$ rpki-client -vvf repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft File: C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft (raw, json) Hash identifier: Sr2HwkFO6deoEhcadz+KlrKt5GWJMMe4mFs0VN8PB2o= Subject key identifier: 7C:6F:57:0F:94:8A:C1:9A:DA:4D:1A:5B:07:26:C1:9B:58:45:80:AC Authority key identifier: C8:B7:60:5A:76:DB:DD:11:CC:D3:1F:65:7A:0D:E4:54:C9:79:D9:39 Certificate issuer: /CN=C8B7605A76DBDD11CCD31F657A0DE454C979D939 Certificate serial: 18C5EA49ACF4593288A7E3F3C39E4BECCB55B628 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8B7605A76DBDD11CCD31F657A0DE454C979D939.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft Manifest number: 0471 Signing time: Thu 05 Jun 2025 08:31:30 +0000 Manifest this update: Thu 05 Jun 2025 08:26:30 +0000 Manifest next update: Sun 08 Jun 2025 20:10:30 +0000 Files and hashes: 1: C8B7605A76DBDD11CCD31F657A0DE454C979D939.crl (hash: 8MrWO7wIruFlOwRL0NfFebY5nY5BO3Y5Pl/mQ0EZdxw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.crl rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8B7605A76DBDD11CCD31F657A0DE454C979D939.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 20:10:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:c5:ea:49:ac:f4:59:32:88:a7:e3:f3:c3:9e:4b:ec:cb:55:b6:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8B7605A76DBDD11CCD31F657A0DE454C979D939 Validity Not Before: Jun 5 08:26:30 2025 GMT Not After : Jun 8 20:10:30 2025 GMT Subject: CN=7C6F570F948AC19ADA4D1A5B0726C19B584580AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:64:2e:65:7c:78:73:0a:1e:36:49:73:70:b0: 96:e6:b6:6d:92:a5:f9:c1:6a:70:12:0b:7d:55:3e: 76:d1:1f:8c:97:e6:f8:e3:18:9c:e0:7c:8d:1d:8c: 5e:28:e4:9b:8e:67:77:98:d4:70:4c:75:30:0c:67: 74:fc:e4:d3:7c:f7:a5:3c:d9:99:27:40:5a:f4:a5: 56:07:08:0f:6a:34:d8:6d:3a:f3:57:ce:b0:96:ed: 8d:99:c1:db:48:20:e9:69:6f:26:ea:5f:ff:eb:01: 17:ef:5b:31:dc:1b:9f:50:42:02:82:e2:70:62:fd: 80:75:bf:9c:14:17:5f:1b:bc:79:9c:2a:d8:40:5b: 9e:20:43:53:e1:a8:ff:79:03:ef:a8:95:34:fe:93: 9e:11:cd:be:0d:78:97:2e:ad:23:37:de:21:c7:30: 82:e6:94:be:39:fc:16:6d:bd:54:0c:58:f9:37:58: 28:60:fc:3e:0c:60:08:5b:b5:e0:ca:27:7a:0c:32: 88:9a:82:9f:50:4d:3a:80:e0:7b:46:bf:3e:ae:12: 87:d4:46:7c:48:ae:7a:44:0f:2e:a4:fb:43:c8:11: b4:8c:76:77:c4:0e:1e:46:3f:51:53:16:f4:a7:03: 5b:31:17:67:ac:fe:7c:05:93:bc:06:bd:5a:01:32: ef:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:6F:57:0F:94:8A:C1:9A:DA:4D:1A:5B:07:26:C1:9B:58:45:80:AC X509v3 Authority Key Identifier: keyid:C8:B7:60:5A:76:DB:DD:11:CC:D3:1F:65:7A:0D:E4:54:C9:79:D9:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8B7605A76DBDD11CCD31F657A0DE454C979D939.