$ rpki-client -vvf repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft File: 8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft (raw, json) Hash identifier: PPlXu41IjFFGzZCfkA9/2SpfP0dYPhcc+npqRWEY0og= Subject key identifier: B9:02:87:DA:0B:E6:14:86:62:79:7C:32:16:D4:65:95:DB:73:CB:E8 Authority key identifier: 8D:5A:49:C9:E4:2E:37:1B:FD:1E:67:AC:E1:B3:D5:5E:C1:AB:F7:3F Certificate issuer: /CN=8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F Certificate serial: 361BFB57025EC923F462F94DD1712860017D6868 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft Manifest number: 93 Signing time: Thu 21 Aug 2025 08:20:54 +0000 Manifest this update: Thu 21 Aug 2025 08:15:54 +0000 Manifest next update: Sun 24 Aug 2025 15:56:54 +0000 Files and hashes: 1: 8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.crl (hash: dYnpdQ/ntBXyB9t2LNjKzQy1TOWv954NL+wy7vfwhng=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.crl rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 15:56:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:1b:fb:57:02:5e:c9:23:f4:62:f9:4d:d1:71:28:60:01:7d:68:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F Validity Not Before: Aug 21 08:15:54 2025 GMT Not After : Aug 24 15:56:54 2025 GMT Subject: CN=B90287DA0BE6148662797C3216D46595DB73CBE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:83:c0:ab:dd:0e:eb:65:b9:02:f3:b8:06:a6: d4:d5:bb:4c:1d:22:ac:60:ec:a7:8c:c7:22:96:70: 16:24:f0:82:2c:8a:32:74:c0:09:3c:51:83:c1:ac: 91:a7:f1:a8:25:11:b1:92:48:90:39:e9:2e:8f:63: 0b:d6:92:e7:69:7e:c6:fb:4c:6a:82:34:d1:5d:68: 34:95:e2:3e:8e:1a:f5:79:2d:4c:4a:05:fa:26:fc: 32:73:da:f2:aa:4d:be:03:25:60:68:13:2d:a4:67: 26:5e:90:9c:4f:a9:af:52:c5:80:6e:90:a5:f8:d4: ee:05:a6:25:42:81:bb:65:b3:f3:5b:28:72:2a:5a: 0d:f6:00:d6:56:e9:d8:28:23:aa:ac:72:01:92:d9: cb:c8:38:87:ac:8f:85:12:89:ea:b0:10:6b:0f:06: 5a:20:f5:04:85:1f:f7:8f:bd:c3:63:fa:f5:d4:4e: 5c:5d:c4:52:60:56:7b:f5:c7:82:65:b9:3c:da:66: 66:26:af:02:69:94:e5:e7:9f:ac:1b:eb:79:a4:a5: c4:f5:30:f3:6e:07:74:19:ee:7c:26:9f:bd:17:15: ee:86:e4:b4:ff:22:8d:a3:50:ba:95:4e:7e:1b:b6: 19:64:e2:9c:59:61:e3:b0:10:87:5c:a6:41:98:cd: b4:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:02:87:DA:0B:E6:14:86:62:79:7C:32:16:D4:65:95:DB:73:CB:E8 X509v3 Authority Key Identifier: keyid:8D:5A:49:C9:E4:2E:37:1B:FD:1E:67:AC:E1:B3:D5:5E:C1:AB:F7:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62f5986b-c764-4cd7-b414-a25bd05c3f92/0/8D5A49C9E42E371BFD1E67ACE1B3D55EC1ABF73F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:e7:27:8e:2b:12:d5:4f:cb:52:90:da:4a:0b:0d:04:97:d4: 