$ rpki-client -vvf repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft File: C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft (raw, json) Hash identifier: TB/c9s0lDK6iuzkCNZ37SThi8BvwXh0YFTOipOLgsvU= Subject key identifier: 71:9D:4D:5D:2C:A9:EF:7D:15:02:1F:77:68:A4:EF:01:F0:AD:BF:9F Authority key identifier: C8:B7:60:5A:76:DB:DD:11:CC:D3:1F:65:7A:0D:E4:54:C9:79:D9:39 Certificate issuer: /CN=C8B7605A76DBDD11CCD31F657A0DE454C979D939 Certificate serial: 6CD6C048DC083DFA666E773B32446CFCF5137E1C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8B7605A76DBDD11CCD31F657A0DE454C979D939.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft Manifest number: 0463 Signing time: Sun 04 May 2025 06:21:30 +0000 Manifest this update: Sun 04 May 2025 06:16:30 +0000 Manifest next update: Wed 07 May 2025 07:50:30 +0000 Files and hashes: 1: C8B7605A76DBDD11CCD31F657A0DE454C979D939.crl (hash: ILPXephciOZs0bsLXfMc7YjcZLoxHnIx3z3RGy61ALM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.crl rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8B7605A76DBDD11CCD31F657A0DE454C979D939.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 07:50:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:d6:c0:48:dc:08:3d:fa:66:6e:77:3b:32:44:6c:fc:f5:13:7e:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8B7605A76DBDD11CCD31F657A0DE454C979D939 Validity Not Before: May 4 06:16:30 2025 GMT Not After : May 7 07:50:30 2025 GMT Subject: CN=719D4D5D2CA9EF7D15021F7768A4EF01F0ADBF9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:01:39:56:c2:8c:86:34:d8:5f:ac:d6:3c:07: c0:a9:2d:38:fb:cd:fe:e8:1d:0d:65:1f:91:91:54: de:71:1c:7b:64:12:bb:fc:93:c4:90:2d:4d:b6:b8: 3e:c3:db:cf:9e:58:90:76:72:7c:f3:94:68:65:21: 08:25:ce:aa:b3:28:49:ea:61:cb:17:b3:51:00:8c: 6b:c2:0a:f9:ab:59:a9:62:2b:e8:c0:db:8a:ad:31: 55:a0:92:7f:1d:8a:f0:5e:5c:fd:09:fc:8a:0a:34: 57:4c:e5:a8:e3:20:4a:3a:78:ca:0a:a2:3b:b6:4e: 5e:e2:f0:90:3f:b6:e0:58:a4:ca:47:80:a0:93:e2: 2a:eb:ee:96:a2:a5:82:94:ad:d9:c3:6a:af:5c:e1: a6:f6:32:1f:b2:d3:91:20:9b:9d:7e:fd:e2:27:b2: a4:22:07:f9:a5:13:a1:5f:9f:93:6d:a4:8c:12:38: f5:7f:37:ab:2e:fd:b0:3c:e8:d0:c4:e6:01:cf:2b: c1:53:0e:cd:7f:8a:1e:1e:9a:95:23:9d:c7:39:2c: f9:c2:30:1b:50:47:8c:64:e0:98:c4:c2:40:06:fc: 13:07:fa:71:23:16:01:27:0a:c9:00:ec:71:96:db: 10:48:89:9f:b2:4c:ef:ef:11:ac:53:dd:c7:f2:d6: 2c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:9D:4D:5D:2C:A9:EF:7D:15:02:1F:77:68:A4:EF:01:F0:AD:BF:9F X509v3 Authority Key Identifier: keyid:C8:B7:60:5A:76:DB:DD:11:CC:D3:1F:65:7A:0D:E4:54:C9:79:D9:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8B7605A76DBDD11CCD31F657A0DE454C979D939.