$ rpki-client -vvf repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft File: C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft (raw, json) Hash identifier: P/4iF1kpQfhATSwWwP2HO2LIZIe82lLOyJWKOklPUkk= Subject key identifier: 4B:36:92:C6:32:4C:C7:0F:AD:76:FE:68:6B:E8:06:42:E4:73:CE:E2 Authority key identifier: C8:B7:60:5A:76:DB:DD:11:CC:D3:1F:65:7A:0D:E4:54:C9:79:D9:39 Certificate issuer: /CN=C8B7605A76DBDD11CCD31F657A0DE454C979D939 Certificate serial: 1E228B2F1BEF525D5DBF469BBF4737A9ED836389 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8B7605A76DBDD11CCD31F657A0DE454C979D939.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft Manifest number: 047B Signing time: Fri 27 Jun 2025 22:41:29 +0000 Manifest this update: Fri 27 Jun 2025 22:36:29 +0000 Manifest next update: Tue 01 Jul 2025 08:25:29 +0000 Files and hashes: 1: C8B7605A76DBDD11CCD31F657A0DE454C979D939.crl (hash: DyxeLNSRvsktqYZ48DaYyfO74x48+hFUurLEv0R1sBY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.crl rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8B7605A76DBDD11CCD31F657A0DE454C979D939.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 08:25:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:22:8b:2f:1b:ef:52:5d:5d:bf:46:9b:bf:47:37:a9:ed:83:63:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8B7605A76DBDD11CCD31F657A0DE454C979D939 Validity Not Before: Jun 27 22:36:29 2025 GMT Not After : Jul 1 08:25:29 2025 GMT Subject: CN=4B3692C6324CC70FAD76FE686BE80642E473CEE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5c:80:62:4f:9c:14:cb:e4:a4:5c:e8:dc:ff: 0e:ff:62:b0:09:58:69:63:48:71:27:47:2d:12:89: 7e:15:9f:ee:42:23:49:58:6a:f0:3a:93:f6:a1:64: ee:92:67:b5:31:5e:a3:37:eb:d7:34:b8:d2:41:79: 10:c1:19:ad:17:c6:5f:73:8e:58:08:3a:38:22:e7: 24:5e:87:8a:c3:25:19:9b:e4:73:1b:b9:f5:08:6a: 90:3c:ee:da:73:e3:97:f9:ac:a6:85:e3:95:55:1f: 85:e0:44:d7:3d:4c:95:1c:8a:22:39:40:bb:83:a0: b4:50:dc:81:5c:0b:8c:55:fb:b8:1f:f3:c6:76:ec: 10:c1:4c:e7:3a:23:1d:13:5c:d3:c7:ca:1a:27:68: 38:85:06:78:b3:b8:9c:28:9e:c6:a3:b5:1b:44:1d: 9e:7b:97:eb:34:3a:a4:a8:8a:94:82:25:54:64:15: 3a:b5:af:88:40:3c:5a:30:6f:77:9b:96:0f:33:8e: 3a:79:68:b1:6c:ce:a0:f7:a2:2d:76:64:a9:a0:dc: 3d:ba:9e:e5:cd:44:40:7e:fc:dc:a4:16:9d:53:1c: 50:13:42:1f:42:d5:da:84:7e:88:af:8c:df:da:dc: 0f:b0:1d:52:be:85:f2:60:e7:78:29:16:ef:1a:75: a2:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:36:92:C6:32:4C:C7:0F:AD:76:FE:68:6B:E8:06:42:E4:73:CE:E2 X509v3 Authority Key Identifier: keyid:C8:B7:60:5A:76:DB:DD:11:CC:D3:1F:65:7A:0D:E4:54:C9:79:D9:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8B7605A76DBDD11CCD31F657A0DE454C979D939.