$ rpki-client -vvf repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.mft File: 8902A1A2A87110119F8477271D6D224973A35F04.mft (raw, json) Hash identifier: pJkLqMaRONTB/fCj6OhwMrizL1jxmfqbXx9//U8SoB0= Subject key identifier: 3E:25:76:F1:3C:F2:C4:35:ED:F8:E3:34:1C:10:D4:DB:2D:F8:40:9B Authority key identifier: 89:02:A1:A2:A8:71:10:11:9F:84:77:27:1D:6D:22:49:73:A3:5F:04 Certificate issuer: /CN=8902A1A2A87110119F8477271D6D224973A35F04 Certificate serial: 2C84AAEFCC7CE2FD07C0C7F80AB0BC3226858839 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8902A1A2A87110119F8477271D6D224973A35F04.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.mft Manifest number: 0264 Signing time: Thu 05 Jun 2025 08:30:03 +0000 Manifest this update: Thu 05 Jun 2025 08:25:03 +0000 Manifest next update: Sun 08 Jun 2025 14:36:03 +0000 Files and hashes: 1: 8902A1A2A87110119F8477271D6D224973A35F04.crl (hash: RlVEB8OsbPBqLS9koF7jnIzX8tJ6RbSY+nVrk0vcG5E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.crl rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8902A1A2A87110119F8477271D6D224973A35F04.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 14:36:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:84:aa:ef:cc:7c:e2:fd:07:c0:c7:f8:0a:b0:bc:32:26:85:88:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8902A1A2A87110119F8477271D6D224973A35F04 Validity Not Before: Jun 5 08:25:03 2025 GMT Not After : Jun 8 14:36:03 2025 GMT Subject: CN=3E2576F13CF2C435EDF8E3341C10D4DB2DF8409B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fa:0a:e1:b3:14:20:56:5b:1c:d8:82:7f:0a: 8b:0e:76:31:73:62:37:54:23:17:15:d5:dd:f3:fe: 9f:60:1e:ad:07:c5:47:2d:07:46:58:fc:f1:3a:fe: b1:c2:3c:1c:33:f5:97:e9:ad:d4:0c:b0:be:d9:cd: 6d:56:c1:71:16:71:cd:67:17:a8:44:6c:2d:ed:01: ca:ca:96:1b:8c:ef:28:af:0a:ae:59:cb:fb:9d:2b: 58:81:5e:2a:5b:24:bf:b4:74:cc:e1:66:5e:f2:7d: a8:66:78:db:9a:61:a2:d7:49:90:a6:e4:3b:df:c9: 59:45:25:df:c8:fd:06:0a:d9:19:01:26:7a:bc:06: 31:5b:42:18:78:2b:d5:47:be:b3:e6:e3:51:7f:72: 3e:d9:d5:68:f8:7f:b8:85:6b:a4:c4:b6:36:a0:a2: 5b:04:6d:09:66:45:53:b5:c9:45:45:35:19:5b:6a: 0b:70:cb:a9:7f:34:8d:f8:29:ba:9b:a9:14:77:eb: d5:65:e2:de:5f:7d:41:e0:36:20:02:2a:23:0e:0c: 3e:09:d6:8b:84:87:6c:6e:21:9c:d4:96:fd:df:24: d2:54:aa:a9:58:77:30:9c:c7:13:56:2b:da:98:6e: 72:17:1f:c8:e5:bb:42:e5:c5:40:9c:7d:e7:a1:70: 53:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:25:76:F1:3C:F2:C4:35:ED:F8:E3:34:1C:10:D4:DB:2D:F8:40:9B X509v3 Authority Key Identifier: keyid:89:02:A1:A2:A8:71:10:11:9F:84:77:27:1D:6D:22:49:73:A3:5F:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8902A1A2A87110119F8477271D6D224973A35F04.