$ rpki-client -vvf repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft File: 8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft (raw, json) Hash identifier: hTaiGfjI1Uh5QHr41FvV67O9LznMoGF2Co6bUhbmmKo= Subject key identifier: 50:B8:C4:5A:A9:C3:B0:93:BC:69:E7:48:BF:09:A6:3D:AB:88:22:C7 Authority key identifier: 85:39:E1:27:E1:6B:79:3E:FD:92:AE:6E:FC:2B:FB:58:79:00:8F:AD Certificate issuer: /CN=8539E127E16B793EFD92AE6EFC2BFB5879008FAD Certificate serial: 383B53B9CE0CED30F017CA1984D042012051E2FC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft Manifest number: 90 Signing time: Sun 01 Jun 2025 22:01:44 +0000 Manifest this update: Sun 01 Jun 2025 21:56:44 +0000 Manifest next update: Thu 05 Jun 2025 05:33:44 +0000 Files and hashes: 1: 8539E127E16B793EFD92AE6EFC2BFB5879008FAD.crl (hash: cSWhcgP8MzoYl3xb8SvKoYgVeBUV0csxentX9s3rmBI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.crl rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 05:33:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:3b:53:b9:ce:0c:ed:30:f0:17:ca:19:84:d0:42:01:20:51:e2:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8539E127E16B793EFD92AE6EFC2BFB5879008FAD Validity Not Before: Jun 1 21:56:44 2025 GMT Not After : Jun 5 05:33:44 2025 GMT Subject: CN=50B8C45AA9C3B093BC69E748BF09A63DAB8822C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d6:55:c9:51:f5:22:35:bf:99:dd:c4:8f:9b: d2:ba:4e:8d:09:6d:b9:e9:d6:c1:4e:24:12:0d:05: 1a:73:5a:fa:8a:06:54:46:bd:15:1e:49:8b:00:93: 18:c0:36:16:d4:e6:b3:25:c5:a6:2a:ff:cb:7f:0d: 0f:20:c2:9e:f9:6d:e3:5e:19:d7:95:93:ed:6f:88: 46:2f:29:c8:b4:08:10:22:9f:86:00:c5:63:aa:7d: b8:88:94:af:03:41:6f:06:ee:d6:74:fa:6d:73:dc: 04:cd:4e:be:5e:41:73:ab:7e:5a:65:ac:28:5e:db: a9:c7:c7:6c:89:fb:28:ac:be:cc:c8:e3:1b:71:51: da:ed:07:a6:e7:ab:c0:5b:10:3c:d8:22:a5:47:58: 56:ac:96:f6:4b:4d:b9:e6:7b:36:5b:12:14:5b:f5: 7b:c2:5b:4b:48:78:51:c6:30:e8:58:1d:f2:69:29: e5:21:df:2a:8e:ec:7a:45:83:89:1d:90:0a:71:c5: 1b:0a:0b:3e:3c:72:b2:bc:a1:84:f6:59:96:0b:47: ed:55:9b:51:4f:27:30:ef:18:00:1f:49:44:27:0e: 60:f2:58:d4:1f:e1:61:75:16:4b:56:13:10:dd:eb: 5e:dd:6a:49:88:84:92:32:bc:81:d7:e9:d5:eb:be: bb:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:B8:C4:5A:A9:C3:B0:93:BC:69:E7:48:BF:09:A6:3D:AB:88:22:C7 X509v3 Authority Key Identifier: keyid:85:39:E1:27:E1:6B:79:3E:FD:92:AE:6E:FC:2B:FB:58:79:00:8F:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:87:96:0d:07:f7:cc:59:80:0a:c7:66:b0:e4:dc:71:89:03: 