$ rpki-client -vvf repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft File: 8E87AB0332210D864175F7A371230D7C6099AE30.mft (raw, json) Hash identifier: ZZzGD0LhUzgwDbu7dAD3WG09wmPlR56Wn29ChXOmYEs= Subject key identifier: 0E:D6:5B:6D:AD:92:69:B0:A1:EB:D4:60:8F:2A:29:27:B0:D0:53:AD Authority key identifier: 8E:87:AB:03:32:21:0D:86:41:75:F7:A3:71:23:0D:7C:60:99:AE:30 Certificate issuer: /CN=8E87AB0332210D864175F7A371230D7C6099AE30 Certificate serial: 272659E5DAECC13E427DC7EAA7A9E569A8897C7C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E87AB0332210D864175F7A371230D7C6099AE30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft Manifest number: 0216 Signing time: Wed 03 Sep 2025 03:31:42 +0000 Manifest this update: Wed 03 Sep 2025 03:26:42 +0000 Manifest next update: Sat 06 Sep 2025 13:29:42 +0000 Files and hashes: 1: 8E87AB0332210D864175F7A371230D7C6099AE30.crl (hash: Peny1QYtnS11bR0URgY3zAnQuPn5AAUKLM2UJY2z7q0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.crl rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E87AB0332210D864175F7A371230D7C6099AE30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 13:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:26:59:e5:da:ec:c1:3e:42:7d:c7:ea:a7:a9:e5:69:a8:89:7c:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E87AB0332210D864175F7A371230D7C6099AE30 Validity Not Before: Sep 3 03:26:42 2025 GMT Not After : Sep 6 13:29:42 2025 GMT Subject: CN=0ED65B6DAD9269B0A1EBD4608F2A2927B0D053AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7f:4f:05:a7:21:bf:e0:73:8c:aa:6b:fa:74: ba:3d:1d:c1:b3:bc:43:28:77:cd:c2:48:e3:e7:5f: 64:a0:76:a1:75:42:02:39:81:63:61:53:78:b3:b9: 11:8c:f1:97:31:7f:79:01:2e:f3:04:3a:8c:62:66: 22:47:f2:59:96:2a:09:a6:ee:07:8c:e3:81:e6:37: 58:9f:ee:08:2b:8b:b6:17:23:ce:86:8e:42:c8:05: f9:d1:cf:d1:08:13:92:74:21:4c:94:95:f3:76:d9: d4:46:cf:57:fe:ed:48:e4:3e:23:47:48:6a:28:72: 04:57:0a:e0:7a:97:70:86:7a:20:1b:d3:8d:32:f2: a2:2e:73:03:bf:b9:6b:ec:e1:ff:c8:67:72:d8:17: d2:26:99:9d:a2:96:db:b1:b6:74:a6:80:1a:23:cd: bc:36:b9:10:8c:39:06:5a:35:53:d3:7c:70:6d:7f: 80:c1:a2:38:ea:62:38:32:cd:e3:57:d4:80:47:10: fe:d4:3d:d4:1d:e5:ff:f1:15:a2:c2:b1:7c:74:41: 7b:c9:6f:29:8a:f4:25:5e:35:30:13:72:89:9d:39: 6b:20:b2:16:5c:7a:96:e3:79:af:1e:aa:f2:05:9a: 17:14:24:1b:2c:ac:83:bd:df:4e:15:00:c9:af:b3: 5f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:D6:5B:6D:AD:92:69:B0:A1:EB:D4:60:8F:2A:29:27:B0:D0:53:AD X509v3 Authority Key Identifier: keyid:8E:87:AB:03:32:21:0D:86:41:75:F7:A3:71:23:0D:7C:60:99:AE:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E87AB0332210D864175F7A371230D7C6099AE30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:a6:c9:3e:76:e8:35:03:a8:41:91:38:f1:d7:8b:ce:da:ad: 21:54:84:b4:78:14:54:5e:9b:32:88:06:5c:a8:75:db:60:18: 18:15:e2:a7:d9:0e:cf:ed:62:72:2c:56:a9:6b:96:33:30:45: 08:a7:14:29:a1:3d:75:c7:b7:e4:41:b5:3f:29:5a:98:cc:35: fb:8c:77:7a:01:3f:3a:49:e7:53:c8:1f:cc:3b:5a:47:fb:78: 57:73:22:bd:1e:21:f0:08:97:27:60:92:53:19:cf:44:88:b1: 76:bd:a5:18:10:73:2d:69:31:72:5f:3b:15:45:55:f8:4f:eb: 59:17:20:73:3b:99:5b:ea:c6:d8:b6:a1:e0:e5:1a:c7:5d:29: ca:ef:95:7a:d9:68:e3:40:1c:c0:e7:8f:22:11:6a:86:83:f0: 60:a5:46:c5:10:c6:2a:59:46:63:4e:4b:48:ca:d7:e8:37:63: 90:6b:aa:33:af:ed:51:8d:fe:1a:91:22:b8:b6:e3:4f:d2:ce: 1c:3a:c7:a2:e8:11:6e:e1:77:9f:6a:34:9d:12:80:18:f3:7b: 0c:62:2a:dc:fc:45:6f:84:7e:fe:74:19:b0:cd:7c:91:17:bd: 88:6b:75:b7:03:a3:12:29:9b:b7:b5:9b:ac:97:f9:99:2e:a4: 13:4b:37:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJyZZ5drswT5Cfcfqp6nlaaiJfHwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU4N0FCMDMzMjIxMEQ4NjQxNzVGN0EzNzEyMzBEN0M2 MDk5QUUzMDAeFw0yNTA5MDMwMzI2NDJaFw0yNTA5MDYxMzI5NDJaMDMxMTAvBgNV BAMTKDBFRDY1QjZEQUQ5MjY5QjBBMUVCRDQ2MDhGMkEyOTI3QjBEMDUzQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpf08FpyG/4HOMqmv6dLo9HcGz vEMod83CSOPnX2SgdqF1QgI5gWNhU3izuRGM8Zcxf3kBLvMEOoxiZiJH8lmWKgmm 7geM44HmN1if7ggri7YXI86GjkLIBfnRz9EIE5J0IUyUlfN22dRGz1f+7UjkPiNH SGoocgRXCuB6l3CGeiAb040y8qIucwO/uWvs4f/IZ3LYF9ImmZ2iltuxtnSmgBoj zbw2uRCMOQZaNVPTfHBtf4DBojjqYjgyzeNX1IBHEP7UPdQd5f/xFaLCsXx0QXvJ bymK9CVeNTATcomdOWsgshZcepbjea8eqvIFmhcUJBssrIO9304VAMmvs1/LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDtZbba2SabCh69RgjyopJ7DQU60wHwYDVR0j BBgwFoAUjoerAzIhDYZBdfejcSMNfGCZrjAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NTA0ZTRjNy03YTJkLTRkNjYtOGZiNC0yMDU1NjU3ODdmMjQvMC84RTg3QUIwMzMy MjEwRDg2NDE3NUY3QTM3MTIzMEQ3QzYwOTlBRTMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEU4N0FCMDMzMjIxMEQ4NjQxNzVGN0EzNzEyMzBEN0M2MDk5 QUUzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjUwNGU0YzctN2EyZC00ZDY2LThm YjQtMjA1NTY1Nzg3ZjI0LzAvOEU4N0FCMDMzMjIxMEQ4NjQxNzVGN0EzNzEyMzBE N0M2MDk5QUUzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAemyT526DUDqEGROPHXi87arSFUhLR4FFRe mzKIBlyoddtgGBgV4qfZDs/tYnIsVqlrljMwRQinFCmhPXXHt+RBtT8pWpjMNfuM d3oBPzpJ51PIH8w7Wkf7eFdzIr0eIfAIlydgklMZz0SIsXa9pRgQcy1pMXJfOxVF VfhP61kXIHM7mVvqxti2oeDlGsddKcrvlXrZaONAHMDnjyIRaoaD8GClRsUQxipZ RmNOS0jK1+g3Y5BrqjOv7VGN/hqRIri240/Szhw6x6LoEW7hd59qNJ0SgBjzewxi Ktz8RW+Efv50GbDNfJEXvYhrdbcDoxIpm7e1m6yX+ZkupBNLN8g= -----END CERTIFICATE-----Generated at Fri Sep 5 10:36:21 2025 by rpki-client