E5997E576FC06F0A4B941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:58:3b:8c:ed:f4:1a:12:1b:3e:cf:49:76:0e: 4e:ab:3d:88:af:53:9d:0f:bd:6a:03:66:af:8e:91: 5d:9e:e9:f2:c6:39:c8:ac:62:4e:c5:b8:a0:ef:60: 28:0b:9e:12:d1:c2:c4:52:61:ce:2d:7c:4c:4f:a7: 74:b6:69:d3:e0:13:bd:c2:6c:1f:35:90:1d:43:a7: 3b:54:06:75:bc:af:b8:98:9d:28:00:16:26:8f:9d: 8f:10:37:f7:28:b2:72:45:09:55:58:6f:c9:f9:7e: 54:e6:f1:77:7e:76:63:2f:11:2c:63:40:f7:ec:4c: 14:a5:e8:6f:51:82:34:b5:7b:9d:a8:6d:86:c9:58: 0c:c2:1e:98:6b:9c:28:e4:7e:d0:c9:26:59:15:e7: ba:ff:be:24:16:e6:a7:21:88:1a:61:e5:19:8f:f8: 1b:18:17:82:1b:82:27:9d:65:9a:1f:a0:f3:34:a8: 69:18:18:c3:0e:08:11:b6:44:4d:cb:a4:ba:f2:dd: 2b:21:ac:92:09:4f:ee:16:9f:96:94:aa:53:dd:8c: 3c:26:f7:77:f6:96:0d:88:74:73:af:82:e9:55:da: ae:71:f8:f0:a5:4f:fb:78:7a:b6:44:da:ad:b7:f8: 86:3a:a6:39:7d:af:06:35:92:98:29:be:ed:d4:d8: 76:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:87:D7:9A:2B:FA:C3:30:EA:6E:59:97:E5:76:FC:06:F0:A4:B9:41 X509v3 Authority Key Identifier: keyid:8D:5A:49:C9:E4:2E:37:1B:FD:1E:67:AC:E1:B3:D5:5E:C1:AB:F7:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:d3:a9:78:a8:fa:6d:34:50:b1:5d:51:ea:ef:94:5b:9b:ba: b0:98:ce:08:17:f4:23:9e:ab:5a:63:92:87:9d:93:10:6d:c7: 51:f2:77:5b:fe:57:33:1d:21:0f:3a:d3:0e:69:e2:3b:e6:d5: 60:2e:9f:19:98:af:e5:79:63:ed:3a:7e:11:ea:fe:10:ce:75: 4a:d6:7f:42:4e:09:ff:6f:66:c9:4b:a3:05:8e:ea:5c:c3:b7: 70:e1:db:ef:0c:5d:fd:e3:6f:87:ad:94:e2:22:a8:5c:c8:ef: 7d:cd:fb:43:b3:03:c3:a5:ed:8d:34:f5:b7:c0:24:fd:f3:ca: 8e:05:81:d2:9b:88:c0:65:97:90:3c:58:0b:9c:86:80:7b:74: 8e:a9:3f:c6:ad:3e:88:8a:48:65:ed:6f:9b:35:67:60:e9:7d: 9e:18:00:f1:fd:5e:31:51:6a:1e:94:d2:48:f0:bc:5a:c0:09: 04:77:df:27:88:68:5b:de:c3:f3:e4:02:5e:7b:75:3b:6d:c8: 2f:95:b5:52:31:b7:b6:34:ef:2f:65:8f:6d:a7:63:5f:6a:be: eb:8a:ab:60:73:41:a0:98:55:f2:22:40:7a:20:8a:d6:f2:03: 47:9c:5a:97:22:59:f8:37:6b:d6:bf:b5:75:78:db:32:6a:47: 49:fb:9f:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd9rqrB+pDZmD+/bBWeApLBJOdoQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ1QTQ5QzlFNDJFMzcxQkZEMUU2N0FDRTFCM0Q1NUVD MUFCRjczRjAeFw0yNTA3MjAxMDE1NTJaFw0yNTA3MjMxNTI0NTJaMDMxMTAvBgNV BAMTKDdEODdENzlBMkJGQUMzMzBFQTZFNTk5N0U1NzZGQzA2RjBBNEI5NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaWDuM7fQaEhs+z0l2Dk6rPYiv U50PvWoDZq+OkV2e6fLGOcisYk7FuKDvYCgLnhLRwsRSYc4tfExPp3S2adPgE73C bB81kB1DpztUBnW8r7iYnSgAFiaPnY8QN/cosnJFCVVYb8n5flTm8Xd+dmMvESxj QPfsTBSl6G9RgjS1e52obYbJWAzCHphrnCjkftDJJlkV57r/viQW5qchiBph5RmP +BsYF4IbgiedZZofoPM0qGkYGMMOCBG2RE3LpLry3SshrJIJT+4Wn5aUqlPdjDwm 93f2lg2IdHOvgulV2q5x+PClT/t4erZE2q23+IY6pjl9rwY1kpgpvu3U2HYLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfYfXmiv6wzDqblmX5Xb8BvCkuUEwHwYDVR0j BBgwFoAUjVpJyeQuNxv9Hmes4bPVXsGr9z8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmY1OTg2Yi1jNzY0LTRjZDctYjQxNC1hMjViZDA1YzNmOTIvMC84RDVBNDlDOUU0 MkUzNzFCRkQxRTY3QUNFMUIzRDU1RUMxQUJGNzNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQ1QTQ5QzlFNDJFMzcxQkZEMUU2N0FDRTFCM0Q1NUVDMUFC RjczRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjJmNTk4NmItYzc2NC00Y2Q3LWI0 MTQtYTI1YmQwNWMzZjkyLzAvOEQ1QTQ5QzlFNDJFMzcxQkZEMUU2N0FDRTFCM0Q1 NUVDMUFCRjczRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEPTqXio+m00ULFdUervlFuburCYzggX9COe q1pjkoedkxBtx1Hyd1v+VzMdIQ860w5p4jvm1WAunxmYr+V5Y+06fhHq/hDOdUrW f0JOCf9vZslLowWO6lzDt3Dh2+8MXf3jb4etlOIiqFzI733N+0OzA8Ol7Y009bfA JP3zyo4FgdKbiMBll5A8WAuchoB7dI6pP8atPoiKSGXtb5s1Z2DpfZ4YAPH9XjFR ah6U0kjwvFrACQR33yeIaFvew/PkAl57dTttyC+VtVIxt7Y07y9lj22nY19qvuuK q2BzQaCYVfIiQHogitbyA0ecWpciWfg3a9a/tXV42zJqR0n7nzk= -----END CERTIFICATE-----Generated at Sun Jul 20 21:25:22 2025 by rpki-client