$ rpki-client -vvf repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.mft File: 8902A1A2A87110119F8477271D6D224973A35F04.mft (raw, json) Hash identifier: o7K/Nh6cBHgNQZXyI6dkHIk+zGDSO+SQ+ODPAd1U7KI= Subject key identifier: 96:1D:2A:B9:2C:6E:26:D5:73:7B:9A:52:3E:34:6F:9B:49:62:F4:4E Authority key identifier: 89:02:A1:A2:A8:71:10:11:9F:84:77:27:1D:6D:22:49:73:A3:5F:04 Certificate issuer: /CN=8902A1A2A87110119F8477271D6D224973A35F04 Certificate serial: 42775654858C6B7583408C7EE89780F89DC286B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8902A1A2A87110119F8477271D6D224973A35F04.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.mft Manifest number: 0287 Signing time: Fri 22 Aug 2025 03:50:03 +0000 Manifest this update: Fri 22 Aug 2025 03:45:03 +0000 Manifest next update: Mon 25 Aug 2025 14:51:03 +0000 Files and hashes: 1: 8902A1A2A87110119F8477271D6D224973A35F04.crl (hash: HmOw9aWKOU+F8BvgrEwBpBUe+cRzIyDzfAOTtmBMLVQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.crl rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8902A1A2A87110119F8477271D6D224973A35F04.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 14:51:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:77:56:54:85:8c:6b:75:83:40:8c:7e:e8:97:80:f8:9d:c2:86:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8902A1A2A87110119F8477271D6D224973A35F04 Validity Not Before: Aug 22 03:45:03 2025 GMT Not After : Aug 25 14:51:03 2025 GMT Subject: CN=961D2AB92C6E26D5737B9A523E346F9B4962F44E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:16:ee:e4:84:42:7d:af:08:24:1d:12:4f:84: c2:ef:e8:ce:30:84:cf:a6:97:3a:f5:9f:1e:31:91: 93:71:7b:ac:5f:ab:c6:5c:54:b8:df:7b:33:b4:d1: d6:6e:66:53:8e:d6:c7:03:17:7a:a2:39:52:22:c0: cb:90:24:0b:24:28:49:70:24:5f:c8:37:5f:e5:9c: 40:7b:e5:48:7d:2a:e9:81:fc:c7:0b:68:b2:5a:c5: b8:2b:7d:14:e2:3a:44:d1:53:aa:a3:98:6e:8d:fa: 42:8d:55:dc:94:01:8f:36:1a:19:df:d9:fe:2c:bb: 13:c7:4e:e1:08:7c:98:41:ec:fa:fe:4d:c4:20:fe: 4f:35:a4:03:1c:dd:eb:f4:73:21:e1:27:d4:cb:b1: 7c:de:cf:35:32:3c:eb:31:b3:9c:a3:7b:fd:f7:ec: a3:72:af:12:06:46:de:32:6b:6e:16:84:85:ec:1e: 49:9a:c5:63:bc:2c:be:c3:0e:41:15:04:4b:47:d2: 3b:31:51:c0:06:db:58:89:3d:66:b1:79:98:57:c9: 4b:ee:79:00:92:61:a4:a2:4c:35:4e:e4:1d:9f:8f: e7:6a:a9:ae:3d:79:76:b3:af:41:00:92:86:41:cf: 85:7c:08:18:7c:5f:de:81:57:87:0d:68:a2:f4:27: d8:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:1D:2A:B9:2C:6E:26:D5:73:7B:9A:52:3E:34:6F:9B:49:62:F4:4E X509v3 Authority Key Identifier: keyid:89:02:A1:A2:A8:71:10:11:9F:84:77:27:1D:6D:22:49:73:A3:5F:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8902A1A2A87110119F8477271D6D224973A35F04.