$ rpki-client -vvf repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft File: 8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft (raw, json) Hash identifier: Cm3ZSS37fSFAcT+gqrqURKpG6kP1HculcQqLG1MACe4= Subject key identifier: AD:BC:1F:03:0C:E5:6B:95:F1:F0:6D:8E:66:E2:02:FB:34:0F:46:BA Authority key identifier: 85:39:E1:27:E1:6B:79:3E:FD:92:AE:6E:FC:2B:FB:58:79:00:8F:AD Certificate issuer: /CN=8539E127E16B793EFD92AE6EFC2BFB5879008FAD Certificate serial: 571E68747BCAA4016C3F2F2679ABD50C96F9BE23 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft Manifest number: 9D Signing time: Mon 30 Jun 2025 20:31:46 +0000 Manifest this update: Mon 30 Jun 2025 20:26:46 +0000 Manifest next update: Thu 03 Jul 2025 22:58:46 +0000 Files and hashes: 1: 8539E127E16B793EFD92AE6EFC2BFB5879008FAD.crl (hash: KdetT2od4nC2Jxq/LYMm2Ic7ZOPVeyb0ocQZyXzdG5I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.crl rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 22:58:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:1e:68:74:7b:ca:a4:01:6c:3f:2f:26:79:ab:d5:0c:96:f9:be:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8539E127E16B793EFD92AE6EFC2BFB5879008FAD Validity Not Before: Jun 30 20:26:46 2025 GMT Not After : Jul 3 22:58:46 2025 GMT Subject: CN=ADBC1F030CE56B95F1F06D8E66E202FB340F46BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:39:a4:0b:d8:00:f3:2f:01:94:f6:de:02:a0: 6d:13:ff:fb:4e:ff:d9:98:e4:10:93:09:5c:4a:20: ef:ce:ee:0a:a4:92:e6:e8:9d:16:d3:61:53:51:47: d6:db:f5:16:47:99:ad:ce:f2:10:9b:c3:a9:fa:b5: 5f:f8:09:b3:dd:7e:9d:ad:91:43:90:84:08:85:9b: c7:78:68:e8:b5:12:9e:f2:aa:57:c6:16:1a:cb:b7: 89:df:ac:63:ef:1c:a0:85:66:d0:f8:98:4b:4b:77: d7:60:5e:d1:3c:e8:67:70:9a:38:43:5d:a7:30:14: 3a:58:61:be:be:b0:47:57:71:8b:3d:d8:9f:41:9b: 1b:76:10:9d:5b:63:4c:8f:5f:10:60:be:57:61:3d: d7:96:6f:e6:a5:e6:d2:4e:03:06:6a:81:0e:b0:38: 75:eb:f5:a7:c0:00:74:b1:20:72:6d:33:a4:7e:cc: 70:c7:c8:70:f6:c9:49:cb:ed:aa:49:56:71:5a:b2: 1d:f2:cb:84:98:01:01:1b:31:36:41:32:73:0e:b1: 88:da:b4:0f:57:57:e8:78:cc:6a:32:7f:95:75:62: 6c:d8:a7:eb:30:a8:14:88:52:7a:fe:a5:12:bc:1f: 51:d2:5a:9a:49:26:13:21:98:24:77:b0:ee:02:43: 97:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:BC:1F:03:0C:E5:6B:95:F1:F0:6D:8E:66:E2:02:FB:34:0F:46:BA X509v3 Authority Key Identifier: keyid:85:39:E1:27:E1:6B:79:3E:FD:92:AE:6E:FC:2B:FB:58:79:00:8F:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:65:9d:b4:50:07:d7:48:a9:4d:c6:b4:b9:7b:11:a7:f4:56: 