$ rpki-client -vvf repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.mft File: B8E13B8031811FE78FA73151056FBFABEE076814.mft (raw, json) Hash identifier: poqJuiQbdf1Q666i7lvZJqq5yXB0spSVWMJINRZIDBQ= Subject key identifier: AD:A3:34:89:AC:A3:32:30:45:CE:8C:D0:4D:66:9A:55:EB:9C:5E:CE Authority key identifier: B8:E1:3B:80:31:81:1F:E7:8F:A7:31:51:05:6F:BF:AB:EE:07:68:14 Certificate issuer: /CN=B8E13B8031811FE78FA73151056FBFABEE076814 Certificate serial: 47329D8F6AEC9BA81E06AD0C3004C9992D8E10C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E13B8031811FE78FA73151056FBFABEE076814.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.mft Manifest number: 0E Signing time: Wed 02 Jul 2025 17:42:05 +0000 Manifest this update: Wed 02 Jul 2025 17:37:05 +0000 Manifest next update: Sat 05 Jul 2025 21:26:05 +0000 Files and hashes: 1: B8E13B8031811FE78FA73151056FBFABEE076814.crl (hash: fEu6klpqX1EepmEOFi0mndFKOyA7btnqcTGhIp20xns=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.crl rsync://repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E13B8031811FE78FA73151056FBFABEE076814.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 21:26:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:32:9d:8f:6a:ec:9b:a8:1e:06:ad:0c:30:04:c9:99:2d:8e:10:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8E13B8031811FE78FA73151056FBFABEE076814 Validity Not Before: Jul 2 17:37:05 2025 GMT Not After : Jul 5 21:26:05 2025 GMT Subject: CN=ADA33489ACA3323045CE8CD04D669A55EB9C5ECE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a6:cf:f5:ee:8b:fa:9d:78:3a:49:ea:b1:f5: d4:12:1b:1a:c5:b3:e3:29:1c:cc:ef:dd:3d:83:65: 8b:c5:04:20:c9:1e:5f:7b:18:e0:53:89:72:fa:70: 7f:49:3e:13:fc:11:38:91:87:b8:7e:30:55:1c:78: be:91:e5:bd:f8:3d:58:9d:07:1d:86:b7:48:9c:e6: 9c:1e:47:fa:e2:9c:92:4f:a3:93:0c:27:d9:ed:28: 75:3a:67:b9:06:ed:9f:cb:d9:c2:8b:db:ba:a6:26: 05:a3:d6:90:26:08:c1:90:9e:bc:be:16:d5:34:94: 46:b8:b2:2a:ad:59:ae:3f:ca:64:0b:09:d9:1b:6a: dd:ad:2a:6f:09:d7:03:cf:72:a6:8b:8d:16:af:24: db:c7:1d:3d:00:f9:f6:90:a1:f6:c6:d4:a2:08:49: 55:db:00:59:da:63:82:63:bd:99:a7:cd:af:23:e3: 4d:84:80:ae:23:de:88:1f:3c:19:68:fa:d8:b8:26: a3:c4:31:20:24:33:df:87:32:02:1e:75:12:d8:6d: 26:2b:d8:06:99:9f:71:ca:ab:90:fe:47:31:39:d6: 58:e9:3b:f3:fa:64:66:03:72:2e:5a:a4:e5:a0:23: ca:f1:7b:72:74:74:5d:e6:58:b8:99:13:e2:f2:22: b0:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:A3:34:89:AC:A3:32:30:45:CE:8C:D0:4D:66:9A:55:EB:9C:5E:CE X509v3 Authority Key Identifier: keyid:B8:E1:3B:80:31:81:1F:E7:8F:A7:31:51:05:6F:BF:AB:EE:07:68:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8E13B8031811FE78FA73151056FBFABEE076814.