$ rpki-client -vvf repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft File: 8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft (raw, json) Hash identifier: i2XcIlrI1mrYXmbHNr2ngA6DZkHqteOF+Jk3xAnOoiQ= Subject key identifier: 50:E8:DF:3B:C0:4A:86:A3:12:90:9E:8A:8A:3E:2C:FD:3B:7C:40:11 Authority key identifier: 8C:C3:A6:7D:BA:16:2B:44:30:DF:0F:08:F8:10:A7:B9:53:CB:A4:A1 Certificate issuer: /CN=8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1 Certificate serial: 284F538E08F7D859E4CCF9B1269008679052E8A0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft Manifest number: 01EB Signing time: Sun 20 Jul 2025 09:20:55 +0000 Manifest this update: Sun 20 Jul 2025 09:15:55 +0000 Manifest next update: Wed 23 Jul 2025 16:58:55 +0000 Files and hashes: 1: 8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.crl (hash: lBJWtxcQ9raAMNTs12Figd2QVUvWybULdZnv8nX62h0=) 2: 3130332e3139312e35322e302f32332d3234203d3e2034383030.roa (hash: e+A7LYn+NCGFiG7Es9xiBuZGY1wSb3yZo5rf4YGYc54=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.crl rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 16:58:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:4f:53:8e:08:f7:d8:59:e4:cc:f9:b1:26:90:08:67:90:52:e8:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1 Validity Not Before: Jul 20 09:15:55 2025 GMT Not After : Jul 23 16:58:55 2025 GMT Subject: CN=50E8DF3BC04A86A312909E8A8A3E2CFD3B7C4011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:48:9c:d1:1c:bb:46:d9:8c:3b:4d:14:e0:cf: 8a:8d:01:b6:f9:44:48:44:d6:b6:98:04:11:a5:73: ab:0d:c1:aa:1e:a4:d3:8a:11:6d:eb:c3:b0:b3:51: 1b:a8:c7:30:1a:32:0c:83:5b:4a:d7:78:0c:3b:8e: 74:27:bc:8c:0d:16:f7:7b:e6:97:ab:15:0c:27:66: ee:d2:55:6c:60:e3:a5:47:af:8e:0c:46:34:0d:18: 54:65:e1:63:a7:3d:85:eb:ff:6c:86:b6:b0:7b:5a: 71:32:a2:70:4c:00:ee:1a:38:7d:f8:78:13:f0:48: 6a:d5:06:95:5e:a7:1b:5b:5a:49:fc:d9:3f:4c:26: 3b:15:f7:d7:3a:f9:fd:61:3c:c2:46:a1:ad:c4:c4: e5:bf:28:a8:6d:65:f8:73:a0:17:d4:07:35:39:30: ca:3d:f2:2f:42:d1:06:4d:be:14:2e:11:54:6d:cf: c3:e9:a8:26:91:b2:48:0a:e2:1a:95:c3:6a:90:11: a2:e3:b9:47:83:6d:b8:33:1b:19:81:79:ed:02:b5: 3e:28:47:ef:06:f8:65:19:2d:f7:15:fa:1c:5e:ba: b9:fb:84:d0:6a:ec:99:85:e1:d3:b6:bc:bf:c7:57: 8c:13:05:f0:63:75:ed:7e:19:32:17:e5:ab:03:6f: a1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:E8:DF:3B:C0:4A:86:A3:12:90:9E:8A:8A:3E:2C:FD:3B:7C:40:11 X509v3 Authority Key Identifier: keyid:8C:C3:A6:7D:BA:16:2B:44:30:DF:0F:08:F8:10:A7:B9:53:CB:A4:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9afd315-f47f-4f6a-b8b5-45a2280bbc85/0/8CC3A67DBA162B4430DF0F08F810A7B953CBA4A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:38:59:79:8e:b9:c6:7e:e2:66:78:1d:0a:99:b2:00:5e:75: 