$ rpki-client -vvf repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft File: C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft (raw, json) Hash identifier: fKOGvv839KGWczT1GcrNQUiEpPERA2EdwY4VFgeBEeU= Subject key identifier: 88:4E:C7:9E:41:2C:90:44:94:1A:6D:32:04:4F:A1:DC:8E:97:71:91 Authority key identifier: C1:66:91:03:D8:70:A3:90:C5:6C:8D:FD:3C:1B:FE:23:E4:8B:05:40 Certificate issuer: /CN=C1669103D870A390C56C8DFD3C1BFE23E48B0540 Certificate serial: 1FF4B487EE197AA5DFBE3D4A27DAD8B1A93D81C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1669103D870A390C56C8DFD3C1BFE23E48B0540.cer Subject info access: rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft Manifest number: B8 Signing time: Sat 19 Jul 2025 22:51:20 +0000 Manifest this update: Sat 19 Jul 2025 22:46:20 +0000 Manifest next update: Wed 23 Jul 2025 00:31:20 +0000 Files and hashes: 1: C1669103D870A390C56C8DFD3C1BFE23E48B0540.crl (hash: TVcjm5oYpMq+EGPbAu3cKtXNK5iW1QkJdqseygkBgDY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.crl rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1669103D870A390C56C8DFD3C1BFE23E48B0540.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 00:31:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:f4:b4:87:ee:19:7a:a5:df:be:3d:4a:27:da:d8:b1:a9:3d:81:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1669103D870A390C56C8DFD3C1BFE23E48B0540 Validity Not Before: Jul 19 22:46:20 2025 GMT Not After : Jul 23 00:31:20 2025 GMT Subject: CN=884EC79E412C9044941A6D32044FA1DC8E977191 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:14:63:07:85:d0:d6:1c:ed:c9:55:a7:83:25: a8:48:f6:34:75:81:e8:9e:a0:fb:96:54:04:82:33: 31:4c:e1:7d:1d:66:a0:47:db:ce:ee:a1:fa:b9:e8: 85:5a:05:fa:a2:07:aa:1d:4f:6b:4d:64:f3:ad:f0: 47:82:96:b6:a5:b9:aa:02:be:eb:f6:8e:55:fa:6e: a1:73:7d:b3:2f:a3:08:1c:59:cd:0e:04:97:26:3a: 97:e8:6b:95:8a:07:1f:4c:d2:40:43:80:fe:0d:cf: 4c:3c:68:ca:4e:ef:1c:9e:2a:26:94:24:f7:4d:6a: 4e:fe:4f:0b:c7:d4:7e:eb:d4:22:17:7c:5a:a0:0d: b2:b6:42:6d:50:19:ea:f3:fe:6f:5e:02:fe:ac:27: 7f:66:12:e1:c8:bb:14:92:a9:2d:0d:9c:ac:3b:0c: 7f:a2:54:ee:dc:68:29:95:25:39:00:d5:42:00:43: a6:73:62:e0:92:da:27:e3:2b:e5:ae:10:59:fa:bf: 20:d6:0b:78:99:64:82:5a:3c:28:fe:0c:30:62:3b: 32:72:2f:9c:bd:dc:23:2e:b7:ac:71:17:94:c6:17: ad:28:e6:b5:53:07:bd:92:76:b3:51:18:93:e8:96: 25:f1:a2:40:4d:e6:b6:97:23:b5:65:57:d8:80:7e: 90:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:4E:C7:9E:41:2C:90:44:94:1A:6D:32:04:4F:A1:DC:8E:97:71:91 X509v3 Authority Key Identifier: keyid:C1:66:91:03:D8:70:A3:90:C5:6C:8D:FD:3C:1B:FE:23:E4:8B:05:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1669103D870A390C56C8DFD3C1BFE23E48B0540.