$ rpki-client -vvf repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft File: 8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft (raw, json) Hash identifier: NE5da5+e7XqLpbILDzGiZPNckbguCbgyGXfAaWQfh/A= Subject key identifier: 9B:96:37:DC:E8:4D:0B:CA:B8:92:71:94:12:AA:66:CC:2F:FF:F6:25 Authority key identifier: 8C:34:62:80:99:43:E9:E8:E8:E8:90:52:BF:9B:9C:3D:DC:60:EE:22 Certificate issuer: /CN=8C3462809943E9E8E8E89052BF9B9C3DDC60EE22 Certificate serial: 282F6D704D9FF5EBD8922DCE0F835A91E44460BC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft Manifest number: 0242 Signing time: Thu 21 Aug 2025 13:10:46 +0000 Manifest this update: Thu 21 Aug 2025 13:05:46 +0000 Manifest next update: Sun 24 Aug 2025 20:54:46 +0000 Files and hashes: 1: 8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.crl (hash: VHgBhsQXz7w8AQoLaGwvGQfWsGQ7nofGz2CMUvHYQeU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.crl rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 20:54:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:2f:6d:70:4d:9f:f5:eb:d8:92:2d:ce:0f:83:5a:91:e4:44:60:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8C3462809943E9E8E8E89052BF9B9C3DDC60EE22 Validity Not Before: Aug 21 13:05:46 2025 GMT Not After : Aug 24 20:54:46 2025 GMT Subject: CN=9B9637DCE84D0BCAB892719412AA66CC2FFFF625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:6d:81:9e:18:dc:76:2c:38:4c:15:b0:48:47: 3e:ed:7a:5d:c3:d0:45:d2:f5:88:ce:bc:66:1d:9b: 2b:11:dc:6a:fe:3b:b8:24:34:74:eb:77:0d:0a:41: 42:9d:c4:5a:84:31:b5:cd:b4:4b:35:b0:69:8f:12: 17:a3:f5:5a:c2:97:17:b3:35:98:85:b1:5a:f6:61: 0f:3b:df:8f:95:6a:f2:f2:47:7c:52:d8:db:3d:f0: 27:58:2a:e8:74:f1:8c:da:9f:89:86:c1:ec:54:5c: 17:06:67:58:46:62:2c:04:48:2d:51:9b:20:ec:5a: 40:f3:ce:15:bc:f0:2c:0c:13:0c:04:cd:0d:99:0a: 56:7e:95:dc:d5:10:52:3f:c1:5a:eb:a6:e2:a1:bc: 0d:02:ea:07:81:72:bd:64:4a:4d:24:be:0e:ad:43: de:5e:94:c1:13:cc:11:46:82:89:f5:a7:a5:9a:30: c9:4b:c1:91:64:a4:bb:63:49:eb:3c:a6:2f:e5:a9: e1:51:4f:f9:4a:17:35:e8:a6:9a:e5:cd:14:c5:83: 7d:9f:10:c6:5f:fb:d6:a6:a2:1e:02:1e:9d:67:ab: 33:40:01:fb:5f:ca:fd:cd:a7:68:ee:2d:ca:bf:cd: b0:df:d9:51:1c:05:52:3b:4f:0e:d7:27:66:32:1b: 90:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:96:37:DC:E8:4D:0B:CA:B8:92:71:94:12:AA:66:CC:2F:FF:F6:25 X509v3 Authority Key Identifier: keyid:8C:34:62:80:99:43:E9:E8:E8:E8:90:52:BF:9B:9C:3D:DC:60:EE:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9338bdad-d2dd-4f07-ae84-c540612baf6a/0/8C3462809943E9E8E8E89052BF9B9C3DDC60EE22.