07:52:c7:cc:7f:6c:28:a8:8a:aa:59:d3:29:73:b9:1a:f6:78: 4e:28:29:79:ae:c4:8f:85:2e:14:df:c9:a6:c6:54:a0:d9:ce: 5a:73:a8:18:52:b2:8b:de:fa:c5:cf:ce:04:b2:8a:6e:8b:d7: d0:4d:92:12:06:a8:28:92:ff:53:80:49:c0:a7:37:1c:6b:26: db:12:80:03:58:ba:23:71:d0:ec:64:f2:83:cd:e1:21:54:00: c9:81:fc:41:1a:78:14:0c:25:9d:a2:24:78:50:d2:08:11:5b: 47:49:55:f7:f7:55:e3:f9:a1:a2:b2:86:79:a6:fe:48:cb:f0: db:f6:66:5b:51:3a:ff:92:ff:27:4b:67:ec:5b:cb:6e:80:25: 9b:89:38:62:ba:7b:46:44:51:65:b6:6d:57:da:7a:81:f5:34: 12:e0:93:b6:c4:13:21:70:7f:aa:7a:3f:b6:c0:9b:9a:5d:8d: bd:02:77:f9:39:83:c6:1e:e6:15:0c:5e:4b:e3:71:d8:ce:b4: de:6c:20:43:ac:88:80:81:eb:90:b3:c0:79:ea:9b:cd:c3:62: 21:1c:e1:33:97:c5:29:3e:2e:9c:e0:21:88:28:17:d8:54:15: f6:8a:c3:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUODtTuc4M7TDwF8oZhNBCASBR4vwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODUzOUUxMjdFMTZCNzkzRUZEOTJBRTZFRkMyQkZCNTg3 OTAwOEZBRDAeFw0yNTA2MDEyMTU2NDRaFw0yNTA2MDUwNTMzNDRaMDMxMTAvBgNV BAMTKDUwQjhDNDVBQTlDM0IwOTNCQzY5RTc0OEJGMDlBNjNEQUI4ODIyQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC91lXJUfUiNb+Z3cSPm9K6To0J bbnp1sFOJBINBRpzWvqKBlRGvRUeSYsAkxjANhbU5rMlxaYq/8t/DQ8gwp75beNe GdeVk+1viEYvKci0CBAin4YAxWOqfbiIlK8DQW8G7tZ0+m1z3ATNTr5eQXOrflpl rChe26nHx2yJ+yisvszI4xtxUdrtB6bnq8BbEDzYIqVHWFaslvZLTbnmezZbEhRb 9XvCW0tIeFHGMOhYHfJpKeUh3yqO7HpFg4kdkApxxRsKCz48crK8oYT2WZYLR+1V m1FPJzDvGAAfSUQnDmDyWNQf4WF1FktWExDd617dakmIhJIyvIHX6dXrvrv5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUULjEWqnDsJO8aedIvwmmPauIIscwHwYDVR0j BBgwFoAUhTnhJ+FreT79kq5u/Cv7WHkAj60wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OGE4ZWE3Zi0yZjYxLTQ0NmItOGI1MS01MTk0NWIwODJmYWEvMC84NTM5RTEyN0Ux NkI3OTNFRkQ5MkFFNkVGQzJCRkI1ODc5MDA4RkFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODUzOUUxMjdFMTZCNzkzRUZEOTJBRTZFRkMyQkZCNTg3OTAw OEZBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODhhOGVhN2YtMmY2MS00NDZiLThi NTEtNTE5NDViMDgyZmFhLzAvODUzOUUxMjdFMTZCNzkzRUZEOTJBRTZFRkMyQkZC NTg3OTAwOEZBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAKHlg0H98xZgArHZrDk3HGJAwdSx8x/bCio iqpZ0ylzuRr2eE4oKXmuxI+FLhTfyabGVKDZzlpzqBhSsove+sXPzgSyim6L19BN khIGqCiS/1OAScCnNxxrJtsSgANYuiNx0Oxk8oPN4SFUAMmB/EEaeBQMJZ2iJHhQ 0ggRW0dJVff3VeP5oaKyhnmm/kjL8Nv2ZltROv+S/ydLZ+xby26AJZuJOGK6e0ZE UWW2bVfaeoH1NBLgk7bEEyFwf6p6P7bAm5pdjb0Cd/k5g8Ye5hUMXkvjcdjOtN5s IEOsiICB65CzwHnqm83DYiEc4TOXxSk+LpzgIYgoF9hUFfaKwxs= -----END CERTIFICATE-----Generated at Tue Jun 3 23:12:09 2025 by rpki-client