$ rpki-client -vvf repo-rpki.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.mft File: 8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.mft (raw, json) Hash identifier: VrXa01xbIaCpQGOOEGjg9odSqJHEJZFeAqo0+WphTzc= Subject key identifier: 96:16:55:41:8B:1E:53:03:56:58:A4:9D:41:A3:11:B3:D6:D9:29:B4 Authority key identifier: 8C:C7:E4:A2:46:27:D0:11:FC:35:B3:FE:8B:6E:9A:25:C9:93:C6:EC Certificate issuer: /CN=8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC Certificate serial: 7A88710569ADF0F6D31225CC2B24B0230927B4DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.mft Manifest number: 3E Signing time: Sun 19 Oct 2025 12:01:12 +0000 Manifest this update: Sun 19 Oct 2025 11:56:12 +0000 Manifest next update: Wed 22 Oct 2025 21:05:12 +0000 Files and hashes: 1: 8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.crl (hash: kDOTgjhbW9hwimCxqRxan3c4ADGvWNHhLYDg3hVGODo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.crl rsync://repo-rpki.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:88:71:05:69:ad:f0:f6:d3:12:25:cc:2b:24:b0:23:09:27:b4:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC Validity Not Before: Oct 19 11:56:12 2025 GMT Not After : Oct 22 21:05:12 2025 GMT Subject: CN=961655418B1E53035658A49D41A311B3D6D929B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9c:36:a2:d8:f8:ad:62:13:4a:f8:0b:ea:e1: 7a:c6:7b:81:7d:7a:c5:64:5e:13:d7:bf:5c:6f:9f: 88:6b:e0:96:80:5c:61:3a:b0:fa:11:e6:e4:75:e9: c5:f2:19:aa:c5:40:b5:d7:06:ff:f0:7a:a1:18:ae: 6b:22:a4:d2:32:e4:75:ea:a0:a4:19:74:e1:92:33: 6c:68:1b:37:56:fd:4e:2c:58:db:c2:f2:82:ab:0d: a5:fb:de:c1:eb:65:15:d3:2a:d1:48:a5:8c:cc:a8: 2b:6a:3a:e5:5e:9a:db:0e:8b:29:d7:70:29:ba:81: cf:40:41:05:ad:e2:93:16:50:87:5e:74:13:17:13: c6:d3:d7:6e:88:9e:da:c4:04:7d:d3:aa:9c:5f:45: 0a:1c:be:ba:08:9e:f7:6e:3f:97:08:18:5f:5d:65: d0:72:77:77:ed:74:56:01:65:ab:3f:bf:56:7f:00: bc:4c:02:65:0d:ca:8e:e6:1e:10:ae:da:2b:b4:ee: ac:f4:49:f0:6a:13:28:70:0e:ab:50:34:ad:d3:6b: e2:94:8b:93:a6:45:eb:80:09:0c:47:c5:e6:81:13: 20:78:97:f9:01:86:58:19:c7:8f:b2:81:f3:26:32: df:6f:dd:9e:bd:df:3d:b6:58:82:1a:0a:d3:f5:42: d5:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:16:55:41:8B:1E:53:03:56:58:A4:9D:41:A3:11:B3:D6:D9:29:B4 X509v3 Authority Key Identifier: keyid:8C:C7:E4:A2:46:27:D0:11:FC:35:B3:FE:8B:6E:9A:25:C9:93:C6:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/8CC7E4A24627D011FC35B3FE8B6E9A25C993C6EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:6e:ca:85:ba:a8:4b:9c:f4:39:43:aa:3a:73:b2:f4:01:89: