$ rpki-client -vvf repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.mft File: 8902A1A2A87110119F8477271D6D224973A35F04.mft (raw, json) Hash identifier: OHjRXD2oN4W9dPEtvyawBelqUaaIm6wuIargBgYuJKo= Subject key identifier: 38:9A:7B:CD:8D:E5:EF:B6:10:66:D6:20:DD:9B:2A:6A:75:58:5F:0E Authority key identifier: 89:02:A1:A2:A8:71:10:11:9F:84:77:27:1D:6D:22:49:73:A3:5F:04 Certificate issuer: /CN=8902A1A2A87110119F8477271D6D224973A35F04 Certificate serial: 75385FA53F5EF5F7BED2B046A073B7B819B3451F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8902A1A2A87110119F8477271D6D224973A35F04.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.mft Manifest number: 0270 Signing time: Tue 01 Jul 2025 20:20:03 +0000 Manifest this update: Tue 01 Jul 2025 20:15:03 +0000 Manifest next update: Sat 05 Jul 2025 03:29:03 +0000 Files and hashes: 1: 8902A1A2A87110119F8477271D6D224973A35F04.crl (hash: mbWdVETpQ2rbKuqiCYfIDMiLaoeLR1u9CdS7kKsTkPk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.crl rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8902A1A2A87110119F8477271D6D224973A35F04.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 03:29:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:38:5f:a5:3f:5e:f5:f7:be:d2:b0:46:a0:73:b7:b8:19:b3:45:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8902A1A2A87110119F8477271D6D224973A35F04 Validity Not Before: Jul 1 20:15:03 2025 GMT Not After : Jul 5 03:29:03 2025 GMT Subject: CN=389A7BCD8DE5EFB61066D620DD9B2A6A75585F0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f5:12:46:02:85:dc:6b:24:11:30:43:cc:98: d0:0d:b0:e5:9d:9f:68:75:1a:13:7e:cf:ca:b5:d8: ea:e2:a1:34:9c:63:1c:4f:fd:ac:3f:4d:e8:f1:d4: 81:48:70:5d:7d:8b:f2:c5:a7:75:7e:06:58:ec:05: ce:64:d0:5e:25:02:be:c7:02:5a:ea:7f:e5:1f:36: 2f:34:30:f0:88:96:49:4e:d9:56:37:2b:00:27:95: 3d:1f:21:d8:e8:23:4e:85:20:4e:39:8c:00:9c:33: c5:5c:04:fe:c8:9a:78:fb:29:01:07:e8:6e:cd:a0: 1a:19:de:e4:e5:b2:d2:a3:c5:5a:19:46:37:b9:e6: d5:83:35:15:b6:8b:b6:48:f5:79:11:62:34:a8:54: f9:9a:f1:19:e0:51:f9:30:dd:ba:cb:1f:73:8c:1e: 40:39:ae:53:ab:d0:de:a1:f5:b1:2c:46:f0:25:d0: f7:a8:07:51:4b:48:79:eb:6f:af:c9:e5:57:98:a8: 56:ad:0c:6c:7f:86:32:51:ad:9a:9a:06:89:93:bd: 8a:7e:a9:44:ca:99:53:1f:33:80:5c:40:42:db:f3: 59:40:4b:2e:4b:10:87:6a:d3:01:59:b4:5d:50:dd: c9:94:cf:cc:c9:a5:6d:eb:75:9d:54:20:48:02:f2: 73:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:9A:7B:CD:8D:E5:EF:B6:10:66:D6:20:DD:9B:2A:6A:75:58:5F:0E X509v3 Authority Key Identifier: keyid:89:02:A1:A2:A8:71:10:11:9F:84:77:27:1D:6D:22:49:73:A3:5F:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8902A1A2A87110119F8477271D6D224973A35F04.