$ rpki-client -vvf repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft File: 8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft (raw, json) Hash identifier: g25qXImSno2FMuIp8WRM3bfnpjIB3yV/2g/Ikx8cJKc= Subject key identifier: 9D:EB:66:40:7B:4D:73:C6:AB:6E:BD:BC:BD:D5:36:E0:DC:D0:FA:2F Authority key identifier: 8D:5A:49:C9:E4:2E:37:1B:FD:1E:67:AC:E1:B3:D5:5E:C1:AB:F7:3F Certificate issuer: /CN=8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F Certificate serial: 7064D0403594F7F683585E46DC24D866711C447C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft Manifest number: 9A Signing time: Sat 06 Sep 2025 01:20:52 +0000 Manifest this update: Sat 06 Sep 2025 01:15:52 +0000 Manifest next update: Tue 09 Sep 2025 01:47:52 +0000 Files and hashes: 1: 8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.crl (hash: YMBxwJbStaHryUlh6QzeYw6OksfjTtnCk77bJzoiKEc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.crl rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 01:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:64:d0:40:35:94:f7:f6:83:58:5e:46:dc:24:d8:66:71:1c:44:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F Validity Not Before: Sep 6 01:15:52 2025 GMT Not After : Sep 9 01:47:52 2025 GMT Subject: CN=9DEB66407B4D73C6AB6EBDBCBDD536E0DCD0FA2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:30:c3:9a:f3:90:93:c1:52:76:ff:ce:29:45: 6b:b1:ae:ec:fb:9c:54:f1:1f:30:b3:44:13:1e:2b: c2:6c:43:38:61:98:ec:04:7a:af:7f:8d:a2:26:a2: 56:de:b5:80:9a:3d:b3:16:50:a1:1d:76:dd:c1:96: 35:19:0a:a9:2d:1f:24:96:c4:be:40:64:4c:69:86: f9:e3:5f:3a:d2:73:8b:00:83:6b:57:6b:c9:d4:6c: 32:e0:6c:76:ca:4e:3e:b4:30:e3:ea:16:ce:9d:99: da:65:34:f5:93:9a:8c:8d:ad:aa:e1:2e:3a:bf:1a: a2:ec:dd:bc:0b:71:df:13:e1:2d:87:40:a6:3d:1d: bf:ce:95:f0:1c:51:01:f1:af:04:b3:c1:1f:38:bd: 09:0e:f0:fd:37:63:a1:be:27:59:73:4b:da:c6:de: 94:43:f5:18:c1:4b:ce:0c:59:0d:c3:bb:10:80:f4: 88:34:48:0a:3d:23:c1:a2:eb:67:a0:02:e2:83:36: cb:d5:19:f0:7f:b6:7d:28:92:3d:85:28:04:53:b9: c6:19:c9:c4:20:33:8a:58:7a:3a:52:4b:d5:ce:8f: 35:f3:3c:07:9d:8e:9b:a3:b4:3f:96:7d:c3:64:e3: ba:5b:6a:aa:00:59:80:69:5a:a2:3a:1a:89:68:9d: 4a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:EB:66:40:7B:4D:73:C6:AB:6E:BD:BC:BD:D5:36:E0:DC:D0:FA:2F X509v3 Authority Key Identifier: keyid:8D:5A:49:C9:E4:2E:37:1B:FD:1E:67:AC:E1:B3:D5:5E:C1:AB:F7:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:4d:58:8d:36:dd:1f:c1:f1:6c:b7:46:32:4d:81:30:71:08: fd:d0:e9:7a:78:36:09:77:62:4c:29:00:f7:08:24:2d:6c:2d: 4e:07:ee:17:06:b9:c3:d5:10:4c:6e:86:e2:56:70:f2:5c:a4: 3d:b6:27:93:0a:a7:b4:f0:b0:95:bf:ad:7b:a9:ee:2a:75:e4: 1b:d2:bd:12:39:8f:27:fe:26:8a:12:80:b8:00:2f:c4:9d:22: f5:8b:6f:95:08:5c:55:d7:5c:57:03:55:43:c6:de:12:af:c2: 1b:20:d7:8d:cb:4f:7c:2b:21:a9:a6:6b:70:d4:97:a9:ee:0a: 6c:5a:83:99:3d:05:05:f4:d2:8e:31:8a:42:66:c4:53:24:46: 09:d1:9a:29:43:1d:19:e5:f3:64:20:14:5c:49:38:b7:95:b6: f5:c0:b2:c3:a9:ae:b8:0f:49:75:12:d9:e3:aa:bf:c2:62:c7: 12:0d:e1:eb:b4:0e:69:7c:45:2c:0a:0f:31:80:57:f4:4a:be: af:f8:b2:79:8f:bc:5d:e2:21:37:3b:86:96:1c:d9:93:2b:9b: 64:89:35:79:d6:8b:b5:e6:2b:ab:bc:aa:87:e7:f7:65:06:95: 1a:4d:9d:57:16:b2:8c:dc:58:3f:a0:37:67:81:c6:8f:23:77: ae:1d:fc:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcGTQQDWU9/aDWF5G3CTYZnEcRHwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ1QTQ5QzlFNDJFMzcxQkZEMUU2N0FDRTFCM0Q1NUVD MUFCRjczRjAeFw0yNTA5MDYwMTE1NTJaFw0yNTA5MDkwMTQ3NTJaMDMxMTAvBgNV BAMTKDlERUI2NjQwN0I0RDczQzZBQjZFQkRCQ0JERDUzNkUwRENEMEZBMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqMMOa85CTwVJ2/84pRWuxruz7 nFTxHzCzRBMeK8JsQzhhmOwEeq9/jaImolbetYCaPbMWUKEddt3BljUZCqktHySW xL5AZExphvnjXzrSc4sAg2tXa8nUbDLgbHbKTj60MOPqFs6dmdplNPWTmoyNrarh Ljq/GqLs3bwLcd8T4S2HQKY9Hb/OlfAcUQHxrwSzwR84vQkO8P03Y6G+J1lzS9rG 3pRD9RjBS84MWQ3DuxCA9Ig0SAo9I8Gi62egAuKDNsvVGfB/tn0okj2FKARTucYZ ycQgM4pYejpSS9XOjzXzPAedjpujtD+WfcNk47pbaqoAWYBpWqI6GolonUrXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnetmQHtNc8arbr28vdU24NzQ+i8wHwYDVR0j BBgwFoAUjVpJyeQuNxv9Hmes4bPVXsGr9z8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmY1OTg2Yi1jNzY0LTRjZDctYjQxNC1hMjViZDA1YzNmOTIvMC84RDVBNDlDOUU0 MkUzNzFCRkQxRTY3QUNFMUIzRDU1RUMxQUJGNzNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQ1QTQ5QzlFNDJFMzcxQkZEMUU2N0FDRTFCM0Q1NUVDMUFC RjczRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjJmNTk4NmItYzc2NC00Y2Q3LWI0 MTQtYTI1YmQwNWMzZjkyLzAvOEQ1QTQ5QzlFNDJFMzcxQkZEMUU2N0FDRTFCM0Q1 NUVDMUFCRjczRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABNNWI023R/B8Wy3RjJNgTBxCP3Q6Xp4Ngl3 YkwpAPcIJC1sLU4H7hcGucPVEExuhuJWcPJcpD22J5MKp7TwsJW/rXup7ip15BvS vRI5jyf+JooSgLgAL8SdIvWLb5UIXFXXXFcDVUPG3hKvwhsg143LT3wrIamma3DU l6nuCmxag5k9BQX00o4xikJmxFMkRgnRmilDHRnl82QgFFxJOLeVtvXAssOprrgP SXUS2eOqv8JixxIN4eu0Dml8RSwKDzGAV/RKvq/4snmPvF3iITc7hpYc2ZMrm2SJ NXnWi7XmK6u8qofn92UGlRpNnVcWsozcWD+gN2eBxo8jd64d/Bw= -----END CERTIFICATE-----Generated at Sun Sep 7 15:25:43 2025 by rpki-client