$ rpki-client -vvf repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft File: 8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft (raw, json) Hash identifier: bZZIxrvk8FQCR+KpjKiIulXMj9dAy30n5+E+NJP0KDU= Subject key identifier: 52:C3:78:E7:FD:B2:E5:30:26:43:2F:0B:E1:AA:50:69:F7:25:08:25 Authority key identifier: 85:39:E1:27:E1:6B:79:3E:FD:92:AE:6E:FC:2B:FB:58:79:00:8F:AD Certificate issuer: /CN=8539E127E16B793EFD92AE6EFC2BFB5879008FAD Certificate serial: 108513672EBF29E68C9BB2AAFCB3249D9DFF5089 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft Manifest number: 86 Signing time: Sat 10 May 2025 18:01:45 +0000 Manifest this update: Sat 10 May 2025 17:56:45 +0000 Manifest next update: Tue 13 May 2025 22:19:45 +0000 Files and hashes: 1: 8539E127E16B793EFD92AE6EFC2BFB5879008FAD.crl (hash: Xf2YYyux4dfml9XHcyqY7Vtk6mXh6Ex/PpqtF4MmBcI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.crl rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 22:19:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:85:13:67:2e:bf:29:e6:8c:9b:b2:aa:fc:b3:24:9d:9d:ff:50:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8539E127E16B793EFD92AE6EFC2BFB5879008FAD Validity Not Before: May 10 17:56:45 2025 GMT Not After : May 13 22:19:45 2025 GMT Subject: CN=52C378E7FDB2E53026432F0BE1AA5069F7250825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:17:59:8c:2e:b6:cc:0f:eb:b8:4b:94:32:7a: 66:b0:91:58:dd:7a:b1:64:51:c5:68:2b:39:cb:29: 45:a8:5a:e8:6a:bd:4f:3b:5a:9b:1d:2f:d6:06:03: b9:dd:05:4b:bf:57:e4:3e:08:e6:2a:fa:e5:4f:45: 60:79:5c:fc:61:b5:04:6c:07:4b:3c:e2:3e:e8:5c: e8:6e:d2:44:b0:e0:c8:16:04:47:46:d8:07:3b:69: 9f:32:26:d1:e1:1b:46:5e:5d:3c:67:7d:5d:6a:c3: 09:da:60:49:4d:5b:da:1f:1f:2f:a8:8b:61:10:ea: 0c:d4:1c:2d:d5:89:90:3c:43:cb:52:59:f1:52:42: 7d:8f:35:3f:7b:de:8c:85:aa:1e:b1:49:f2:0e:f1: 0e:20:c6:06:1d:65:d8:5c:70:07:0b:11:5b:74:67: f5:a4:1f:a1:14:e9:8b:b2:79:ca:42:a9:50:f7:04: fc:3e:6e:d0:c6:ce:01:1b:fa:0f:bd:60:4a:35:a1: d0:f3:26:47:41:1f:92:b7:09:6d:b9:88:70:b2:07: 62:97:e1:19:49:d7:76:59:fb:2b:ff:67:7e:75:03: d7:ab:33:2a:d2:f2:ef:a2:79:d2:e0:54:b6:03:b9: e0:c2:b2:0e:2a:f3:69:8f:89:ce:2d:6b:44:6d:3e: 28:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:C3:78:E7:FD:B2:E5:30:26:43:2F:0B:E1:AA:50:69:F7:25:08:25 X509v3 Authority Key Identifier: keyid:85:39:E1:27:E1:6B:79:3E:FD:92:AE:6E:FC:2B:FB:58:79:00:8F:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:5b:bd:d5:ce:88:bd:ad:78:17:2c:41:6f:f8:a3:18:d4:84: 