$ rpki-client -vvf repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft File: A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft (raw, json) Hash identifier: NN7mj3JHrdHv7EYUqIF6mZI2MJ40Slh9tghQLtKkD1k= Subject key identifier: 3E:C6:A0:CD:15:A6:90:66:A0:69:6C:34:A1:A3:B3:C3:06:44:4D:2B Authority key identifier: A8:CD:D5:76:A9:B5:E4:48:A8:69:BE:A4:D5:16:BA:FC:5A:87:95:03 Certificate issuer: /CN=A8CDD576A9B5E448A869BEA4D516BAFC5A879503 Certificate serial: 2B26BE9E574F0F8D65A32B9944A8B2B7D00EB7B6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft Manifest number: BF Signing time: Fri 22 Aug 2025 21:02:23 +0000 Manifest this update: Fri 22 Aug 2025 20:57:23 +0000 Manifest next update: Mon 25 Aug 2025 22:54:23 +0000 Files and hashes: 1: A8CDD576A9B5E448A869BEA4D516BAFC5A879503.crl (hash: HYl29zqQml6ydDDim/EhoXEZH7sjhVse2HMZrsuVMWI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.crl rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 22:54:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:26:be:9e:57:4f:0f:8d:65:a3:2b:99:44:a8:b2:b7:d0:0e:b7:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8CDD576A9B5E448A869BEA4D516BAFC5A879503 Validity Not Before: Aug 22 20:57:23 2025 GMT Not After : Aug 25 22:54:23 2025 GMT Subject: CN=3EC6A0CD15A69066A0696C34A1A3B3C306444D2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:24:4d:26:0a:19:bf:96:85:d3:10:88:57:3c: f0:75:d9:0f:b8:d7:af:1d:72:3f:bb:81:07:f1:75: 2c:4e:84:70:00:75:3d:64:64:0d:b5:b5:51:8c:1b: a0:59:77:55:d3:c0:be:e8:d1:1c:9e:c8:7a:8a:38: 73:68:2d:56:b7:95:86:87:65:f4:c0:7f:89:af:98: 25:b6:5d:4a:a7:6d:d7:a2:9a:2e:13:a9:31:70:97: 89:82:3f:31:83:df:5f:3d:0d:3b:51:f7:36:16:bd: 0c:71:22:32:02:8b:ac:26:d1:2a:a6:0d:9d:c5:4a: 6a:df:2c:2c:28:58:4f:5e:82:cc:76:fb:a1:76:6f: 92:65:fd:05:bf:00:17:b6:c6:5e:50:da:af:0d:d4: 5b:32:26:83:2c:bf:65:97:4e:7b:bb:32:6a:76:f9: f7:71:ce:95:5d:f6:bc:8c:d7:2e:8b:1a:4b:8b:53: 78:6b:5d:c8:a3:da:60:b1:6c:30:a7:59:32:14:f3: 06:a9:c4:b5:4d:04:e1:62:05:f3:ef:ef:4d:26:c4: 79:77:28:ed:97:89:77:e7:5e:fd:7c:f5:d6:a8:bb: b6:6a:f4:69:36:1f:91:4a:6e:a0:f3:8f:14:f3:79: e2:12:9e:de:c5:52:31:22:17:af:26:6b:45:6f:b7: 78:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:C6:A0:CD:15:A6:90:66:A0:69:6C:34:A1:A3:B3:C3:06:44:4D:2B X509v3 Authority Key Identifier: keyid:A8:CD:D5:76:A9:B5:E4:48:A8:69:BE:A4:D5:16:BA:FC:5A:87:95:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:ba:c7:bd:28:e2:72:a7:f0:d5:a5:d3:03:72:18:35:57:05: 