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:70:13:c1:b2:77:d9:a7:12:1d:84:f8:a0:89:80:9d:6f:cd: e6:15:0e:36:64:5c:cc:de:45:a5:68:aa:5a:47:85:fc:be:f9: a9:f9:05:2b:14:9c:04:04:66:23:bd:9a:04:33:b5:4e:73:4e: e8:bd:af:bb:5d:19:63:38:e5:96:d4:52:f6:a4:5b:4d:7e:28: eb:44:aa:1c:5d:cf:2c:e6:8b:26:b8:ea:c7:64:7e:15:c4:5b: 7a:0c:a7:1d:c4:47:23:c6:49:73:d9:05:49:61:38:b4:6e:7a: c3:0e:83:18:04:2f:76:14:f8:0f:9f:27:29:74:ee:e5:e7:cf: 77:83:4c:e2:e8:3d:5a:95:56:ca:aa:01:21:c6:94:ab:0d:74: c9:c1:cf:03:a2:23:d3:cb:63:1c:1e:7b:48:60:bf:9c:35:35: a7:ec:2b:37:68:37:b0:8f:48:b0:48:0a:03:7b:6a:13:62:2c: 94:29:13:ab:78:2f:33:67:d4:7e:34:6c:ea:b6:b7:2f:14:22: cc:3e:f3:1c:03:20:55:9b:09:1e:35:2a:57:61:30:de:78:48: 5c:77:e3:5b:94:75:9f:98:ed:4c:58:9d:02:c7:92:c7:f9:f4: 51:cf:36:cf:66:c9:08:60:16:8c:de:49:fa:1b:cd:a9:11:a5: 78:53:5e:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQndWVIWMa3WDQIx+6JeA+J3ChrkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkwMkExQTJBODcxMTAxMTlGODQ3NzI3MUQ2RDIyNDk3 M0EzNUYwNDAeFw0yNTA4MjIwMzQ1MDNaFw0yNTA4MjUxNDUxMDNaMDMxMTAvBgNV BAMTKDk2MUQyQUI5MkM2RTI2RDU3MzdCOUE1MjNFMzQ2RjlCNDk2MkY0NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNFu7khEJ9rwgkHRJPhMLv6M4w hM+mlzr1nx4xkZNxe6xfq8ZcVLjfezO00dZuZlOO1scDF3qiOVIiwMuQJAskKElw JF/IN1/lnEB75Uh9KumB/McLaLJaxbgrfRTiOkTRU6qjmG6N+kKNVdyUAY82Ghnf 2f4suxPHTuEIfJhB7Pr+TcQg/k81pAMc3ev0cyHhJ9TLsXzezzUyPOsxs5yje/33 7KNyrxIGRt4ya24WhIXsHkmaxWO8LL7DDkEVBEtH0jsxUcAG21iJPWaxeZhXyUvu eQCSYaSiTDVO5B2fj+dqqa49eXazr0EAkoZBz4V8CBh8X96BV4cNaKL0J9h7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlh0quSxuJtVze5pSPjRvm0li9E4wHwYDVR0j BBgwFoAUiQKhoqhxEBGfhHcnHW0iSXOjXwQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OTY1ZGQzOS00OGQwLTQ1NzgtOGZlNS02NmQ5NTMzODRlNTAvMC84OTAyQTFBMkE4 NzExMDExOUY4NDc3MjcxRDZEMjI0OTczQTM1RjA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODkwMkExQTJBODcxMTAxMTlGODQ3NzI3MUQ2RDIyNDk3M0Ez NUYwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzk2NWRkMzktNDhkMC00NTc4LThm ZTUtNjZkOTUzMzg0ZTUwLzAvODkwMkExQTJBODcxMTAxMTlGODQ3NzI3MUQ2RDIy NDk3M0EzNUYwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJhwE8Gyd9mnEh2E+KCJgJ1vzeYVDjZkXMze RaVoqlpHhfy++an5BSsUnAQEZiO9mgQztU5zTui9r7tdGWM45ZbUUvakW01+KOtE qhxdzyzmiya46sdkfhXEW3oMpx3ERyPGSXPZBUlhOLRuesMOgxgEL3YU+A+fJyl0 7uXnz3eDTOLoPVqVVsqqASHGlKsNdMnBzwOiI9PLYxwee0hgv5w1NafsKzdoN7CP SLBICgN7ahNiLJQpE6t4LzNn1H40bOq2ty8UIsw+8xwDIFWbCR41KldhMN54SFx3 41uUdZ+Y7UxYnQLHksf59FHPNs9myQhgFozeSfobzakRpXhTXoU= -----END CERTIFICATE-----Generated at Sat Aug 23 12:27:51 2025 by rpki-client