37:27:9b:8e:1a:6c:20:87:d8:4f:dc:76:e0:27:35:35:7e:8b: 62:2b:ff:87:a8:34:ae:47:af:52:03:fa:36:50:50:d5:6a:a3: 4b:d5:1a:16:c5:34:d5:20:49:3d:72:89:83:e1:40:53:12:96: 42:69:e9:f7:e4:47:f5:6e:b6:ac:50:a0:08:ab:3a:60:88:6e: 22:8a:37:f6:f6:c6:ee:61:bd:c3:9c:b7:f0:ed:43:23:7c:bd: 88:38:8e:47:9a:de:10:d3:5d:7b:13:eb:76:d5:ee:c0:ab:a2: 41:60:81:b3:79:02:ac:f6:3d:c5:c5:77:3d:7b:e2:15:fa:74: 0f:37:dc:1e:81:67:c1:37:54:f0:13:49:72:f7:94:17:f9:24: 50:67:a2:64:77:25:40:a9:79:b6:00:ec:35:03:f8:84:95:07: 6a:f3:25:80:77:8c:26:da:2a:97:a0:84:92:71:40:a0:3d:c1: 9a:9f:95:44:5d:7c:6e:7a:6c:34:12:81:e7:fa:fa:e6:cc:4f: 27:86:04:40:59:b9:7f:e2:89:df:c9:78:8f:25:0f:4e:96:b0: 89:e1:5c:44:b9:c2:8f:01:97:59:0d:c7:f8:8c:48:4a:43:6d: 6d:18:d6:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVx5odHvKpAFsPy8meavVDJb5viMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODUzOUUxMjdFMTZCNzkzRUZEOTJBRTZFRkMyQkZCNTg3 OTAwOEZBRDAeFw0yNTA2MzAyMDI2NDZaFw0yNTA3MDMyMjU4NDZaMDMxMTAvBgNV BAMTKEFEQkMxRjAzMENFNTZCOTVGMUYwNkQ4RTY2RTIwMkZCMzQwRjQ2QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUOaQL2ADzLwGU9t4CoG0T//tO /9mY5BCTCVxKIO/O7gqkkubonRbTYVNRR9bb9RZHma3O8hCbw6n6tV/4CbPdfp2t kUOQhAiFm8d4aOi1Ep7yqlfGFhrLt4nfrGPvHKCFZtD4mEtLd9dgXtE86GdwmjhD XacwFDpYYb6+sEdXcYs92J9Bmxt2EJ1bY0yPXxBgvldhPdeWb+al5tJOAwZqgQ6w OHXr9afAAHSxIHJtM6R+zHDHyHD2yUnL7apJVnFash3yy4SYAQEbMTZBMnMOsYja tA9XV+h4zGoyf5V1YmzYp+swqBSIUnr+pRK8H1HSWppJJhMhmCR3sO4CQ5fjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrbwfAwzla5Xx8G2OZuIC+zQPRrowHwYDVR0j BBgwFoAUhTnhJ+FreT79kq5u/Cv7WHkAj60wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OGE4ZWE3Zi0yZjYxLTQ0NmItOGI1MS01MTk0NWIwODJmYWEvMC84NTM5RTEyN0Ux NkI3OTNFRkQ5MkFFNkVGQzJCRkI1ODc5MDA4RkFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODUzOUUxMjdFMTZCNzkzRUZEOTJBRTZFRkMyQkZCNTg3OTAw OEZBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODhhOGVhN2YtMmY2MS00NDZiLThi NTEtNTE5NDViMDgyZmFhLzAvODUzOUUxMjdFMTZCNzkzRUZEOTJBRTZFRkMyQkZC NTg3OTAwOEZBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ5lnbRQB9dIqU3GtLl7Eaf0Vjcnm44abCCH 2E/cduAnNTV+i2Ir/4eoNK5Hr1ID+jZQUNVqo0vVGhbFNNUgST1yiYPhQFMSlkJp 6ffkR/VutqxQoAirOmCIbiKKN/b2xu5hvcOct/DtQyN8vYg4jkea3hDTXXsT63bV 7sCrokFggbN5Aqz2PcXFdz174hX6dA833B6BZ8E3VPATSXL3lBf5JFBnomR3JUCp ebYA7DUD+ISVB2rzJYB3jCbaKpeghJJxQKA9wZqflURdfG56bDQSgef6+ubMTyeG BEBZuX/iid/JeI8lD06WsInhXES5wo8Bl1kNx/iMSEpDbW0Y1kg= -----END CERTIFICATE-----Generated at Tue Jul 1 19:16:50 2025 by rpki-client