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:68:9c:c5:8c:d9:47:73:72:68:0c:75:ae:64:73:bb:95:c4: c7:2a:d8:9c:c7:ab:96:a5:4f:04:69:22:64:aa:ca:e3:cd:d3: 28:7f:b9:88:29:5f:52:d5:ac:f9:cf:25:62:2a:ff:33:7d:f5: de:36:13:f2:71:d0:7b:68:60:08:0c:5c:85:a7:02:ec:ee:a4: 9f:31:e9:0e:7f:2f:28:88:fc:3c:78:a1:a0:ae:33:45:07:6b: d3:2d:0c:95:02:c5:4e:34:24:ba:37:77:38:35:79:a5:cb:3b: b0:a0:93:2b:d2:39:c6:8e:ae:b2:b5:56:00:08:cd:e0:35:18: 10:e6:85:00:e0:4c:35:c2:7f:28:1e:4c:61:36:0e:8a:1b:7c: 79:8a:25:0b:79:fd:16:67:2f:b4:f3:f6:2a:0c:93:89:a0:e3: 25:79:99:a7:54:4a:7a:46:50:15:20:a1:5c:fe:f2:17:db:06: 9e:9e:7d:4f:de:05:ee:bc:35:5f:64:7c:c1:4e:fa:20:48:45: f5:89:e3:9c:f2:52:b5:4c:19:6d:74:df:af:95:a6:52:57:5b: 27:50:ff:6f:48:8b:61:57:45:9d:42:fc:f3:75:f3:b4:d0:c1: c3:ca:76:d4:18:b7:52:ac:52:41:06:27:62:a7:05:c0:1b:71: 0d:d6:4f:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKC9tcE2f9evYki3OD4NakeREYLwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEMzNDYyODA5OTQzRTlFOEU4RTg5MDUyQkY5QjlDM0RE QzYwRUUyMjAeFw0yNTA4MjExMzA1NDZaFw0yNTA4MjQyMDU0NDZaMDMxMTAvBgNV BAMTKDlCOTYzN0RDRTg0RDBCQ0FCODkyNzE5NDEyQUE2NkNDMkZGRkY2MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxbYGeGNx2LDhMFbBIRz7tel3D 0EXS9YjOvGYdmysR3Gr+O7gkNHTrdw0KQUKdxFqEMbXNtEs1sGmPEhej9VrClxez NZiFsVr2YQ8734+VavLyR3xS2Ns98CdYKuh08Yzan4mGwexUXBcGZ1hGYiwESC1R myDsWkDzzhW88CwMEwwEzQ2ZClZ+ldzVEFI/wVrrpuKhvA0C6geBcr1kSk0kvg6t Q95elMETzBFGgon1p6WaMMlLwZFkpLtjSes8pi/lqeFRT/lKFzXopprlzRTFg32f EMZf+9amoh4CHp1nqzNAAftfyv3Np2juLcq/zbDf2VEcBVI7Tw7XJ2YyG5ArAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm5Y33OhNC8q4knGUEqpmzC//9iUwHwYDVR0j BBgwFoAUjDRigJlD6ejo6JBSv5ucPdxg7iIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzM4YmRhZC1kMmRkLTRmMDctYWU4NC1jNTQwNjEyYmFmNmEvMC84QzM0NjI4MDk5 NDNFOUU4RThFODkwNTJCRjlCOUMzRERDNjBFRTIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEMzNDYyODA5OTQzRTlFOEU4RTg5MDUyQkY5QjlDM0REQzYw RUUyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTMzOGJkYWQtZDJkZC00ZjA3LWFl ODQtYzU0MDYxMmJhZjZhLzAvOEMzNDYyODA5OTQzRTlFOEU4RTg5MDUyQkY5QjlD M0REQzYwRUUyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAItonMWM2UdzcmgMda5kc7uVxMcq2JzHq5al TwRpImSqyuPN0yh/uYgpX1LVrPnPJWIq/zN99d42E/Jx0HtoYAgMXIWnAuzupJ8x 6Q5/LyiI/Dx4oaCuM0UHa9MtDJUCxU40JLo3dzg1eaXLO7CgkyvSOcaOrrK1VgAI zeA1GBDmhQDgTDXCfygeTGE2DoobfHmKJQt5/RZnL7Tz9ioMk4mg4yV5madUSnpG UBUgoVz+8hfbBp6efU/eBe68NV9kfMFO+iBIRfWJ45zyUrVMGW1036+VplJXWydQ /29Ii2FXRZ1C/PN187TQwcPKdtQYt1KsUkEGJ2KnBcAbcQ3WT50= -----END CERTIFICATE-----Generated at Sat Aug 23 12:32:02 2025 by rpki-client