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a87c2b7e-2663-4d68-b25a-5fcf05e07bb4/0/B8E13B8031811FE78FA73151056FBFABEE076814.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:63:ab:0b:84:f0:ae:17:d7:63:30:2e:39:b7:da:02:ba:6b: c7:52:2e:d8:2e:35:69:da:84:23:c5:67:0e:9b:7d:ef:bb:d9: 93:2c:57:c8:b7:7d:05:1c:5e:2b:3a:a3:20:12:6c:da:c0:bc: e6:11:62:96:a9:d6:07:c8:d0:7d:6f:4b:7a:70:69:f2:f9:0b: 69:2d:0b:d2:cb:5a:36:46:84:16:53:43:99:63:82:5e:14:27: a9:02:e4:a5:e0:92:1f:77:10:26:5d:ef:fc:7b:bc:9a:8c:95: 8e:fc:71:fe:4c:0b:5b:8a:e8:c9:e4:30:47:07:0c:6b:5a:51: 96:3c:54:14:ca:b7:d7:33:b1:ef:41:99:da:e3:78:9b:98:98: 55:fb:36:f4:ce:89:61:e3:cb:90:bd:1c:8e:24:70:32:aa:85: 94:78:4f:86:9e:cd:5e:e1:42:a5:7f:76:62:46:35:33:c9:4e: b3:d7:6d:65:ba:e8:c8:59:5e:b8:ca:e4:81:c7:be:e3:2f:f9: 09:8e:ec:76:9b:5a:18:bb:d9:2f:ea:60:30:6c:2b:87:3b:15: 22:de:a3:13:f3:37:af:7c:e7:eb:58:99:a6:86:41:76:1f:2c: 94:d7:bf:dc:ff:2c:d5:2d:3b:49:fc:ee:07:47:bc:ce:0b:f5: 13:b8:bd:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURzKdj2rsm6geBq0MMATJmS2OEMYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhFMTNCODAzMTgxMUZFNzhGQTczMTUxMDU2RkJGQUJF RTA3NjgxNDAeFw0yNTA3MDIxNzM3MDVaFw0yNTA3MDUyMTI2MDVaMDMxMTAvBgNV BAMTKEFEQTMzNDg5QUNBMzMyMzA0NUNFOENEMDRENjY5QTU1RUI5QzVFQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfps/17ov6nXg6Seqx9dQSGxrF s+MpHMzv3T2DZYvFBCDJHl97GOBTiXL6cH9JPhP8ETiRh7h+MFUceL6R5b34PVid Bx2Gt0ic5pweR/rinJJPo5MMJ9ntKHU6Z7kG7Z/L2cKL27qmJgWj1pAmCMGQnry+ FtU0lEa4siqtWa4/ymQLCdkbat2tKm8J1wPPcqaLjRavJNvHHT0A+faQofbG1KII SVXbAFnaY4JjvZmnza8j402EgK4j3ogfPBlo+ti4JqPEMSAkM9+HMgIedRLYbSYr 2AaZn3HKq5D+RzE51ljpO/P6ZGYDci5apOWgI8rxe3J0dF3mWLiZE+LyIrCBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUraM0iayjMjBFzozQTWaaVeucXs4wHwYDVR0j BBgwFoAUuOE7gDGBH+ePpzFRBW+/q+4HaBQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ODdjMmI3ZS0yNjYzLTRkNjgtYjI1YS01ZmNmMDVlMDdiYjQvMC9COEUxM0I4MDMx ODExRkU3OEZBNzMxNTEwNTZGQkZBQkVFMDc2ODE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhFMTNCODAzMTgxMUZFNzhGQTczMTUxMDU2RkJGQUJFRTA3 NjgxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTg3YzJiN2UtMjY2My00ZDY4LWIy NWEtNWZjZjA1ZTA3YmI0LzAvQjhFMTNCODAzMTgxMUZFNzhGQTczMTUxMDU2RkJG QUJFRTA3NjgxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIljqwuE8K4X12MwLjm32gK6a8dSLtguNWna hCPFZw6bfe+72ZMsV8i3fQUcXis6oyASbNrAvOYRYpap1gfI0H1vS3pwafL5C2kt C9LLWjZGhBZTQ5ljgl4UJ6kC5KXgkh93ECZd7/x7vJqMlY78cf5MC1uK6MnkMEcH DGtaUZY8VBTKt9czse9BmdrjeJuYmFX7NvTOiWHjy5C9HI4kcDKqhZR4T4aezV7h QqV/dmJGNTPJTrPXbWW66MhZXrjK5IHHvuMv+QmO7HabWhi72S/qYDBsK4c7FSLe oxPzN6985+tYmaaGQXYfLJTXv9z/LNUtO0n87gdHvM4L9RO4vYw= -----END CERTIFICATE-----Generated at Fri Jul 4 13:33:26 2025 by rpki-client