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:24:56:5b:72:22:c3:23:a7:23:83:a5:33:e1:94:b8:83:8d: a2:7a:64:58:dd:e2:09:3b:fb:1b:57:b8:19:78:37:07:ad:81: 71:ce:91:12:63:1c:be:3c:0b:de:36:b6:99:76:fc:a1:fc:61: e2:a9:ec:4b:6d:7d:bd:02:63:54:b0:fc:10:63:d2:aa:ba:47: 3c:b7:f2:21:4a:89:dd:29:88:f1:17:27:78:3d:56:06:c5:9c: 3b:14:2e:f3:56:46:50:6a:ed:22:af:24:d5:0f:58:0c:71:be: 6f:36:bb:9e:e3:5f:42:ce:61:63:46:aa:25:5b:8d:02:66:bd: 70:43:9c:c3:ad:f7:e2:c1:0c:6a:79:e3:40:42:43:18:74:03: d2:7a:d3:eb:41:95:df:33:a0:b1:20:02:70:01:00:f8:b8:63: dd:f2:c1:e2:f2:55:6a:32:5e:7a:70:5a:0a:dd:81:6e:c4:50: a3:f4:14:5c:33:58:d2:00:c5:83:f6:2b:a1:62:9d:6f:71:5b: e3:2c:24:02:84:b1:6a:76:e7:07:cf:1b:98:c3:b3:a6:b1:79: ac:90:24:5c:bd:21:01:3b:8d:da:49:f3:fb:15:ff:ee:54:aa: 74:69:dc:f1:fb:51:56:d3:e2:86:f0:05:cf:2b:7a:f1:38:90: 08:35:07:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULISq78x84v0HwMf4CrC8MiaFiDkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkwMkExQTJBODcxMTAxMTlGODQ3NzI3MUQ2RDIyNDk3 M0EzNUYwNDAeFw0yNTA2MDUwODI1MDNaFw0yNTA2MDgxNDM2MDNaMDMxMTAvBgNV BAMTKDNFMjU3NkYxM0NGMkM0MzVFREY4RTMzNDFDMTBENERCMkRGODQwOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI+grhsxQgVlsc2IJ/CosOdjFz YjdUIxcV1d3z/p9gHq0HxUctB0ZY/PE6/rHCPBwz9ZfprdQMsL7ZzW1WwXEWcc1n F6hEbC3tAcrKlhuM7yivCq5Zy/udK1iBXipbJL+0dMzhZl7yfahmeNuaYaLXSZCm 5DvfyVlFJd/I/QYK2RkBJnq8BjFbQhh4K9VHvrPm41F/cj7Z1Wj4f7iFa6TEtjag olsEbQlmRVO1yUVFNRlbagtwy6l/NI34KbqbqRR369Vl4t5ffUHgNiACKiMODD4J 1ouEh2xuIZzUlv3fJNJUqqlYdzCcxxNWK9qYbnIXH8jlu0LlxUCcfeehcFPtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPiV28TzyxDXt+OM0HBDU2y34QJswHwYDVR0j BBgwFoAUiQKhoqhxEBGfhHcnHW0iSXOjXwQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OTY1ZGQzOS00OGQwLTQ1NzgtOGZlNS02NmQ5NTMzODRlNTAvMC84OTAyQTFBMkE4 NzExMDExOUY4NDc3MjcxRDZEMjI0OTczQTM1RjA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODkwMkExQTJBODcxMTAxMTlGODQ3NzI3MUQ2RDIyNDk3M0Ez NUYwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzk2NWRkMzktNDhkMC00NTc4LThm ZTUtNjZkOTUzMzg0ZTUwLzAvODkwMkExQTJBODcxMTAxMTlGODQ3NzI3MUQ2RDIy NDk3M0EzNUYwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHIkVltyIsMjpyODpTPhlLiDjaJ6ZFjd4gk7 +xtXuBl4NwetgXHOkRJjHL48C942tpl2/KH8YeKp7Ettfb0CY1Sw/BBj0qq6Rzy3 8iFKid0piPEXJ3g9VgbFnDsULvNWRlBq7SKvJNUPWAxxvm82u57jX0LOYWNGqiVb jQJmvXBDnMOt9+LBDGp540BCQxh0A9J60+tBld8zoLEgAnABAPi4Y93yweLyVWoy XnpwWgrdgW7EUKP0FFwzWNIAxYP2K6FinW9xW+MsJAKEsWp25wfPG5jDs6axeayQ JFy9IQE7jdpJ8/sV/+5UqnRp3PH7UVbT4obwBc8revE4kAg1B2A= -----END CERTIFICATE-----Generated at Fri Jun 6 16:49:08 2025 by rpki-client