$ rpki-client -vvf repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft File: B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft (raw, json) Hash identifier: ujxTOHn/EiPsUEmJvCP5EsMEfFBGcQbKnLGXm/8bDmQ= Subject key identifier: 6A:E1:68:95:C5:A6:B5:C3:81:49:34:EF:FE:9A:E5:26:CA:50:19:B0 Authority key identifier: B8:C9:E3:76:A2:07:23:64:11:20:36:DA:7A:7B:BB:4C:AE:4A:C3:7C Certificate issuer: /CN=B8C9E376A2072364112036DA7A7BBB4CAE4AC37C Certificate serial: 2E908105B06E12D4672612CF5C095E33C4AE5368 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft Manifest number: 0123 Signing time: Thu 21 Aug 2025 08:40:05 +0000 Manifest this update: Thu 21 Aug 2025 08:35:05 +0000 Manifest next update: Sun 24 Aug 2025 18:28:05 +0000 Files and hashes: 1: B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.crl (hash: gUhiyLoQ3CJSTIX+03SrC01vZbEs8i0EUU3SCqO+YAg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.crl rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 18:28:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:90:81:05:b0:6e:12:d4:67:26:12:cf:5c:09:5e:33:c4:ae:53:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8C9E376A2072364112036DA7A7BBB4CAE4AC37C Validity Not Before: Aug 21 08:35:05 2025 GMT Not After : Aug 24 18:28:05 2025 GMT Subject: CN=6AE16895C5A6B5C3814934EFFE9AE526CA5019B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:29:50:e8:0c:5a:1e:35:26:64:cc:3a:fa:5b: c3:9f:58:d3:19:bb:22:0a:55:92:84:63:0c:7e:62: fb:af:3f:44:df:a2:8d:57:ab:e8:d1:b2:ab:aa:4d: d0:0c:3b:49:ce:b8:87:bb:9d:ef:e4:a2:61:e8:5d: 01:94:c4:3e:2b:5b:93:ab:3d:17:03:fb:16:54:ac: 12:5d:18:7e:28:47:eb:ff:03:78:ff:b9:e1:d3:d1: 58:43:38:09:ae:82:17:db:be:c6:fb:82:28:af:11: bb:62:42:92:6f:e9:31:51:b9:be:96:9e:f4:9f:84: d9:7e:9d:0b:1e:d2:78:47:da:32:72:1d:e5:2d:66: e0:1c:ea:32:3d:91:7e:29:ce:80:76:4a:89:66:4d: 00:ca:34:60:c9:85:9c:57:a4:62:61:4f:88:96:cf: b2:1a:6e:61:4e:10:a7:1b:0a:7f:14:c0:25:85:14: ea:7f:be:17:fd:23:b7:fe:35:f2:e4:60:b0:ae:4a: b5:98:41:fd:a1:c2:e5:97:db:ec:60:a7:71:f1:b4: 3e:98:c9:62:72:68:07:da:97:97:8f:39:32:1b:79: 64:84:0a:7e:40:34:70:da:d9:1c:a7:93:db:35:0e: c7:5e:bc:74:e9:ea:d0:ff:32:a0:ee:b9:76:22:88: 54:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:E1:68:95:C5:A6:B5:C3:81:49:34:EF:FE:9A:E5:26:CA:50:19:B0 X509v3 Authority Key Identifier: keyid:B8:C9:E3:76:A2:07:23:64:11:20:36:DA:7A:7B:BB:4C:AE:4A:C3:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:bb:16:15:ea:f4:be:50:be:79:a2:3c:3a:ab:eb:9f:d7:a3: ff:93:fa:35:40:b4:4f:b9:a7:24:14:68:3a:09:80:49:71:d8: 80:32:f4:61:0b:c0:8c:0c:5b:8a:2c:7d:25:f6:09:fa:f6:4a: d7:a6:61:29:e0:17:94:6e:61:22:47:d0:e5:0a:62:db:c2:00: 48:1f:f6:e3:ff:31:2a:1b:00:d3:c8:4d:a4:ce:b3:32:e8:69: 72:34:9f:15:71:38:ae:81:a7:82:d1:c3:f5:a6:7e:6b:16:15: 42:1a:3c:69:61:cb:9c:7b:d8:f1:f9:1b:35:2c:dc:04:70:cd: 2d:23:82:3b:26:0c:2e:1b:d5:4d:a9:42:13:45:cd:41:b8:c3: c8:a0:db:31:07:de:d3:51:5e:52:1a:74:2d:6d:b6:20:6f:1f: 40:65:d9:48:0a:b5:43:01:f5:cb:d6:a3:2b:32:ec:44:ff:dc: ed:3c:e7:3b:33:92:28:48:2a:fb:14:6f:2d:9f:e1:dc:19:14: b0:12:13:27:d8:c1:15:fc:de:6b:a9:69:73:07:c7:87:e3:24: 1c:6f:a7:0a:15:86:f9:26:96:f7:f3:a0:aa:e0:3c:fa:d0:82: 5b:91:78:e3:ed:5d:e8:44:ea:be:95:b1:1f:7b:03:71:38:98: 3f:65:16:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULpCBBbBuEtRnJhLPXAleM8SuU2gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhDOUUzNzZBMjA3MjM2NDExMjAzNkRBN0E3QkJCNENB RTRBQzM3QzAeFw0yNTA4MjEwODM1MDVaFw0yNTA4MjQxODI4MDVaMDMxMTAvBgNV BAMTKDZBRTE2ODk1QzVBNkI1QzM4MTQ5MzRFRkZFOUFFNTI2Q0E1MDE5QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsKVDoDFoeNSZkzDr6W8OfWNMZ uyIKVZKEYwx+YvuvP0Tfoo1Xq+jRsquqTdAMO0nOuIe7ne/komHoXQGUxD4rW5Or PRcD+xZUrBJdGH4oR+v/A3j/ueHT0VhDOAmughfbvsb7giivEbtiQpJv6TFRub6W nvSfhNl+nQse0nhH2jJyHeUtZuAc6jI9kX4pzoB2SolmTQDKNGDJhZxXpGJhT4iW z7IabmFOEKcbCn8UwCWFFOp/vhf9I7f+NfLkYLCuSrWYQf2hwuWX2+xgp3HxtD6Y yWJyaAfal5ePOTIbeWSECn5ANHDa2Rynk9s1DsdevHTp6tD/MqDuuXYiiFRHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUauFolcWmtcOBSTTv/prlJspQGbAwHwYDVR0j BBgwFoAUuMnjdqIHI2QRIDbaenu7TK5Kw3wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzYzZTcxYS05Yzg1LTQxNzYtOGZhNC1iN2EyOWFmYjk3N2QvMC9COEM5RTM3NkEy MDcyMzY0MTEyMDM2REE3QTdCQkI0Q0FFNEFDMzdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhDOUUzNzZBMjA3MjM2NDExMjAzNkRBN0E3QkJCNENBRTRB QzM3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzc2M2U3MWEtOWM4NS00MTc2LThm YTQtYjdhMjlhZmI5NzdkLzAvQjhDOUUzNzZBMjA3MjM2NDExMjAzNkRBN0E3QkJC NENBRTRBQzM3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFe7FhXq9L5QvnmiPDqr65/Xo/+T+jVAtE+5 pyQUaDoJgElx2IAy9GELwIwMW4osfSX2Cfr2StemYSngF5RuYSJH0OUKYtvCAEgf 9uP/MSobANPITaTOszLoaXI0nxVxOK6Bp4LRw/WmfmsWFUIaPGlhy5x72PH5GzUs 3ARwzS0jgjsmDC4b1U2pQhNFzUG4w8ig2zEH3tNRXlIadC1ttiBvH0Bl2UgKtUMB 9cvWoysy7ET/3O085zszkihIKvsUby2f4dwZFLASEyfYwRX83mupaXMHx4fjJBxv pwoVhvkmlvfzoKrgPPrQgluReOPtXehE6r6VsR97A3E4mD9lFis= -----END CERTIFICATE-----Generated at Sat Aug 23 12:57:23 2025 by rpki-client