$ rpki-client -vvf repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft File: C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft (raw, json) Hash identifier: 13/bvmajPe3+sYUyniRHa4tS5gMAWsrqjIW/J6yJxqs= Subject key identifier: AB:A1:5B:E3:DA:78:2B:8C:16:3C:55:57:EF:DE:14:2F:4E:CD:5C:19 Authority key identifier: C8:B7:60:5A:76:DB:DD:11:CC:D3:1F:65:7A:0D:E4:54:C9:79:D9:39 Certificate issuer: /CN=C8B7605A76DBDD11CCD31F657A0DE454C979D939 Certificate serial: 2C4B272BBB2631F5DFF00E77D6A5E110AE6E2AC5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8B7605A76DBDD11CCD31F657A0DE454C979D939.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft Manifest number: 04AD Signing time: Sun 19 Oct 2025 19:41:34 +0000 Manifest this update: Sun 19 Oct 2025 19:36:34 +0000 Manifest next update: Wed 22 Oct 2025 20:31:34 +0000 Files and hashes: 1: C8B7605A76DBDD11CCD31F657A0DE454C979D939.crl (hash: ZxEqpR56Y1biQfPTpQ8qHtjW5nVg6Yom2PcqOF4SsqQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.crl rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8B7605A76DBDD11CCD31F657A0DE454C979D939.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 20:31:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:4b:27:2b:bb:26:31:f5:df:f0:0e:77:d6:a5:e1:10:ae:6e:2a:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C8B7605A76DBDD11CCD31F657A0DE454C979D939 Validity Not Before: Oct 19 19:36:34 2025 GMT Not After : Oct 22 20:31:34 2025 GMT Subject: CN=ABA15BE3DA782B8C163C5557EFDE142F4ECD5C19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:53:00:97:b7:44:59:64:04:cf:9a:d6:6b:7d: 18:d3:2b:06:6d:fe:b8:b2:f1:e7:24:90:7b:f5:91: b3:6e:3c:be:f6:ab:b7:c2:ee:c0:30:dc:80:c8:8e: 17:7c:29:29:48:e9:d6:16:43:4d:8e:3f:fc:25:8c: fd:20:92:23:68:cb:cc:8b:e8:2e:36:9a:82:2a:44: b4:86:c2:03:c8:fd:b8:d1:83:b1:54:8e:b8:60:b4: ee:81:15:52:39:81:df:d9:04:8f:bc:7e:dd:f1:f0: 8f:0e:c0:4f:cd:c3:cd:69:91:df:a2:45:d0:3d:6d: 97:83:0c:50:b4:6c:3a:9d:f2:87:89:1e:c9:11:7d: cb:59:85:03:51:c3:d3:46:fe:9b:2a:0a:87:a3:0a: 2a:e4:1f:17:b3:2e:ba:9d:a9:5e:d9:12:b6:db:19: 4a:54:e8:ee:85:f1:bf:24:11:ec:5f:83:4c:a0:3d: 16:d4:f4:bd:19:0d:a8:cd:72:b5:9e:ab:14:52:19: 9b:22:bd:5d:38:3c:4f:e9:3d:9d:9d:29:c5:34:7b: 3d:bb:a4:a6:a1:b9:cf:0b:e2:ae:d6:21:b7:7d:3f: 5c:20:4f:b5:36:2c:45:84:00:7a:e1:12:d7:cb:f9: fa:2f:e3:ed:ec:94:0b:26:a5:f7:b0:30:53:dd:12: be:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:A1:5B:E3:DA:78:2B:8C:16:3C:55:57:EF:DE:14:2F:4E:CD:5C:19 X509v3 Authority Key Identifier: keyid:C8:B7:60:5A:76:DB:DD:11:CC:D3:1F:65:7A:0D:E4:54:C9:79:D9:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8B7605A76DBDD11CCD31F657A0DE454C979D939.