$ rpki-client -vvf repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft File: 8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft (raw, json) Hash identifier: WmDf3wFEPHiCZXgw1dv88+ILCvCjuIeHo1RLlclSvP0= Subject key identifier: 85:0C:0E:5C:A1:24:51:4E:B6:CE:1D:C8:40:8B:50:02:C5:A5:A8:25 Authority key identifier: 8C:34:62:80:99:43:E9:E8:E8:E8:90:52:BF:9B:9C:3D:DC:60:EE:22 Certificate issuer: /CN=8C3462809943E9E8E8E89052BF9B9C3DDC60EE22 Certificate serial: 10FBCA4C639EB0715C3AC07640036BF1810BDAE4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft Manifest number: 0221 Signing time: Sat 07 Jun 2025 11:10:45 +0000 Manifest this update: Sat 07 Jun 2025 11:05:45 +0000 Manifest next update: Tue 10 Jun 2025 21:06:45 +0000 Files and hashes: 1: 8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.crl (hash: V/RQbFlezOqJ+RjYb0+yeoWh1UJU71a1URYNIio/LNk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.crl rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 21:06:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:fb:ca:4c:63:9e:b0:71:5c:3a:c0:76:40:03:6b:f1:81:0b:da:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C3462809943E9E8E8E89052BF9B9C3DDC60EE22 Validity Not Before: Jun 7 11:05:45 2025 GMT Not After : Jun 10 21:06:45 2025 GMT Subject: CN=850C0E5CA124514EB6CE1DC8408B5002C5A5A825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5a:01:c0:b1:36:6e:2f:d7:79:4b:25:0f:10: 0c:19:e6:f0:21:d2:37:ee:78:cc:a2:57:57:b2:82: 76:68:64:9f:20:c7:90:41:9f:83:29:ce:b4:19:95: d2:3b:03:57:a4:de:94:fd:c1:af:d1:90:4f:46:37: 9d:9b:44:6e:1a:81:20:e1:7e:d7:78:c7:9a:93:61: 60:d9:cc:8b:05:c3:f7:f0:92:28:41:41:ce:5a:c0: 4a:e1:1f:dd:27:2d:77:65:f9:09:b4:5d:90:c3:c3: 9f:f5:8f:8c:3c:2c:c5:c5:91:7d:3a:7c:ba:11:1a: 1a:fe:7e:c3:af:71:e5:d5:7f:5e:44:59:6f:90:05: ee:0f:09:c6:f0:5d:ec:55:10:3b:94:8d:74:83:22: ad:29:f8:ef:c7:6b:d8:54:b5:ce:29:95:5c:c9:b6: 0d:9e:3d:a1:f7:bd:93:62:da:54:4c:8d:8a:f3:1b: 0b:20:02:34:a6:7c:2c:1e:2a:28:b1:74:41:5a:b0: 72:d6:79:11:de:0c:21:3a:a5:ab:0f:78:b2:7d:68: fe:31:9e:64:df:fa:b2:7e:7b:53:c3:08:b0:27:33: be:06:08:b7:ad:00:06:b2:33:d0:9c:bd:1b:5d:b5: 4d:4b:13:56:0e:06:19:e9:41:41:c5:8c:e0:71:da: a9:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:0C:0E:5C:A1:24:51:4E:B6:CE:1D:C8:40:8B:50:02:C5:A5:A8:25 X509v3 Authority Key Identifier: keyid:8C:34:62:80:99:43:E9:E8:E8:E8:90:52:BF:9B:9C:3D:DC:60:EE:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:26:1c:70:31:2f:0e:f5:49:bc:3b:9f:b0:3e:64:e0:b7:80: ac:c4:40:e2:78:6e:7c:96:80:5f:cb:e3:3e:8e:46:85:ef:35: 05:c1:98:dd:84:45:e9:14:8b:ed:08:c0:07:88:7e:7f:13:81: b0:1a:87:98:f3:e0:3d:61:eb:0a:77:7c:8a:ce:5c:e8:d6:76: 0f:93:7c:60:66:98:7d:3e:8a:e1:f0:1d:7b:a0:8c:bf:1d:d3: 16:f6:a7:c1:60:5b:7d:6d:12:36:7a:67:49:fa:fb:f9:3c:cb: 9d:8f:b5:92:d7:01:76:d1:14:16:92:fe:d3:9f:58:1e:bd:3e: 72:70:52:23:ac:7e:0f:ca:bd:52:e1:59:d4:a4:23:fb:cb:ad: f6:2a:3f:5c:d0:cb:f8:b7:37:57:b7:0e:54:77:fa:4c:13:60: 54:cc:5a:98:4c:9f:7f:5c:dd:d0:33:58:c6:0d:53:24:be:0b: 12:7f:ff:31:ca:a3:cb:36:59:c0:1e:0c:cf:0b:01:21:49:23: 12:3a:c8:e7:db:b0:e9:29:60:b4:7a:6c:0f:2f:aa:aa:22:c5: 61:1a:08:6b:f6:f8:46:46:2d:f9:4d:ad:5e:3b:67:a4:7b:eb: d0:40:90:ae:48:10:47:2d:7f:3a:dd:19:78:e5:4f:4d:bd:5c: 5d:46:d1:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEPvKTGOesHFcOsB2QANr8YEL2uQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEMzNDYyODA5OTQzRTlFOEU4RTg5MDUyQkY5QjlDM0RE QzYwRUUyMjAeFw0yNTA2MDcxMTA1NDVaFw0yNTA2MTAyMTA2NDVaMDMxMTAvBgNV BAMTKDg1MEMwRTVDQTEyNDUxNEVCNkNFMURDODQwOEI1MDAyQzVBNUE4MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpWgHAsTZuL9d5SyUPEAwZ5vAh 0jfueMyiV1eygnZoZJ8gx5BBn4MpzrQZldI7A1ek3pT9wa/RkE9GN52bRG4agSDh ftd4x5qTYWDZzIsFw/fwkihBQc5awErhH90nLXdl+Qm0XZDDw5/1j4w8LMXFkX06 fLoRGhr+fsOvceXVf15EWW+QBe4PCcbwXexVEDuUjXSDIq0p+O/Ha9hUtc4plVzJ tg2ePaH3vZNi2lRMjYrzGwsgAjSmfCweKiixdEFasHLWeRHeDCE6pasPeLJ9aP4x nmTf+rJ+e1PDCLAnM74GCLetAAayM9CcvRtdtU1LE1YOBhnpQUHFjOBx2qnRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhQwOXKEkUU62zh3IQItQAsWlqCUwHwYDVR0j BBgwFoAUjDRigJlD6ejo6JBSv5ucPdxg7iIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzM4YmRhZC1kMmRkLTRmMDctYWU4NC1jNTQwNjEyYmFmNmEvMC84QzM0NjI4MDk5 NDNFOUU4RThFODkwNTJCRjlCOUMzRERDNjBFRTIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEMzNDYyODA5OTQzRTlFOEU4RTg5MDUyQkY5QjlDM0REQzYw RUUyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTMzOGJkYWQtZDJkZC00ZjA3LWFl ODQtYzU0MDYxMmJhZjZhLzAvOEMzNDYyODA5OTQzRTlFOEU4RTg5MDUyQkY5QjlD M0REQzYwRUUyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACsmHHAxLw71Sbw7n7A+ZOC3gKzEQOJ4bnyW gF/L4z6ORoXvNQXBmN2ERekUi+0IwAeIfn8TgbAah5jz4D1h6wp3fIrOXOjWdg+T fGBmmH0+iuHwHXugjL8d0xb2p8FgW31tEjZ6Z0n6+/k8y52PtZLXAXbRFBaS/tOf WB69PnJwUiOsfg/KvVLhWdSkI/vLrfYqP1zQy/i3N1e3DlR3+kwTYFTMWphMn39c 3dAzWMYNUyS+CxJ//zHKo8s2WcAeDM8LASFJIxI6yOfbsOkpYLR6bA8vqqoixWEa CGv2+EZGLflNrV47Z6R769BAkK5IEEctfzrdGXjlT029XF1G0T4= -----END CERTIFICATE-----Generated at Sun Jun 8 22:40:25 2025 by rpki-client