$ rpki-client -vvf repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft File: C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft (raw, json) Hash identifier: SE4CpohfYM3vXmGHeJvK9u15Jb0VDc27GK3yPwgw0fE= Subject key identifier: C1:B9:34:25:D0:9D:F8:BB:74:8B:87:C6:0F:E6:4F:80:7F:12:C1:BC Authority key identifier: C8:C5:B7:81:B7:F4:3C:62:74:BD:AA:C3:FD:8A:E1:91:4A:BE:ED:88 Certificate issuer: /CN=C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88 Certificate serial: 1D426F9CBCA7154DC1F1DBE8AF7CE501A6885858 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft Manifest number: 9C Signing time: Mon 20 Oct 2025 05:11:54 +0000 Manifest this update: Mon 20 Oct 2025 05:06:54 +0000 Manifest next update: Thu 23 Oct 2025 12:48:54 +0000 Files and hashes: 1: C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.crl (hash: IfxMO6nGw7b2VUqXW43sS8yx1RAJ9NPkIFS8dhFlJm0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.crl rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 12:48:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:42:6f:9c:bc:a7:15:4d:c1:f1:db:e8:af:7c:e5:01:a6:88:58:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88 Validity Not Before: Oct 20 05:06:54 2025 GMT Not After : Oct 23 12:48:54 2025 GMT Subject: CN=C1B93425D09DF8BB748B87C60FE64F807F12C1BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:01:75:f7:92:a2:64:e2:12:3a:67:f4:dd:79: c4:50:24:15:5c:c1:19:46:20:18:0f:aa:85:38:09: 7f:e9:b9:b9:c5:b1:8d:05:d0:c8:6e:d3:ec:04:4a: e7:86:e8:80:f1:8a:dc:6b:90:57:32:fd:eb:ab:39: 91:14:8e:8e:db:9f:ec:29:73:be:8a:ae:7b:38:7b: ab:3a:01:6e:61:95:7e:08:d3:81:c9:0a:48:a8:0f: 19:4d:b9:42:e5:1b:e5:0c:ed:ca:94:1a:26:11:a0: c1:f0:19:5f:c0:b0:02:d8:10:e7:60:39:fc:10:00: fd:ea:25:7b:cb:c5:52:a4:9a:40:a0:e5:53:20:6e: e6:28:c9:44:8a:fc:65:f5:09:50:4d:95:bb:7d:ce: 21:ed:e3:a3:34:8e:4c:a6:3e:1e:b9:48:16:eb:81: 1a:ad:20:af:6b:3b:09:11:7d:42:e4:a1:e0:f7:83: 02:08:bc:26:35:0b:e5:d9:12:0b:ef:f8:48:76:29: 0e:ac:a7:db:ae:99:5f:f3:bc:1f:cc:fa:99:c7:35: a0:ce:44:d2:75:98:09:0b:27:36:40:64:c8:8b:bf: dd:13:94:b7:96:12:4a:ea:93:99:cd:b4:5e:a8:62: bf:9e:b9:b9:d8:46:72:ec:7a:68:b4:e1:17:73:6c: db:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:B9:34:25:D0:9D:F8:BB:74:8B:87:C6:0F:E6:4F:80:7F:12:C1:BC X509v3 Authority Key Identifier: keyid:C8:C5:B7:81:B7:F4:3C:62:74:BD:AA:C3:FD:8A:E1:91:4A:BE:ED:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/C8C5B781B7F43C6274BDAAC3FD8AE1914ABEED88.