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:8a:9f:46:61:2e:6a:d5:88:05:b7:d5:c0:50:c7:ed:9e:fd: 74:c0:19:aa:3c:0b:4f:f2:98:8d:4c:24:68:17:ba:8e:63:2f: c9:19:0d:c6:27:70:40:c0:79:2b:6f:0b:a8:56:10:2a:9e:88: a5:8a:89:1b:e2:f1:98:a4:77:85:9b:cd:41:0a:2b:ac:19:2f: 87:37:42:78:a7:a7:51:97:c7:f5:36:be:f5:64:4f:5e:d6:3a: f6:a7:5d:ee:02:30:c3:44:06:80:f5:f4:c3:0c:eb:27:02:f6: 3e:b0:39:29:8c:1c:e3:63:58:b3:e1:a8:df:40:be:c8:8f:b0: a5:cf:b6:76:c2:0b:08:67:78:94:34:9d:dc:14:5d:fe:af:0e: cd:8f:7f:7b:66:ab:be:6e:83:cb:b5:d3:27:22:f3:06:58:19: 8d:c9:92:60:76:9b:3f:e1:ab:82:55:eb:a5:94:8e:32:1b:cb: e7:ec:ab:1f:eb:88:4e:ae:ac:48:37:0b:66:56:30:28:f3:5b: 5e:a6:ad:ec:f1:52:0f:5e:8c:2d:69:dc:4a:64:84:a9:eb:87: 69:07:3e:6d:d4:4b:4f:a1:e8:b4:5f:d5:32:b3:9c:d7:06:71: 63:22:a1:21:23:3f:82:83:a0:de:62:40:f5:77:08:a0:56:6b: 20:4d:46:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbNbASNwIPfpmbnc7MkRs/PUTfhwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhCNzYwNUE3NkRCREQxMUNDRDMxRjY1N0EwREU0NTRD OTc5RDkzOTAeFw0yNTA1MDQwNjE2MzBaFw0yNTA1MDcwNzUwMzBaMDMxMTAvBgNV BAMTKDcxOUQ0RDVEMkNBOUVGN0QxNTAyMUY3NzY4QTRFRjAxRjBBREJGOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqATlWwoyGNNhfrNY8B8CpLTj7 zf7oHQ1lH5GRVN5xHHtkErv8k8SQLU22uD7D28+eWJB2cnzzlGhlIQglzqqzKEnq YcsXs1EAjGvCCvmrWaliK+jA24qtMVWgkn8divBeXP0J/IoKNFdM5ajjIEo6eMoK oju2Tl7i8JA/tuBYpMpHgKCT4irr7paipYKUrdnDaq9c4ab2Mh+y05Egm51+/eIn sqQiB/mlE6Ffn5NtpIwSOPV/N6su/bA86NDE5gHPK8FTDs1/ih4empUjncc5LPnC MBtQR4xk4JjEwkAG/BMH+nEjFgEnCskA7HGW2xBIiZ+yTO/vEaxT3cfy1izXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcZ1NXSyp730VAh93aKTvAfCtv58wHwYDVR0j BBgwFoAUyLdgWnbb3RHM0x9leg3kVMl52TkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ODM0OWNkNC1jMDc5LTQxZmYtYWE5ZS0zNmYzZDQ0ODI2NDUvMC9DOEI3NjA1QTc2 REJERDExQ0NEMzFGNjU3QTBERTQ1NEM5NzlEOTM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhCNzYwNUE3NkRCREQxMUNDRDMxRjY1N0EwREU0NTRDOTc5 RDkzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDgzNDljZDQtYzA3OS00MWZmLWFh OWUtMzZmM2Q0NDgyNjQ1LzAvQzhCNzYwNUE3NkRCREQxMUNDRDMxRjY1N0EwREU0 NTRDOTc5RDkzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKKKn0ZhLmrViAW31cBQx+2e/XTAGao8C0/y mI1MJGgXuo5jL8kZDcYncEDAeStvC6hWECqeiKWKiRvi8Zikd4WbzUEKK6wZL4c3 Qninp1GXx/U2vvVkT17WOvanXe4CMMNEBoD19MMM6ycC9j6wOSmMHONjWLPhqN9A vsiPsKXPtnbCCwhneJQ0ndwUXf6vDs2Pf3tmq75ug8u10yci8wZYGY3JkmB2mz/h q4JV66WUjjIby+fsqx/riE6urEg3C2ZWMCjzW16mrezxUg9ejC1p3EpkhKnrh2kH Pm3US0+h6LRf1TKznNcGcWMioSEjP4KDoN5iQPV3CKBWayBNRtk= -----END CERTIFICATE-----Generated at Mon May 5 22:25:19 2025 by rpki-client