22:94:e5:16:af:b6:65:b1:4d:4a:26:ca:a5:80:d8:41:71:46: 8a:78:f4:65:a1:37:86:24:ac:f3:05:9f:76:4e:cd:cc:51:ad: ab:e5:89:5b:db:22:2a:50:bf:59:b7:2d:25:34:f0:1f:aa:4a: 7d:2a:32:40:fb:c6:17:ab:10:34:7f:1f:e1:64:b8:42:37:97: 3f:fc:01:7a:74:2d:0d:45:ce:6c:a4:1b:40:cd:3c:2d:4c:3f: 28:7b:47:84:fc:ba:fc:95:7b:37:6c:06:bc:1e:82:c3:bf:54: e3:0d:73:10:67:ce:de:4f:b6:c8:c3:15:fc:7a:42:3e:44:f2: 1f:39:f7:11:34:1c:32:97:c7:ed:04:16:46:5e:09:5b:d6:d1: a8:24:c0:5d:ed:ba:18:a2:d4:69:96:f9:0f:d8:b2:d1:e1:54: e9:d0:5f:05:e6:95:0d:2c:2d:6c:d2:41:ba:37:33:64:73:83: d7:5c:03:ba:bb:ba:23:08:bd:5f:3a:fd:41:6b:37:b8:ef:4f: 6e:6b:c6:40:49:b0:03:67:f0:b2:05:f5:5a:62:46:a6:c8:94: 17:f1:9f:7c:71:bd:ec:13:35:f2:5d:d0:25:44:e2:63:fa:e2: 5e:8d:04:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKya+nldPD41loyuZRKiyt9AOt7YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThDREQ1NzZBOUI1RTQ0OEE4NjlCRUE0RDUxNkJBRkM1 QTg3OTUwMzAeFw0yNTA4MjIyMDU3MjNaFw0yNTA4MjUyMjU0MjNaMDMxMTAvBgNV BAMTKDNFQzZBMENEMTVBNjkwNjZBMDY5NkMzNEExQTNCM0MzMDY0NDREMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqJE0mChm/loXTEIhXPPB12Q+4 168dcj+7gQfxdSxOhHAAdT1kZA21tVGMG6BZd1XTwL7o0RyeyHqKOHNoLVa3lYaH ZfTAf4mvmCW2XUqnbdeimi4TqTFwl4mCPzGD3189DTtR9zYWvQxxIjICi6wm0Sqm DZ3FSmrfLCwoWE9egsx2+6F2b5Jl/QW/ABe2xl5Q2q8N1FsyJoMsv2WXTnu7Mmp2 +fdxzpVd9ryM1y6LGkuLU3hrXcij2mCxbDCnWTIU8wapxLVNBOFiBfPv700mxHl3 KO2XiXfnXv189daou7Zq9Gk2H5FKbqDzjxTzeeISnt7FUjEiF68ma0Vvt3hTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPsagzRWmkGagaWw0oaOzwwZETSswHwYDVR0j BBgwFoAUqM3Vdqm15Eioab6k1Ra6/FqHlQMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MmU1ZmY4MS1iMDgyLTQzMzQtYWQyOS01NWRjOGQxZTUzYjkvMC9BOENERDU3NkE5 QjVFNDQ4QTg2OUJFQTRENTE2QkFGQzVBODc5NTAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQThDREQ1NzZBOUI1RTQ0OEE4NjlCRUE0RDUxNkJBRkM1QTg3 OTUwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTJlNWZmODEtYjA4Mi00MzM0LWFk MjktNTVkYzhkMWU1M2I5LzAvQThDREQ1NzZBOUI1RTQ0OEE4NjlCRUE0RDUxNkJB RkM1QTg3OTUwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFK6x70o4nKn8NWl0wNyGDVXBSKU5RavtmWx TUomyqWA2EFxRop49GWhN4YkrPMFn3ZOzcxRravliVvbIipQv1m3LSU08B+qSn0q MkD7xherEDR/H+FkuEI3lz/8AXp0LQ1FzmykG0DNPC1MPyh7R4T8uvyVezdsBrwe gsO/VOMNcxBnzt5PtsjDFfx6Qj5E8h859xE0HDKXx+0EFkZeCVvW0agkwF3tuhii 1GmW+Q/YstHhVOnQXwXmlQ0sLWzSQbo3M2Rzg9dcA7q7uiMIvV86/UFrN7jvT25r xkBJsANn8LIF9VpiRqbIlBfxn3xxvewTNfJd0CVE4mP64l6NBK4= -----END CERTIFICATE-----Generated at Sun Aug 24 05:23:02 2025 by rpki-client