$ rpki-client -vvf repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft File: C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft (raw, json) Hash identifier: Mqa8QSTWdRqcker718TH8TXpd+TnHH9PJ/Mbo2KSvWo= Subject key identifier: E7:CC:6B:92:71:AA:4B:46:26:65:7D:47:51:6C:BA:ED:A3:1A:F3:37 Authority key identifier: C8:C5:B7:81:B7:F4:3C:62:74:BD:AA:C3:FD:8A:E1:91:4A:BE:ED:88 Certificate issuer: /CN=C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88 Certificate serial: 35FF38338AD38493D1F29E4EF26C7B8D71261CB2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft Manifest number: 88 Signing time: Fri 05 Sep 2025 12:51:53 +0000 Manifest this update: Fri 05 Sep 2025 12:46:53 +0000 Manifest next update: Mon 08 Sep 2025 17:27:53 +0000 Files and hashes: 1: C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.crl (hash: ardRYUCAfzdknqKTQqjINuZDgDO7C6Ik6PKglo5QLd8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.crl rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 17:27:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:ff:38:33:8a:d3:84:93:d1:f2:9e:4e:f2:6c:7b:8d:71:26:1c:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88 Validity Not Before: Sep 5 12:46:53 2025 GMT Not After : Sep 8 17:27:53 2025 GMT Subject: CN=E7CC6B9271AA4B4626657D47516CBAEDA31AF337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:de:53:7a:07:5e:26:78:b5:9c:34:85:1c:af: b7:9c:fa:19:50:b7:56:c0:ef:96:f8:c5:d6:e5:24: bd:63:30:6b:0a:29:ea:91:d1:88:48:59:85:22:82: f6:23:7b:1b:75:ee:1e:85:31:24:e1:c1:6f:d9:b4: e2:0c:9e:6f:bd:2f:03:db:07:9e:48:19:09:e0:11: bb:9c:31:b4:5c:52:5b:98:32:1c:cb:c0:33:d9:e0: 96:c4:ef:f4:72:69:8f:ef:b1:08:89:4b:7a:5b:a7: 11:25:f5:f9:01:f0:39:1d:27:78:80:cb:95:82:35: 3b:bd:20:f1:8e:9f:13:3f:ce:97:e2:ec:ba:74:3e: 5d:bf:a2:ec:fd:db:ee:ba:91:d2:f0:d9:39:db:96: 60:f8:13:60:a6:a1:38:b9:cc:7c:b0:93:4f:1b:9c: d2:36:76:c4:a7:77:2b:e4:4c:99:a2:1d:bb:25:a3: 61:0a:3a:a0:f0:2f:f1:24:c7:4a:0c:83:0f:b5:66: 19:9d:fd:d0:e8:49:36:46:aa:8d:21:a3:98:de:43: d1:05:cb:6c:ce:af:1e:7b:86:e3:fa:aa:e4:72:f1: 3b:97:cc:6e:2b:8a:48:0f:16:68:ee:d0:dc:49:8d: 30:17:cd:40:9a:0e:ef:c1:93:cf:e2:53:36:c9:a9: 61:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:CC:6B:92:71:AA:4B:46:26:65:7D:47:51:6C:BA:ED:A3:1A:F3:37 X509v3 Authority Key Identifier: keyid:C8:C5:B7:81:B7:F4:3C:62:74:BD:AA:C3:FD:8A:E1:91:4A:BE:ED:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:31:48:1d:e3:46:ee:9c:bc:c4:1a:fb:fc:6f:61:cc:3a:3e: 