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:14:f0:eb:de:8b:11:de:5c:ce:87:11:a9:d4:8b:87:f2:fa: c1:41:e9:ec:7f:9f:2e:93:a1:19:f6:d8:6b:4e:8d:ea:c0:4a: 1e:ba:42:fc:b1:31:4b:a9:6a:9f:9e:e3:2f:c3:38:c5:4d:58: ba:d3:df:53:e7:17:14:f3:df:be:94:06:ca:13:06:49:cf:1d: 72:a1:01:5e:89:63:1e:ac:20:a8:be:c4:79:d4:98:84:7d:3f: d7:f9:d0:4a:ed:cc:43:2a:03:5b:36:b0:44:f9:56:7f:68:a8: de:e9:bb:ba:3e:44:ad:69:98:66:42:9e:d4:0a:bf:27:29:88: 55:e4:00:a7:53:60:ff:d7:02:25:d5:0a:63:b6:93:89:32:60: 13:4c:fa:3a:7a:e0:50:66:4e:50:4c:95:30:86:dc:9c:4f:6c: 47:a3:53:e7:76:9e:91:a7:dc:69:b6:e7:48:74:a8:b7:43:7f: 6e:2a:a7:9a:0b:62:4a:50:0c:e8:ad:e0:87:b8:0f:2c:57:4a: d9:cd:de:e3:89:06:04:9c:2e:00:03:60:d2:45:cd:9f:c9:06: d0:eb:a6:a9:e5:04:5d:71:06:34:fc:9f:fe:9c:0a:8d:b9:db: 3d:5b:c7:dd:8f:35:4a:82:ed:50:a0:80:66:7a:1a:59:0f:cf: 6e:ad:bf:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHUJvnLynFU3B8dvor3zlAaaIWFgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhDNUI3ODFCN0Y0M0M2Mjc0QkRBQUMzRkQ4QUUxOTE0 QUJFRUQ4ODAeFw0yNTEwMjAwNTA2NTRaFw0yNTEwMjMxMjQ4NTRaMDMxMTAvBgNV BAMTKEMxQjkzNDI1RDA5REY4QkI3NDhCODdDNjBGRTY0RjgwN0YxMkMxQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOAXX3kqJk4hI6Z/TdecRQJBVc wRlGIBgPqoU4CX/pubnFsY0F0Mhu0+wESueG6IDxitxrkFcy/eurOZEUjo7bn+wp c76Krns4e6s6AW5hlX4I04HJCkioDxlNuULlG+UM7cqUGiYRoMHwGV/AsALYEOdg OfwQAP3qJXvLxVKkmkCg5VMgbuYoyUSK/GX1CVBNlbt9ziHt46M0jkymPh65SBbr gRqtIK9rOwkRfULkoeD3gwIIvCY1C+XZEgvv+Eh2KQ6sp9uumV/zvB/M+pnHNaDO RNJ1mAkLJzZAZMiLv90TlLeWEkrqk5nNtF6oYr+eubnYRnLsemi04RdzbNtZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwbk0JdCd+Lt0i4fGD+ZPgH8SwbwwHwYDVR0j BBgwFoAUyMW3gbf0PGJ0varD/YrhkUq+7YgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ODg1M2FhYi04ZDZjLTQ1N2YtOWQ1Ny00ODRhY2FjZWE5ZDgvMS9DOEM1Qjc4MUI3 RjQzQzYyNzRCREFBQzNGRDhBRTE5MTRBQkVFRDg4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhDNUI3ODFCN0Y0M0M2Mjc0QkRBQUMzRkQ4QUUxOTE0QUJF RUQ4OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTg4NTNhYWItOGQ2Yy00NTdmLTlk NTctNDg0YWNhY2VhOWQ4LzEvQzhDNUI3ODFCN0Y0M0M2Mjc0QkRBQUMzRkQ4QUUx OTE0QUJFRUQ4OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABUU8OveixHeXM6HEanUi4fy+sFB6ex/ny6T oRn22GtOjerASh66QvyxMUupap+e4y/DOMVNWLrT31PnFxTz376UBsoTBknPHXKh AV6JYx6sIKi+xHnUmIR9P9f50ErtzEMqA1s2sET5Vn9oqN7pu7o+RK1pmGZCntQK vycpiFXkAKdTYP/XAiXVCmO2k4kyYBNM+jp64FBmTlBMlTCG3JxPbEejU+d2npGn 3Gm250h0qLdDf24qp5oLYkpQDOit4Ie4DyxXStnN3uOJBgScLgADYNJFzZ/JBtDr pqnlBF1xBjT8n/6cCo252z1bx92PNUqC7VCggGZ6GlkPz26tv2c= -----END CERTIFICATE-----Generated at Mon Oct 20 09:45:07 2025 by rpki-client