83:c6:46:23:10:a1:45:34:d6:de:e4:06:79:ed:93:75:52:ce: f1:14:3e:5e:5f:f9:86:2b:d1:ad:d2:f7:27:2c:6c:f7:c7:a2: 99:10:7e:8c:86:42:96:01:f2:92:06:3d:d1:b3:78:cc:a4:72: ca:98:c3:e9:77:8d:d3:ac:ab:a6:fb:21:bf:71:b8:b4:9f:da: 46:84:1a:ba:c7:77:16:f1:25:28:7a:e1:66:00:19:27:62:f1: 4d:d6:2f:5a:83:b5:47:f5:e5:26:19:f1:d1:e2:c2:bb:c9:b8: b6:29:d4:73:bd:c9:1b:a5:59:cd:b6:14:ea:2e:d2:cd:db:1c: c9:48:a6:1e:b3:5b:b2:ca:6c:1d:65:91:4f:c8:61:72:aa:55: 27:73:96:e2:ea:9d:47:28:32:00:fa:cf:5a:38:3d:ee:45:e1: 27:22:18:b6:f1:30:21:b0:f0:1c:f4:d0:7f:21:7c:d7:eb:21: d1:ec:95:03:11:1c:4b:d5:3a:a0:1c:f9:17:c7:a5:09:72:d3: 5d:60:b6:73:2f:e1:7b:c0:f3:e5:01:f9:27:6c:0f:6f:55:b7: 74:8b:6e:f6:f3:73:16:bb:6a:bd:b2:c9:c9:fd:82:d5:89:4c: 49:70:0a:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNhv7VwJeySP0YvlN0XEoYAF9aGgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ1QTQ5QzlFNDJFMzcxQkZEMUU2N0FDRTFCM0Q1NUVD MUFCRjczRjAeFw0yNTA4MjEwODE1NTRaFw0yNTA4MjQxNTU2NTRaMDMxMTAvBgNV BAMTKEI5MDI4N0RBMEJFNjE0ODY2Mjc5N0MzMjE2RDQ2NTk1REI3M0NCRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBg8Cr3Q7rZbkC87gGptTVu0wd Iqxg7KeMxyKWcBYk8IIsijJ0wAk8UYPBrJGn8aglEbGSSJA56S6PYwvWkudpfsb7 TGqCNNFdaDSV4j6OGvV5LUxKBfom/DJz2vKqTb4DJWBoEy2kZyZekJxPqa9SxYBu kKX41O4FpiVCgbtls/NbKHIqWg32ANZW6dgoI6qscgGS2cvIOIesj4USieqwEGsP Blog9QSFH/ePvcNj+vXUTlxdxFJgVnv1x4JluTzaZmYmrwJplOXnn6wb63mkpcT1 MPNuB3QZ7nwmn70XFe6G5LT/Io2jULqVTn4bthlk4pxZYeOwEIdcpkGYzbTjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuQKH2gvmFIZieXwyFtRlldtzy+gwHwYDVR0j BBgwFoAUjVpJyeQuNxv9Hmes4bPVXsGr9z8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MmY1OTg2Yi1jNzY0LTRjZDctYjQxNC1hMjViZDA1YzNmOTIvMC84RDVBNDlDOUU0 MkUzNzFCRkQxRTY3QUNFMUIzRDU1RUMxQUJGNzNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEQ1QTQ5QzlFNDJFMzcxQkZEMUU2N0FDRTFCM0Q1NUVDMUFC RjczRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjJmNTk4NmItYzc2NC00Y2Q3LWI0 MTQtYTI1YmQwNWMzZjkyLzAvOEQ1QTQ5QzlFNDJFMzcxQkZEMUU2N0FDRTFCM0Q1 NUVDMUFCRjczRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD7nJ44rEtVPy1KQ2koLDQSX1IPGRiMQoUU0 1t7kBnntk3VSzvEUPl5f+YYr0a3S9ycsbPfHopkQfoyGQpYB8pIGPdGzeMykcsqY w+l3jdOsq6b7Ib9xuLSf2kaEGrrHdxbxJSh64WYAGSdi8U3WL1qDtUf15SYZ8dHi wrvJuLYp1HO9yRulWc22FOou0s3bHMlIph6zW7LKbB1lkU/IYXKqVSdzluLqnUco MgD6z1o4Pe5F4SciGLbxMCGw8Bz00H8hfNfrIdHslQMRHEvVOqAc+RfHpQly011g tnMv4XvA8+UB+SdsD29Vt3SLbvbzcxa7ar2yycn9gtWJTElwCt0= -----END CERTIFICATE-----Generated at Sat Aug 23 12:05:37 2025 by rpki-client