$ rpki-client -vvf repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft File: C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft (raw, json) Hash identifier: LlXLTvMdDrEi57RvyVj207XGoUCsQaAtbvgq/5C16f4= Subject key identifier: 7D:C7:87:22:91:9B:35:BB:C9:5A:A3:E3:8F:BF:10:21:2D:13:BA:29 Authority key identifier: C8:B7:60:5A:76:DB:DD:11:CC:D3:1F:65:7A:0D:E4:54:C9:79:D9:39 Certificate issuer: /CN=C8B7605A76DBDD11CCD31F657A0DE454C979D939 Certificate serial: 79837F61EBAA6D7843EC7B5E6A373171E9F6BB1A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8B7605A76DBDD11CCD31F657A0DE454C979D939.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft Manifest number: 049A Signing time: Sat 06 Sep 2025 14:31:31 +0000 Manifest this update: Sat 06 Sep 2025 14:26:31 +0000 Manifest next update: Tue 09 Sep 2025 22:39:31 +0000 Files and hashes: 1: C8B7605A76DBDD11CCD31F657A0DE454C979D939.crl (hash: N7MeTYXOfjJkTciamYcO3IUosA0Vab35985WFQftrWY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.crl rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8B7605A76DBDD11CCD31F657A0DE454C979D939.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 22:39:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:83:7f:61:eb:aa:6d:78:43:ec:7b:5e:6a:37:31:71:e9:f6:bb:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8B7605A76DBDD11CCD31F657A0DE454C979D939 Validity Not Before: Sep 6 14:26:31 2025 GMT Not After : Sep 9 22:39:31 2025 GMT Subject: CN=7DC78722919B35BBC95AA3E38FBF10212D13BA29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:2a:a8:3c:af:8e:0b:c8:ed:6b:91:fd:08:11: 70:e5:01:12:58:24:74:d6:69:50:02:38:3c:40:2f: aa:56:d5:92:94:66:54:a2:e9:a8:56:dd:b3:59:ff: 27:64:53:fa:a0:90:23:b9:38:0e:89:9c:43:a3:21: 2f:eb:af:c1:9b:e2:0e:f4:f1:2b:c8:42:5b:3c:2e: fa:f8:23:17:0d:a6:d8:8e:14:00:82:2f:da:c5:dc: 17:65:eb:78:98:6a:b8:81:0e:4f:27:ef:99:a3:de: eb:1e:6f:22:59:66:90:6c:f5:9e:d8:f9:af:b7:06: 53:1f:e2:91:a7:81:7a:b2:26:c3:39:3c:51:d7:ea: 25:1f:07:91:99:89:30:f4:89:8e:c7:c9:1c:b5:72: 7b:20:1d:48:fb:33:7d:93:00:36:b1:09:86:64:86: 70:6a:c5:d3:81:ff:7a:ee:76:fa:6c:6f:67:d3:84: d3:7c:da:ce:48:6b:15:72:af:9c:e0:00:3e:69:ff: 60:23:16:07:a4:7d:ae:d7:76:74:35:b1:61:26:dc: 58:b7:66:59:34:8b:c8:f4:9f:a2:f3:be:0d:64:7f: 87:b5:0f:cb:58:6f:c5:90:dc:79:12:df:fb:0f:f4: f1:36:c6:0d:a9:0d:d9:55:a1:dd:8b:2c:9d:83:3c: 40:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:C7:87:22:91:9B:35:BB:C9:5A:A3:E3:8F:BF:10:21:2D:13:BA:29 X509v3 Authority Key Identifier: keyid:C8:B7:60:5A:76:DB:DD:11:CC:D3:1F:65:7A:0D:E4:54:C9:79:D9:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8B7605A76DBDD11CCD31F657A0DE454C979D939.