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8349cd4-c079-41ff-aa9e-36f3d4482645/0/C8B7605A76DBDD11CCD31F657A0DE454C979D939.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:85:49:97:c6:55:82:be:dd:56:c9:85:4b:4c:ad:03:2a:57: ab:7d:89:44:d3:ec:07:b0:ae:ea:0d:4d:3a:94:29:22:0c:d3: cb:cd:5a:00:ae:a4:ab:8c:31:b3:6e:74:c7:e0:3c:92:48:d8: 14:a2:e5:48:0c:a0:e7:34:57:4f:40:75:4c:87:4c:eb:8f:8f: 88:11:b6:a9:e6:12:61:be:7e:a3:41:df:40:34:f6:f2:e6:83: 43:fe:13:83:9b:17:a8:64:0d:6b:51:29:3a:58:fb:5a:26:62: 6a:7a:25:f3:3c:79:10:79:05:67:ab:64:4a:7e:1a:9c:02:a9: 80:28:91:d7:bd:c3:27:40:79:c9:02:34:50:06:8e:4a:65:f3: 4a:2e:aa:45:0c:aa:69:97:d6:82:1f:81:b1:1c:f6:4c:ea:7c: 53:9d:74:f3:64:a9:aa:5e:0f:22:1c:ab:c1:5e:98:0c:da:0f: a4:09:80:14:58:35:88:6e:f4:17:46:5d:34:e7:81:9c:fa:16: 9f:89:58:df:b1:a9:47:a8:5d:52:cd:de:da:33:ff:6e:8f:36: 8b:32:05:b7:9b:23:14:b9:c8:98:d9:c8:cc:3a:a3:53:52:11: 65:50:fc:17:2c:20:36:c0:9d:1d:ab:03:52:25:9d:40:f9:4b: 0a:02:0a:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULEsnK7smMfXf8A531qXhEK5uKsUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzhCNzYwNUE3NkRCREQxMUNDRDMxRjY1N0EwREU0NTRD OTc5RDkzOTAeFw0yNTEwMTkxOTM2MzRaFw0yNTEwMjIyMDMxMzRaMDMxMTAvBgNV BAMTKEFCQTE1QkUzREE3ODJCOEMxNjNDNTU1N0VGREUxNDJGNEVDRDVDMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6UwCXt0RZZATPmtZrfRjTKwZt /riy8eckkHv1kbNuPL72q7fC7sAw3IDIjhd8KSlI6dYWQ02OP/wljP0gkiNoy8yL 6C42moIqRLSGwgPI/bjRg7FUjrhgtO6BFVI5gd/ZBI+8ft3x8I8OwE/Nw81pkd+i RdA9bZeDDFC0bDqd8oeJHskRfctZhQNRw9NG/psqCoejCirkHxezLrqdqV7ZErbb GUpU6O6F8b8kEexfg0ygPRbU9L0ZDajNcrWeqxRSGZsivV04PE/pPZ2dKcU0ez27 pKahuc8L4q7WIbd9P1wgT7U2LEWEAHrhEtfL+fov4+3slAsmpfewMFPdEr7NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq6Fb49p4K4wWPFVX794UL07NXBkwHwYDVR0j BBgwFoAUyLdgWnbb3RHM0x9leg3kVMl52TkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ODM0OWNkNC1jMDc5LTQxZmYtYWE5ZS0zNmYzZDQ0ODI2NDUvMC9DOEI3NjA1QTc2 REJERDExQ0NEMzFGNjU3QTBERTQ1NEM5NzlEOTM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzhCNzYwNUE3NkRCREQxMUNDRDMxRjY1N0EwREU0NTRDOTc5 RDkzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDgzNDljZDQtYzA3OS00MWZmLWFh OWUtMzZmM2Q0NDgyNjQ1LzAvQzhCNzYwNUE3NkRCREQxMUNDRDMxRjY1N0EwREU0 NTRDOTc5RDkzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIiFSZfGVYK+3VbJhUtMrQMqV6t9iUTT7Aew ruoNTTqUKSIM08vNWgCupKuMMbNudMfgPJJI2BSi5UgMoOc0V09AdUyHTOuPj4gR tqnmEmG+fqNB30A09vLmg0P+E4ObF6hkDWtRKTpY+1omYmp6JfM8eRB5BWerZEp+ GpwCqYAokde9wydAeckCNFAGjkpl80ouqkUMqmmX1oIfgbEc9kzqfFOddPNkqape DyIcq8FemAzaD6QJgBRYNYhu9BdGXTTngZz6Fp+JWN+xqUeoXVLN3toz/26PNosy BbebIxS5yJjZyMw6o1NSEWVQ/BcsIDbAnR2rA1IlnUD5SwoCCgg= -----END CERTIFICATE-----Generated at Mon Oct 20 14:38:41 2025 by rpki-client