$ rpki-client -vvf repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft File: 8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft (raw, json) Hash identifier: 2s287D5Hy8DRGfmE192VSV3mkhZ+5GLE3Dr3ie1nzSY= Subject key identifier: BE:48:D4:04:48:8F:F4:13:04:D7:7F:2B:27:D7:90:81:E5:87:07:53 Authority key identifier: 85:39:E1:27:E1:6B:79:3E:FD:92:AE:6E:FC:2B:FB:58:79:00:8F:AD Certificate issuer: /CN=8539E127E16B793EFD92AE6EFC2BFB5879008FAD Certificate serial: 18AE42953DFB0066D606CD7FFEAC64E7F168CCDC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft Manifest number: CE Signing time: Sat 18 Oct 2025 06:21:45 +0000 Manifest this update: Sat 18 Oct 2025 06:16:45 +0000 Manifest next update: Tue 21 Oct 2025 11:19:45 +0000 Files and hashes: 1: 8539E127E16B793EFD92AE6EFC2BFB5879008FAD.crl (hash: tf2nhcp0kUh2sU2YFxKOnkMQbiPbSh93gpdM1CNhe/g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.crl rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 11:19:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:ae:42:95:3d:fb:00:66:d6:06:cd:7f:fe:ac:64:e7:f1:68:cc:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8539E127E16B793EFD92AE6EFC2BFB5879008FAD Validity Not Before: Oct 18 06:16:45 2025 GMT Not After : Oct 21 11:19:45 2025 GMT Subject: CN=BE48D404488FF41304D77F2B27D79081E5870753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:26:99:fd:4e:9c:a1:ec:ee:5c:5e:87:d1:04: a2:3c:c0:16:68:93:da:88:63:2c:8b:36:f2:57:14: 58:b7:b2:e9:83:58:2f:1a:67:23:0c:6d:51:9f:14: 4b:4a:b6:30:52:ca:b4:3e:0a:7e:7a:58:95:19:19: a3:3c:19:10:9c:02:e0:cd:b0:ff:44:44:90:41:30: e2:9e:5a:d3:38:9b:fc:89:63:28:a1:bd:f9:df:da: 23:85:50:c5:e4:36:e8:b0:f7:e0:2b:55:33:3a:ec: 58:c5:55:44:a9:f1:53:00:f6:02:d4:6e:a3:53:88: 92:95:f6:93:63:53:9a:8c:16:51:ec:54:7a:12:a3: 80:1a:03:1c:41:f8:1f:ab:20:2e:1c:e8:c2:46:f0: 5e:2c:67:06:6f:ec:9e:07:81:a6:64:2e:07:25:f8: 6c:4f:5a:c5:f7:08:58:93:43:df:e1:53:d0:b2:12: 51:78:89:b0:1a:5b:eb:8c:43:6a:e2:59:bb:35:57: 10:d5:15:b7:36:a4:41:c7:60:02:9b:70:5a:03:f5: 0e:db:25:61:1a:bd:85:8c:01:f5:11:1e:1d:14:99: 28:55:76:8e:72:83:e5:86:38:db:78:d7:ed:9a:43: 3a:3f:1c:33:9f:f1:49:32:85:1a:10:66:bf:e0:ee: 8c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:48:D4:04:48:8F:F4:13:04:D7:7F:2B:27:D7:90:81:E5:87:07:53 X509v3 Authority Key Identifier: keyid:85:39:E1:27:E1:6B:79:3E:FD:92:AE:6E:FC:2B:FB:58:79:00:8F:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e0:e8:13:b1:9b:22:50:f3:43:75:69:35:d0:4a:be:f4:c6:54: 