$ rpki-client -vvf repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.mft File: 8902A1A2A87110119F8477271D6D224973A35F04.mft (raw, json) Hash identifier: s7vpqqYtplwJdRbXjNLCxMLHsHezTTlEhdh4Yt/leIk= Subject key identifier: 7B:73:0D:95:00:71:E3:43:0A:1F:EC:B2:17:ED:03:63:1E:95:DA:28 Authority key identifier: 89:02:A1:A2:A8:71:10:11:9F:84:77:27:1D:6D:22:49:73:A3:5F:04 Certificate issuer: /CN=8902A1A2A87110119F8477271D6D224973A35F04 Certificate serial: 7DB447909C6C16CD137C798A9CA53961ABE9694C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8902A1A2A87110119F8477271D6D224973A35F04.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.mft Manifest number: 0279 Signing time: Tue 22 Jul 2025 07:30:02 +0000 Manifest this update: Tue 22 Jul 2025 07:25:02 +0000 Manifest next update: Fri 25 Jul 2025 18:01:02 +0000 Files and hashes: 1: 8902A1A2A87110119F8477271D6D224973A35F04.crl (hash: bG30739uhou56ZPemAskvQgCUod02+hD7MMz8K3WZ6Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.crl rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8902A1A2A87110119F8477271D6D224973A35F04.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 18:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:b4:47:90:9c:6c:16:cd:13:7c:79:8a:9c:a5:39:61:ab:e9:69:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8902A1A2A87110119F8477271D6D224973A35F04 Validity Not Before: Jul 22 07:25:02 2025 GMT Not After : Jul 25 18:01:02 2025 GMT Subject: CN=7B730D950071E3430A1FECB217ED03631E95DA28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:52:84:14:b7:4c:a2:bc:ea:b9:da:4f:16:78: fd:e4:e5:85:e1:41:23:c8:41:1c:bf:69:7d:76:4f: 4f:e4:ca:20:58:bd:06:a4:75:74:57:e3:94:c5:bb: 66:e5:bc:6f:92:05:5d:51:5b:1c:ae:41:77:c3:96: c6:d4:6a:13:98:8c:aa:1a:0d:3f:49:a8:45:84:01: 83:b9:2b:34:fd:d2:4d:21:53:cd:c6:b3:f1:d6:80: 16:68:71:a8:f9:74:08:05:96:cd:08:e2:c1:6b:79: 0f:dd:83:19:5d:69:84:38:2c:55:50:87:6f:9d:a0: 66:1f:7e:8a:94:73:f8:2d:d2:63:f7:fb:7e:0a:2d: ad:0e:5b:d0:ca:20:7a:eb:81:65:4b:e0:15:a6:8f: 46:6b:ff:57:46:ac:30:53:9a:3e:3d:26:b1:52:82: 47:81:a2:4b:9c:76:1a:e3:c8:45:c4:9d:3f:2f:31: aa:4f:91:54:64:37:8a:a4:58:3c:b0:99:0f:0e:b5: 0a:39:ea:15:83:09:d1:96:ed:ce:75:3d:06:6f:aa: e1:5b:b0:09:32:45:ed:f3:69:77:30:ef:63:22:27: a5:b1:20:bd:d4:b7:59:6e:99:8c:56:52:1a:21:87: b4:11:97:2f:42:79:f3:58:27:a9:03:b1:af:e8:ce: c4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:73:0D:95:00:71:E3:43:0A:1F:EC:B2:17:ED:03:63:1E:95:DA:28 X509v3 Authority Key Identifier: keyid:89:02:A1:A2:A8:71:10:11:9F:84:77:27:1D:6D:22:49:73:A3:5F:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8902A1A2A87110119F8477271D6D224973A35F04.