$ rpki-client -vvf repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft File: C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft (raw, json) Hash identifier: uqCgXGLq1XietE+GM9JvX+Q+wvUyx51O9P0QO0aqpAc= Subject key identifier: 76:AB:1F:B0:E9:26:A6:4A:3D:67:54:C4:48:27:C5:58:4B:23:6A:86 Authority key identifier: C8:B7:60:5A:76:DB:DD:11:CC:D3:1F:65:7A:0D:E4:54:C9:79:D9:39 Certificate issuer: /CN=C8B7605A76DBDD11CCD31F657A0DE454C979D939 Certificate serial: 590295186AF356D450BBF8229A3BD94ACC914D05 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8B7605A76DBDD11CCD31F657A0DE454C979D939.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft Manifest number: 0494 Signing time: Sat 23 Aug 2025 05:11:30 +0000 Manifest this update: Sat 23 Aug 2025 05:06:30 +0000 Manifest next update: Tue 26 Aug 2025 13:47:30 +0000 Files and hashes: 1: C8B7605A76DBDD11CCD31F657A0DE454C979D939.crl (hash: qv78t8FoBvKGnH80pCYnTfTUcjAlnaemtNEVcOXlHNI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.crl rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8B7605A76DBDD11CCD31F657A0DE454C979D939.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:02:95:18:6a:f3:56:d4:50:bb:f8:22:9a:3b:d9:4a:cc:91:4d:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8B7605A76DBDD11CCD31F657A0DE454C979D939 Validity Not Before: Aug 23 05:06:30 2025 GMT Not After : Aug 26 13:47:30 2025 GMT Subject: CN=76AB1FB0E926A64A3D6754C44827C5584B236A86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:dc:88:b1:94:e0:b8:6e:29:98:9e:db:3b:8f: f5:fd:fb:8b:31:77:6a:97:dd:9a:ba:18:9c:18:b5: f5:ed:35:6d:0e:9f:54:f3:05:7f:af:de:b3:8f:6e: 71:6c:83:91:0e:d3:12:ad:93:d0:b0:17:e6:2a:da: c5:d3:99:9b:38:aa:01:cf:29:9c:b3:68:82:59:28: 97:cf:7e:90:8d:12:9b:62:74:fa:67:01:c7:9e:a0: a3:fe:19:1a:49:9e:3e:62:d0:70:3b:b3:71:97:c9: 39:9d:b5:0b:23:2c:b1:d8:1c:c6:f7:2e:b9:e5:dd: 28:54:33:b4:24:b2:e3:1e:f7:e3:88:2e:eb:29:74: 6c:3f:9f:65:9b:e2:82:ab:4e:69:a2:c4:82:2b:dd: 6b:0d:0a:ad:10:82:68:22:df:fc:c7:d3:70:55:3b: 97:e0:fd:aa:01:22:9d:68:c3:4f:6c:a1:31:2e:af: 1e:b8:77:08:27:6a:95:ed:52:9f:31:fc:1e:a2:8e: 10:79:04:75:df:c4:66:11:2b:62:62:8a:50:a7:a9: ab:a3:3d:3e:03:bb:da:9d:aa:c2:90:f6:26:f8:23: 82:04:15:d0:ed:74:09:83:7b:3e:b4:38:12:c8:cb: f3:b7:a1:0e:a3:c4:62:78:b2:44:07:f9:b7:e0:41: 79:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:AB:1F:B0:E9:26:A6:4A:3D:67:54:C4:48:27:C5:58:4B:23:6A:86 X509v3 Authority Key Identifier: keyid:C8:B7:60:5A:76:DB:DD:11:CC:D3:1F:65:7A:0D:E4:54:C9:79:D9:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8B7605A76DBDD11CCD31F657A0DE454C979D939.