$ rpki-client -vvf repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft File: 8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft (raw, json) Hash identifier: /XDZR6fO5NhhlwkApfUnU1a6MivhdxNI32EkCdui1k4= Subject key identifier: 2E:44:12:CE:5A:E5:A4:AD:CE:7E:30:69:60:70:83:D8:19:AC:1C:3F Authority key identifier: 85:39:E1:27:E1:6B:79:3E:FD:92:AE:6E:FC:2B:FB:58:79:00:8F:AD Certificate issuer: /CN=8539E127E16B793EFD92AE6EFC2BFB5879008FAD Certificate serial: 5C89DCA788401816FA0AFBF717A8AB4C442D23F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft Manifest number: A7 Signing time: Tue 22 Jul 2025 20:31:51 +0000 Manifest this update: Tue 22 Jul 2025 20:26:51 +0000 Manifest next update: Sat 26 Jul 2025 03:03:51 +0000 Files and hashes: 1: 8539E127E16B793EFD92AE6EFC2BFB5879008FAD.crl (hash: i4FJ0/MOQajIRS/Z2ddByl6HIqkpD+/7FwQWgSdzYgM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.crl rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 03:03:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:89:dc:a7:88:40:18:16:fa:0a:fb:f7:17:a8:ab:4c:44:2d:23:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8539E127E16B793EFD92AE6EFC2BFB5879008FAD Validity Not Before: Jul 22 20:26:51 2025 GMT Not After : Jul 26 03:03:51 2025 GMT Subject: CN=2E4412CE5AE5A4ADCE7E3069607083D819AC1C3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:94:4c:b5:99:d6:85:38:a0:54:44:17:00:73: e2:ec:e3:db:81:e7:3c:8b:b8:c9:2b:8e:ee:2d:e1: 0e:97:3c:d9:bc:b8:4b:96:01:65:5d:8b:e2:2c:b6: f7:2d:80:ea:15:d5:34:bf:5f:10:57:0d:f7:ce:d0: 78:3b:18:9c:46:cf:9d:8b:6e:ee:39:a7:8c:5c:c6: 99:14:98:b6:23:36:d0:6b:c1:99:c5:6e:1b:31:70: f3:5d:cb:11:a8:51:0f:b9:4a:f9:ea:7e:b2:0f:98: d1:4c:a4:01:2b:f3:b0:e7:8c:14:29:74:ba:33:e3: 7f:e3:d8:25:6b:d1:f9:ca:17:f3:6e:a0:da:41:3e: 99:99:c8:08:84:8b:c5:b9:1d:f6:04:db:80:e0:2f: 06:7f:6d:08:69:0f:8b:78:c6:5f:ea:92:4a:c4:06: c1:5d:64:6e:38:aa:08:35:83:36:37:bb:70:82:6c: ea:4e:e6:b1:b2:bb:a7:8b:35:a0:56:5b:05:85:1f: ba:00:55:d4:ff:0f:4e:95:07:5f:57:7d:15:ec:c6: f1:55:14:1e:9f:40:ac:47:a9:3c:38:e8:83:f6:c8: 64:63:7a:2b:c7:3a:ef:f1:4e:d6:1e:1a:d8:8f:0b: 75:ba:b4:25:85:7f:55:01:50:aa:63:87:52:5a:18: ae:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:44:12:CE:5A:E5:A4:AD:CE:7E:30:69:60:70:83:D8:19:AC:1C:3F X509v3 Authority Key Identifier: keyid:85:39:E1:27:E1:6B:79:3E:FD:92:AE:6E:FC:2B:FB:58:79:00:8F:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:cc:d7:70:1f:26:d3:b7:d3:d5:15:fd:83:82:3c:82:6b:4e: 