$ rpki-client -vvf repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.mft File: B8E13B8031811FE78FA73151056FBFABEE076814.mft (raw, json) Hash identifier: 4csqMNM9A9ps94HxGgTW486NOk9OQ3rroTb2sdBI6qk= Subject key identifier: C8:77:2C:B8:5C:05:F4:97:6D:15:99:F6:58:C1:14:D7:E5:89:E0:D6 Authority key identifier: B8:E1:3B:80:31:81:1F:E7:8F:A7:31:51:05:6F:BF:AB:EE:07:68:14 Certificate issuer: /CN=B8E13B8031811FE78FA73151056FBFABEE076814 Certificate serial: 71BF2DFA2D5EF7D0333D4E140002BCC354C67FE5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E13B8031811FE78FA73151056FBFABEE076814.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.mft Manifest number: 17 Signing time: Tue 22 Jul 2025 23:42:06 +0000 Manifest this update: Tue 22 Jul 2025 23:37:06 +0000 Manifest next update: Sat 26 Jul 2025 06:25:06 +0000 Files and hashes: 1: B8E13B8031811FE78FA73151056FBFABEE076814.crl (hash: vZFO1xwH6Gfj3y33RjxFUiNjOZx3D6nl1mLQ7BBZfoE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.crl rsync://repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E13B8031811FE78FA73151056FBFABEE076814.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:25:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:bf:2d:fa:2d:5e:f7:d0:33:3d:4e:14:00:02:bc:c3:54:c6:7f:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8E13B8031811FE78FA73151056FBFABEE076814 Validity Not Before: Jul 22 23:37:06 2025 GMT Not After : Jul 26 06:25:06 2025 GMT Subject: CN=C8772CB85C05F4976D1599F658C114D7E589E0D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:10:ff:65:64:98:38:19:90:a2:31:64:6f:9a: ab:10:56:d4:2c:c5:ff:29:83:11:4b:8f:87:df:fc: d2:96:b6:f1:30:64:ae:73:c0:fd:cd:e2:5f:07:f5: b5:4e:97:cb:43:75:e7:f2:7d:84:ec:3b:d6:4c:33: e5:08:82:55:e3:83:0e:ad:c9:fb:66:dc:6d:d9:d2: 26:c9:e5:0b:b1:2a:88:a3:b2:2c:c7:5c:8d:59:cc: 50:49:cc:c5:99:66:26:e7:6e:32:f0:08:93:e7:51: 6c:64:4b:b1:23:6c:23:35:f9:42:04:6a:a4:e9:f6: 31:b9:79:e0:ed:e5:09:6d:f9:6f:4d:0e:06:a3:6c: 8f:88:27:b6:bf:ca:a3:0e:80:af:00:d7:91:5e:73: e4:09:f8:f8:f0:ec:8e:7c:77:ed:ca:e2:7d:af:63: d9:00:27:a0:b1:42:01:8c:69:ef:86:d4:0b:47:f5: 7d:ac:a0:d9:3a:d1:21:11:36:95:31:35:cc:f4:ca: bb:14:65:40:d3:be:e4:72:0e:01:8b:7b:81:c3:ed: 60:4b:80:73:13:fb:b7:1e:86:ff:d0:5d:3b:8a:ca: 03:69:3e:54:e3:41:56:82:3b:86:96:0e:dc:bd:71: b0:77:47:1e:0b:6e:15:85:4d:1f:1f:d2:35:88:06: cd:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:77:2C:B8:5C:05:F4:97:6D:15:99:F6:58:C1:14:D7:E5:89:E0:D6 X509v3 Authority Key Identifier: keyid:B8:E1:3B:80:31:81:1F:E7:8F:A7:31:51:05:6F:BF:AB:EE:07:68:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E13B8031811FE78FA73151056FBFABEE076814.