$ rpki-client -vvf repo-rpki.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.mft File: 8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.mft (raw, json) Hash identifier: fwknJbK7ucm9P9uqgessnq7PeYxt+ixh56w4gZBzeDs= Subject key identifier: 6E:F0:33:14:ED:CD:FF:EA:D7:EA:7B:98:EA:05:C0:2D:78:76:A8:65 Authority key identifier: 8C:C7:E4:A2:46:27:D0:11:FC:35:B3:FE:8B:6E:9A:25:C9:93:C6:EC Certificate issuer: /CN=8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC Certificate serial: 6AEC167791DD7E82D093EFB53094AAE8C09941E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.mft Manifest number: 24 Signing time: Fri 22 Aug 2025 01:41:11 +0000 Manifest this update: Fri 22 Aug 2025 01:36:11 +0000 Manifest next update: Mon 25 Aug 2025 11:22:11 +0000 Files and hashes: 1: 8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.crl (hash: hZfeSEpZtAsBE3BK21WZGIEz4KVxvT0plCmon+KjIhI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.crl rsync://repo-rpki.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 11:22:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:ec:16:77:91:dd:7e:82:d0:93:ef:b5:30:94:aa:e8:c0:99:41:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC Validity Not Before: Aug 22 01:36:11 2025 GMT Not After : Aug 25 11:22:11 2025 GMT Subject: CN=6EF03314EDCDFFEAD7EA7B98EA05C02D7876A865 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c8:fe:48:cf:d1:25:a4:15:df:62:df:53:8b: a1:fd:df:ee:ef:c8:d6:6e:8c:55:8c:90:df:7b:26: e7:34:bd:6b:22:bb:42:f1:c5:0a:dc:39:2e:73:1b: d0:97:68:41:dd:5d:8f:2f:b7:c2:80:ea:98:74:d8: 7f:73:82:61:46:30:a7:5b:b1:bf:a3:c2:18:d2:ed: 51:fe:9e:33:90:57:f5:82:9f:33:8c:3d:29:ff:a6: 7a:aa:98:37:9c:3f:04:0e:49:bf:ac:05:bc:63:d8: 77:b6:15:86:61:3a:ab:8e:4a:0f:55:db:5a:c9:9f: 3b:d7:4d:3a:cd:fb:2b:68:a2:27:ed:19:22:33:d5: 2a:39:1f:9f:23:a7:d3:6a:70:9b:cf:b2:ba:c7:9a: 0a:3d:91:f0:d8:c7:61:5c:62:56:0b:cd:d8:90:b9: ad:be:a1:31:7d:09:2b:fb:f9:8a:b8:6d:7d:04:86: 41:96:08:c7:41:30:b2:ff:c9:3f:94:c0:a5:fa:a2: 81:9e:0b:99:6b:7b:ee:28:70:43:e8:81:6b:f0:96: 4a:6c:20:05:69:a4:5b:da:95:78:0d:ed:7c:d3:b1: 32:33:10:1f:23:99:90:6f:9b:76:47:ba:99:44:ba: e4:d1:ef:73:85:41:ac:8d:9b:b2:1b:d2:b7:30:94: 70:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:F0:33:14:ED:CD:FF:EA:D7:EA:7B:98:EA:05:C0:2D:78:76:A8:65 X509v3 Authority Key Identifier: keyid:8C:C7:E4:A2:46:27:D0:11:FC:35:B3:FE:8B:6E:9A:25:C9:93:C6:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:1d:73:0d:d8:18:55:c2:86:14:54:0f:93:93:43:d8:a8:13: 