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:ac:05:9c:d4:0a:7c:82:d5:14:55:8e:98:50:a9:88:02:a8: 17:1a:61:c6:e3:da:54:d3:fd:73:29:7b:6e:d9:9c:23:b2:04: b9:37:c2:f4:db:12:3d:56:26:6d:f4:3b:7f:1a:65:e0:98:a8: 5c:79:b5:22:d8:f9:01:4c:0f:39:66:46:e6:17:4c:ba:c6:7e: 0a:6c:56:9d:50:9a:0a:da:db:a5:63:fb:25:27:b4:13:21:5c: 93:f5:b1:87:2a:d6:8f:4b:65:e8:42:09:40:31:9f:43:d0:48: f6:0e:94:72:62:ea:a4:70:99:42:9d:ba:24:d5:9d:3c:b4:b2: 64:00:e9:6e:ce:df:c3:4f:07:1b:ae:25:3d:64:d2:c7:f0:50: 17:d2:13:39:2d:cd:4a:c2:d7:ae:5c:05:6f:ca:6e:df:9c:a2: 00:06:92:87:8a:74:bf:f8:fc:0b:fc:72:54:4b:c4:fa:f0:46: 52:14:09:da:fe:1b:fe:0d:a7:d4:d0:e8:9a:19:d6:69:b2:b4: 30:b0:bb:b2:d8:9b:ce:cf:19:35:4b:13:99:8c:6d:9b:a1:d7: 81:3f:76:ab:f9:29:76:08:53:88:30:81:74:ef:93:2e:0f:65: db:21:07:19:c7:42:29:37:cf:e5:ee:a9:ce:b7:2c:17:57:90: 9f:47:ac:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGMXqSaz0WTKIp+Pzw55L7MtVtigwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhCNzYwNUE3NkRCREQxMUNDRDMxRjY1N0EwREU0NTRD OTc5RDkzOTAeFw0yNTA2MDUwODI2MzBaFw0yNTA2MDgyMDEwMzBaMDMxMTAvBgNV BAMTKDdDNkY1NzBGOTQ4QUMxOUFEQTREMUE1QjA3MjZDMTlCNTg0NTgwQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtZC5lfHhzCh42SXNwsJbmtm2S pfnBanASC31VPnbRH4yX5vjjGJzgfI0djF4o5JuOZ3eY1HBMdTAMZ3T85NN896U8 2ZknQFr0pVYHCA9qNNhtOvNXzrCW7Y2ZwdtIIOlpbybqX//rARfvWzHcG59QQgKC 4nBi/YB1v5wUF18bvHmcKthAW54gQ1PhqP95A++olTT+k54Rzb4NeJcurSM33iHH MILmlL45/BZtvVQMWPk3WChg/D4MYAhbteDKJ3oMMoiagp9QTTqA4HtGvz6uEofU RnxIrnpEDy6k+0PIEbSMdnfEDh5GP1FTFvSnA1sxF2es/nwFk7wGvVoBMu8xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfG9XD5SKwZraTRpbBybBm1hFgKwwHwYDVR0j BBgwFoAUyLdgWnbb3RHM0x9leg3kVMl52TkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ODM0OWNkNC1jMDc5LTQxZmYtYWE5ZS0zNmYzZDQ0ODI2NDUvMC9DOEI3NjA1QTc2 REJERDExQ0NEMzFGNjU3QTBERTQ1NEM5NzlEOTM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhCNzYwNUE3NkRCREQxMUNDRDMxRjY1N0EwREU0NTRDOTc5 RDkzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDgzNDljZDQtYzA3OS00MWZmLWFh OWUtMzZmM2Q0NDgyNjQ1LzAvQzhCNzYwNUE3NkRCREQxMUNDRDMxRjY1N0EwREU0 NTRDOTc5RDkzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKCsBZzUCnyC1RRVjphQqYgCqBcaYcbj2lTT /XMpe27ZnCOyBLk3wvTbEj1WJm30O38aZeCYqFx5tSLY+QFMDzlmRuYXTLrGfgps Vp1Qmgra26Vj+yUntBMhXJP1sYcq1o9LZehCCUAxn0PQSPYOlHJi6qRwmUKduiTV nTy0smQA6W7O38NPBxuuJT1k0sfwUBfSEzktzUrC165cBW/Kbt+cogAGkoeKdL/4 /Av8clRLxPrwRlIUCdr+G/4Np9TQ6JoZ1mmytDCwu7LYm87PGTVLE5mMbZuh14E/ dqv5KXYIU4gwgXTvky4PZdshBxnHQik3z+Xuqc63LBdXkJ9HrFU= -----END CERTIFICATE-----Generated at Thu Jun 5 18:17:34 2025 by rpki-client