7f:54:1b:c5:e6:9f:c2:11:13:7d:c7:c0:b7:71:63:d0:98:a7: 49:74:ba:4a:46:c5:bd:d3:13:27:57:0e:20:09:c0:e0:d1:29: 02:75:18:78:8e:ef:81:f6:b9:81:e4:19:37:c8:dc:c8:ce:f9: 07:44:21:cd:47:1e:04:4b:69:9b:0b:a4:a9:44:5d:6b:07:0a: e7:b3:20:82:a9:96:27:1e:a2:6c:3b:ad:f7:52:4e:d6:c8:7a: bd:e8:14:f3:57:29:54:9a:03:b4:70:b2:31:49:ec:8d:19:71: 49:75:82:93:2c:a2:5b:98:20:f3:87:1a:b2:80:0d:c8:b6:e7: f0:b9:18:18:4c:cd:4e:fa:cb:ed:7f:4f:16:9d:aa:55:99:db: 09:99:30:7c:71:27:62:f2:99:bf:92:26:88:b6:2f:11:5a:e1: 16:97:c3:7a:0b:1a:cb:c2:8e:49:f9:6e:4d:c8:1c:fb:e9:b8: b7:b4:16:82:4e:3b:95:ca:26:ea:c7:7e:f4:f6:8b:da:02:74: ea:e1:73:41:cb:8f:6b:67:68:42:cf:2d:10:f2:39:46:11:22: ac:ab:9a:03:e4:87:ba:42:03:9f:69:b8:c5:b1:e6:d2:f5:bc: 1e:db:43:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKE9Tjgj32FnkzPmxJpAIZ5BS6KAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENDM0E2N0RCQTE2MkI0NDMwREYwRjA4RjgxMEE3Qjk1 M0NCQTRBMTAeFw0yNTA3MjAwOTE1NTVaFw0yNTA3MjMxNjU4NTVaMDMxMTAvBgNV BAMTKDUwRThERjNCQzA0QTg2QTMxMjkwOUU4QThBM0UyQ0ZEM0I3QzQwMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbSJzRHLtG2Yw7TRTgz4qNAbb5 REhE1raYBBGlc6sNwaoepNOKEW3rw7CzURuoxzAaMgyDW0rXeAw7jnQnvIwNFvd7 5perFQwnZu7SVWxg46VHr44MRjQNGFRl4WOnPYXr/2yGtrB7WnEyonBMAO4aOH34 eBPwSGrVBpVepxtbWkn82T9MJjsV99c6+f1hPMJGoa3ExOW/KKhtZfhzoBfUBzU5 MMo98i9C0QZNvhQuEVRtz8PpqCaRskgK4hqVw2qQEaLjuUeDbbgzGxmBee0CtT4o R+8G+GUZLfcV+hxeurn7hNBq7JmF4dO2vL/HV4wTBfBjde1+GTIX5asDb6FjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUOjfO8BKhqMSkJ6Kij4s/Tt8QBEwHwYDVR0j BBgwFoAUjMOmfboWK0Qw3w8I+BCnuVPLpKEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OWFmZDMxNS1mNDdmLTRmNmEtYjhiNS00NWEyMjgwYmJjODUvMC84Q0MzQTY3REJB MTYyQjQ0MzBERjBGMDhGODEwQTdCOTUzQ0JBNEExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENDM0E2N0RCQTE2MkI0NDMwREYwRjA4RjgxMEE3Qjk1M0NC QTRBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDlhZmQzMTUtZjQ3Zi00ZjZhLWI4 YjUtNDVhMjI4MGJiYzg1LzAvOENDM0E2N0RCQTE2MkI0NDMwREYwRjA4RjgxMEE3 Qjk1M0NCQTRBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKM4WXmOucZ+4mZ4HQqZsgBedX9UG8Xmn8IR E33HwLdxY9CYp0l0ukpGxb3TEydXDiAJwODRKQJ1GHiO74H2uYHkGTfI3MjO+QdE Ic1HHgRLaZsLpKlEXWsHCuezIIKpliceomw7rfdSTtbIer3oFPNXKVSaA7RwsjFJ 7I0ZcUl1gpMsoluYIPOHGrKADci25/C5GBhMzU76y+1/TxadqlWZ2wmZMHxxJ2Ly mb+SJoi2LxFa4RaXw3oLGsvCjkn5bk3IHPvpuLe0FoJOO5XKJurHfvT2i9oCdOrh c0HLj2tnaELPLRDyOUYRIqyrmgPkh7pCA59puMWx5tL1vB7bQ+A= -----END CERTIFICATE-----Generated at Mon Jul 21 07:24:44 2025 by rpki-client