$ rpki-client -vvf repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.mft File: 8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.mft (raw, json) Hash identifier: R9oVZnpewQhVk3R1hl2kntwtSzq7zFnlirPPxx6HJmU= Subject key identifier: FB:4F:4A:56:AD:62:4C:87:12:53:A1:41:9D:75:9D:5A:2E:23:E5:7C Authority key identifier: 86:94:CD:BB:52:F4:AE:A8:9A:F4:6C:A5:BF:A5:A6:39:97:3D:73:02 Certificate issuer: /CN=8694CDBB52F4AEA89AF46CA5BFA5A639973D7302 Certificate serial: 70C0AA842A170501886A0BD78F7325CAFDB821D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.mft Manifest number: 43 Signing time: Sat 23 Aug 2025 07:11:38 +0000 Manifest this update: Sat 23 Aug 2025 07:06:38 +0000 Manifest next update: Tue 26 Aug 2025 12:24:38 +0000 Files and hashes: 1: 8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.crl (hash: pZWmIfJMAzb7yeeWX+1xdRX136WSuerojjIk2QGZnXM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.crl rsync://repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:c0:aa:84:2a:17:05:01:88:6a:0b:d7:8f:73:25:ca:fd:b8:21:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8694CDBB52F4AEA89AF46CA5BFA5A639973D7302 Validity Not Before: Aug 23 07:06:38 2025 GMT Not After : Aug 26 12:24:38 2025 GMT Subject: CN=FB4F4A56AD624C871253A1419D759D5A2E23E57C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:45:38:9e:73:44:1f:11:72:3c:2f:5b:b1:df: ef:63:d1:39:18:bb:03:94:db:5c:e3:74:f0:75:53: f3:29:71:ee:98:ff:5a:f3:32:65:95:dc:3a:1c:c6: 0d:c8:12:f5:3b:6b:7b:20:80:24:a4:12:5c:a5:4c: 27:5f:14:fb:b9:68:34:b6:09:08:db:a5:25:7e:eb: bd:cf:60:b8:69:25:46:ab:23:6e:3c:c4:a8:ce:27: 49:52:84:7a:58:20:1e:32:fa:27:3f:d3:f1:01:65: 8e:93:1e:e0:9e:53:85:17:cb:c6:04:ca:76:a3:2a: 6b:7a:a8:81:49:ea:c9:16:6a:66:f2:7a:25:6d:b4: 4f:9d:7e:43:37:86:4f:a8:e5:9e:ea:3a:2d:75:43: 73:b4:47:ff:51:19:99:8c:18:55:c5:72:b3:39:06: 51:37:45:b6:b9:5d:1b:98:f9:2e:10:c4:3f:32:a7: 96:51:8c:08:5c:cb:26:55:91:35:1a:1c:f9:74:33: 5c:37:2f:22:9a:2c:89:2b:81:d9:39:79:08:64:7d: ff:c9:dc:49:41:f9:cf:33:3a:93:a1:c6:ca:14:13: 3f:de:47:9e:5f:c8:14:a2:38:5a:c0:55:37:1f:6e: 8a:48:2a:1a:c1:c0:74:d9:14:66:f4:97:2c:b1:90: 66:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:4F:4A:56:AD:62:4C:87:12:53:A1:41:9D:75:9D:5A:2E:23:E5:7C X509v3 Authority Key Identifier: keyid:86:94:CD:BB:52:F4:AE:A8:9A:F4:6C:A5:BF:A5:A6:39:97:3D:73:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dcf00f8a-5cbd-460f-bfc6-bd8942b6537c/0/8694CDBB52F4AEA89AF46CA5BFA5A639973D7302.