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/888d0b6e-b2ed-49c8-a498-8fd299afb701/0/C1669103D870A390C56C8DFD3C1BFE23E48B0540.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:f5:13:67:c9:a5:04:fb:00:25:14:17:64:e5:4d:f0:7f:f2: 3a:7d:d4:5b:76:58:a3:79:35:78:7f:56:0d:01:5e:da:e9:67: 3f:35:c0:a1:6e:85:e4:18:1c:53:ff:69:19:3c:f4:f8:91:bb: 28:39:0c:e6:42:29:67:d2:e2:3c:13:f7:55:78:41:82:77:b4: 35:b5:2e:5d:a9:5b:93:b0:c7:92:c5:ce:93:1c:03:b8:af:bb: 09:2d:f6:31:50:92:7b:0c:a1:01:9b:d0:3c:ed:74:21:bf:3b: cc:2c:f8:c2:62:63:d2:d0:fb:94:c0:f1:50:b7:fa:02:a6:d2: 1d:55:61:1f:57:26:17:51:4e:35:a5:35:d5:06:6f:b1:eb:e7: 26:6c:80:39:01:df:15:75:85:de:5b:3c:e7:10:b2:c6:ba:a8: 04:0b:07:71:97:15:ee:23:73:57:f3:97:b6:82:6a:d6:b0:40: 81:1a:05:d3:6b:b7:fd:79:d1:27:52:34:84:81:26:28:7b:c6: d1:5b:af:77:d8:8e:cb:90:6f:18:02:21:b4:6b:13:40:5f:74: 94:ac:04:ae:9c:d3:2b:7c:b9:a3:89:63:f1:83:2f:cf:ad:19: 11:37:6b:a8:1b:25:d0:f5:3c:d9:52:d9:b1:e8:b7:5c:e9:db: 6a:2b:e6:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH/S0h+4ZeqXfvj1KJ9rYsak9gcIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE2NjkxMDNEODcwQTM5MEM1NkM4REZEM0MxQkZFMjNF NDhCMDU0MDAeFw0yNTA3MTkyMjQ2MjBaFw0yNTA3MjMwMDMxMjBaMDMxMTAvBgNV BAMTKDg4NEVDNzlFNDEyQzkwNDQ5NDFBNkQzMjA0NEZBMURDOEU5NzcxOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+FGMHhdDWHO3JVaeDJahI9jR1 geieoPuWVASCMzFM4X0dZqBH287uofq56IVaBfqiB6odT2tNZPOt8EeClraluaoC vuv2jlX6bqFzfbMvowgcWc0OBJcmOpfoa5WKBx9M0kBDgP4Nz0w8aMpO7xyeKiaU JPdNak7+TwvH1H7r1CIXfFqgDbK2Qm1QGerz/m9eAv6sJ39mEuHIuxSSqS0NnKw7 DH+iVO7caCmVJTkA1UIAQ6ZzYuCS2ifjK+WuEFn6vyDWC3iZZIJaPCj+DDBiOzJy L5y93CMut6xxF5TGF60o5rVTB72SdrNRGJPoliXxokBN5raXI7VlV9iAfpDXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiE7HnkEskESUGm0yBE+h3I6XcZEwHwYDVR0j BBgwFoAUwWaRA9hwo5DFbI39PBv+I+SLBUAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ODhkMGI2ZS1iMmVkLTQ5YzgtYTQ5OC04ZmQyOTlhZmI3MDEvMC9DMTY2OTEwM0Q4 NzBBMzkwQzU2QzhERkQzQzFCRkUyM0U0OEIwNTQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE2NjkxMDNEODcwQTM5MEM1NkM4REZEM0MxQkZFMjNFNDhC MDU0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODg4ZDBiNmUtYjJlZC00OWM4LWE0 OTgtOGZkMjk5YWZiNzAxLzAvQzE2NjkxMDNEODcwQTM5MEM1NkM4REZEM0MxQkZF MjNFNDhCMDU0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACX1E2fJpQT7ACUUF2TlTfB/8jp91Ft2WKN5 NXh/Vg0BXtrpZz81wKFuheQYHFP/aRk89PiRuyg5DOZCKWfS4jwT91V4QYJ3tDW1 Ll2pW5Owx5LFzpMcA7ivuwkt9jFQknsMoQGb0DztdCG/O8ws+MJiY9LQ+5TA8VC3 +gKm0h1VYR9XJhdRTjWlNdUGb7Hr5yZsgDkB3xV1hd5bPOcQssa6qAQLB3GXFe4j c1fzl7aCatawQIEaBdNrt/150SdSNISBJih7xtFbr3fYjsuQbxgCIbRrE0BfdJSs BK6c0yt8uaOJY/GDL8+tGRE3a6gbJdD1PNlS2bHot1zp22or5jw= -----END CERTIFICATE-----Generated at Mon Jul 21 10:31:53 2025 by rpki-client