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:25:68:1b:64:b5:68:05:e0:64:ca:06:c9:86:bf:0e:b3:c5: c6:d9:bd:c9:8b:a0:34:6b:ca:b8:6c:3f:c5:8d:a6:e2:71:90: 7d:0b:8a:07:6f:ba:97:5d:a9:5c:5d:63:6d:81:d6:e7:1f:76: 7b:ca:e3:c4:5b:9e:bd:57:7b:89:8a:72:86:60:e1:63:4c:8f: 50:16:fd:fc:88:ab:64:9c:00:79:dd:c9:a6:e0:7a:d7:ad:28: 7f:32:c9:d1:f9:58:b0:8e:5c:7a:43:65:25:36:d6:d9:f5:23: a1:86:06:a4:7d:88:ed:14:8a:4c:12:ce:a5:f3:71:9c:71:38: a8:be:de:59:c8:04:ef:d7:4e:ff:3d:fd:aa:98:ff:01:fb:c9: ca:53:ce:35:f1:d4:e8:be:96:88:5f:48:d9:0a:71:1f:c5:98: 84:84:b3:c4:c8:d9:4f:49:64:07:f3:04:6f:0e:03:36:6b:c9: 03:65:d9:7d:a6:78:95:bb:3a:90:7b:2c:45:60:13:4f:83:46: 8b:06:64:71:b0:91:f3:5b:a7:36:fa:f9:45:c9:ab:2e:c8:81: 2b:8b:e4:0b:8d:60:06:7f:e9:e9:05:ca:86:da:15:fd:9d:fc: 70:33:4c:c9:74:57:11:60:81:6c:bc:7f:a7:fe:43:1a:eb:78: 39:b7:ba:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcb8t+i1e99AzPU4UAAK8w1TGf+UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhFMTNCODAzMTgxMUZFNzhGQTczMTUxMDU2RkJGQUJF RTA3NjgxNDAeFw0yNTA3MjIyMzM3MDZaFw0yNTA3MjYwNjI1MDZaMDMxMTAvBgNV BAMTKEM4NzcyQ0I4NUMwNUY0OTc2RDE1OTlGNjU4QzExNEQ3RTU4OUUwRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaEP9lZJg4GZCiMWRvmqsQVtQs xf8pgxFLj4ff/NKWtvEwZK5zwP3N4l8H9bVOl8tDdefyfYTsO9ZMM+UIglXjgw6t yftm3G3Z0ibJ5QuxKoijsizHXI1ZzFBJzMWZZibnbjLwCJPnUWxkS7EjbCM1+UIE aqTp9jG5eeDt5Qlt+W9NDgajbI+IJ7a/yqMOgK8A15Fec+QJ+Pjw7I58d+3K4n2v Y9kAJ6CxQgGMae+G1AtH9X2soNk60SERNpUxNcz0yrsUZUDTvuRyDgGLe4HD7WBL gHMT+7cehv/QXTuKygNpPlTjQVaCO4aWDty9cbB3Rx4LbhWFTR8f0jWIBs0ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyHcsuFwF9JdtFZn2WMEU1+WJ4NYwHwYDVR0j BBgwFoAUuOE7gDGBH+ePpzFRBW+/q+4HaBQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODdjMmI3ZS0yNjYzLTRkNjgtYjI1YS01ZmNmMDVlMDdiYjQvMC9COEUxM0I4MDMx ODExRkU3OEZBNzMxNTEwNTZGQkZBQkVFMDc2ODE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhFMTNCODAzMTgxMUZFNzhGQTczMTUxMDU2RkJGQUJFRTA3 NjgxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTg3YzJiN2UtMjY2My00ZDY4LWIy NWEtNWZjZjA1ZTA3YmI0LzAvQjhFMTNCODAzMTgxMUZFNzhGQTczMTUxMDU2RkJG QUJFRTA3NjgxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA0laBtktWgF4GTKBsmGvw6zxcbZvcmLoDRr yrhsP8WNpuJxkH0LigdvupddqVxdY22B1ucfdnvK48Rbnr1Xe4mKcoZg4WNMj1AW /fyIq2ScAHndyabgetetKH8yydH5WLCOXHpDZSU21tn1I6GGBqR9iO0UikwSzqXz cZxxOKi+3lnIBO/XTv89/aqY/wH7ycpTzjXx1Oi+lohfSNkKcR/FmISEs8TI2U9J ZAfzBG8OAzZryQNl2X2meJW7OpB7LEVgE0+DRosGZHGwkfNbpzb6+UXJqy7IgSuL 5AuNYAZ/6ekFyobaFf2d/HAzTMl0VxFggWy8f6f+QxrreDm3unY= -----END CERTIFICATE-----Generated at Wed Jul 23 02:01:41 2025 by rpki-client