$ rpki-client -vvf repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft File: C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft (raw, json) Hash identifier: 87aVS1ITAZd2zJCDd7KCii9u/iq1n8CK+NTuISkbtRc= Subject key identifier: 7D:69:D7:1E:89:F1:1C:8B:C1:8B:29:89:FB:20:42:1E:F8:9F:59:31 Authority key identifier: C8:C5:B7:81:B7:F4:3C:62:74:BD:AA:C3:FD:8A:E1:91:4A:BE:ED:88 Certificate issuer: /CN=C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88 Certificate serial: 701EBCC94870DEAEFA5177859514714AF99C4992 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft Manifest number: 73 Signing time: Sat 19 Jul 2025 10:21:58 +0000 Manifest this update: Sat 19 Jul 2025 10:16:58 +0000 Manifest next update: Tue 22 Jul 2025 22:14:58 +0000 Files and hashes: 1: C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.crl (hash: ug9qfWNc7mbAYCnDrku077V0dqUsnLI43TW9Rxlg5nQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.crl rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 22:14:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:1e:bc:c9:48:70:de:ae:fa:51:77:85:95:14:71:4a:f9:9c:49:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88 Validity Not Before: Jul 19 10:16:58 2025 GMT Not After : Jul 22 22:14:58 2025 GMT Subject: CN=7D69D71E89F11C8BC18B2989FB20421EF89F5931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0f:18:50:48:6e:00:f6:7a:f3:cf:3f:27:16: 4d:af:8c:d4:88:ac:2e:9b:53:f3:46:f9:01:d9:55: 6b:af:d8:66:8b:4e:75:84:a8:a2:da:16:23:f7:9b: e6:aa:a4:0d:d8:ee:7e:89:9f:a6:5b:b0:cf:75:bf: 6d:5e:d1:e3:f2:9e:9e:77:a5:2c:ce:9b:b4:e3:10: 56:12:4f:6b:63:66:81:95:f8:da:35:42:c1:32:0d: fc:a4:2d:26:ae:10:6c:28:e8:97:b6:4b:5f:f3:2f: ca:f5:7f:e7:dc:37:c9:8e:01:dd:e3:bc:15:3f:0e: 75:07:61:7e:94:0d:1e:ba:fe:89:68:2f:f0:19:5b: d5:a7:28:be:07:17:81:88:1b:67:a1:ab:f1:0b:e9: a2:10:44:07:78:37:31:68:a0:45:e5:aa:29:74:33: cf:8b:9a:aa:26:c7:e1:60:2c:29:c9:06:69:f5:2a: 43:fd:bb:87:65:51:27:bf:d3:e5:d8:b5:5e:05:e9: 8e:a9:7d:4d:7c:22:5a:24:f3:65:eb:f0:85:36:d1: c9:53:4c:04:d5:78:7f:cd:b1:ff:86:1e:0c:46:61: 3c:58:eb:e2:16:0c:e6:ea:99:55:93:fc:3d:f8:88: 71:4a:b5:8e:83:15:19:db:75:ba:12:27:4a:75:0b: 1d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:69:D7:1E:89:F1:1C:8B:C1:8B:29:89:FB:20:42:1E:F8:9F:59:31 X509v3 Authority Key Identifier: keyid:C8:C5:B7:81:B7:F4:3C:62:74:BD:AA:C3:FD:8A:E1:91:4A:BE:ED:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:de:4b:8f:72:65:07:86:b7:f4:a2:82:e9:eb:79:ec:3c:58: d9:76:3e:ac:ed:08:e4:75:8b:9c:52:d5:29:dc:44:b8:fd:26: 4a:e7:95:f4:ec:94:9e:28:ee:b8:4f:d4:11:e3:3f:ed:ba:a2: 3f:1b:cc:a8:94:04:93:1b:8b:28:25:b2:40:9a:b0:e3:4e:57: f6:d3:76:71:60:99:b9:23:a9:8f:c3:5b:17:97:ab:0f:78:5b: a6:18:0b:44:79:b5:5c:78:c0:77:ed:2e:4c:e3:5f:fc:33:a2: 8e:39:e7:a9:ed:fa:f8:98:63:32:c9:69:3f:9c:19:32:96:7c: 31:ab:b3:56:02:0d:b8:b7:a0:26:02:39:01:db:ec:24:5f:3f: da:db:47:92:ce:19:3f:62:bf:2b:d7:07:87:99:0d:bb:33:e9: 6d:0d:8b:57:80:e9:11:5f:34:06:07:6b:a6:56:07:83:8b:b7: 0a:8b:62:6e:6e:88:f2:9f:b0:e1:86:e2:a0:6b:a6:6c:69:82: a1:98:9a:df:6a:50:7d:49:9c:b9:a7:a8:0d:47:c7:70:96:e4: 80:12:86:fc:62:3f:f5:55:a2:ce:37:a1:fc:37:ec:1d:de:c6: 62:8f:4f:13:2a:66:87:9e:84:dd:a9:c9:b4:4a:72:69:f9:9b: 83:0a:09:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcB68yUhw3q76UXeFlRRxSvmcSZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhDNUI3ODFCN0Y0M0M2Mjc0QkRBQUMzRkQ4QUUxOTE0 QUJFRUQ4ODAeFw0yNTA3MTkxMDE2NThaFw0yNTA3MjIyMjE0NThaMDMxMTAvBgNV BAMTKDdENjlENzFFODlGMTFDOEJDMThCMjk4OUZCMjA0MjFFRjg5RjU5MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpDxhQSG4A9nrzzz8nFk2vjNSI rC6bU/NG+QHZVWuv2GaLTnWEqKLaFiP3m+aqpA3Y7n6Jn6ZbsM91v21e0ePynp53 pSzOm7TjEFYST2tjZoGV+No1QsEyDfykLSauEGwo6Je2S1/zL8r1f+fcN8mOAd3j vBU/DnUHYX6UDR66/oloL/AZW9WnKL4HF4GIG2ehq/EL6aIQRAd4NzFooEXlqil0 M8+Lmqomx+FgLCnJBmn1KkP9u4dlUSe/0+XYtV4F6Y6pfU18Ilok82Xr8IU20clT TATVeH/Nsf+GHgxGYTxY6+IWDObqmVWT/D34iHFKtY6DFRnbdboSJ0p1Cx2PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfWnXHonxHIvBiymJ+yBCHvifWTEwHwYDVR0j BBgwFoAUyMW3gbf0PGJ0varD/YrhkUq+7YgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ODg1M2FhYi04ZDZjLTQ1N2YtOWQ1Ny00ODRhY2FjZWE5ZDgvMS9DOEM1Qjc4MUI3 RjQzQzYyNzRCREFBQzNGRDhBRTE5MTRBQkVFRDg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhDNUI3ODFCN0Y0M0M2Mjc0QkRBQUMzRkQ4QUUxOTE0QUJF RUQ4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTg4NTNhYWItOGQ2Yy00NTdmLTlk NTctNDg0YWNhY2VhOWQ4LzEvQzhDNUI3ODFCN0Y0M0M2Mjc0QkRBQUMzRkQ4QUUx OTE0QUJFRUQ4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABreS49yZQeGt/Sigunreew8WNl2PqztCOR1 i5xS1SncRLj9JkrnlfTslJ4o7rhP1BHjP+26oj8bzKiUBJMbiyglskCasONOV/bT dnFgmbkjqY/DWxeXqw94W6YYC0R5tVx4wHftLkzjX/wzoo4556nt+viYYzLJaT+c GTKWfDGrs1YCDbi3oCYCOQHb7CRfP9rbR5LOGT9ivyvXB4eZDbsz6W0Ni1eA6RFf NAYHa6ZWB4OLtwqLYm5uiPKfsOGG4qBrpmxpgqGYmt9qUH1JnLmnqA1Hx3CW5IAS hvxiP/VVos43ofw37B3exmKPTxMqZoeehN2pybRKcmn5m4MKCVk= -----END CERTIFICATE-----Generated at Mon Jul 21 07:24:45 2025 by rpki-client