$ rpki-client -vvf repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft File: A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft (raw, json) Hash identifier: zFa63AUae/e4/t1piFfXGQf2S2Z+f5mKbVEVG9Ob5Ng= Subject key identifier: 5A:72:5D:21:F8:8C:06:3C:10:FD:70:48:F8:C8:3E:00:EC:1A:18:EF Authority key identifier: A8:CD:D5:76:A9:B5:E4:48:A8:69:BE:A4:D5:16:BA:FC:5A:87:95:03 Certificate issuer: /CN=A8CDD576A9B5E448A869BEA4D516BAFC5A879503 Certificate serial: 4FA8BD303B8B1F8FCDC5A08CD14470CA1B4DBE5A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft Manifest number: B1 Signing time: Tue 22 Jul 2025 03:12:20 +0000 Manifest this update: Tue 22 Jul 2025 03:07:20 +0000 Manifest next update: Fri 25 Jul 2025 09:56:20 +0000 Files and hashes: 1: A8CDD576A9B5E448A869BEA4D516BAFC5A879503.crl (hash: utpcl1CxWE5636/+Jtb3577mPb0aQl49RTlQ3qBxhaY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.crl rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 09:56:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:a8:bd:30:3b:8b:1f:8f:cd:c5:a0:8c:d1:44:70:ca:1b:4d:be:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8CDD576A9B5E448A869BEA4D516BAFC5A879503 Validity Not Before: Jul 22 03:07:20 2025 GMT Not After : Jul 25 09:56:20 2025 GMT Subject: CN=5A725D21F88C063C10FD7048F8C83E00EC1A18EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:de:9b:95:8b:b2:1b:8d:91:fe:a4:4a:7c:04: ba:bf:ca:9e:d9:51:60:69:88:47:ff:a4:e6:72:9c: c8:d6:69:f1:9d:13:d4:d3:dd:69:af:51:9f:d6:61: fe:f2:9f:c1:9d:d0:fb:1e:e8:fb:6b:17:5e:83:cb: d4:d5:87:e3:0d:bf:e1:b6:41:d8:18:29:de:4c:02: 89:98:b4:6b:40:a6:3f:e0:dc:53:f2:67:1e:66:cd: d6:94:2f:09:98:63:ea:e3:b2:9d:bd:33:ed:52:2b: 1b:f1:24:1b:5a:68:a6:c1:86:2f:5a:ed:7e:8b:44: 99:1c:a1:f4:19:2a:f3:41:67:76:61:fa:0c:55:ec: b9:bf:08:11:4e:ab:55:ad:f9:1c:8e:16:c5:dc:92: 18:5e:b3:42:8e:80:25:d5:b5:b2:b6:b8:54:ba:40: d9:d9:ac:07:80:a5:35:75:2b:c8:04:9d:35:c6:e1: 1f:33:ce:5a:36:72:da:04:2e:00:31:27:1e:6e:97: e1:c4:8e:8c:a4:da:e3:ab:eb:28:81:13:e3:f8:a9: 74:cf:15:6a:37:ca:a0:84:5e:0f:ba:d1:50:13:44: 9c:d1:7f:44:19:5c:33:34:d4:61:aa:33:03:ca:ae: 49:80:1b:fe:48:55:a5:77:a7:32:49:69:23:c3:1d: 47:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:72:5D:21:F8:8C:06:3C:10:FD:70:48:F8:C8:3E:00:EC:1A:18:EF X509v3 Authority Key Identifier: keyid:A8:CD:D5:76:A9:B5:E4:48:A8:69:BE:A4:D5:16:BA:FC:5A:87:95:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:80:b9:01:14:9e:64:3f:09:8e:61:05:3b:97:86:a2:c7:92: 