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:7b:56:f3:98:30:68:84:bf:d4:67:51:d9:8d:98:f6:89:fc: 2c:0f:99:1d:01:5e:cf:0a:b0:d5:84:47:28:f5:d1:af:f2:f3: 21:52:86:c0:7b:20:a9:e5:d9:6a:30:47:4b:c6:d1:4f:53:2b: 15:92:79:df:88:83:5a:5f:f7:0a:9d:ea:55:3d:2c:c7:8b:aa: 74:5c:ec:d3:89:11:60:7b:d6:f9:45:23:a5:93:f5:bf:dd:8a: 77:fa:08:9c:59:7a:eb:3c:6a:28:6b:11:a4:40:14:91:d2:8b: 41:b2:a3:a0:04:65:dc:4a:af:29:00:9d:63:a6:71:67:e3:a2: de:05:19:a3:08:a4:6e:de:30:bd:c5:16:c2:84:ba:42:e0:10: 4a:7c:fc:3e:85:25:1d:31:cc:53:86:61:fb:d3:e6:71:a8:f2: 38:18:ce:ae:91:16:83:22:ec:25:5c:e9:1a:94:be:a5:fe:b6: 7f:80:b0:22:1c:89:d1:a3:3d:03:af:1d:40:fa:67:35:dd:29: 52:99:43:07:7f:66:eb:93:a0:39:a7:30:b7:ef:30:e4:17:87: 35:fe:8e:3b:7e:9f:64:2a:df:f6:8c:bd:1f:e4:d7:b4:0c:51: 5a:90:9a:5d:0d:6e:2f:72:9b:6d:06:b2:e8:33:5d:b5:a2:c4: 72:9f:8d:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdThfpT9e9fe+0rBGoHO3uBmzRR8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkwMkExQTJBODcxMTAxMTlGODQ3NzI3MUQ2RDIyNDk3 M0EzNUYwNDAeFw0yNTA3MDEyMDE1MDNaFw0yNTA3MDUwMzI5MDNaMDMxMTAvBgNV BAMTKDM4OUE3QkNEOERFNUVGQjYxMDY2RDYyMEREOUIyQTZBNzU1ODVGMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl9RJGAoXcayQRMEPMmNANsOWd n2h1GhN+z8q12OrioTScYxxP/aw/Tejx1IFIcF19i/LFp3V+BljsBc5k0F4lAr7H Alrqf+UfNi80MPCIlklO2VY3KwAnlT0fIdjoI06FIE45jACcM8VcBP7Imnj7KQEH 6G7NoBoZ3uTlstKjxVoZRje55tWDNRW2i7ZI9XkRYjSoVPma8RngUfkw3brLH3OM HkA5rlOr0N6h9bEsRvAl0PeoB1FLSHnrb6/J5VeYqFatDGx/hjJRrZqaBomTvYp+ qUTKmVMfM4BcQELb81lASy5LEIdq0wFZtF1Q3cmUz8zJpW3rdZ1UIEgC8nOZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOJp7zY3l77YQZtYg3ZsqanVYXw4wHwYDVR0j BBgwFoAUiQKhoqhxEBGfhHcnHW0iSXOjXwQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OTY1ZGQzOS00OGQwLTQ1NzgtOGZlNS02NmQ5NTMzODRlNTAvMC84OTAyQTFBMkE4 NzExMDExOUY4NDc3MjcxRDZEMjI0OTczQTM1RjA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODkwMkExQTJBODcxMTAxMTlGODQ3NzI3MUQ2RDIyNDk3M0Ez NUYwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzk2NWRkMzktNDhkMC00NTc4LThm ZTUtNjZkOTUzMzg0ZTUwLzAvODkwMkExQTJBODcxMTAxMTlGODQ3NzI3MUQ2RDIy NDk3M0EzNUYwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGV7VvOYMGiEv9RnUdmNmPaJ/CwPmR0BXs8K sNWERyj10a/y8yFShsB7IKnl2WowR0vG0U9TKxWSed+Ig1pf9wqd6lU9LMeLqnRc 7NOJEWB71vlFI6WT9b/dinf6CJxZeus8aihrEaRAFJHSi0Gyo6AEZdxKrykAnWOm cWfjot4FGaMIpG7eML3FFsKEukLgEEp8/D6FJR0xzFOGYfvT5nGo8jgYzq6RFoMi 7CVc6RqUvqX+tn+AsCIcidGjPQOvHUD6ZzXdKVKZQwd/ZuuToDmnMLfvMOQXhzX+ jjt+n2Qq3/aMvR/k17QMUVqQml0Nbi9ym20GsugzXbWixHKfjWs= -----END CERTIFICATE-----Generated at Wed Jul 2 04:24:11 2025 by rpki-client