f9:1f:4c:c9:81:0d:7d:b0:d0:5e:97:87:75:52:8d:6f:a4:d4: 91:ac:e0:29:a9:fa:ef:79:50:7c:59:6a:90:b0:da:f2:2a:36: 62:48:b0:76:e3:91:be:5d:f7:5d:08:e2:9a:5e:46:3d:23:8a: 5c:98:c9:db:bb:f8:cf:12:16:0a:b7:b2:b7:db:5a:3d:c6:cb: 51:7c:bd:53:29:51:af:8a:74:e5:79:58:33:9b:75:31:fe:32: 30:2f:a7:70:32:83:3c:24:bf:ed:21:a6:fd:30:12:29:10:ec: a2:70:73:bf:97:94:8f:ea:6e:57:bf:a6:d7:80:32:c6:cc:d3: 44:5d:ea:fe:b8:4d:62:2d:64:c1:9f:53:d5:d0:37:46:40:de: b6:12:3f:06:87:3f:f0:c4:7a:97:40:dc:b1:36:b3:12:2f:3d: 17:08:7a:93:00:d4:e2:47:7c:bd:0e:42:47:e2:f9:61:ff:01: b6:82:c7:72:0f:18:16:38:07:42:1c:fc:10:e4:b3:83:79:44: ba:7b:ae:15:e8:63:1f:02:21:ff:b3:23:cb:08:27:e6:7a:bd: 79:63:53:12:91:d7:1b:01:18:8d:87:c7:5a:86:f3:fa:84:4a: 4e:f4:85:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeohxBWmt8PbTEiXMKySwIwkntNswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENDN0U0QTI0NjI3RDAxMUZDMzVCM0ZFOEI2RTlBMjVD OTkzQzZFQzAeFw0yNTEwMTkxMTU2MTJaFw0yNTEwMjIyMTA1MTJaMDMxMTAvBgNV BAMTKDk2MTY1NTQxOEIxRTUzMDM1NjU4QTQ5RDQxQTMxMUIzRDZEOTI5QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEnDai2PitYhNK+Avq4XrGe4F9 esVkXhPXv1xvn4hr4JaAXGE6sPoR5uR16cXyGarFQLXXBv/weqEYrmsipNIy5HXq oKQZdOGSM2xoGzdW/U4sWNvC8oKrDaX73sHrZRXTKtFIpYzMqCtqOuVemtsOiynX cCm6gc9AQQWt4pMWUIdedBMXE8bT126IntrEBH3TqpxfRQocvroInvduP5cIGF9d ZdByd3ftdFYBZas/v1Z/ALxMAmUNyo7mHhCu2iu07qz0SfBqEyhwDqtQNK3Ta+KU i5OmReuACQxHxeaBEyB4l/kBhlgZx4+ygfMmMt9v3Z693z22WIIaCtP1QtWrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlhZVQYseUwNWWKSdQaMRs9bZKbQwHwYDVR0j BBgwFoAUjMfkokYn0BH8NbP+i26aJcmTxuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Y2QyNTFjYS1hMDVlLTRmYmUtOTNiYi1iNTQ2OWFlZjk2YTIvMC84Q0M3RTRBMjQ2 MjdEMDExRkMzNUIzRkU4QjZFOUEyNUM5OTNDNkVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOENDN0U0QTI0NjI3RDAxMUZDMzVCM0ZFOEI2RTlBMjVDOTkz QzZFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWNkMjUxY2EtYTA1ZS00ZmJlLTkz YmItYjU0NjlhZWY5NmEyLzAvOENDN0U0QTI0NjI3RDAxMUZDMzVCM0ZFOEI2RTlB MjVDOTkzQzZFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABZuyoW6qEuc9DlDqjpzsvQBifkfTMmBDX2w 0F6Xh3VSjW+k1JGs4Cmp+u95UHxZapCw2vIqNmJIsHbjkb5d910I4ppeRj0jilyY ydu7+M8SFgq3srfbWj3Gy1F8vVMpUa+KdOV5WDObdTH+MjAvp3Aygzwkv+0hpv0w EikQ7KJwc7+XlI/qble/pteAMsbM00Rd6v64TWItZMGfU9XQN0ZA3rYSPwaHP/DE epdA3LE2sxIvPRcIepMA1OJHfL0OQkfi+WH/AbaCx3IPGBY4B0Ic/BDks4N5RLp7 rhXoYx8CIf+zI8sIJ+Z6vXljUxKR1xsBGI2Hx1qG8/qESk70hZU= -----END CERTIFICATE-----Generated at Mon Oct 20 20:19:17 2025 by rpki-client