2d:f9:27:67:5d:53:91:eb:17:d2:e5:40:8b:80:06:a6:ab:9a: 07:d4:38:83:34:a9:cc:ea:67:5d:d3:2a:96:f7:eb:4e:e1:df: bf:73:06:a1:fe:0e:25:5f:f8:23:c8:66:a3:ce:f5:fe:47:2f: 51:23:93:03:34:b4:6d:32:6b:45:9d:bd:ea:66:ba:3b:12:ed: af:ae:72:ca:a5:d7:b3:ed:62:d1:97:08:91:38:40:c8:f6:09: f6:b2:47:72:75:dd:d0:49:e0:55:a5:86:1f:79:af:5f:30:f2: 56:96:5c:3b:c3:ca:4c:0e:a0:da:e9:f7:9a:64:73:c3:bc:d6: a9:4a:86:9e:2e:da:df:f7:af:70:cd:9b:6c:64:a1:a7:69:c7: 04:29:6f:cc:20:e5:e2:b5:85:4d:06:ef:24:43:88:92:34:43: 57:9c:0c:3b:71:50:0d:22:58:47:da:30:da:e0:f0:5b:4b:f9: 1f:92:90:36:ff:52:fb:ab:c5:fc:4c:c5:35:a9:d1:19:0c:48: 35:ca:ad:09:ce:87:89:31:7f:06:87:74:2d:c2:49:0e:c7:0c: 0e:a1:e3:ec:79:94:15:e6:52:4d:c5:fb:6f:8c:a8:98:9b:4c: 9c:98:ae:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT6i9MDuLH4/NxaCM0URwyhtNvlowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThDREQ1NzZBOUI1RTQ0OEE4NjlCRUE0RDUxNkJBRkM1 QTg3OTUwMzAeFw0yNTA3MjIwMzA3MjBaFw0yNTA3MjUwOTU2MjBaMDMxMTAvBgNV BAMTKDVBNzI1RDIxRjg4QzA2M0MxMEZENzA0OEY4QzgzRTAwRUMxQTE4RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC43puVi7IbjZH+pEp8BLq/yp7Z UWBpiEf/pOZynMjWafGdE9TT3WmvUZ/WYf7yn8Gd0Pse6PtrF16Dy9TVh+MNv+G2 QdgYKd5MAomYtGtApj/g3FPyZx5mzdaULwmYY+rjsp29M+1SKxvxJBtaaKbBhi9a 7X6LRJkcofQZKvNBZ3Zh+gxV7Lm/CBFOq1Wt+RyOFsXckhhes0KOgCXVtbK2uFS6 QNnZrAeApTV1K8gEnTXG4R8zzlo2ctoELgAxJx5ul+HEjoyk2uOr6yiBE+P4qXTP FWo3yqCEXg+60VATRJzRf0QZXDM01GGqMwPKrkmAG/5IVaV3pzJJaSPDHUeHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWnJdIfiMBjwQ/XBI+Mg+AOwaGO8wHwYDVR0j BBgwFoAUqM3Vdqm15Eioab6k1Ra6/FqHlQMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MmU1ZmY4MS1iMDgyLTQzMzQtYWQyOS01NWRjOGQxZTUzYjkvMC9BOENERDU3NkE5 QjVFNDQ4QTg2OUJFQTRENTE2QkFGQzVBODc5NTAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQThDREQ1NzZBOUI1RTQ0OEE4NjlCRUE0RDUxNkJBRkM1QTg3 OTUwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTJlNWZmODEtYjA4Mi00MzM0LWFk MjktNTVkYzhkMWU1M2I5LzAvQThDREQ1NzZBOUI1RTQ0OEE4NjlCRUE0RDUxNkJB RkM1QTg3OTUwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKCAuQEUnmQ/CY5hBTuXhqLHki35J2ddU5Hr F9LlQIuABqarmgfUOIM0qczqZ13TKpb3607h379zBqH+DiVf+CPIZqPO9f5HL1Ej kwM0tG0ya0WdvepmujsS7a+ucsql17PtYtGXCJE4QMj2CfayR3J13dBJ4FWlhh95 r18w8laWXDvDykwOoNrp95pkc8O81qlKhp4u2t/3r3DNm2xkoadpxwQpb8wg5eK1 hU0G7yRDiJI0Q1ecDDtxUA0iWEfaMNrg8FtL+R+SkDb/UvurxfxMxTWp0RkMSDXK rQnOh4kxfwaHdC3CSQ7HDA6h4+x5lBXmUk3F+2+MqJibTJyYroU= -----END CERTIFICATE-----Generated at Wed Jul 23 05:59:49 2025 by rpki-client