$ rpki-client -vvf repo-rpki.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.mft File: 8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.mft (raw, json) Hash identifier: Kp0tSASEAzh6W84L216pij51BqRf5+Z9UTOfc0tpfGo= Subject key identifier: 35:1F:6D:05:10:94:BA:C0:5A:FB:93:14:84:B5:A2:B6:5F:5E:B9:2B Authority key identifier: 8C:C7:E4:A2:46:27:D0:11:FC:35:B3:FE:8B:6E:9A:25:C9:93:C6:EC Certificate issuer: /CN=8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC Certificate serial: 32C5E1360C5CE1067C997602E2C9B077242D4670 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.mft Manifest number: 2B Signing time: Sat 06 Sep 2025 22:31:10 +0000 Manifest this update: Sat 06 Sep 2025 22:26:10 +0000 Manifest next update: Wed 10 Sep 2025 00:34:10 +0000 Files and hashes: 1: 8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.crl (hash: S9y1CYqjReMoe8bCSdvqERW4sJblBnXQ7F69wZWqIlo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.crl rsync://repo-rpki.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 00:34:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:c5:e1:36:0c:5c:e1:06:7c:99:76:02:e2:c9:b0:77:24:2d:46:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC Validity Not Before: Sep 6 22:26:10 2025 GMT Not After : Sep 10 00:34:10 2025 GMT Subject: CN=351F6D051094BAC05AFB931484B5A2B65F5EB92B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a2:0a:26:8b:be:19:f6:a2:6c:4d:54:5c:c9: af:b8:64:26:97:75:52:01:0f:b7:f3:3f:24:1e:79: db:43:47:f8:cf:44:24:16:35:86:63:d9:ac:95:3c: a7:9c:68:a9:d7:2d:e6:d6:61:15:43:34:6f:d2:06: a8:b7:73:68:82:29:26:6b:b9:03:31:25:46:43:79: 98:af:6e:e7:34:56:e0:7f:1a:d4:e5:3a:dd:52:53: 0e:ef:4c:f3:2d:b0:eb:c1:22:c5:76:cd:4c:e1:5b: ed:43:a4:5c:2a:46:14:b5:a5:75:39:5d:57:13:bd: b4:05:87:b8:6d:af:67:8c:d5:77:52:71:df:ca:b5: 16:1c:65:e0:88:87:ed:06:2b:d5:d1:a3:c4:8f:b2: a4:13:23:4f:27:29:29:19:db:c1:17:de:1d:76:d4: 92:00:ab:ec:ca:1c:8a:a3:65:5c:9a:d4:e6:63:7e: 0f:df:47:dd:d2:b9:58:95:ae:70:63:90:84:6b:7f: 3f:ed:d3:d4:63:58:d1:00:93:9c:9c:94:01:62:19: 6c:d4:44:e1:b3:db:5d:7e:e3:a6:0c:23:42:0c:d2: fe:5a:16:d6:09:4b:8e:78:09:5f:55:ac:33:44:c0: 5c:f0:f3:3a:b3:50:79:55:79:58:7e:a7:c1:d9:02: ff:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:1F:6D:05:10:94:BA:C0:5A:FB:93:14:84:B5:A2:B6:5F:5E:B9:2B X509v3 Authority Key Identifier: keyid:8C:C7:E4:A2:46:27:D0:11:FC:35:B3:FE:8B:6E:9A:25:C9:93:C6:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:a2:cf:67:6e:cc:9b:4c:df:96:97:eb:3d:a1:37:8f:f3:dc: bc:9f:b1:73:a6:d4:26:42:f8:70:88:68:43:09:af:29:85:f8: 00:15:1d:72:cd:11:15:65:68:7e:c0:91:48:a0:30:57:8a:e0: 60:83:e6:6c:3f:fe:f5:e3:12:03:60:4d:95:59:65:a3:b6:d7: 42:dc:65:86:9f:00:f2:c4:e7:bf:68:35:5c:13:40:73:23:ec: 21:77:12:72:32:3a:09:de:28:12:03:6f:56:4e:4e:3f:fb:d0: ab:4a:d9:9a:85:40:c8:36:f3:76:96:c1:68:d6:08:45:7c:a6: 24:e2:e5:fa:74:72:b3:93:bc:e9:48:ca:cd:44:31:82:e1:b2: da:f4:46:7a:71:d5:54:00:d9:fe:4e:0b:57:83:f8:6f:86:91: 4a:3f:1d:eb:ca:f2:19:ec:91:16:1d:eb:e8:b0:8f:5f:55:ff: f2:64:63:32:43:ea:6b:20:02:44:ed:e7:21:c5:c2:b4:f2:bf: 7c:33:4e:ee:e5:bb:8b:4e:2e:10:78:4c:56:90:2e:06:cc:1b: ef:14:af:87:85:41:75:98:c3:20:65:f5:49:2a:22:0c:db:5b: f4:ef:be:f5:b1:a8:95:91:8a:f1:97:c9:d1:11:6e:a4:91:a0: 97:1c:82:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMsXhNgxc4QZ8mXYC4smwdyQtRnAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENDN0U0QTI0NjI3RDAxMUZDMzVCM0ZFOEI2RTlBMjVD OTkzQzZFQzAeFw0yNTA5MDYyMjI2MTBaFw0yNTA5MTAwMDM0MTBaMDMxMTAvBgNV BAMTKDM1MUY2RDA1MTA5NEJBQzA1QUZCOTMxNDg0QjVBMkI2NUY1RUI5MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOogomi74Z9qJsTVRcya+4ZCaX dVIBD7fzPyQeedtDR/jPRCQWNYZj2ayVPKecaKnXLebWYRVDNG/SBqi3c2iCKSZr uQMxJUZDeZivbuc0VuB/GtTlOt1SUw7vTPMtsOvBIsV2zUzhW+1DpFwqRhS1pXU5 XVcTvbQFh7htr2eM1XdScd/KtRYcZeCIh+0GK9XRo8SPsqQTI08nKSkZ28EX3h12 1JIAq+zKHIqjZVya1OZjfg/fR93SuViVrnBjkIRrfz/t09RjWNEAk5yclAFiGWzU ROGz211+46YMI0IM0v5aFtYJS454CV9VrDNEwFzw8zqzUHlVeVh+p8HZAv87AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNR9tBRCUusBa+5MUhLWitl9euSswHwYDVR0j BBgwFoAUjMfkokYn0BH8NbP+i26aJcmTxuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Y2QyNTFjYS1hMDVlLTRmYmUtOTNiYi1iNTQ2OWFlZjk2YTIvMC84Q0M3RTRBMjQ2 MjdEMDExRkMzNUIzRkU4QjZFOUEyNUM5OTNDNkVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENDN0U0QTI0NjI3RDAxMUZDMzVCM0ZFOEI2RTlBMjVDOTkz QzZFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWNkMjUxY2EtYTA1ZS00ZmJlLTkz YmItYjU0NjlhZWY5NmEyLzAvOENDN0U0QTI0NjI3RDAxMUZDMzVCM0ZFOEI2RTlB MjVDOTkzQzZFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG2iz2duzJtM35aX6z2hN4/z3LyfsXOm1CZC +HCIaEMJrymF+AAVHXLNERVlaH7AkUigMFeK4GCD5mw//vXjEgNgTZVZZaO210Lc ZYafAPLE579oNVwTQHMj7CF3EnIyOgneKBIDb1ZOTj/70KtK2ZqFQMg283aWwWjW CEV8piTi5fp0crOTvOlIys1EMYLhstr0Rnpx1VQA2f5OC1eD+G+GkUo/HevK8hns kRYd6+iwj19V//JkYzJD6msgAkTt5yHFwrTyv3wzTu7lu4tOLhB4TFaQLgbMG+8U r4eFQXWYwyBl9UkqIgzbW/TvvvWxqJWRivGXydERbqSRoJccgkY= -----END CERTIFICATE-----Generated at Sun Sep 7 14:04:49 2025 by rpki-client