6b:96:f5:8a:b8:1d:78:fa:ad:40:1a:22:7b:e1:98:78:75:c6: 5b:e1:53:04:a9:f3:cb:fc:09:6b:6c:51:e2:39:d8:34:31:a7: 13:66:e4:9e:a7:5b:ef:f7:3a:47:d8:b8:07:8c:47:3e:96:90: 87:9a:9e:33:43:c2:df:a7:70:d9:47:86:b8:11:72:63:50:d6: 6e:ca:36:11:5b:d1:15:4c:41:ad:e4:12:71:7b:89:66:dc:ac: cb:0f:de:f5:a6:74:d3:be:47:0f:ac:1a:66:4b:a6:32:15:52: 51:ae:60:47:33:01:87:fa:22:51:d3:f5:0b:8d:43:f5:a7:67: ce:16:45:c1:a5:98:1e:60:78:e4:e2:ec:57:d6:31:df:43:de: 2d:36:dd:f3:a6:06:9e:66:38:8e:b5:9b:a3:9e:98:b3:8f:a9: 2b:42:c7:6b:0f:2e:c9:0b:2a:cf:4d:42:19:fc:5e:73:be:d4: 40:5a:1a:c9:c5:c7:59:76:2b:92:c9:82:5b:3f:47:6a:21:c3: ed:de:c6:48:68:63:3b:57:f9:74:18:59:53:da:57:0c:c5:01: 24:6c:ce:e7:08:f0:63:8f:6c:60:5b:c6:55:53:27:f1:41:8f: 9a:b1:2e:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNf84M4rThJPR8p5O8mx7jXEmHLIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhDNUI3ODFCN0Y0M0M2Mjc0QkRBQUMzRkQ4QUUxOTE0 QUJFRUQ4ODAeFw0yNTA5MDUxMjQ2NTNaFw0yNTA5MDgxNzI3NTNaMDMxMTAvBgNV BAMTKEU3Q0M2QjkyNzFBQTRCNDYyNjY1N0Q0NzUxNkNCQUVEQTMxQUYzMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv3lN6B14meLWcNIUcr7ec+hlQ t1bA75b4xdblJL1jMGsKKeqR0YhIWYUigvYjext17h6FMSThwW/ZtOIMnm+9LwPb B55IGQngEbucMbRcUluYMhzLwDPZ4JbE7/RyaY/vsQiJS3pbpxEl9fkB8DkdJ3iA y5WCNTu9IPGOnxM/zpfi7Lp0Pl2/ouz92+66kdLw2TnblmD4E2CmoTi5zHywk08b nNI2dsSndyvkTJmiHbslo2EKOqDwL/Ekx0oMgw+1Zhmd/dDoSTZGqo0ho5jeQ9EF y2zOrx57huP6quRy8TuXzG4rikgPFmju0NxJjTAXzUCaDu/Bk8/iUzbJqWEtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU58xrknGqS0YmZX1HUWy67aMa8zcwHwYDVR0j BBgwFoAUyMW3gbf0PGJ0varD/YrhkUq+7YgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ODg1M2FhYi04ZDZjLTQ1N2YtOWQ1Ny00ODRhY2FjZWE5ZDgvMS9DOEM1Qjc4MUI3 RjQzQzYyNzRCREFBQzNGRDhBRTE5MTRBQkVFRDg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhDNUI3ODFCN0Y0M0M2Mjc0QkRBQUMzRkQ4QUUxOTE0QUJF RUQ4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTg4NTNhYWItOGQ2Yy00NTdmLTlk NTctNDg0YWNhY2VhOWQ4LzEvQzhDNUI3ODFCN0Y0M0M2Mjc0QkRBQUMzRkQ4QUUx OTE0QUJFRUQ4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ8xSB3jRu6cvMQa+/xvYcw6PmuW9Yq4HXj6 rUAaInvhmHh1xlvhUwSp88v8CWtsUeI52DQxpxNm5J6nW+/3OkfYuAeMRz6WkIea njNDwt+ncNlHhrgRcmNQ1m7KNhFb0RVMQa3kEnF7iWbcrMsP3vWmdNO+Rw+sGmZL pjIVUlGuYEczAYf6IlHT9QuNQ/WnZ84WRcGlmB5geOTi7FfWMd9D3i023fOmBp5m OI61m6OemLOPqStCx2sPLskLKs9NQhn8XnO+1EBaGsnFx1l2K5LJgls/R2ohw+3e xkhoYztX+XQYWVPaVwzFASRszucI8GOPbGBbxlVTJ/FBj5qxLj4= -----END CERTIFICATE-----Generated at Sun Sep 7 15:27:14 2025 by rpki-client