$ rpki-client -vvf repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft File: C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft (raw, json) Hash identifier: VtSb37Hh/zLTArhZp+msD1cT7Wt6aMvV/3x2/Sb1e6c= Subject key identifier: 93:D4:3C:C9:55:CD:59:74:02:AF:0A:A1:79:DC:71:A5:9A:3B:F4:87 Authority key identifier: C8:C5:B7:81:B7:F4:3C:62:74:BD:AA:C3:FD:8A:E1:91:4A:BE:ED:88 Certificate issuer: /CN=C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88 Certificate serial: 3C342BABC3BDC7D112B0DA49C382FDAF9504C4A2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft Manifest number: 6A Signing time: Sun 29 Jun 2025 15:01:51 +0000 Manifest this update: Sun 29 Jun 2025 14:56:51 +0000 Manifest next update: Wed 02 Jul 2025 15:54:51 +0000 Files and hashes: 1: C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.crl (hash: TgfTAYQ7+Xbk3Js6MpW27tqh00QNxTrNUuEyrrqwAFM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.crl rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:34:2b:ab:c3:bd:c7:d1:12:b0:da:49:c3:82:fd:af:95:04:c4:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88 Validity Not Before: Jun 29 14:56:51 2025 GMT Not After : Jul 2 15:54:51 2025 GMT Subject: CN=93D43CC955CD597402AF0AA179DC71A59A3BF487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:1b:43:78:cd:22:d8:eb:0e:8a:32:e2:1b:77: 33:bd:04:6a:e0:86:c9:3d:97:f2:3d:6f:21:68:fb: 87:84:4c:24:e5:16:5a:67:0d:47:09:a3:40:74:97: e6:59:ef:08:6c:2e:1e:3a:0b:0c:90:6d:4a:01:8d: 94:23:2d:df:02:ca:20:86:59:de:30:10:0a:7b:12: 0b:22:46:ae:2a:c6:f8:35:12:f6:68:82:18:dd:45: b0:b6:e1:8c:e6:54:4f:a1:d3:bf:ab:d2:12:be:85: 18:4f:2d:cd:20:0f:bb:78:de:b6:ba:74:03:52:6a: 84:83:95:99:46:cf:cc:36:93:c0:ac:72:f8:43:e0: e3:56:bb:4b:5b:fe:5e:7a:ea:4b:d0:72:d1:57:6f: fc:47:5b:b2:6e:57:77:f0:06:6f:54:b3:b3:bb:87: 9d:f0:c2:ce:94:f1:82:8a:49:d1:bf:0a:6b:6b:a3: 07:06:43:10:07:a7:bf:3e:2e:80:86:e4:50:b7:db: 3d:c5:21:9c:32:cb:3f:4e:bb:a4:e0:34:1c:b3:91: 90:dc:f3:17:df:96:ba:b7:44:61:2c:0f:5f:04:e3: 3a:9d:37:4b:21:27:ff:39:5a:f6:ed:fc:f6:25:08: 41:a2:7c:1b:fa:80:e2:3c:f8:df:82:ab:d2:1f:64: d3:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:D4:3C:C9:55:CD:59:74:02:AF:0A:A1:79:DC:71:A5:9A:3B:F4:87 X509v3 Authority Key Identifier: keyid:C8:C5:B7:81:B7:F4:3C:62:74:BD:AA:C3:FD:8A:E1:91:4A:BE:ED:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption df:53:be:ee:ac:77:ac:21:ed:78:d2:54:20:64:55:d5:51:7c: