$ rpki-client -vvf repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft File: B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft (raw, json) Hash identifier: EGa8zxfz+kfSqXcdLmSZOd7U4KWE7W5n0ZCbpUKYi90= Subject key identifier: 31:40:4B:7E:5A:6F:03:E0:BB:05:32:91:09:2F:C5:B2:1E:D6:3E:1C Authority key identifier: B8:C9:E3:76:A2:07:23:64:11:20:36:DA:7A:7B:BB:4C:AE:4A:C3:7C Certificate issuer: /CN=B8C9E376A2072364112036DA7A7BBB4CAE4AC37C Certificate serial: 5989B7C4548F6005A70DDD98B64954CE63C9C82A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft Manifest number: 0115 Signing time: Mon 21 Jul 2025 00:10:05 +0000 Manifest this update: Mon 21 Jul 2025 00:05:05 +0000 Manifest next update: Thu 24 Jul 2025 01:25:05 +0000 Files and hashes: 1: B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.crl (hash: 288gd0ypcnQCobnsL5BBKVGw3tg8nDDBWBNaj4SOFPA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.crl rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 01:25:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:89:b7:c4:54:8f:60:05:a7:0d:dd:98:b6:49:54:ce:63:c9:c8:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8C9E376A2072364112036DA7A7BBB4CAE4AC37C Validity Not Before: Jul 21 00:05:05 2025 GMT Not After : Jul 24 01:25:05 2025 GMT Subject: CN=31404B7E5A6F03E0BB053291092FC5B21ED63E1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:af:82:5a:86:03:7a:c7:59:ae:ed:c7:ab:b3: b3:be:da:63:c3:91:e2:40:12:67:2f:a8:34:5e:ba: d5:6a:b7:71:20:94:bb:ef:b0:10:c8:8b:3e:2e:60: 90:93:77:35:6b:9c:0a:66:74:b1:88:2b:54:b7:a4: 14:8f:8c:6f:55:cb:a6:d7:dc:62:a2:ee:a3:a7:14: fa:50:73:8c:e6:22:42:da:07:03:de:5e:8b:69:ed: 87:5d:e9:a0:6b:d4:17:72:b4:36:d4:d1:bb:49:99: af:0a:68:be:96:5c:1c:27:8f:fb:79:c5:a0:76:b6: 6f:91:55:14:61:53:a8:0a:66:89:08:21:c9:b4:56: ae:78:b5:95:5e:4d:d6:1c:c9:46:a7:d3:d4:51:dc: de:04:e9:b3:56:f7:d6:e8:90:4e:c7:54:4f:13:a9: be:b5:78:6e:71:b0:2e:3a:2d:69:f9:ba:6c:e2:7d: c6:f7:ae:1a:34:65:3a:5b:48:6f:69:42:ba:86:0d: dc:aa:ad:fc:35:80:ce:b2:d8:bb:ee:7a:c6:a9:9b: 19:d1:f8:6c:84:7e:33:80:54:7e:81:11:5b:04:52: 1b:ae:97:ae:1b:bc:95:51:3c:22:17:8d:a0:00:4c: f0:a3:5b:82:79:c6:6e:93:d0:07:80:ce:20:8d:76: 16:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:40:4B:7E:5A:6F:03:E0:BB:05:32:91:09:2F:C5:B2:1E:D6:3E:1C X509v3 Authority Key Identifier: keyid:B8:C9:E3:76:A2:07:23:64:11:20:36:DA:7A:7B:BB:4C:AE:4A:C3:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:c9:9b:a5:7a:0b:39:09:38:df:4c:37:ed:03:a8:b9:77:33: