$ rpki-client -vvf repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft File: 8E87AB0332210D864175F7A371230D7C6099AE30.mft (raw, json) Hash identifier: viVJwCK381Ev728/sJ4ZIBuKt9GlM72VDhZNQfkTuo8= Subject key identifier: CF:28:8C:23:84:37:D7:1E:20:FD:C6:31:08:43:04:62:C7:0B:66:15 Authority key identifier: 8E:87:AB:03:32:21:0D:86:41:75:F7:A3:71:23:0D:7C:60:99:AE:30 Certificate issuer: /CN=8E87AB0332210D864175F7A371230D7C6099AE30 Certificate serial: 7DFBAD69DEF1FCF1D756C7788A0BD7500CD5A364 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E87AB0332210D864175F7A371230D7C6099AE30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft Manifest number: 01EF Signing time: Sat 07 Jun 2025 01:01:43 +0000 Manifest this update: Sat 07 Jun 2025 00:56:43 +0000 Manifest next update: Tue 10 Jun 2025 02:27:43 +0000 Files and hashes: 1: 8E87AB0332210D864175F7A371230D7C6099AE30.crl (hash: SczeKQF60wNeJXIj9NsvJbTSmDFDqJ4U/RqhEr2yPvQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.crl rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E87AB0332210D864175F7A371230D7C6099AE30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 02:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:fb:ad:69:de:f1:fc:f1:d7:56:c7:78:8a:0b:d7:50:0c:d5:a3:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E87AB0332210D864175F7A371230D7C6099AE30 Validity Not Before: Jun 7 00:56:43 2025 GMT Not After : Jun 10 02:27:43 2025 GMT Subject: CN=CF288C238437D71E20FDC63108430462C70B6615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:61:9f:d9:2b:f2:c6:32:d9:ba:70:cb:05:ea: e8:3d:3f:4a:ab:72:a1:ed:42:fe:55:b0:08:49:b9: e5:52:99:4b:e3:8d:b0:67:e7:93:f9:78:ef:cb:41: 5e:75:b9:34:b6:98:1c:5d:fb:4e:e9:17:d0:c6:c8: c9:21:02:b0:45:f8:b8:29:01:4e:5e:56:f4:91:6f: ca:53:6a:94:91:72:d2:2c:36:41:ad:2c:bd:83:fe: c8:2d:12:0f:e9:f8:c0:92:2e:9b:25:96:f3:43:7e: 19:e1:78:3a:c1:a2:c4:42:9f:d8:d2:d1:16:63:d7: 1d:f1:dc:9a:ae:31:8f:1a:15:e0:44:34:dc:bf:a5: b0:7b:43:4a:8f:d8:6c:31:0c:fd:b4:1c:fa:96:7e: 6b:71:d0:48:86:63:43:a3:4b:52:93:40:c9:e8:c4: 24:0e:57:88:e8:56:30:f6:32:93:8a:d3:a2:60:ac: 6e:75:17:6a:9e:89:b1:1b:1f:fa:99:10:b1:de:ad: 04:ec:73:a3:46:31:8e:9e:7b:02:1f:9f:a0:da:32: 8c:15:6c:ea:02:d3:33:bb:8b:9b:ba:9e:74:fc:ec: d4:46:56:cb:62:06:6f:8b:b6:97:0a:3d:16:10:0c: 5a:f2:8b:ed:b0:d4:00:c2:63:e4:32:72:01:46:92: 9d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:28:8C:23:84:37:D7:1E:20:FD:C6:31:08:43:04:62:C7:0B:66:15 X509v3 Authority Key Identifier: keyid:8E:87:AB:03:32:21:0D:86:41:75:F7:A3:71:23:0D:7C:60:99:AE:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E87AB0332210D864175F7A371230D7C6099AE30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:90:ef:35:02:71:00:17:0c:75:95:04:23:25:28:b1:de:5c: ee:8c:21:92:da:b7:e2:d2:00:5d:b0:3d:9b:0c:8f:68:55:9d: 75:f5:bf:be:75:11:01:de:e9:82:73:2e:32:e6:50:52:a9:83: a0:e0:25:5a:28:85:2c:2a:5a:97:1d:8b:25:75:1a:41:8d:db: 0b:36:19:d1:93:3a:7d:10:c6:60:09:c8:66:d7:4d:7a:bc:9a: ba:b7:45:5c:c9:a4:bf:78:37:67:1d:c7:58:a4:c3:51:46:a0: 7d:94:d5:74:c0:4a:ef:a5:ff:d7:8d:21:48:95:7e:d4:3e:ae: ee:a5:da:0d:ba:f2:1b:40:3a:52:94:96:86:55:7f:c0:b0:4e: e1:b5:ae:95:f7:8a:aa:4f:44:d4:b4:98:f8:b6:d2:94:ba:bf: 71:e2:37:2a:6c:66:32:81:20:45:e3:3c:67:79:72:17:7d:04: 62:28:ec:d1:26:1b:ad:8c:8a:90:78:b2:8d:6b:14:5d:c9:c0: d6:89:94:df:2f:2e:ef:16:c9:a0:89:0a:62:1a:64:9c:e2:3b: 61:85:d8:3f:d7:2e:19:80:a4:a1:76:0f:05:e9:99:d7:4c:73: a6:be:98:15:ff:bb:8c:a8:9a:96:ec:68:4d:17:ef:74:42:19: 75:9e:6e:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUffutad7x/PHXVsd4igvXUAzVo2QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU4N0FCMDMzMjIxMEQ4NjQxNzVGN0EzNzEyMzBEN0M2 MDk5QUUzMDAeFw0yNTA2MDcwMDU2NDNaFw0yNTA2MTAwMjI3NDNaMDMxMTAvBgNV BAMTKENGMjg4QzIzODQzN0Q3MUUyMEZEQzYzMTA4NDMwNDYyQzcwQjY2MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLYZ/ZK/LGMtm6cMsF6ug9P0qr cqHtQv5VsAhJueVSmUvjjbBn55P5eO/LQV51uTS2mBxd+07pF9DGyMkhArBF+Lgp AU5eVvSRb8pTapSRctIsNkGtLL2D/sgtEg/p+MCSLpsllvNDfhnheDrBosRCn9jS 0RZj1x3x3JquMY8aFeBENNy/pbB7Q0qP2GwxDP20HPqWfmtx0EiGY0OjS1KTQMno xCQOV4joVjD2MpOK06JgrG51F2qeibEbH/qZELHerQTsc6NGMY6eewIfn6DaMowV bOoC0zO7i5u6nnT87NRGVstiBm+LtpcKPRYQDFryi+2w1ADCY+QycgFGkp0fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzyiMI4Q31x4g/cYxCEMEYscLZhUwHwYDVR0j BBgwFoAUjoerAzIhDYZBdfejcSMNfGCZrjAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NTA0ZTRjNy03YTJkLTRkNjYtOGZiNC0yMDU1NjU3ODdmMjQvMC84RTg3QUIwMzMy MjEwRDg2NDE3NUY3QTM3MTIzMEQ3QzYwOTlBRTMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEU4N0FCMDMzMjIxMEQ4NjQxNzVGN0EzNzEyMzBEN0M2MDk5 QUUzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjUwNGU0YzctN2EyZC00ZDY2LThm YjQtMjA1NTY1Nzg3ZjI0LzAvOEU4N0FCMDMzMjIxMEQ4NjQxNzVGN0EzNzEyMzBE N0M2MDk5QUUzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADaQ7zUCcQAXDHWVBCMlKLHeXO6MIZLat+LS AF2wPZsMj2hVnXX1v751EQHe6YJzLjLmUFKpg6DgJVoohSwqWpcdiyV1GkGN2ws2 GdGTOn0QxmAJyGbXTXq8mrq3RVzJpL94N2cdx1ikw1FGoH2U1XTASu+l/9eNIUiV ftQ+ru6l2g268htAOlKUloZVf8CwTuG1rpX3iqpPRNS0mPi20pS6v3HiNypsZjKB IEXjPGd5chd9BGIo7NEmG62MipB4so1rFF3JwNaJlN8vLu8WyaCJCmIaZJziO2GF 2D/XLhmApKF2DwXpmddMc6a+mBX/u4yompbsaE0X73RCGXWebtU= -----END CERTIFICATE-----Generated at Sat Jun 7 12:32:45 2025 by rpki-client