4a:2b:7c:9a:3d:f1:50:ce:3d:f3:f2:03:02:c2:2c:ac:cc:ed: ac:cf:74:db:7f:fe:5a:c0:e8:b3:90:22:55:93:5e:75:fa:67: 66:1e:2d:b0:a4:fa:c4:3e:30:1f:47:9e:83:73:9e:52:f0:2d: 84:30:36:a2:95:1d:d4:f2:40:72:91:e6:ba:9f:62:ab:d2:72: c5:db:42:a5:9b:15:b1:d4:15:38:d9:c0:a3:6e:92:2f:eb:62: 24:aa:28:31:48:d8:f3:64:cc:a2:89:d8:f4:a8:3b:13:8d:3e: 83:f9:11:de:2c:2b:8b:59:95:82:37:b2:87:bc:0c:3c:de:2c: fb:de:a7:68:87:87:a7:65:25:d1:85:fa:ee:30:3b:56:f6:5a: 5e:d8:b9:11:ce:fb:4e:b1:e5:09:ae:60:56:56:51:82:dd:c1: d7:d9:eb:bf:d9:ee:08:a7:80:22:5a:72:e4:ae:5d:f0:cc:16: 06:12:cc:3b:17:ff:26:17:a2:f2:e3:b1:0e:8f:d6:26:d1:31: 7f:b0:f3:00:72:5a:20:c7:02:a6:06:04:06:5a:66:d2:82:69: 56:1a:68:44:21:b2:91:7b:62:b1:b3:74:95:bc:8a:d8:d4:76: 45:e1:3f:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGK5ClT37AGbWBs1//qxk5/FozNwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODUzOUUxMjdFMTZCNzkzRUZEOTJBRTZFRkMyQkZCNTg3 OTAwOEZBRDAeFw0yNTEwMTgwNjE2NDVaFw0yNTEwMjExMTE5NDVaMDMxMTAvBgNV BAMTKEJFNDhENDA0NDg4RkY0MTMwNEQ3N0YyQjI3RDc5MDgxRTU4NzA3NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2Jpn9Tpyh7O5cXofRBKI8wBZo k9qIYyyLNvJXFFi3sumDWC8aZyMMbVGfFEtKtjBSyrQ+Cn56WJUZGaM8GRCcAuDN sP9ERJBBMOKeWtM4m/yJYyihvfnf2iOFUMXkNuiw9+ArVTM67FjFVUSp8VMA9gLU bqNTiJKV9pNjU5qMFlHsVHoSo4AaAxxB+B+rIC4c6MJG8F4sZwZv7J4HgaZkLgcl +GxPWsX3CFiTQ9/hU9CyElF4ibAaW+uMQ2riWbs1VxDVFbc2pEHHYAKbcFoD9Q7b JWEavYWMAfURHh0UmShVdo5yg+WGONt41+2aQzo/HDOf8UkyhRoQZr/g7ox5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvkjUBEiP9BME138rJ9eQgeWHB1MwHwYDVR0j BBgwFoAUhTnhJ+FreT79kq5u/Cv7WHkAj60wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OGE4ZWE3Zi0yZjYxLTQ0NmItOGI1MS01MTk0NWIwODJmYWEvMC84NTM5RTEyN0Ux NkI3OTNFRkQ5MkFFNkVGQzJCRkI1ODc5MDA4RkFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODUzOUUxMjdFMTZCNzkzRUZEOTJBRTZFRkMyQkZCNTg3OTAw OEZBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODhhOGVhN2YtMmY2MS00NDZiLThi NTEtNTE5NDViMDgyZmFhLzAvODUzOUUxMjdFMTZCNzkzRUZEOTJBRTZFRkMyQkZC NTg3OTAwOEZBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAODoE7GbIlDzQ3VpNdBKvvTGVEorfJo98VDO PfPyAwLCLKzM7azPdNt//lrA6LOQIlWTXnX6Z2YeLbCk+sQ+MB9HnoNznlLwLYQw NqKVHdTyQHKR5rqfYqvScsXbQqWbFbHUFTjZwKNuki/rYiSqKDFI2PNkzKKJ2PSo OxONPoP5Ed4sK4tZlYI3soe8DDzeLPvep2iHh6dlJdGF+u4wO1b2Wl7YuRHO+06x 5QmuYFZWUYLdwdfZ67/Z7gingCJacuSuXfDMFgYSzDsX/yYXovLjsQ6P1ibRMX+w 8wByWiDHAqYGBAZaZtKCaVYaaEQhspF7YrGzdJW8itjUdkXhP8Q= -----END CERTIFICATE-----Generated at Sun Oct 19 15:25:38 2025 by rpki-client