3a:6c:74:4e:01:82:d4:72:d6:97:89:d5:41:e1:4d:f3:b1:12: c3:b7:aa:52:56:17:69:87:c1:10:2b:72:ce:b5:11:8d:07:f1: 0c:ac:c0:ff:29:6f:90:71:ed:cd:ed:0e:43:96:7f:a5:4c:ca: d3:66:b8:42:cf:69:b2:90:c4:81:eb:36:4a:87:9c:47:ed:af: c4:be:66:d2:ec:95:54:7c:dc:a1:e0:46:fe:46:71:91:ee:55: 98:f2:39:3b:f2:19:51:6a:56:50:fb:5e:2b:2a:ec:d0:7c:24: 8b:e2:b6:02:51:cf:51:06:c4:d9:58:ac:7a:23:90:1d:e8:79: bd:3f:69:70:40:50:17:10:15:68:d1:ae:cd:c2:7d:f8:75:cd: 3a:94:01:cb:41:40:7c:3b:52:fc:f3:4a:d0:72:94:4f:2f:57: a2:da:4c:d2:39:6d:e2:a4:54:3a:82:e9:a1:47:b2:21:67:75: 6b:d9:33:7f:62:3b:3a:dc:5a:7b:33:ce:a3:e2:ab:eb:2b:6d: d0:c4:63:c4:10:bb:bf:43:59:95:3c:f4:1b:30:a4:cb:43:dc: fe:7e:e2:89:21:b4:38:66:a8:1c:e4:67:91:b3:94:f3:06:93: 89:7c:80:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXIncp4hAGBb6Cvv3F6irTEQtI/YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODUzOUUxMjdFMTZCNzkzRUZEOTJBRTZFRkMyQkZCNTg3 OTAwOEZBRDAeFw0yNTA3MjIyMDI2NTFaFw0yNTA3MjYwMzAzNTFaMDMxMTAvBgNV BAMTKDJFNDQxMkNFNUFFNUE0QURDRTdFMzA2OTYwNzA4M0Q4MTlBQzFDM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTlEy1mdaFOKBURBcAc+Ls49uB 5zyLuMkrju4t4Q6XPNm8uEuWAWVdi+IstvctgOoV1TS/XxBXDffO0Hg7GJxGz52L bu45p4xcxpkUmLYjNtBrwZnFbhsxcPNdyxGoUQ+5SvnqfrIPmNFMpAEr87DnjBQp dLoz43/j2CVr0fnKF/NuoNpBPpmZyAiEi8W5HfYE24DgLwZ/bQhpD4t4xl/qkkrE BsFdZG44qgg1gzY3u3CCbOpO5rGyu6eLNaBWWwWFH7oAVdT/D06VB19XfRXsxvFV FB6fQKxHqTw46IP2yGRjeivHOu/xTtYeGtiPC3W6tCWFf1UBUKpjh1JaGK4ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULkQSzlrlpK3OfjBpYHCD2BmsHD8wHwYDVR0j BBgwFoAUhTnhJ+FreT79kq5u/Cv7WHkAj60wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OGE4ZWE3Zi0yZjYxLTQ0NmItOGI1MS01MTk0NWIwODJmYWEvMC84NTM5RTEyN0Ux NkI3OTNFRkQ5MkFFNkVGQzJCRkI1ODc5MDA4RkFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODUzOUUxMjdFMTZCNzkzRUZEOTJBRTZFRkMyQkZCNTg3OTAw OEZBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODhhOGVhN2YtMmY2MS00NDZiLThi NTEtNTE5NDViMDgyZmFhLzAvODUzOUUxMjdFMTZCNzkzRUZEOTJBRTZFRkMyQkZC NTg3OTAwOEZBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEnM13AfJtO309UV/YOCPIJrTjpsdE4BgtRy 1peJ1UHhTfOxEsO3qlJWF2mHwRArcs61EY0H8QyswP8pb5Bx7c3tDkOWf6VMytNm uELPabKQxIHrNkqHnEftr8S+ZtLslVR83KHgRv5GcZHuVZjyOTvyGVFqVlD7Xisq 7NB8JIvitgJRz1EGxNlYrHojkB3oeb0/aXBAUBcQFWjRrs3Cffh1zTqUActBQHw7 UvzzStBylE8vV6LaTNI5beKkVDqC6aFHsiFndWvZM39iOzrcWnszzqPiq+srbdDE Y8QQu79DWZU89BswpMtD3P5+4okhtDhmqBzkZ5GzlPMGk4l8gDA= -----END CERTIFICATE-----Generated at Wed Jul 23 12:26:55 2025 by rpki-client