cf:f4:f2:d4:de:4f:c3:0c:4e:82:fe:45:17:c9:85:b6:f0:68: 72:81:be:57:ad:83:34:f7:ac:fb:25:4a:a9:f1:16:3d:0c:b7: 0e:8a:b5:73:e4:17:e7:74:da:a5:7a:1f:71:1a:bb:3f:42:b3: f1:c9:84:24:05:6d:03:62:7f:cf:e7:1f:31:f9:db:0f:b6:46: 0e:c8:cc:bd:10:c4:6d:e0:3a:0c:6c:24:fb:7c:33:7a:e1:6b: 39:1c:85:65:6c:47:df:3a:13:66:21:09:8f:fe:6f:b2:45:00: af:ec:65:40:b8:0e:c0:07:b5:42:44:b3:76:78:04:0d:30:77: 9b:8a:27:53:d9:2a:70:6f:47:14:17:ce:68:3c:b0:ca:58:c7: 38:f6:94:99:63:bb:ba:23:aa:f7:7c:96:ea:15:31:8e:ca:9b: 51:fa:4d:2d:64:57:92:40:98:16:ba:dd:ba:3e:69:02:d9:ea: 71:77:9a:dc:ac:36:7b:aa:af:ea:14:ae:b0:51:76:db:85:89: f8:3c:57:69:cd:1e:6a:3d:d9:db:cf:1c:11:84:18:b7:47:d9: 69:09:78:77:ad:12:6e:bc:5b:15:90:36:1e:df:68:c7:bd:67: ea:21:3a:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPDQrq8O9x9ESsNpJw4L9r5UExKIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhDNUI3ODFCN0Y0M0M2Mjc0QkRBQUMzRkQ4QUUxOTE0 QUJFRUQ4ODAeFw0yNTA2MjkxNDU2NTFaFw0yNTA3MDIxNTU0NTFaMDMxMTAvBgNV BAMTKDkzRDQzQ0M5NTVDRDU5NzQwMkFGMEFBMTc5REM3MUE1OUEzQkY0ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSG0N4zSLY6w6KMuIbdzO9BGrg hsk9l/I9byFo+4eETCTlFlpnDUcJo0B0l+ZZ7whsLh46CwyQbUoBjZQjLd8CyiCG Wd4wEAp7EgsiRq4qxvg1EvZoghjdRbC24YzmVE+h07+r0hK+hRhPLc0gD7t43ra6 dANSaoSDlZlGz8w2k8CscvhD4ONWu0tb/l566kvQctFXb/xHW7JuV3fwBm9Us7O7 h53wws6U8YKKSdG/CmtrowcGQxAHp78+LoCG5FC32z3FIZwyyz9Ou6TgNByzkZDc 8xfflrq3RGEsD18E4zqdN0shJ/85Wvbt/PYlCEGifBv6gOI8+N+Cq9IfZNNnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk9Q8yVXNWXQCrwqhedxxpZo79IcwHwYDVR0j BBgwFoAUyMW3gbf0PGJ0varD/YrhkUq+7YgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ODg1M2FhYi04ZDZjLTQ1N2YtOWQ1Ny00ODRhY2FjZWE5ZDgvMS9DOEM1Qjc4MUI3 RjQzQzYyNzRCREFBQzNGRDhBRTE5MTRBQkVFRDg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhDNUI3ODFCN0Y0M0M2Mjc0QkRBQUMzRkQ4QUUxOTE0QUJF RUQ4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTg4NTNhYWItOGQ2Yy00NTdmLTlk NTctNDg0YWNhY2VhOWQ4LzEvQzhDNUI3ODFCN0Y0M0M2Mjc0QkRBQUMzRkQ4QUUx OTE0QUJFRUQ4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAN9Tvu6sd6wh7XjSVCBkVdVRfM/08tTeT8MM ToL+RRfJhbbwaHKBvletgzT3rPslSqnxFj0Mtw6KtXPkF+d02qV6H3Eauz9Cs/HJ hCQFbQNif8/nHzH52w+2Rg7IzL0QxG3gOgxsJPt8M3rhazkchWVsR986E2YhCY/+ b7JFAK/sZUC4DsAHtUJEs3Z4BA0wd5uKJ1PZKnBvRxQXzmg8sMpYxzj2lJlju7oj qvd8luoVMY7Km1H6TS1kV5JAmBa63bo+aQLZ6nF3mtysNnuqr+oUrrBRdtuFifg8 V2nNHmo92dvPHBGEGLdH2WkJeHetEm68WxWQNh7faMe9Z+ohOlc= -----END CERTIFICATE-----Generated at Sun Jun 29 18:44:48 2025 by rpki-client