$ rpki-client -vvf repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft File: B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft (raw, json) Hash identifier: RhHuszCfbbvfg3GMgfPU3bfLZRXkF7RhXaOLo9+9u/k= Subject key identifier: CD:A8:3F:AF:8E:F8:4F:79:43:57:83:B4:EE:05:9C:92:1E:51:E0:B5 Authority key identifier: B8:C9:E3:76:A2:07:23:64:11:20:36:DA:7A:7B:BB:4C:AE:4A:C3:7C Certificate issuer: /CN=B8C9E376A2072364112036DA7A7BBB4CAE4AC37C Certificate serial: 6A6673D7FEFA2EC0ED5AD20F30A9CAAD20D1DF34 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft Manifest number: 010B Signing time: Fri 27 Jun 2025 16:50:05 +0000 Manifest this update: Fri 27 Jun 2025 16:45:05 +0000 Manifest next update: Tue 01 Jul 2025 02:27:05 +0000 Files and hashes: 1: B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.crl (hash: 4N3jl6YmkJf7tTK/IcjjW+3mQgqvaxOHVH1Qnuu9g0c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.crl rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 02:27:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:66:73:d7:fe:fa:2e:c0:ed:5a:d2:0f:30:a9:ca:ad:20:d1:df:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8C9E376A2072364112036DA7A7BBB4CAE4AC37C Validity Not Before: Jun 27 16:45:05 2025 GMT Not After : Jul 1 02:27:05 2025 GMT Subject: CN=CDA83FAF8EF84F79435783B4EE059C921E51E0B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b6:c8:a9:57:47:5c:1b:1c:08:d0:dc:4b:36: f3:81:f7:cc:b1:0b:09:4c:19:84:44:ac:b6:57:1d: 7d:4f:e6:20:19:64:60:9e:92:60:fd:2c:0f:2c:a6: 29:8f:d2:55:02:2a:81:a1:4e:7e:f6:4b:b0:91:f7: 41:86:ca:8d:47:16:54:4f:f5:c6:9f:24:b2:55:19: 95:29:d1:a6:12:64:d7:ec:49:13:96:da:91:63:a2: c0:76:53:80:bb:93:11:dc:4e:d7:3a:a7:24:98:9d: 60:b6:bb:f8:ca:38:34:cd:41:cd:3f:7c:22:46:2f: a4:24:39:b4:b3:eb:03:90:65:75:de:0b:54:ad:d2: 3e:e7:08:2d:da:5a:fd:28:94:fc:29:ed:b8:14:01: 36:90:1d:1c:b4:e1:15:58:7f:d4:7d:c8:19:4f:ec: f3:bc:fd:93:d4:de:93:f0:1d:fe:29:78:89:88:d4: d5:a8:6d:ba:45:97:59:9e:c0:6f:58:21:fe:fd:fe: 61:07:e1:7b:1d:ff:01:60:56:2a:98:78:36:b4:7b: 95:a5:93:a1:56:a7:e2:11:ef:53:6d:93:b9:0c:2f: d8:2f:a0:bd:f5:01:0a:8f:48:78:67:86:16:8f:b0: 46:06:2c:b4:34:d6:dc:6c:61:fe:d8:1f:41:ce:d2: 24:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:A8:3F:AF:8E:F8:4F:79:43:57:83:B4:EE:05:9C:92:1E:51:E0:B5 X509v3 Authority Key Identifier: keyid:B8:C9:E3:76:A2:07:23:64:11:20:36:DA:7A:7B:BB:4C:AE:4A:C3:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c763e71a-9c85-4176-8fa4-b7a29afb977d/0/B8C9E376A2072364112036DA7A7BBB4CAE4AC37C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:e8:b5:a2:86:f5:e4:12:ca:c6:30:78:13:c3:23:b3:7f:54: f2:fd:e7:3c:bc:45:ce:63:f1:f0:5d:00:7f:8a:b4:07:2e:e3: d5:a6:0d:8d:fe:2c:47:38:36:0f:66:37:96:ab:26:7d:af:46: 3c:43:27:06:68:20:d6:a2:52:c9:8a:cd:d4:c4:c8:03:e1:6a: e4:46:1b:6c:5a:11:75:e8:d5:4d:9c:61:73:71:2b:b1:87:33: d1:26:9b:84:f8:df:0b:0c:6c:3d:44:75:f5:ea:4c:36:13:a1: 77:ed:43:ae:7a:18:36:0a:37:19:59:ac:81:50:4d:1a:5b:3a: 53:2a:8d:c4:31:c7:44:8c:72:66:8c:c3:f6:57:04:73:f4:b4: af:80:08:23:81:11:e4:f3:bd:66:6b:53:b1:8f:00:5b:32:46: 91:e3:a1:c6:07:ed:49:aa:40:7f:d7:a9:a7:e5:6c:1d:5b:89: df:57:30:80:c6:18:43:aa:0f:a2:d0:f6:19:ae:a3:e8:0c:e1: 24:ba:76:7c:b5:37:2f:2b:35:72:b2:69:5b:38:23:f9:b4:0e: 5e:21:75:21:8e:82:ce:e3:5b:e0:23:b6:17:3f:79:82:17:82: ee:59:82:4e:87:9d:af:2c:f0:b5:02:53:6c:88:45:1c:20:71: 8d:64:2e:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUamZz1/76LsDtWtIPMKnKrSDR3zQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhDOUUzNzZBMjA3MjM2NDExMjAzNkRBN0E3QkJCNENB RTRBQzM3QzAeFw0yNTA2MjcxNjQ1MDVaFw0yNTA3MDEwMjI3MDVaMDMxMTAvBgNV BAMTKENEQTgzRkFGOEVGODRGNzk0MzU3ODNCNEVFMDU5QzkyMUU1MUUwQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAtsipV0dcGxwI0NxLNvOB98yx CwlMGYRErLZXHX1P5iAZZGCekmD9LA8spimP0lUCKoGhTn72S7CR90GGyo1HFlRP 9cafJLJVGZUp0aYSZNfsSROW2pFjosB2U4C7kxHcTtc6pySYnWC2u/jKODTNQc0/ fCJGL6QkObSz6wOQZXXeC1St0j7nCC3aWv0olPwp7bgUATaQHRy04RVYf9R9yBlP 7PO8/ZPU3pPwHf4peImI1NWobbpFl1mewG9YIf79/mEH4Xsd/wFgViqYeDa0e5Wl k6FWp+IR71Ntk7kML9gvoL31AQqPSHhnhhaPsEYGLLQ01txsYf7YH0HO0iSTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzag/r474T3lDV4O07gWckh5R4LUwHwYDVR0j BBgwFoAUuMnjdqIHI2QRIDbaenu7TK5Kw3wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzYzZTcxYS05Yzg1LTQxNzYtOGZhNC1iN2EyOWFmYjk3N2QvMC9COEM5RTM3NkEy MDcyMzY0MTEyMDM2REE3QTdCQkI0Q0FFNEFDMzdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjhDOUUzNzZBMjA3MjM2NDExMjAzNkRBN0E3QkJCNENBRTRB QzM3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzc2M2U3MWEtOWM4NS00MTc2LThm YTQtYjdhMjlhZmI5NzdkLzAvQjhDOUUzNzZBMjA3MjM2NDExMjAzNkRBN0E3QkJC NENBRTRBQzM3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADvotaKG9eQSysYweBPDI7N/VPL95zy8Rc5j 8fBdAH+KtAcu49WmDY3+LEc4Ng9mN5arJn2vRjxDJwZoINaiUsmKzdTEyAPhauRG G2xaEXXo1U2cYXNxK7GHM9Emm4T43wsMbD1EdfXqTDYToXftQ656GDYKNxlZrIFQ TRpbOlMqjcQxx0SMcmaMw/ZXBHP0tK+ACCOBEeTzvWZrU7GPAFsyRpHjocYH7Umq QH/XqaflbB1bid9XMIDGGEOqD6LQ9hmuo+gM4SS6dny1Ny8rNXKyaVs4I/m0Dl4h dSGOgs7jW+Ajthc/eYIXgu5Zgk6Hna8s8LUCU2yIRRwgcY1kLqs= -----END CERTIFICATE-----Generated at Mon Jun 30 01:20:02 2025 by rpki-client