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:b0:62:ab:7f:9e:1e:79:f5:fc:d1:bd:a7:a2:6c:ea:46:84: 62:54:9c:53:db:0c:11:59:6d:88:77:5b:dc:e2:00:83:a9:1c: fc:f5:5a:60:58:a5:a3:a1:dd:ae:ad:94:9c:92:d5:6c:f3:ae: 6c:44:da:05:73:97:5c:1c:17:8a:e8:01:10:82:67:d9:46:71: 95:72:2e:94:92:69:5e:4f:6d:0b:cd:9f:74:5c:41:9e:c2:13: 4d:d8:7a:62:20:73:60:70:f3:7d:83:08:13:97:19:31:7d:c6: a5:c9:60:ae:82:a1:68:5e:c1:36:bd:bd:d0:2e:3c:82:b6:fb: d4:3e:e9:00:bb:83:a9:80:c4:61:cd:1f:52:32:e3:14:2a:74: 55:cf:42:96:31:91:cb:d7:a3:42:ad:c8:d6:e8:dc:24:d0:98: 6d:96:e5:bd:80:e3:a1:81:72:37:2e:58:8e:47:73:8a:78:c8: 7d:33:22:15:e2:ff:ae:9e:0d:9b:83:f7:e2:ad:ad:5e:68:5b: 94:7a:2c:c2:23:e0:50:c3:8c:27:b6:0e:46:3f:8c:ca:e7:6d: d0:c9:26:44:c3:5a:b2:b5:88:06:6d:a1:91:78:73:ad:da:23: 69:86:b0:0d:40:e0:c8:a9:d2:0b:43:4a:56:c7:28:09:93:78: 6e:03:5b:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcMCqhCoXBQGIagvXj3Mlyv24IdUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY5NENEQkI1MkY0QUVBODlBRjQ2Q0E1QkZBNUE2Mzk5 NzNENzMwMjAeFw0yNTA4MjMwNzA2MzhaFw0yNTA4MjYxMjI0MzhaMDMxMTAvBgNV BAMTKEZCNEY0QTU2QUQ2MjRDODcxMjUzQTE0MTlENzU5RDVBMkUyM0U1N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnRTiec0QfEXI8L1ux3+9j0TkY uwOU21zjdPB1U/Mpce6Y/1rzMmWV3Docxg3IEvU7a3sggCSkElylTCdfFPu5aDS2 CQjbpSV+673PYLhpJUarI248xKjOJ0lShHpYIB4y+ic/0/EBZY6THuCeU4UXy8YE ynajKmt6qIFJ6skWambyeiVttE+dfkM3hk+o5Z7qOi11Q3O0R/9RGZmMGFXFcrM5 BlE3Rba5XRuY+S4QxD8yp5ZRjAhcyyZVkTUaHPl0M1w3LyKaLIkrgdk5eQhkff/J 3ElB+c8zOpOhxsoUEz/eR55fyBSiOFrAVTcfbopIKhrBwHTZFGb0lyyxkGaTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+09KVq1iTIcSU6FBnXWdWi4j5XwwHwYDVR0j BBgwFoAUhpTNu1L0rqia9Gylv6WmOZc9cwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Y2YwMGY4YS01Y2JkLTQ2MGYtYmZjNi1iZDg5NDJiNjUzN2MvMC84Njk0Q0RCQjUy RjRBRUE4OUFGNDZDQTVCRkE1QTYzOTk3M0Q3MzAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODY5NENEQkI1MkY0QUVBODlBRjQ2Q0E1QkZBNUE2Mzk5NzNE NzMwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGNmMDBmOGEtNWNiZC00NjBmLWJm YzYtYmQ4OTQyYjY1MzdjLzAvODY5NENEQkI1MkY0QUVBODlBRjQ2Q0E1QkZBNUE2 Mzk5NzNENzMwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEOwYqt/nh559fzRvaeibOpGhGJUnFPbDBFZ bYh3W9ziAIOpHPz1WmBYpaOh3a6tlJyS1WzzrmxE2gVzl1wcF4roARCCZ9lGcZVy LpSSaV5PbQvNn3RcQZ7CE03YemIgc2Bw832DCBOXGTF9xqXJYK6CoWhewTa9vdAu PIK2+9Q+6QC7g6mAxGHNH1Iy4xQqdFXPQpYxkcvXo0KtyNbo3CTQmG2W5b2A46GB cjcuWI5Hc4p4yH0zIhXi/66eDZuD9+KtrV5oW5R6LMIj4FDDjCe2DkY/jMrnbdDJ JkTDWrK1iAZtoZF4c63aI2mGsA1A4Mip0gtDSlbHKAmTeG4DW4o= -----END CERTIFICATE-----Generated at Sat Aug 23 12:25:20 2025 by rpki-client