bc:58:c6:28:92:bc:26:04:af:37:3c:c8:f9:aa:d7:38:3a:cd: dc:70:4f:09:a0:78:0b:c9:a2:ef:3b:31:71:24:a9:67:7b:ec: 97:aa:09:f3:24:29:82:dd:2c:9e:bb:af:f8:81:31:db:f8:a1: be:a6:e3:d0:bc:4f:28:21:67:2a:43:9a:32:f2:17:0b:8f:58: 92:5a:6c:39:b9:34:39:2c:a2:69:14:02:53:06:d6:33:42:0d: e7:e5:d5:2f:55:ed:31:26:68:dd:d0:e6:41:38:ea:f1:28:df: 8f:95:89:cb:07:57:8f:72:a8:c4:1e:ef:10:f7:21:aa:d2:b1: ce:a1:64:20:62:c2:0f:98:9d:5d:b4:e3:6f:28:f8:b3:52:01: 3b:10:e5:cf:08:d1:fb:3a:4a:38:f2:df:bc:82:51:f9:8e:bb: 2f:3d:19:b2:ef:0c:b3:93:42:ef:ad:b7:c1:1c:1a:8f:0d:29: 62:9e:7d:82:e3:81:38:0c:45:0c:f1:07:49:8e:8d:3c:fd:75: 63:86:3b:0f:d7:bb:fb:71:d2:16:89:bf:4c:44:a7:0e:0b:dc: e6:fc:f7:fa:73:12:00:54:f8:21:45:67:be:f5:e6:e2:fe:80: 95:f7:09:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWYm3xFSPYAWnDd2YtklUzmPJyCowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhDOUUzNzZBMjA3MjM2NDExMjAzNkRBN0E3QkJCNENB RTRBQzM3QzAeFw0yNTA3MjEwMDA1MDVaFw0yNTA3MjQwMTI1MDVaMDMxMTAvBgNV BAMTKDMxNDA0QjdFNUE2RjAzRTBCQjA1MzI5MTA5MkZDNUIyMUVENjNFMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8r4JahgN6x1mu7cers7O+2mPD keJAEmcvqDReutVqt3EglLvvsBDIiz4uYJCTdzVrnApmdLGIK1S3pBSPjG9Vy6bX 3GKi7qOnFPpQc4zmIkLaBwPeXotp7Ydd6aBr1BdytDbU0btJma8KaL6WXBwnj/t5 xaB2tm+RVRRhU6gKZokIIcm0Vq54tZVeTdYcyUan09RR3N4E6bNW99bokE7HVE8T qb61eG5xsC46LWn5umzifcb3rho0ZTpbSG9pQrqGDdyqrfw1gM6y2LvuesapmxnR +GyEfjOAVH6BEVsEUhuul64bvJVRPCIXjaAATPCjW4J5xm6T0AeAziCNdhZ3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMUBLflpvA+C7BTKRCS/Fsh7WPhwwHwYDVR0j BBgwFoAUuMnjdqIHI2QRIDbaenu7TK5Kw3wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzYzZTcxYS05Yzg1LTQxNzYtOGZhNC1iN2EyOWFmYjk3N2QvMC9COEM5RTM3NkEy MDcyMzY0MTEyMDM2REE3QTdCQkI0Q0FFNEFDMzdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhDOUUzNzZBMjA3MjM2NDExMjAzNkRBN0E3QkJCNENBRTRB QzM3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzc2M2U3MWEtOWM4NS00MTc2LThm YTQtYjdhMjlhZmI5NzdkLzAvQjhDOUUzNzZBMjA3MjM2NDExMjAzNkRBN0E3QkJC NENBRTRBQzM3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADTJm6V6CzkJON9MN+0DqLl3M7xYxiiSvCYE rzc8yPmq1zg6zdxwTwmgeAvJou87MXEkqWd77JeqCfMkKYLdLJ67r/iBMdv4ob6m 49C8TyghZypDmjLyFwuPWJJabDm5NDksomkUAlMG1jNCDefl1S9V7TEmaN3Q5kE4 6vEo34+VicsHV49yqMQe7xD3IarSsc6hZCBiwg+YnV20428o+LNSATsQ5c8I0fs6 Sjjy37yCUfmOuy89GbLvDLOTQu+tt8EcGo8NKWKefYLjgTgMRQzxB0mOjTz9dWOG Ow/Xu/tx0haJv0xEpw4L3Ob89/pzEgBU+CFFZ7715uL+gJX3CZg= -----END CERTIFICATE-----Generated at Mon Jul 21 18:06:16 2025 by rpki-client