$ rpki-client -vvf repo-rpki.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.mft File: 8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.mft (raw, json) Hash identifier: pEVrVkQZOiv5D9VC4qAuiRHsZwzFlwTAh7jvGvnBvsc= Subject key identifier: 82:61:C5:53:BA:27:C9:AC:C8:5A:F8:E5:90:2D:53:A2:A4:1F:9F:82 Authority key identifier: 8C:C7:E4:A2:46:27:D0:11:FC:35:B3:FE:8B:6E:9A:25:C9:93:C6:EC Certificate issuer: /CN=8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC Certificate serial: 5E0BDB794E1DA04AA31DFCF44B382D736E23F587 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.mft Manifest number: 02 Signing time: Fri 06 Jun 2025 03:41:11 +0000 Manifest this update: Fri 06 Jun 2025 03:36:11 +0000 Manifest next update: Mon 09 Jun 2025 11:49:11 +0000 Files and hashes: 1: 8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.crl (hash: J6VhnCAgg4eIV9cJMUPpBIUlEh9TYvN/H7dCV/xwMow=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.crl rsync://repo-rpki.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 11:49:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:0b:db:79:4e:1d:a0:4a:a3:1d:fc:f4:4b:38:2d:73:6e:23:f5:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC Validity Not Before: Jun 6 03:36:11 2025 GMT Not After : Jun 9 11:49:11 2025 GMT Subject: CN=8261C553BA27C9ACC85AF8E5902D53A2A41F9F82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:d1:74:3d:87:af:52:e9:d7:b9:a5:95:6c:a6: 3b:3a:39:25:b4:06:20:58:2d:d1:b5:97:98:9e:91: 62:ce:ef:0f:0c:15:77:ea:58:ac:25:52:1e:9e:8a: 3d:27:42:85:22:b1:ce:57:c5:42:44:a0:dd:2d:e3: 0b:d6:c2:0c:f5:d3:ad:d9:00:e6:ca:ae:50:c8:92: aa:a9:de:ab:74:4d:8e:bb:85:a6:80:fa:2d:0b:70: d0:cd:33:93:6f:65:92:79:9b:7a:bd:21:11:15:ad: bf:e9:9d:c1:8d:43:97:5a:d6:3f:99:11:1a:b4:95: 54:74:f9:c4:d4:df:37:e0:57:b2:85:01:e0:c1:c3: 85:09:ec:0f:f4:c5:8c:8c:9e:6c:7a:b6:9c:c7:28: eb:50:e2:38:68:d4:a1:00:b4:9d:03:71:2b:58:3a: e6:a9:93:7c:24:cd:a3:6a:d2:5b:d7:b4:98:61:84: 09:ba:3d:fe:88:40:f6:08:5d:e3:ff:68:37:14:51: c9:5e:86:25:47:7f:47:9a:f2:d5:b1:43:ef:87:a0: 73:f2:60:7f:b5:aa:74:c3:02:4d:6c:f1:b0:49:7a: 96:79:4b:b4:d2:7f:ac:83:8c:13:43:2f:0e:dc:6d: f9:e3:ca:3a:57:ff:4e:26:c8:63:ec:14:cb:10:fe: f3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:61:C5:53:BA:27:C9:AC:C8:5A:F8:E5:90:2D:53:A2:A4:1F:9F:82 X509v3 Authority Key Identifier: keyid:8C:C7:E4:A2:46:27:D0:11:FC:35:B3:FE:8B:6E:9A:25:C9:93:C6:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:0b:57:d2:40:79:50:d5:43:dc:00:0f:4b:cd:cc:0d:e4:36: 