$ rpki-client -vvf repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft File: C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft (raw, json) Hash identifier: 7JdTG6P39QMKTUNfbkbWX3Pds40fWhhism8tiaBl8JI= Subject key identifier: C0:53:50:A8:DF:27:D3:49:A5:C9:D1:D4:C1:E2:DA:B7:28:0B:D4:1A Authority key identifier: C8:B7:60:5A:76:DB:DD:11:CC:D3:1F:65:7A:0D:E4:54:C9:79:D9:39 Certificate issuer: /CN=C8B7605A76DBDD11CCD31F657A0DE454C979D939 Certificate serial: 2FB930EC54C846FE6B0CFBD4301CD075E5189B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8B7605A76DBDD11CCD31F657A0DE454C979D939.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft Manifest number: 0484 Signing time: Fri 18 Jul 2025 14:41:28 +0000 Manifest this update: Fri 18 Jul 2025 14:36:28 +0000 Manifest next update: Mon 21 Jul 2025 21:58:28 +0000 Files and hashes: 1: C8B7605A76DBDD11CCD31F657A0DE454C979D939.crl (hash: H6AupsMxaV4cUHjQ9MSa3EKEANDqRkH+UUeFERTOcD8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.crl rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8B7605A76DBDD11CCD31F657A0DE454C979D939.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Jul 2025 21:58:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:b9:30:ec:54:c8:46:fe:6b:0c:fb:d4:30:1c:d0:75:e5:18:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8B7605A76DBDD11CCD31F657A0DE454C979D939 Validity Not Before: Jul 18 14:36:28 2025 GMT Not After : Jul 21 21:58:28 2025 GMT Subject: CN=C05350A8DF27D349A5C9D1D4C1E2DAB7280BD41A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5b:77:05:a4:8a:5e:04:cc:07:31:26:58:4d: 50:65:98:bb:71:4e:e2:2a:35:32:7b:65:8d:03:b9: 8f:ec:02:9d:61:1f:9b:91:11:b3:71:83:ff:2d:a3: bb:a4:72:fa:46:16:5f:ae:03:28:a4:fa:ff:5f:ea: b4:32:e0:93:53:85:8b:05:a9:9f:89:4e:d7:8a:1c: 9f:9f:a8:32:d7:d4:3f:59:99:52:97:8b:b5:46:9c: dd:cc:f5:27:19:73:94:58:1e:ea:3a:bc:06:8a:38: a4:29:b2:f6:cb:d9:ed:23:67:79:47:97:de:9c:34: e1:2c:32:9f:42:13:52:c0:cf:f5:aa:f2:a6:de:15: af:ea:f7:0a:47:61:bc:f1:70:6e:ea:d0:7b:4b:be: 3b:4d:53:28:e1:78:09:d7:88:a5:a2:0d:52:81:0e: 4c:65:4c:4b:3d:20:8d:83:63:e7:bf:56:80:60:d2: 97:96:8b:34:6c:a2:d0:ee:b1:f8:3c:60:58:18:c6: 63:c9:23:70:84:a2:d2:76:3d:69:18:4c:56:26:23: e9:79:3f:9e:fe:eb:31:9f:12:34:7f:2b:6e:35:28: d7:59:d1:4c:b3:b4:51:76:b3:df:df:54:e8:3f:31: 9a:c4:2f:f0:84:2c:3a:fe:ca:d6:9e:ff:a2:02:1c: 2f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:53:50:A8:DF:27:D3:49:A5:C9:D1:D4:C1:E2:DA:B7:28:0B:D4:1A X509v3 Authority Key Identifier: keyid:C8:B7:60:5A:76:DB:DD:11:CC:D3:1F:65:7A:0D:E4:54:C9:79:D9:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8B7605A76DBDD11CCD31F657A0DE454C979D939.