$ rpki-client -vvf repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft File: B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft (raw, json) Hash identifier: 9KXQtBaSm9DChvdB34XtyY0ZvK41CweLQchL8DJ4zkM= Subject key identifier: DA:AA:B6:46:69:3D:64:37:B2:C3:95:82:F8:7C:E1:5D:F9:D6:E3:86 Authority key identifier: B8:C9:E3:76:A2:07:23:64:11:20:36:DA:7A:7B:BB:4C:AE:4A:C3:7C Certificate issuer: /CN=B8C9E376A2072364112036DA7A7BBB4CAE4AC37C Certificate serial: 4470638678706ECA83EACBC16A00F82F3F6EECA5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft Manifest number: 0100 Signing time: Mon 02 Jun 2025 07:50:05 +0000 Manifest this update: Mon 02 Jun 2025 07:45:05 +0000 Manifest next update: Thu 05 Jun 2025 15:32:05 +0000 Files and hashes: 1: B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.crl (hash: vlRosxFTyWmNOjflhJMwPzIcbknwDiaA+NmCMmiIPgQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.crl rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 15:32:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:70:63:86:78:70:6e:ca:83:ea:cb:c1:6a:00:f8:2f:3f:6e:ec:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8C9E376A2072364112036DA7A7BBB4CAE4AC37C Validity Not Before: Jun 2 07:45:05 2025 GMT Not After : Jun 5 15:32:05 2025 GMT Subject: CN=DAAAB646693D6437B2C39582F87CE15DF9D6E386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:81:eb:69:cd:58:43:d6:ec:29:4f:26:fb:80: ec:8e:c7:b7:3a:50:8b:2d:0e:ac:e5:45:d6:6b:d3: 13:2f:a0:b7:63:c4:4b:c0:21:5c:06:f8:63:f1:a8: a6:87:59:bb:af:ec:01:94:e8:d9:39:8d:34:a6:97: 30:02:75:1e:9c:9e:eb:c0:8e:d6:e6:16:cb:94:31: 03:ed:c4:69:1d:6d:2b:33:10:46:32:1a:26:75:e2: 2c:46:9d:2d:e9:86:78:dc:2a:21:0d:ab:26:ab:43: b8:71:71:71:d8:47:73:c4:4e:69:c1:43:17:d1:a1: 4d:84:21:ce:ff:68:50:34:d8:95:ab:c3:15:3c:33: 91:33:e3:42:f9:5a:3c:fe:41:4c:58:f0:38:77:1e: 6d:5f:08:1d:34:5d:e1:ca:c4:bc:34:9c:ba:33:45: 03:df:b6:97:b2:3a:59:87:bc:ea:2b:b5:a3:19:75: 5b:c0:a0:22:0d:1b:5d:bb:67:d5:4e:46:4f:f5:52: 25:93:98:21:22:4b:e7:bb:a5:16:36:e0:0e:de:6f: f4:78:0a:93:e6:e5:13:f1:72:22:cd:24:af:33:4f: 47:31:37:9c:bb:c4:42:d5:62:91:fb:a8:3f:ae:c3: f8:02:dc:6c:52:74:54:3a:52:e3:23:a9:d4:10:4d: 86:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:AA:B6:46:69:3D:64:37:B2:C3:95:82:F8:7C:E1:5D:F9:D6:E3:86 X509v3 Authority Key Identifier: keyid:B8:C9:E3:76:A2:07:23:64:11:20:36:DA:7A:7B:BB:4C:AE:4A:C3:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:a3:cc:4a:75:b6:46:88:ca:66:3f:4e:3b:c4:1b:b2:30:d5: da:e9:78:1b:d1:29:bf:4e:15:cb:9b:19:3c:8d:93:0c:ef:cc: 76:58:73:c8:51:53:4e:f6:06:ce:1e:00:1e:a2:66:8d:e7:14: 5a:f0:91:b0:77:d1:db:24:92:bd:d6:13:34:b5:b8:d7:e4:60: 69:f2:7e:0f:68:08:bf:9c:f9:73:9f:90:04:79:88:a8:ff:fd: 50:0c:b4:6c:9d:28:00:21:7a:ae:4b:de:38:90:36:b6:43:0d: 2f:54:36:2b:6d:5e:bd:c1:7e:30:82:27:d4:dc:46:1c:29:d8: 9f:51:4a:ab:d8:34:39:23:c6:0e:c0:ec:87:a2:1f:63:73:31: d2:77:dc:ef:a1:65:b2:45:a2:1a:54:f5:89:3a:99:9b:d8:37: f7:7d:44:db:84:39:54:26:06:c4:e9:3a:ee:f8:a5:dd:fb:3e: 5e:e6:01:c3:fe:17:a4:20:8d:c5:c4:60:88:0a:14:29:0d:df: b0:d2:29:63:8d:e6:93:67:c9:de:80:00:d8:9f:fa:7f:44:b6: bf:a1:2a:b2:a6:10:5b:eb:51:5c:99:86:27:51:22:a5:4b:72: 54:ec:43:2d:64:a0:f8:b3:5b:2c:22:e0:3e:94:1a:c9:ad:34: 35:67:95:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURHBjhnhwbsqD6svBagD4Lz9u7KUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhDOUUzNzZBMjA3MjM2NDExMjAzNkRBN0E3QkJCNENB RTRBQzM3QzAeFw0yNTA2MDIwNzQ1MDVaFw0yNTA2MDUxNTMyMDVaMDMxMTAvBgNV BAMTKERBQUFCNjQ2NjkzRDY0MzdCMkMzOTU4MkY4N0NFMTVERjlENkUzODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHgetpzVhD1uwpTyb7gOyOx7c6 UIstDqzlRdZr0xMvoLdjxEvAIVwG+GPxqKaHWbuv7AGU6Nk5jTSmlzACdR6cnuvA jtbmFsuUMQPtxGkdbSszEEYyGiZ14ixGnS3phnjcKiENqyarQ7hxcXHYR3PETmnB QxfRoU2EIc7/aFA02JWrwxU8M5Ez40L5Wjz+QUxY8Dh3Hm1fCB00XeHKxLw0nLoz RQPftpeyOlmHvOortaMZdVvAoCING127Z9VORk/1UiWTmCEiS+e7pRY24A7eb/R4 CpPm5RPxciLNJK8zT0cxN5y7xELVYpH7qD+uw/gC3GxSdFQ6UuMjqdQQTYb1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2qq2Rmk9ZDeyw5WC+HzhXfnW44YwHwYDVR0j BBgwFoAUuMnjdqIHI2QRIDbaenu7TK5Kw3wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzYzZTcxYS05Yzg1LTQxNzYtOGZhNC1iN2EyOWFmYjk3N2QvMC9COEM5RTM3NkEy MDcyMzY0MTEyMDM2REE3QTdCQkI0Q0FFNEFDMzdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhDOUUzNzZBMjA3MjM2NDExMjAzNkRBN0E3QkJCNENBRTRB QzM3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzc2M2U3MWEtOWM4NS00MTc2LThm YTQtYjdhMjlhZmI5NzdkLzAvQjhDOUUzNzZBMjA3MjM2NDExMjAzNkRBN0E3QkJC NENBRTRBQzM3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAijzEp1tkaIymY/TjvEG7Iw1drpeBvRKb9O FcubGTyNkwzvzHZYc8hRU072Bs4eAB6iZo3nFFrwkbB30dskkr3WEzS1uNfkYGny fg9oCL+c+XOfkAR5iKj//VAMtGydKAAheq5L3jiQNrZDDS9UNittXr3BfjCCJ9Tc Rhwp2J9RSqvYNDkjxg7A7IeiH2NzMdJ33O+hZbJFohpU9Yk6mZvYN/d9RNuEOVQm BsTpOu74pd37Pl7mAcP+F6QgjcXEYIgKFCkN37DSKWON5pNnyd6AANif+n9Etr+h KrKmEFvrUVyZhidRIqVLclTsQy1koPizWywi4D6UGsmtNDVnlUg= -----END CERTIFICATE-----Generated at Tue Jun 3 23:19:10 2025 by rpki-client