15:85:6f:8c:d7:d0:fb:59:11:4f:68:88:2a:74:f2:29:7c:71: 18:79:dd:4d:b6:7c:16:1d:78:f6:ac:13:82:86:e2:b2:11:3a: 44:42:c3:96:05:00:11:19:84:4f:a9:0f:56:07:e3:bc:23:f2: ca:04:1b:13:52:81:8c:35:bf:ef:91:57:7f:b0:66:e1:ad:ba: 27:21:cf:5e:03:45:7a:13:38:5e:28:cb:17:a6:24:9f:e9:13: 85:06:ca:02:14:b9:ce:18:05:13:89:92:a1:46:25:d1:3c:69: 10:d3:1d:98:85:2c:d8:aa:6e:de:ed:4b:97:11:f6:9c:62:ed: 89:e6:88:95:a4:a6:86:6a:3e:d4:1a:6d:a1:04:f2:0b:a5:df: a7:95:82:3d:5b:cf:30:1a:3d:8b:4e:11:bf:39:5a:b6:c0:32: b1:08:82:3f:09:88:c5:d1:82:05:75:be:17:7f:6e:7c:2e:5c: 69:79:77:44:ec:0e:66:d6:d6:7d:fe:05:db:26:d9:c4:d8:70: 86:1c:52:ec:e5:c7:bd:dd:25:c8:bc:9e:eb:d2:1b:89:30:2f: d6:5f:43:c4:29:d9:68:d1:e0:70:19:39:62:d7:f2:b7:39:0e: 52:5e:e0:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUauwWd5HdfoLQk++1MJSq6MCZQeEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENDN0U0QTI0NjI3RDAxMUZDMzVCM0ZFOEI2RTlBMjVD OTkzQzZFQzAeFw0yNTA4MjIwMTM2MTFaFw0yNTA4MjUxMTIyMTFaMDMxMTAvBgNV BAMTKDZFRjAzMzE0RURDREZGRUFEN0VBN0I5OEVBMDVDMDJENzg3NkE4NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+yP5Iz9ElpBXfYt9Ti6H93+7v yNZujFWMkN97Juc0vWsiu0LxxQrcOS5zG9CXaEHdXY8vt8KA6ph02H9zgmFGMKdb sb+jwhjS7VH+njOQV/WCnzOMPSn/pnqqmDecPwQOSb+sBbxj2He2FYZhOquOSg9V 21rJnzvXTTrN+ytooiftGSIz1So5H58jp9NqcJvPsrrHmgo9kfDYx2FcYlYLzdiQ ua2+oTF9CSv7+Yq4bX0EhkGWCMdBMLL/yT+UwKX6ooGeC5lre+4ocEPogWvwlkps IAVppFvalXgN7XzTsTIzEB8jmZBvm3ZHuplEuuTR73OFQayNm7Ib0rcwlHDDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbvAzFO3N/+rX6nuY6gXALXh2qGUwHwYDVR0j BBgwFoAUjMfkokYn0BH8NbP+i26aJcmTxuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Y2QyNTFjYS1hMDVlLTRmYmUtOTNiYi1iNTQ2OWFlZjk2YTIvMC84Q0M3RTRBMjQ2 MjdEMDExRkMzNUIzRkU4QjZFOUEyNUM5OTNDNkVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENDN0U0QTI0NjI3RDAxMUZDMzVCM0ZFOEI2RTlBMjVDOTkz QzZFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWNkMjUxY2EtYTA1ZS00ZmJlLTkz YmItYjU0NjlhZWY5NmEyLzAvOENDN0U0QTI0NjI3RDAxMUZDMzVCM0ZFOEI2RTlB MjVDOTkzQzZFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIcdcw3YGFXChhRUD5OTQ9ioExWFb4zX0PtZ EU9oiCp08il8cRh53U22fBYdePasE4KG4rIROkRCw5YFABEZhE+pD1YH47wj8soE GxNSgYw1v++RV3+wZuGtuichz14DRXoTOF4oyxemJJ/pE4UGygIUuc4YBROJkqFG JdE8aRDTHZiFLNiqbt7tS5cR9pxi7YnmiJWkpoZqPtQabaEE8gul36eVgj1bzzAa PYtOEb85WrbAMrEIgj8JiMXRggV1vhd/bnwuXGl5d0TsDmbW1n3+Bdsm2cTYcIYc Uuzlx73dJci8nuvSG4kwL9ZfQ8Qp2WjR4HAZOWLX8rc5DlJe4KM= -----END CERTIFICATE-----Generated at Sat Aug 23 10:15:18 2025 by rpki-client