$ rpki-client -vvf repo-rpki.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.mft File: 8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.mft (raw, json) Hash identifier: ao5oiYJSj02SGm8SgBakM1KukQrZ0rsfLQmYGt9PMmE= Subject key identifier: 7F:B2:13:0E:BE:D5:79:CC:2F:B7:AB:53:E3:E6:C5:4E:55:F2:8F:99 Authority key identifier: 8C:C7:E4:A2:46:27:D0:11:FC:35:B3:FE:8B:6E:9A:25:C9:93:C6:EC Certificate issuer: /CN=8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC Certificate serial: 063D1DE88013996E27F99C3413E82B4C19B1E467 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.mft Manifest number: 0C Signing time: Sat 28 Jun 2025 15:41:10 +0000 Manifest this update: Sat 28 Jun 2025 15:36:10 +0000 Manifest next update: Wed 02 Jul 2025 01:27:10 +0000 Files and hashes: 1: 8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.crl (hash: uFiSDkpIsgjiidm9mQBEAvzv90KUq1Z/6GDOS72fmuk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.crl rsync://repo-rpki.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 01:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:3d:1d:e8:80:13:99:6e:27:f9:9c:34:13:e8:2b:4c:19:b1:e4:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC Validity Not Before: Jun 28 15:36:10 2025 GMT Not After : Jul 2 01:27:10 2025 GMT Subject: CN=7FB2130EBED579CC2FB7AB53E3E6C54E55F28F99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:83:89:27:1f:43:f1:77:8c:98:05:3c:5b:1d: d4:0b:86:77:f9:78:56:a7:53:8d:18:c7:13:f1:4e: e4:cb:6f:0e:c0:5a:36:75:92:ab:2b:92:0e:6d:a3: 79:30:21:bf:7e:81:4e:e3:04:1c:17:de:2b:ea:01: 66:f9:fb:aa:b0:60:c2:57:9f:f5:3e:7f:5e:2d:39: d8:14:69:53:94:84:d7:54:14:1c:68:f7:f4:45:28: ed:00:f4:b7:6e:75:92:76:83:8a:35:42:c0:a1:c9: 56:55:d2:95:d7:c5:24:d6:00:a6:15:87:01:a6:55: 65:77:fa:63:f7:fe:c8:9f:59:17:a1:95:9c:ff:23: 1e:0f:d4:4c:00:63:c3:78:77:87:5c:ef:7d:f8:a6: 3d:82:94:02:0b:4e:27:08:ff:b6:ff:b4:d2:ef:16: ff:44:cf:b1:7a:08:4e:5b:19:cc:15:07:52:a3:d3: a1:0f:40:13:5a:3c:51:7a:1c:db:de:2a:ea:46:5b: e0:fe:11:fc:7c:93:a6:f3:49:7e:07:dd:54:bb:84: 5e:a8:93:8e:29:a3:02:b8:a9:c4:35:27:23:d2:6b: 36:f0:f8:86:4c:1a:71:7e:d9:62:f9:61:c5:d2:b6: 17:3b:ac:f6:2b:38:41:f8:ef:3a:ed:b3:02:1b:d7: ca:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:B2:13:0E:BE:D5:79:CC:2F:B7:AB:53:E3:E6:C5:4E:55:F2:8F:99 X509v3 Authority Key Identifier: keyid:8C:C7:E4:A2:46:27:D0:11:FC:35:B3:FE:8B:6E:9A:25:C9:93:C6:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:98:ff:04:38:f0:53:55:f4:71:d7:25:88:bf:0b:59:ec:f8: eb:44:8b:cf:a4:28:96:bc:1c:78:c7:8f:30:59:a0:2f:a6:d7: fa:b6:82:5b:2a:bd:87:bd:11:ec:95:a5:56:30:13:1b:3e:dd: 47:f1:af:8f:0b:56:dc:0f:d9:a6:79:a9:2a:ff:d1:e0:01:28: 16:c2:96:6b:2e:17:22:43:00:56:c5:c3:ce:1d:28:91:68:a4: 93:bd:48:1b:79:99:d1:80:5f:71:a6:98:76:da:ca:2b:31:e0: c7:6f:30:5b:0b:2b:12:23:ef:10:2f:27:12:20:f9:9d:2d:fc: 8e:bf:ec:98:f6:34:da:04:e9:01:66:a2:c1:02:68:cf:ed:89: 0d:4e:d0:6b:38:66:09:4a:24:1c:31:91:23:b4:9f:7d:bb:c4: b5:45:6d:6f:e6:cc:13:5f:0e:31:9c:71:48:d0:b7:2e:bb:2e: 9a:ff:dc:aa:46:b7:7d:76:f3:08:9d:ab:20:69:bc:1d:ea:d0: 32:7a:d5:38:96:30:fd:be:22:e4:1e:ac:37:78:b2:ce:f0:8a: 85:2f:f4:04:cc:2b:eb:7b:7f:61:b6:d0:bc:11:2d:76:45:94: a3:5b:b5:0b:d3:4d:78:17:d1:cf:2d:a7:9a:f0:21:c3:88:97: d9:07:e9:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBj0d6IATmW4n+Zw0E+grTBmx5GcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENDN0U0QTI0NjI3RDAxMUZDMzVCM0ZFOEI2RTlBMjVD OTkzQzZFQzAeFw0yNTA2MjgxNTM2MTBaFw0yNTA3MDIwMTI3MTBaMDMxMTAvBgNV BAMTKDdGQjIxMzBFQkVENTc5Q0MyRkI3QUI1M0UzRTZDNTRFNTVGMjhGOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCg4knH0Pxd4yYBTxbHdQLhnf5 eFanU40YxxPxTuTLbw7AWjZ1kqsrkg5to3kwIb9+gU7jBBwX3ivqAWb5+6qwYMJX n/U+f14tOdgUaVOUhNdUFBxo9/RFKO0A9LdudZJ2g4o1QsChyVZV0pXXxSTWAKYV hwGmVWV3+mP3/sifWRehlZz/Ix4P1EwAY8N4d4dc7334pj2ClAILTicI/7b/tNLv Fv9Ez7F6CE5bGcwVB1Kj06EPQBNaPFF6HNveKupGW+D+Efx8k6bzSX4H3VS7hF6o k44powK4qcQ1JyPSazbw+IZMGnF+2WL5YcXSthc7rPYrOEH47zrtswIb18o5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf7ITDr7Vecwvt6tT4+bFTlXyj5kwHwYDVR0j BBgwFoAUjMfkokYn0BH8NbP+i26aJcmTxuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Y2QyNTFjYS1hMDVlLTRmYmUtOTNiYi1iNTQ2OWFlZjk2YTIvMC84Q0M3RTRBMjQ2 MjdEMDExRkMzNUIzRkU4QjZFOUEyNUM5OTNDNkVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENDN0U0QTI0NjI3RDAxMUZDMzVCM0ZFOEI2RTlBMjVDOTkz QzZFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWNkMjUxY2EtYTA1ZS00ZmJlLTkz YmItYjU0NjlhZWY5NmEyLzAvOENDN0U0QTI0NjI3RDAxMUZDMzVCM0ZFOEI2RTlB MjVDOTkzQzZFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD2Y/wQ48FNV9HHXJYi/C1ns+OtEi8+kKJa8 HHjHjzBZoC+m1/q2glsqvYe9EeyVpVYwExs+3Ufxr48LVtwP2aZ5qSr/0eABKBbC lmsuFyJDAFbFw84dKJFopJO9SBt5mdGAX3GmmHbayisx4MdvMFsLKxIj7xAvJxIg +Z0t/I6/7Jj2NNoE6QFmosECaM/tiQ1O0Gs4ZglKJBwxkSO0n327xLVFbW/mzBNf DjGccUjQty67Lpr/3KpGt3128widqyBpvB3q0DJ61TiWMP2+IuQerDd4ss7wioUv 9ATMK+t7f2G20LwRLXZFlKNbtQvTTXgX0c8tp5rwIcOIl9kH6Sk= -----END CERTIFICATE-----Generated at Sun Jun 29 19:27:22 2025 by rpki-client