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:10:78:df:9d:ce:69:6b:f0:f4:0e:55:25:86:09:0b:64:b4: 27:99:6b:85:45:ea:3f:15:d6:08:ba:0c:1d:f9:fa:12:2b:d1: ad:ef:77:8b:19:38:48:9a:c6:98:21:b5:0a:8f:cd:97:b1:34: 61:28:6d:37:df:c9:ba:3e:c3:dd:71:07:3b:26:aa:be:ef:f9: af:a3:c2:44:80:31:57:aa:92:0c:5a:5b:ce:37:4e:75:ca:e8: 71:a2:10:aa:0c:64:e5:d3:28:80:35:b4:47:60:56:16:89:78: d9:0d:83:7e:37:84:c0:4e:bf:7b:d9:7b:81:a4:7e:2e:d1:05: 93:3a:49:78:da:9b:98:53:5c:ef:3d:fa:81:3d:29:71:cb:e0: 1c:04:0f:c4:d6:5a:6a:bc:40:31:2b:ce:a5:b6:94:a4:f3:03: 21:00:9e:7c:d3:a1:02:99:a3:72:09:42:88:1b:28:7e:26:3d: 71:1e:f2:08:cf:6b:41:54:08:d8:37:da:e9:d7:7b:61:86:63: 96:01:c3:d5:cd:ba:f2:34:34:d6:11:56:d2:a8:c7:13:1f:00: c7:e7:03:f3:2b:a6:44:60:3b:b6:03:d9:bf:e4:2f:39:f2:2f: 79:43:2b:55:5e:5a:70:b7:dc:3a:b7:ba:4e:c3:1d:55:50:c0: 43:bb:ed:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeYN/YeuqbXhD7Hteajcxcen2uxowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhCNzYwNUE3NkRCREQxMUNDRDMxRjY1N0EwREU0NTRD OTc5RDkzOTAeFw0yNTA5MDYxNDI2MzFaFw0yNTA5MDkyMjM5MzFaMDMxMTAvBgNV BAMTKDdEQzc4NzIyOTE5QjM1QkJDOTVBQTNFMzhGQkYxMDIxMkQxM0JBMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoKqg8r44LyO1rkf0IEXDlARJY JHTWaVACODxAL6pW1ZKUZlSi6ahW3bNZ/ydkU/qgkCO5OA6JnEOjIS/rr8Gb4g70 8SvIQls8Lvr4IxcNptiOFACCL9rF3Bdl63iYariBDk8n75mj3usebyJZZpBs9Z7Y +a+3BlMf4pGngXqyJsM5PFHX6iUfB5GZiTD0iY7HyRy1cnsgHUj7M32TADaxCYZk hnBqxdOB/3rudvpsb2fThNN82s5IaxVyr5zgAD5p/2AjFgekfa7XdnQ1sWEm3Fi3 Zlk0i8j0n6Lzvg1kf4e1D8tYb8WQ3HkS3/sP9PE2xg2pDdlVod2LLJ2DPEDFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfceHIpGbNbvJWqPjj78QIS0TuikwHwYDVR0j BBgwFoAUyLdgWnbb3RHM0x9leg3kVMl52TkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ODM0OWNkNC1jMDc5LTQxZmYtYWE5ZS0zNmYzZDQ0ODI2NDUvMC9DOEI3NjA1QTc2 REJERDExQ0NEMzFGNjU3QTBERTQ1NEM5NzlEOTM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhCNzYwNUE3NkRCREQxMUNDRDMxRjY1N0EwREU0NTRDOTc5 RDkzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDgzNDljZDQtYzA3OS00MWZmLWFh OWUtMzZmM2Q0NDgyNjQ1LzAvQzhCNzYwNUE3NkRCREQxMUNDRDMxRjY1N0EwREU0 NTRDOTc5RDkzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEsQeN+dzmlr8PQOVSWGCQtktCeZa4VF6j8V 1gi6DB35+hIr0a3vd4sZOEiaxpghtQqPzZexNGEobTffybo+w91xBzsmqr7v+a+j wkSAMVeqkgxaW843TnXK6HGiEKoMZOXTKIA1tEdgVhaJeNkNg343hMBOv3vZe4Gk fi7RBZM6SXjam5hTXO89+oE9KXHL4BwED8TWWmq8QDErzqW2lKTzAyEAnnzToQKZ o3IJQogbKH4mPXEe8gjPa0FUCNg32unXe2GGY5YBw9XNuvI0NNYRVtKoxxMfAMfn A/MrpkRgO7YD2b/kLznyL3lDK1VeWnC33Dq3uk7DHVVQwEO77UE= -----END CERTIFICATE-----Generated at Sun Sep 7 15:27:05 2025 by rpki-client