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:70:11:ec:62:f2:06:d6:c9:af:b0:b6:9e:fd:cd:8d:e1:6c: ca:7f:5f:87:cc:74:0a:3c:de:08:b0:f1:40:ef:2b:53:cb:64: 5b:a8:2d:f6:9c:55:4c:e3:9d:4a:df:fa:76:0c:41:e8:ed:09: 26:cb:31:a7:89:e5:63:43:3e:d3:23:3e:9c:d3:8e:7b:d8:7a: 05:71:a9:97:2a:9a:7b:9f:26:d1:93:58:8b:17:41:af:e1:fc: 0a:a1:1f:e3:93:20:1b:c5:a9:18:5f:2c:15:6a:ff:18:75:b4: 80:65:16:c3:0e:d4:9b:65:6e:2e:5b:de:05:af:54:dc:81:73: d0:a7:2a:d9:60:07:56:e6:e7:5e:52:b6:72:81:92:ff:d1:f3: ee:ba:a2:09:8b:7f:6d:b0:3d:95:c6:b5:e1:33:3d:d1:ff:9b: 80:1e:bf:f5:9b:fb:8f:0f:66:f8:bf:3e:13:60:6a:33:a6:84: 3e:7a:0f:51:7a:bd:c3:fe:4c:c8:76:ac:81:11:57:e1:98:7e: e0:48:d2:64:84:7b:8e:7b:09:79:52:22:b4:2b:43:e3:94:2d: 2a:59:b0:4e:39:59:4e:b1:84:a9:09:6c:5b:d8:ce:33:54:ae: 53:56:3e:ca:9d:d6:6f:a1:1e:33:d4:c4:6a:5b:dc:58:61:60: 6c:c7:3b:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHiKLLxvvUl1dv0abv0c3qe2DY4kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhCNzYwNUE3NkRCREQxMUNDRDMxRjY1N0EwREU0NTRD OTc5RDkzOTAeFw0yNTA2MjcyMjM2MjlaFw0yNTA3MDEwODI1MjlaMDMxMTAvBgNV BAMTKDRCMzY5MkM2MzI0Q0M3MEZBRDc2RkU2ODZCRTgwNjQyRTQ3M0NFRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyXIBiT5wUy+SkXOjc/w7/YrAJ WGljSHEnRy0SiX4Vn+5CI0lYavA6k/ahZO6SZ7UxXqM369c0uNJBeRDBGa0Xxl9z jlgIOjgi5yReh4rDJRmb5HMbufUIapA87tpz45f5rKaF45VVH4XgRNc9TJUciiI5 QLuDoLRQ3IFcC4xV+7gf88Z27BDBTOc6Ix0TXNPHyhonaDiFBnizuJwonsajtRtE HZ57l+s0OqSoipSCJVRkFTq1r4hAPFowb3eblg8zjjp5aLFszqD3oi12ZKmg3D26 nuXNREB+/NykFp1THFATQh9C1dqEfoivjN/a3A+wHVK+hfJg53gpFu8adaIdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSzaSxjJMxw+tdv5oa+gGQuRzzuIwHwYDVR0j BBgwFoAUyLdgWnbb3RHM0x9leg3kVMl52TkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ODM0OWNkNC1jMDc5LTQxZmYtYWE5ZS0zNmYzZDQ0ODI2NDUvMC9DOEI3NjA1QTc2 REJERDExQ0NEMzFGNjU3QTBERTQ1NEM5NzlEOTM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhCNzYwNUE3NkRCREQxMUNDRDMxRjY1N0EwREU0NTRDOTc5 RDkzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDgzNDljZDQtYzA3OS00MWZmLWFh OWUtMzZmM2Q0NDgyNjQ1LzAvQzhCNzYwNUE3NkRCREQxMUNDRDMxRjY1N0EwREU0 NTRDOTc5RDkzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJpwEexi8gbWya+wtp79zY3hbMp/X4fMdAo8 3giw8UDvK1PLZFuoLfacVUzjnUrf+nYMQejtCSbLMaeJ5WNDPtMjPpzTjnvYegVx qZcqmnufJtGTWIsXQa/h/AqhH+OTIBvFqRhfLBVq/xh1tIBlFsMO1Jtlbi5b3gWv VNyBc9CnKtlgB1bm515StnKBkv/R8+66ogmLf22wPZXGteEzPdH/m4Aev/Wb+48P Zvi/PhNgajOmhD56D1F6vcP+TMh2rIERV+GYfuBI0mSEe457CXlSIrQrQ+OULSpZ sE45WU6xhKkJbFvYzjNUrlNWPsqd1m+hHjPUxGpb3FhhYGzHOyg= -----END CERTIFICATE-----Generated at Sun Jun 29 18:51:24 2025 by rpki-client