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:14:7b:8d:bf:d0:e7:59:13:56:79:a1:1a:4f:79:ad:7e:e4: 8e:89:0a:69:4d:0d:32:ad:07:9d:90:f7:47:31:16:d1:21:fa: 9e:65:2b:9c:3f:cb:c1:f2:29:39:d3:0a:36:29:3b:7f:ee:37: 0d:e8:27:5f:82:eb:73:05:b5:a5:b9:a4:53:f6:de:c1:4b:20: 58:21:36:49:76:f6:ac:fa:90:4a:52:08:3f:b4:85:57:a4:0e: 3f:c4:2d:e6:34:ca:8c:40:9b:4d:5c:d9:86:95:42:06:ff:bc: 20:a9:74:cc:97:2b:55:f1:c4:0b:50:26:a2:4d:76:ac:a4:bf: a8:f8:6b:17:95:8d:dc:ef:3a:e1:6d:4b:02:ee:7f:9c:7e:85: 35:35:5f:35:4d:fa:58:a7:c7:f8:a1:63:80:01:d4:df:d8:c3: bc:d0:7f:4c:69:bc:ea:46:3a:34:22:8d:5f:60:a5:38:67:32: a8:ce:39:cc:b4:f0:b7:fb:f1:07:9a:85:57:11:7c:32:60:58: f6:c7:9c:c9:71:4f:dd:7f:09:cc:4b:f7:02:9e:fd:ee:64:4c: 64:45:1c:b8:25:cc:56:20:55:4a:c8:42:98:84:69:40:47:f1: 96:57:7f:21:c4:52:69:ae:e5:29:de:ea:d6:c3:6c:39:d2:0c: 7d:a3:e6:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWQKVGGrzVtRQu/gimjvZSsyRTQUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhCNzYwNUE3NkRCREQxMUNDRDMxRjY1N0EwREU0NTRD OTc5RDkzOTAeFw0yNTA4MjMwNTA2MzBaFw0yNTA4MjYxMzQ3MzBaMDMxMTAvBgNV BAMTKDc2QUIxRkIwRTkyNkE2NEEzRDY3NTRDNDQ4MjdDNTU4NEIyMzZBODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF3IixlOC4bimYnts7j/X9+4sx d2qX3Zq6GJwYtfXtNW0On1TzBX+v3rOPbnFsg5EO0xKtk9CwF+Yq2sXTmZs4qgHP KZyzaIJZKJfPfpCNEptidPpnAceeoKP+GRpJnj5i0HA7s3GXyTmdtQsjLLHYHMb3 Lrnl3ShUM7QksuMe9+OILuspdGw/n2Wb4oKrTmmixIIr3WsNCq0Qgmgi3/zH03BV O5fg/aoBIp1ow09soTEurx64dwgnapXtUp8x/B6ijhB5BHXfxGYRK2JiilCnqauj PT4Du9qdqsKQ9ib4I4IEFdDtdAmDez60OBLIy/O3oQ6jxGJ4skQH+bfgQXm5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdqsfsOkmpko9Z1TESCfFWEsjaoYwHwYDVR0j BBgwFoAUyLdgWnbb3RHM0x9leg3kVMl52TkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ODM0OWNkNC1jMDc5LTQxZmYtYWE5ZS0zNmYzZDQ0ODI2NDUvMC9DOEI3NjA1QTc2 REJERDExQ0NEMzFGNjU3QTBERTQ1NEM5NzlEOTM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhCNzYwNUE3NkRCREQxMUNDRDMxRjY1N0EwREU0NTRDOTc5 RDkzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDgzNDljZDQtYzA3OS00MWZmLWFh OWUtMzZmM2Q0NDgyNjQ1LzAvQzhCNzYwNUE3NkRCREQxMUNDRDMxRjY1N0EwREU0 NTRDOTc5RDkzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAIUe42/0OdZE1Z5oRpPea1+5I6JCmlNDTKt B52Q90cxFtEh+p5lK5w/y8HyKTnTCjYpO3/uNw3oJ1+C63MFtaW5pFP23sFLIFgh Nkl29qz6kEpSCD+0hVekDj/ELeY0yoxAm01c2YaVQgb/vCCpdMyXK1XxxAtQJqJN dqykv6j4axeVjdzvOuFtSwLuf5x+hTU1XzVN+linx/ihY4AB1N/Yw7zQf0xpvOpG OjQijV9gpThnMqjOOcy08Lf78QeahVcRfDJgWPbHnMlxT91/CcxL9wKe/e5kTGRF HLglzFYgVUrIQpiEaUBH8ZZXfyHEUmmu5Sne6tbDbDnSDH2j5gc= -----END CERTIFICATE-----Generated at Sat Aug 23 13:31:11 2025 by rpki-client