$ rpki-client -vvf repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft File: B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft (raw, json) Hash identifier: C/KXPxepSiKg3p5mDAwxzAwh9LsnQ+2XLWZmpCaieuk= Subject key identifier: 67:BB:B6:D8:2A:20:E4:33:6C:81:25:56:D1:15:BD:6D:7B:A7:31:93 Authority key identifier: B8:C9:E3:76:A2:07:23:64:11:20:36:DA:7A:7B:BB:4C:AE:4A:C3:7C Certificate issuer: /CN=B8C9E376A2072364112036DA7A7BBB4CAE4AC37C Certificate serial: 4B6DB174770E3FECBCE3F16CA18FADDFBFAB6440 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft Manifest number: 013D Signing time: Sun 19 Oct 2025 00:00:05 +0000 Manifest this update: Sat 18 Oct 2025 23:55:05 +0000 Manifest next update: Wed 22 Oct 2025 06:03:05 +0000 Files and hashes: 1: B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.crl (hash: Vg2eugdT+ezDeB9aQ67xHNgBj0u+CtUegEZCm7sYxv8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.crl rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 06:03:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:6d:b1:74:77:0e:3f:ec:bc:e3:f1:6c:a1:8f:ad:df:bf:ab:64:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8C9E376A2072364112036DA7A7BBB4CAE4AC37C Validity Not Before: Oct 18 23:55:05 2025 GMT Not After : Oct 22 06:03:05 2025 GMT Subject: CN=67BBB6D82A20E4336C812556D115BD6D7BA73193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:87:0d:b9:d8:9b:e8:1d:4e:42:b7:50:fc:a7: 5f:9e:46:bf:07:98:21:b5:89:76:3c:05:62:33:a9: d7:b6:a5:05:7e:6c:ca:e4:8a:8e:cf:d4:2c:48:59: e2:ad:59:d5:d9:f5:b7:60:cc:98:32:64:89:e3:b6: 7a:4f:10:7c:ed:87:1d:d0:65:54:35:f6:16:23:66: f7:b5:f6:ce:55:99:ac:03:dc:b9:9d:78:b2:c2:f4: 0a:55:96:17:c9:47:ff:30:d5:1c:91:58:4f:fd:19: dd:ae:be:28:88:66:f3:da:18:8a:d0:38:b8:4f:e5: c5:e0:65:92:46:bf:1c:6a:6e:20:ed:97:45:79:9e: ae:ef:4e:72:ab:7f:e8:21:48:eb:68:47:33:f0:ab: 0e:d7:43:a9:b0:d7:fa:7b:44:03:9f:79:48:c0:15: ca:8b:62:02:3a:3a:24:50:ca:42:92:b5:86:77:3c: 82:d6:fb:bd:30:e1:25:2b:e5:07:7e:0d:0e:16:aa: 1b:bf:93:f6:69:2a:f4:1b:1a:c0:78:3a:93:80:e7: 42:f4:27:12:c9:e1:4d:a0:00:cf:de:9b:b1:de:a9: 49:d8:35:2d:e9:cb:ac:76:72:e6:d9:ac:4a:46:b4: 4a:b4:00:a4:64:ba:54:11:e2:fe:bb:c8:9d:a9:de: 06:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:BB:B6:D8:2A:20:E4:33:6C:81:25:56:D1:15:BD:6D:7B:A7:31:93 X509v3 Authority Key Identifier: keyid:B8:C9:E3:76:A2:07:23:64:11:20:36:DA:7A:7B:BB:4C:AE:4A:C3:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:a7:98:a2:88:a5:b7:0f:5c:a7:b4:8e:e1:15:e7:a7:89:e5: 