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:a7:d2:48:c4:8c:a3:24:dd:fe:09:7a:ce:36:2c:0b:79:b0: 4a:ea:08:f4:5e:cc:8d:e1:e7:97:75:45:1d:42:0c:cf:13:d9: d0:d8:dd:65:73:15:a0:03:0a:5b:41:38:6a:17:0a:cb:fa:94: a3:b7:3f:78:77:24:41:74:d6:24:4c:ad:c7:64:e1:19:ff:d1: 58:84:62:86:28:bf:f0:b3:7a:d7:13:d3:e3:ce:a0:94:ad:4b: 48:88:57:65:d7:44:10:b4:cd:0b:eb:cc:e9:ea:64:c3:83:01: a8:a2:06:b0:54:72:74:26:ba:c7:5a:95:f0:52:a8:b0:13:ec: 5b:d3:1b:d8:92:0e:1a:30:4f:96:ff:e4:b8:23:9e:0b:d5:cf: 9f:27:99:7b:1d:05:dd:66:21:63:c1:35:70:7c:df:0b:54:40: 40:e7:ff:64:47:2b:59:7a:94:9f:86:ef:9d:dc:e0:f5:4b:a1: 9d:88:51:62:3a:28:19:de:11:da:0f:a8:c9:e7:18:9c:12:15: bf:64:de:86:a1:02:69:e5:69:23:5e:83:ab:8d:ab:99:ea:ed: b7:a2:00:ba:ed:11:2e:d6:75:71:fb:38:64:1b:7f:3a:e8:11: e8:0a:a6:08:cd:4e:01:c0:3a:d4:83:6a:35:79:41:bc:5d:39: 55:85:d7:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfbRHkJxsFs0TfHmKnKU5YavpaUwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkwMkExQTJBODcxMTAxMTlGODQ3NzI3MUQ2RDIyNDk3 M0EzNUYwNDAeFw0yNTA3MjIwNzI1MDJaFw0yNTA3MjUxODAxMDJaMDMxMTAvBgNV BAMTKDdCNzMwRDk1MDA3MUUzNDMwQTFGRUNCMjE3RUQwMzYzMUU5NURBMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7UoQUt0yivOq52k8WeP3k5YXh QSPIQRy/aX12T0/kyiBYvQakdXRX45TFu2blvG+SBV1RWxyuQXfDlsbUahOYjKoa DT9JqEWEAYO5KzT90k0hU83Gs/HWgBZocaj5dAgFls0I4sFreQ/dgxldaYQ4LFVQ h2+doGYffoqUc/gt0mP3+34KLa0OW9DKIHrrgWVL4BWmj0Zr/1dGrDBTmj49JrFS gkeBokucdhrjyEXEnT8vMapPkVRkN4qkWDywmQ8OtQo56hWDCdGW7c51PQZvquFb sAkyRe3zaXcw72MiJ6WxIL3Ut1lumYxWUhohh7QRly9CefNYJ6kDsa/ozsQ5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe3MNlQBx40MKH+yyF+0DYx6V2igwHwYDVR0j BBgwFoAUiQKhoqhxEBGfhHcnHW0iSXOjXwQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OTY1ZGQzOS00OGQwLTQ1NzgtOGZlNS02NmQ5NTMzODRlNTAvMC84OTAyQTFBMkE4 NzExMDExOUY4NDc3MjcxRDZEMjI0OTczQTM1RjA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODkwMkExQTJBODcxMTAxMTlGODQ3NzI3MUQ2RDIyNDk3M0Ez NUYwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzk2NWRkMzktNDhkMC00NTc4LThm ZTUtNjZkOTUzMzg0ZTUwLzAvODkwMkExQTJBODcxMTAxMTlGODQ3NzI3MUQ2RDIy NDk3M0EzNUYwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGin0kjEjKMk3f4Jes42LAt5sErqCPRezI3h 55d1RR1CDM8T2dDY3WVzFaADCltBOGoXCsv6lKO3P3h3JEF01iRMrcdk4Rn/0ViE YoYov/CzetcT0+POoJStS0iIV2XXRBC0zQvrzOnqZMODAaiiBrBUcnQmusdalfBS qLAT7FvTG9iSDhowT5b/5LgjngvVz58nmXsdBd1mIWPBNXB83wtUQEDn/2RHK1l6 lJ+G753c4PVLoZ2IUWI6KBneEdoPqMnnGJwSFb9k3oahAmnlaSNeg6uNq5nq7bei ALrtES7WdXH7OGQbfzroEegKpgjNTgHAOtSDajV5QbxdOVWF11k= -----END CERTIFICATE-----Generated at Wed Jul 23 02:02:13 2025 by rpki-client