$ rpki-client -vvf repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/1/C07911838F3BCDBB76B01070E127AA00CC27F991.mft File: C07911838F3BCDBB76B01070E127AA00CC27F991.mft (raw, json) Hash identifier: 3FXDtvI8fpTVkHhc8O4nXQUzkLouBHAPEFJx2a0f6Sw= Subject key identifier: 8E:3B:B6:A4:1A:59:BC:41:D3:91:8D:5B:B5:8F:18:99:BD:BC:A4:28 Authority key identifier: C0:79:11:83:8F:3B:CD:BB:76:B0:10:70:E1:27:AA:00:CC:27:F9:91 Certificate issuer: /CN=C07911838F3BCDBB76B01070E127AA00CC27F991 Certificate serial: 15D56709334C3241632884F648A5AC888A0FC789 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07911838F3BCDBB76B01070E127AA00CC27F991.cer Subject info access: rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/1/C07911838F3BCDBB76B01070E127AA00CC27F991.mft Manifest number: B8 Signing time: Sat 23 Aug 2025 11:53:56 +0000 Manifest this update: Sat 23 Aug 2025 11:48:56 +0000 Manifest next update: Tue 26 Aug 2025 12:31:56 +0000 Files and hashes: 1: C07911838F3BCDBB76B01070E127AA00CC27F991.crl (hash: xEJ8302Vs0LgBCQUzmcjKucs7X/RfgVebe14uEYB3ZM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/1/C07911838F3BCDBB76B01070E127AA00CC27F991.crl rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/1/C07911838F3BCDBB76B01070E127AA00CC27F991.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07911838F3BCDBB76B01070E127AA00CC27F991.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 12:31:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:d5:67:09:33:4c:32:41:63:28:84:f6:48:a5:ac:88:8a:0f:c7:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C07911838F3BCDBB76B01070E127AA00CC27F991 Validity Not Before: Aug 23 11:48:56 2025 GMT Not After : Aug 26 12:31:56 2025 GMT Subject: CN=8E3BB6A41A59BC41D3918D5BB58F1899BDBCA428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2d:08:b5:1b:3b:c0:3d:10:e4:4f:fc:ac:dd: bc:67:a3:52:85:6f:a8:76:29:5f:45:65:fb:3d:fb: ae:93:c8:5a:29:62:cc:52:57:7d:42:03:07:c4:38: 30:b5:e7:7e:e8:18:41:76:04:5a:d4:7f:b9:8d:85: 8e:00:28:d4:85:3d:2e:17:cd:29:e0:24:26:f1:38: 72:9e:ef:fe:9d:31:3e:de:4f:b8:c2:00:c9:8c:a8: e9:48:9c:1c:0f:89:dc:02:8b:e1:25:14:55:c9:49: dd:ae:c6:d8:bf:52:4e:e8:ed:0c:6e:ad:ef:24:37: 03:22:a1:5e:63:ce:5a:69:9b:a2:3d:3e:c2:41:d9: 96:bc:77:17:51:c4:81:2f:a5:fb:d9:70:47:64:14: 57:8d:93:e2:55:bf:d2:fe:12:36:5c:3d:b3:6f:9e: 8a:37:b8:da:c3:3e:b3:65:c0:30:31:1a:e8:d8:ca: 3c:88:dc:cb:62:67:97:47:b9:99:71:de:8b:8e:79: f1:7e:96:5f:4b:c2:8a:da:9d:1a:d6:b5:6d:41:81: fc:42:b7:b4:a6:5d:68:5c:73:bb:a4:3d:05:e0:cc: 8f:ec:30:bf:ac:c2:2c:59:93:1f:35:1d:bb:43:1c: 97:0a:2d:ca:5e:fe:18:14:1e:11:02:0f:57:26:ca: b8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:3B:B6:A4:1A:59:BC:41:D3:91:8D:5B:B5:8F:18:99:BD:BC:A4:28 X509v3 Authority Key Identifier: keyid:C0:79:11:83:8F:3B:CD:BB:76:B0:10:70:E1:27:AA:00:CC:27:F9:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/1/C07911838F3BCDBB76B01070E127AA00CC27F991.