2a:29:6b:05:c7:fc:17:3a:72:2e:9b:c1:c1:c0:ac:e1:99:6f: 18:2f:61:dc:a0:5a:c1:ea:f7:d4:ae:47:8f:36:3d:9f:8b:2e: 1b:fc:4f:98:4c:dd:19:e1:61:a3:a8:09:2d:13:57:db:c5:06: 6d:81:4b:6c:69:4d:8e:6e:2a:2a:6b:2d:25:9b:23:52:84:b4: 87:41:90:2f:62:d2:e6:9e:ae:3a:f9:e6:47:cd:17:42:9b:66: 2c:78:83:37:f8:bf:11:7c:01:4b:ae:64:5f:cf:57:21:b7:c8: 94:99:cd:7e:bb:75:72:c6:1b:e0:c6:9d:d8:32:91:21:32:72: 9f:44:4d:f4:aa:6d:ce:62:28:9e:71:86:9c:ef:12:43:38:ba: 1a:11:fd:b3:0b:83:c2:06:6d:eb:6a:78:77:70:70:5a:10:c4: 76:88:da:25:fa:5f:8b:cf:50:b5:40:cf:56:d4:e0:2d:81:11: 9a:b8:72:a2:74:ba:89:ea:17:b4:b5:9a:eb:1e:45:10:40:92: 6b:16:ce:2e:38:8f:6b:6a:c2:ef:19:fd:ee:ce:51:ed:ea:52: 03:93:0d:1d:f6:f0:b0:9d:12:6b:68:47:9f:41:59:d9:4a:30: 18:d1:f1:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEIUTZy6/KeaMm7Kq/LMknZ3/UIkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODUzOUUxMjdFMTZCNzkzRUZEOTJBRTZFRkMyQkZCNTg3 OTAwOEZBRDAeFw0yNTA1MTAxNzU2NDVaFw0yNTA1MTMyMjE5NDVaMDMxMTAvBgNV BAMTKDUyQzM3OEU3RkRCMkU1MzAyNjQzMkYwQkUxQUE1MDY5RjcyNTA4MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/F1mMLrbMD+u4S5QyemawkVjd erFkUcVoKznLKUWoWuhqvU87WpsdL9YGA7ndBUu/V+Q+COYq+uVPRWB5XPxhtQRs B0s84j7oXOhu0kSw4MgWBEdG2Ac7aZ8yJtHhG0ZeXTxnfV1qwwnaYElNW9ofHy+o i2EQ6gzUHC3ViZA8Q8tSWfFSQn2PNT973oyFqh6xSfIO8Q4gxgYdZdhccAcLEVt0 Z/WkH6EU6YuyecpCqVD3BPw+btDGzgEb+g+9YEo1odDzJkdBH5K3CW25iHCyB2KX 4RlJ13ZZ+yv/Z351A9erMyrS8u+iedLgVLYDueDCsg4q82mPic4ta0RtPiiNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUsN45/2y5TAmQy8L4apQafclCCUwHwYDVR0j BBgwFoAUhTnhJ+FreT79kq5u/Cv7WHkAj60wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OGE4ZWE3Zi0yZjYxLTQ0NmItOGI1MS01MTk0NWIwODJmYWEvMC84NTM5RTEyN0Ux NkI3OTNFRkQ5MkFFNkVGQzJCRkI1ODc5MDA4RkFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODUzOUUxMjdFMTZCNzkzRUZEOTJBRTZFRkMyQkZCNTg3OTAw OEZBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODhhOGVhN2YtMmY2MS00NDZiLThi NTEtNTE5NDViMDgyZmFhLzAvODUzOUUxMjdFMTZCNzkzRUZEOTJBRTZFRkMyQkZC NTg3OTAwOEZBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALFbvdXOiL2teBcsQW/4oxjUhCopawXH/Bc6 ci6bwcHArOGZbxgvYdygWsHq99SuR482PZ+LLhv8T5hM3RnhYaOoCS0TV9vFBm2B S2xpTY5uKiprLSWbI1KEtIdBkC9i0uaerjr55kfNF0KbZix4gzf4vxF8AUuuZF/P VyG3yJSZzX67dXLGG+DGndgykSEycp9ETfSqbc5iKJ5xhpzvEkM4uhoR/bMLg8IG betqeHdwcFoQxHaI2iX6X4vPULVAz1bU4C2BEZq4cqJ0uonqF7S1museRRBAkmsW zi44j2tqwu8Z/e7OUe3qUgOTDR328LCdEmtoR59BWdlKMBjR8bI= -----END CERTIFICATE-----Generated at Mon May 12 07:42:30 2025 by rpki-client