4e:c0:93:3f:00:21:58:13:fe:71:43:12:9e:c4:e3:d4:cf:4f: 85:46:0e:a5:5e:87:b1:9d:15:18:50:48:3c:a3:4b:81:5b:6b: 74:34:d2:d1:0a:cb:4f:14:da:03:4f:3a:7f:85:c0:78:41:14: c3:0f:3b:0c:73:42:fb:ab:13:ac:fd:e3:d2:37:40:7b:6d:f5: 1e:ed:58:40:40:a2:49:25:d1:eb:84:1c:24:22:52:fc:e9:4d: 26:1e:ed:a2:13:e5:db:38:6c:a2:95:13:cb:9d:7f:d7:57:34: 4e:71:96:d1:a5:34:46:9a:00:23:0f:7a:99:15:b0:0e:61:e9: 59:e1:75:ed:e4:43:18:be:80:7e:c0:25:69:68:a9:11:a8:d5: be:31:4f:d0:6e:74:c8:84:1a:ff:9f:6d:e8:c0:29:52:a3:f4: bb:e5:72:0c:98:98:8f:98:8e:14:d2:9e:9d:57:32:ed:db:aa: bc:07:00:30:2f:40:b6:77:9c:1f:cb:be:8d:90:15:f5:b8:26: c5:e3:23:ee:8f:73:d5:73:e1:05:12:63:0c:63:21:c6:0d:58: e8:12:e0:87:69:aa:00:39:6f:f5:92:ac:fa:a2:15:91:a5:76: f3:b3:29:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS22xdHcOP+y84/FsoY+t37+rZEAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhDOUUzNzZBMjA3MjM2NDExMjAzNkRBN0E3QkJCNENB RTRBQzM3QzAeFw0yNTEwMTgyMzU1MDVaFw0yNTEwMjIwNjAzMDVaMDMxMTAvBgNV BAMTKDY3QkJCNkQ4MkEyMEU0MzM2QzgxMjU1NkQxMTVCRDZEN0JBNzMxOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjhw252JvoHU5Ct1D8p1+eRr8H mCG1iXY8BWIzqde2pQV+bMrkio7P1CxIWeKtWdXZ9bdgzJgyZInjtnpPEHzthx3Q ZVQ19hYjZve19s5VmawD3LmdeLLC9ApVlhfJR/8w1RyRWE/9Gd2uviiIZvPaGIrQ OLhP5cXgZZJGvxxqbiDtl0V5nq7vTnKrf+ghSOtoRzPwqw7XQ6mw1/p7RAOfeUjA FcqLYgI6OiRQykKStYZ3PILW+70w4SUr5Qd+DQ4Wqhu/k/ZpKvQbGsB4OpOA50L0 JxLJ4U2gAM/em7HeqUnYNS3py6x2cubZrEpGtEq0AKRkulQR4v67yJ2p3gaxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ7u22Cog5DNsgSVW0RW9bXunMZMwHwYDVR0j BBgwFoAUuMnjdqIHI2QRIDbaenu7TK5Kw3wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzYzZTcxYS05Yzg1LTQxNzYtOGZhNC1iN2EyOWFmYjk3N2QvMC9COEM5RTM3NkEy MDcyMzY0MTEyMDM2REE3QTdCQkI0Q0FFNEFDMzdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhDOUUzNzZBMjA3MjM2NDExMjAzNkRBN0E3QkJCNENBRTRB QzM3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzc2M2U3MWEtOWM4NS00MTc2LThm YTQtYjdhMjlhZmI5NzdkLzAvQjhDOUUzNzZBMjA3MjM2NDExMjAzNkRBN0E3QkJC NENBRTRBQzM3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANGnmKKIpbcPXKe0juEV56eJ5U7Akz8AIVgT /nFDEp7E49TPT4VGDqVeh7GdFRhQSDyjS4Fba3Q00tEKy08U2gNPOn+FwHhBFMMP OwxzQvurE6z949I3QHtt9R7tWEBAokkl0euEHCQiUvzpTSYe7aIT5ds4bKKVE8ud f9dXNE5xltGlNEaaACMPepkVsA5h6Vnhde3kQxi+gH7AJWloqRGo1b4xT9BudMiE Gv+fbejAKVKj9LvlcgyYmI+YjhTSnp1XMu3bqrwHADAvQLZ3nB/Lvo2QFfW4JsXj I+6Pc9Vz4QUSYwxjIcYNWOgS4IdpqgA5b/WSrPqiFZGldvOzKWQ= -----END CERTIFICATE-----Generated at Mon Oct 20 12:02:38 2025 by rpki-client