70:24:ea:45:25:2a:bb:7d:0f:04:e8:01:f0:35:be:40:57:21: 82:10:ec:19:92:b2:ca:4c:e7:20:55:92:59:b1:b1:ca:84:62: 0a:8d:43:31:82:73:5b:26:68:20:cc:ca:bd:68:a0:b5:e8:81: 3a:4a:8a:cf:39:ed:f2:a2:9f:6e:ae:2a:6f:2b:a8:40:3f:68: 87:0e:57:32:6e:ff:14:01:c0:98:a5:e7:c7:a2:71:b9:c9:8c: 50:ea:4e:7e:e3:c8:d2:17:bd:99:65:62:ab:ef:65:a4:fd:c1: fa:c3:08:22:de:cf:19:bc:a5:bc:9f:30:15:ed:d1:5a:5d:ef: 93:6c:b6:87:cc:ac:ae:a6:ad:04:33:3c:63:28:9a:4c:4a:fa: 5a:22:29:cd:1a:a5:6d:6e:52:8b:f0:7c:2c:1a:50:cb:31:04: 58:bc:7b:a0:a0:6f:03:a6:5e:6d:8c:11:c6:69:ba:ee:a3:be: 84:2d:e3:4e:28:9b:7e:30:84:0b:ca:3e:d8:01:8b:7e:c0:eb: d6:bf:6a:a6:09:ca:d8:b3:8b:66:4a:cd:5e:27:63:f6:bb:fe: ea:92:88:69:7a:86:10:d5:ce:0d:12:4c:b4:28:00:37:2b:8a: 0a:5c:99:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXgvbeU4doEqjHfz0Szgtc24j9YcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENDN0U0QTI0NjI3RDAxMUZDMzVCM0ZFOEI2RTlBMjVD OTkzQzZFQzAeFw0yNTA2MDYwMzM2MTFaFw0yNTA2MDkxMTQ5MTFaMDMxMTAvBgNV BAMTKDgyNjFDNTUzQkEyN0M5QUNDODVBRjhFNTkwMkQ1M0EyQTQxRjlGODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv0XQ9h69S6de5pZVspjs6OSW0 BiBYLdG1l5iekWLO7w8MFXfqWKwlUh6eij0nQoUisc5XxUJEoN0t4wvWwgz1063Z AObKrlDIkqqp3qt0TY67haaA+i0LcNDNM5NvZZJ5m3q9IREVrb/pncGNQ5da1j+Z ERq0lVR0+cTU3zfgV7KFAeDBw4UJ7A/0xYyMnmx6tpzHKOtQ4jho1KEAtJ0DcStY Ouapk3wkzaNq0lvXtJhhhAm6Pf6IQPYIXeP/aDcUUclehiVHf0ea8tWxQ++HoHPy YH+1qnTDAk1s8bBJepZ5S7TSf6yDjBNDLw7cbfnjyjpX/04myGPsFMsQ/vPhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgmHFU7onyazIWvjlkC1ToqQfn4IwHwYDVR0j BBgwFoAUjMfkokYn0BH8NbP+i26aJcmTxuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Y2QyNTFjYS1hMDVlLTRmYmUtOTNiYi1iNTQ2OWFlZjk2YTIvMC84Q0M3RTRBMjQ2 MjdEMDExRkMzNUIzRkU4QjZFOUEyNUM5OTNDNkVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENDN0U0QTI0NjI3RDAxMUZDMzVCM0ZFOEI2RTlBMjVDOTkz QzZFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWNkMjUxY2EtYTA1ZS00ZmJlLTkz YmItYjU0NjlhZWY5NmEyLzAvOENDN0U0QTI0NjI3RDAxMUZDMzVCM0ZFOEI2RTlB MjVDOTkzQzZFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM8LV9JAeVDVQ9wAD0vNzA3kNnAk6kUlKrt9 DwToAfA1vkBXIYIQ7BmSsspM5yBVklmxscqEYgqNQzGCc1smaCDMyr1ooLXogTpK is857fKin26uKm8rqEA/aIcOVzJu/xQBwJil58eicbnJjFDqTn7jyNIXvZllYqvv ZaT9wfrDCCLezxm8pbyfMBXt0Vpd75NstofMrK6mrQQzPGMomkxK+loiKc0apW1u UovwfCwaUMsxBFi8e6CgbwOmXm2MEcZpuu6jvoQt404om34whAvKPtgBi37A69a/ aqYJytizi2ZKzV4nY/a7/uqSiGl6hhDVzg0STLQoADcrigpcmUA= -----END CERTIFICATE-----Generated at Sun Jun 8 00:16:53 2025 by rpki-client