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:df:97:dd:63:32:fc:85:4e:f2:ab:af:37:76:2d:34:cc:ca: 7e:0c:db:3c:44:7d:f1:b3:03:33:8a:25:5c:c0:9e:0a:cf:3d: 27:ca:55:d3:bb:86:45:d2:df:39:70:a0:17:78:bd:b9:94:fc: 0d:3b:f5:c5:e9:6a:56:6e:2d:76:ad:ea:13:5d:9a:f4:19:28: 4b:5b:4e:79:20:3e:f1:08:ab:c6:08:81:02:50:7c:6f:59:93: fe:b1:b1:ef:9c:f6:50:74:23:c9:4f:06:6e:cd:1c:06:91:f7: c6:a7:79:16:55:9b:ad:82:87:29:24:1d:1b:62:3f:ac:27:04: c2:02:20:ae:44:d0:d0:38:a3:1a:8c:bc:a8:13:77:c9:24:3c: 64:a2:95:fd:0c:2a:5c:86:0c:81:6d:87:34:43:8f:45:b4:c3: 8e:78:10:5e:23:ad:95:55:8d:67:23:83:70:96:a4:c4:9f:ed: 3a:8f:0b:be:99:e2:91:20:c7:a7:ba:05:2a:c6:5d:d5:7b:4c: f4:dd:33:65:0f:21:f1:be:d9:91:78:27:f3:35:59:89:fd:57: 8d:c7:b4:15:38:3a:4e:5d:b7:9e:d2:ff:96:57:03:f8:21:08: 90:71:8b:ae:1c:95:db:cf:65:53:91:de:12:81:e5:15:a0:b5: a9:10:29:65 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITL7kw7FTIRv5rDPvUMBzQdeUYmzANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhDOEI3NjA1QTc2REJERDExQ0NEMzFGNjU3QTBERTQ1NEM5 NzlEOTM5MB4XDTI1MDcxODE0MzYyOFoXDTI1MDcyMTIxNTgyOFowMzExMC8GA1UE AxMoQzA1MzUwQThERjI3RDM0OUE1QzlEMUQ0QzFFMkRBQjcyODBCRDQxQTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALlbdwWkil4EzAcxJlhNUGWYu3FO 4io1MntljQO5j+wCnWEfm5ERs3GD/y2ju6Ry+kYWX64DKKT6/1/qtDLgk1OFiwWp n4lO14ocn5+oMtfUP1mZUpeLtUac3cz1JxlzlFge6jq8Boo4pCmy9svZ7SNneUeX 3pw04Swyn0ITUsDP9arypt4Vr+r3CkdhvPFwburQe0u+O01TKOF4CdeIpaINUoEO TGVMSz0gjYNj579WgGDSl5aLNGyi0O6x+DxgWBjGY8kjcISi0nY9aRhMViYj6Xk/ nv7rMZ8SNH8rbjUo11nRTLO0UXaz399U6D8xmsQv8IQsOv7K1p7/ogIcL6UCAwEA AaOCAjwwggI4MB0GA1UdDgQWBBTAU1Co3yfTSaXJ0dTB4tq3KAvUGjAfBgNVHSME GDAWgBTIt2BadtvdEczTH2V6DeRUyXnZOTAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q4 MzQ5Y2Q0LWMwNzktNDFmZi1hYTllLTM2ZjNkNDQ4MjY0NS8wL0M4Qjc2MDVBNzZE QkREMTFDQ0QzMUY2NTdBMERFNDU0Qzk3OUQ5MzkuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMi9DOEI3NjA1QTc2REJERDExQ0NEMzFGNjU3QTBERTQ1NEM5NzlE OTM5LmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9kODM0OWNkNC1jMDc5LTQxZmYtYWE5 ZS0zNmYzZDQ0ODI2NDUvMC9DOEI3NjA1QTc2REJERDExQ0NEMzFGNjU3QTBERTQ1 NEM5NzlEOTM5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAi9+X3WMy/IVO8quvN3YtNMzKfgzbPER98bMD M4olXMCeCs89J8pV07uGRdLfOXCgF3i9uZT8DTv1xelqVm4tdq3qE12a9BkoS1tO eSA+8QirxgiBAlB8b1mT/rGx75z2UHQjyU8Gbs0cBpH3xqd5FlWbrYKHKSQdG2I/ rCcEwgIgrkTQ0DijGoy8qBN3ySQ8ZKKV/QwqXIYMgW2HNEOPRbTDjngQXiOtlVWN ZyODcJakxJ/tOo8LvpnikSDHp7oFKsZd1XtM9N0zZQ8h8b7ZkXgn8zVZif1Xjce0 FTg6Tl23ntL/llcD+CEIkHGLrhyV289lU5HeEoHlFaC1qRApZQ== -----END CERTIFICATE-----Generated at Sun Jul 20 21:26:23 2025 by rpki-client