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07911838F3BCDBB76B01070E127AA00CC27F991.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37446563-09bc-491b-8fb9-fd39f091669d/1/C07911838F3BCDBB76B01070E127AA00CC27F991.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:f9:55:74:c2:05:69:8e:68:cc:64:e2:e2:f8:f8:54:f1:9c: 81:46:2e:13:67:b4:69:d2:70:6a:5f:cd:bc:e6:f6:fe:c7:f0: cf:26:15:85:65:c4:5a:8f:60:7b:d0:c8:21:c6:a7:81:a8:e9: a7:f8:f5:e9:6e:ef:d1:89:b6:b5:2b:c0:47:9f:c2:80:bc:e1: ee:fe:8d:83:f7:5d:98:3f:8a:78:f2:e6:76:ec:77:c0:af:ea: 5b:70:42:c5:0a:8d:af:2c:da:e9:8a:a0:79:4c:e9:48:ee:9b: ac:f7:b1:59:88:fc:be:24:bc:9c:e0:a8:9c:e0:64:a8:a1:22: de:4c:4b:c3:b0:50:a8:81:a6:c1:f7:55:fa:d5:1c:08:63:5a: 00:84:63:c4:ad:55:31:9a:0f:fd:eb:6c:2d:61:f9:10:94:63: ff:71:04:8d:ca:cd:d9:3d:2c:b9:c1:2b:a7:11:2f:58:9a:1e: e6:ae:cc:51:d7:b0:69:d0:1a:36:7f:08:f1:0b:37:4c:d3:84: fd:ca:46:8e:f6:f9:9d:de:d9:7c:65:2d:62:6f:2a:29:19:b2: f8:13:38:cb:b0:c0:9c:1e:52:6f:c7:87:4e:85:ac:c3:85:43: db:9a:75:0b:6a:1a:34:e0:54:1f:e5:76:50:9a:92:3d:a4:9f: 5f:10:ee:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFdVnCTNMMkFjKIT2SKWsiIoPx4kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA3OTExODM4RjNCQ0RCQjc2QjAxMDcwRTEyN0FBMDBD QzI3Rjk5MTAeFw0yNTA4MjMxMTQ4NTZaFw0yNTA4MjYxMjMxNTZaMDMxMTAvBgNV BAMTKDhFM0JCNkE0MUE1OUJDNDFEMzkxOEQ1QkI1OEYxODk5QkRCQ0E0MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBLQi1GzvAPRDkT/ys3bxno1KF b6h2KV9FZfs9+66TyFopYsxSV31CAwfEODC1537oGEF2BFrUf7mNhY4AKNSFPS4X zSngJCbxOHKe7/6dMT7eT7jCAMmMqOlInBwPidwCi+ElFFXJSd2uxti/Uk7o7Qxu re8kNwMioV5jzlppm6I9PsJB2Za8dxdRxIEvpfvZcEdkFFeNk+JVv9L+EjZcPbNv noo3uNrDPrNlwDAxGujYyjyI3MtiZ5dHuZlx3ouOefF+ll9LworanRrWtW1BgfxC t7SmXWhcc7ukPQXgzI/sML+swixZkx81HbtDHJcKLcpe/hgUHhECD1cmyrgtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjju2pBpZvEHTkY1btY8Ymb28pCgwHwYDVR0j BBgwFoAUwHkRg487zbt2sBBw4SeqAMwn+ZEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzQ0NjU2My0wOWJjLTQ5MWItOGZiOS1mZDM5ZjA5MTY2OWQvMS9DMDc5MTE4MzhG M0JDREJCNzZCMDEwNzBFMTI3QUEwMENDMjdGOTkxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzA3OTExODM4RjNCQ0RCQjc2QjAxMDcwRTEyN0FBMDBDQzI3 Rjk5MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzc0NDY1NjMtMDliYy00OTFiLThm YjktZmQzOWYwOTE2NjlkLzEvQzA3OTExODM4RjNCQ0RCQjc2QjAxMDcwRTEyN0FB MDBDQzI3Rjk5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEv5VXTCBWmOaMxk4uL4+FTxnIFGLhNntGnS cGpfzbzm9v7H8M8mFYVlxFqPYHvQyCHGp4Go6af49elu79GJtrUrwEefwoC84e7+ jYP3XZg/injy5nbsd8Cv6ltwQsUKja8s2umKoHlM6Ujum6z3sVmI/L4kvJzgqJzg ZKihIt5MS8OwUKiBpsH3VfrVHAhjWgCEY8StVTGaD/3rbC1h+RCUY/9xBI3Kzdk9 LLnBK6cRL1iaHuauzFHXsGnQGjZ/CPELN0zThP3KRo72+Z3e2XxlLWJvKikZsvgT OMuwwJweUm/Hh06FrMOFQ9uadQtqGjTgVB/ldlCakj2kn18Q7ss= -----END CERTIFICATE-----Generated at Sat Aug 23 15:03:22 2025 by rpki-client