$ rpki-client -vvf repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft File: 8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft (raw, json) Hash identifier: XLRb/Dwh8yDwX7KNNgfVZsyQy8sL5wigl0kkBtuSFVA= Subject key identifier: A1:94:66:C5:E0:61:F7:42:9F:AC:D9:5A:6E:4F:BF:69:23:60:BF:F4 Authority key identifier: 85:39:E1:27:E1:6B:79:3E:FD:92:AE:6E:FC:2B:FB:58:79:00:8F:AD Certificate issuer: /CN=8539E127E16B793EFD92AE6EFC2BFB5879008FAD Certificate serial: 73480D7025D994C6752B0F50BE0510C22B7B9150 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft Manifest number: B4 Signing time: Thu 21 Aug 2025 21:21:48 +0000 Manifest this update: Thu 21 Aug 2025 21:16:48 +0000 Manifest next update: Sun 24 Aug 2025 22:43:48 +0000 Files and hashes: 1: 8539E127E16B793EFD92AE6EFC2BFB5879008FAD.crl (hash: GS1N1o5Gir/5lko6RvWC81Mvs3x5V9cEZ1hJnBtjy/E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.crl rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 22:43:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:48:0d:70:25:d9:94:c6:75:2b:0f:50:be:05:10:c2:2b:7b:91:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8539E127E16B793EFD92AE6EFC2BFB5879008FAD Validity Not Before: Aug 21 21:16:48 2025 GMT Not After : Aug 24 22:43:48 2025 GMT Subject: CN=A19466C5E061F7429FACD95A6E4FBF692360BFF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:1e:f9:10:e1:0a:49:f2:0b:52:c0:59:77:e5: cf:a0:e3:67:1c:01:62:da:75:33:e9:de:44:1c:9a: 3b:a2:a1:03:a3:da:88:38:a8:52:f9:a1:85:d8:6e: 5d:6c:a1:32:8a:f9:eb:40:89:81:e3:4d:3e:86:de: 50:d9:29:9a:75:7c:8b:d4:a4:81:fd:ba:f2:3e:0f: 4e:f7:e3:07:e6:7d:70:b7:fe:28:cb:4a:31:37:10: 73:a4:5a:d8:a5:d0:bd:2c:a5:ce:74:c9:e1:d0:dd: 35:8e:95:0c:2f:7d:73:22:be:43:07:cf:59:58:0e: 9b:36:fd:80:9c:7f:f6:30:a2:11:fe:51:72:ec:a6: 82:9e:6d:e7:a6:63:e2:25:34:4e:0b:63:2b:92:b5: 90:a1:41:c7:b5:f9:08:70:89:32:50:95:29:ba:08: b3:ab:ee:cd:80:d7:e1:be:43:e0:e4:22:f4:95:b7: 0b:ee:71:58:7f:82:0c:e4:98:12:19:e2:30:cd:71: 84:21:d8:6e:e7:aa:5f:01:1b:4d:ef:a7:65:3e:f3: f2:c1:ce:25:4d:d9:90:5a:2b:6e:45:e5:6e:68:9c: 81:8b:fe:e6:8d:b4:c3:3a:fa:6c:6c:b5:a0:93:69: 96:45:69:58:17:f0:c0:b0:40:a7:de:63:02:78:da: 1a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:94:66:C5:E0:61:F7:42:9F:AC:D9:5A:6E:4F:BF:69:23:60:BF:F4 X509v3 Authority Key Identifier: keyid:85:39:E1:27:E1:6B:79:3E:FD:92:AE:6E:FC:2B:FB:58:79:00:8F:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:d1:59:d2:86:5c:f5:25:39:7f:9e:44:80:a3:fd:de:4f:d6: e2:f7:8a:b0:42:5b:46:77:3a:da:cc:fa:fc:c6:d2:40:c5:c1: 7e:02:2f:2b:de:3d:80:3a:0f:bc:5a:64:41:5b:5f:3b:62:29: 79:61:02:7e:bd:08:65:87:91:da:64:35:c9:73:53:02:1f:5b: b3:10:e9:89:ad:07:5f:73:aa:39:f0:89:2d:c7:db:7b:20:15: ac:f9:58:2b:68:7a:69:22:eb:b8:02:21:c8:ac:9f:90:fc:a3: 45:b8:6a:5a:38:34:4b:e8:00:f7:9b:cd:e6:d1:34:8c:f6:63: 11:e4:97:1f:32:bb:8f:15:77:0b:97:d0:56:95:46:2b:b8:f3: 13:d0:5a:e8:36:dc:4c:38:16:a7:42:ee:29:44:31:3d:a9:bc: f0:09:c9:a3:9c:48:98:48:fb:3e:e3:78:53:d4:58:3f:f1:e4: 43:a1:ef:76:2d:6e:a4:9a:43:47:ca:fb:1a:70:d0:c2:1c:ac: 39:ec:65:93:c6:a2:57:bd:74:15:37:5f:f0:49:40:e6:ef:4b: f4:30:53:43:56:e0:10:97:3a:bd:9c:1e:ee:0b:07:18:40:cd: b9:66:51:c4:b9:7c:14:56:15:b8:db:6b:46:b3:f2:78:b2:5e: f7:68:f7:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc0gNcCXZlMZ1Kw9QvgUQwit7kVAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODUzOUUxMjdFMTZCNzkzRUZEOTJBRTZFRkMyQkZCNTg3 OTAwOEZBRDAeFw0yNTA4MjEyMTE2NDhaFw0yNTA4MjQyMjQzNDhaMDMxMTAvBgNV BAMTKEExOTQ2NkM1RTA2MUY3NDI5RkFDRDk1QTZFNEZCRjY5MjM2MEJGRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVHvkQ4QpJ8gtSwFl35c+g42cc AWLadTPp3kQcmjuioQOj2og4qFL5oYXYbl1soTKK+etAiYHjTT6G3lDZKZp1fIvU pIH9uvI+D0734wfmfXC3/ijLSjE3EHOkWtil0L0spc50yeHQ3TWOlQwvfXMivkMH z1lYDps2/YCcf/YwohH+UXLspoKebeemY+IlNE4LYyuStZChQce1+QhwiTJQlSm6 CLOr7s2A1+G+Q+DkIvSVtwvucVh/ggzkmBIZ4jDNcYQh2G7nql8BG03vp2U+8/LB ziVN2ZBaK25F5W5onIGL/uaNtMM6+mxstaCTaZZFaVgX8MCwQKfeYwJ42hoDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoZRmxeBh90KfrNlabk+/aSNgv/QwHwYDVR0j BBgwFoAUhTnhJ+FreT79kq5u/Cv7WHkAj60wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OGE4ZWE3Zi0yZjYxLTQ0NmItOGI1MS01MTk0NWIwODJmYWEvMC84NTM5RTEyN0Ux NkI3OTNFRkQ5MkFFNkVGQzJCRkI1ODc5MDA4RkFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODUzOUUxMjdFMTZCNzkzRUZEOTJBRTZFRkMyQkZCNTg3OTAw OEZBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODhhOGVhN2YtMmY2MS00NDZiLThi NTEtNTE5NDViMDgyZmFhLzAvODUzOUUxMjdFMTZCNzkzRUZEOTJBRTZFRkMyQkZC NTg3OTAwOEZBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAHRWdKGXPUlOX+eRICj/d5P1uL3irBCW0Z3 OtrM+vzG0kDFwX4CLyvePYA6D7xaZEFbXztiKXlhAn69CGWHkdpkNclzUwIfW7MQ 6YmtB19zqjnwiS3H23sgFaz5WCtoemki67gCIcisn5D8o0W4alo4NEvoAPebzebR NIz2YxHklx8yu48VdwuX0FaVRiu48xPQWug23Ew4FqdC7ilEMT2pvPAJyaOcSJhI +z7jeFPUWD/x5EOh73YtbqSaQ0fK+xpw0MIcrDnsZZPGole9dBU3X/BJQObvS/Qw U0NW4BCXOr2cHu4LBxhAzblmUcS5fBRWFbjba0az8niyXvdo9zw= -----END CERTIFICATE-----Generated at Sat Aug 23 12:03:59 2025 by rpki-client