$ rpki-client -vvf repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft File: 8E87AB0332210D864175F7A371230D7C6099AE30.mft (raw, json) Hash identifier: MdXP/xG0jUCoPLsT8XAuerk7bEEr9ecKU2Tj7P8aDhM= Subject key identifier: B2:AD:C8:D9:24:7B:9E:C3:30:2C:8C:23:AF:59:3C:68:C2:45:F1:FD Authority key identifier: 8E:87:AB:03:32:21:0D:86:41:75:F7:A3:71:23:0D:7C:60:99:AE:30 Certificate issuer: /CN=8E87AB0332210D864175F7A371230D7C6099AE30 Certificate serial: 4DC972C05B2ECE910E318F32D468AC4C3C3396BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E87AB0332210D864175F7A371230D7C6099AE30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft Manifest number: 01E3 Signing time: Sun 11 May 2025 12:41:43 +0000 Manifest this update: Sun 11 May 2025 12:36:43 +0000 Manifest next update: Wed 14 May 2025 17:12:43 +0000 Files and hashes: 1: 8E87AB0332210D864175F7A371230D7C6099AE30.crl (hash: vHTtBQVIqvGu7o9eDCApvV3DjRj06eDQcTjNqH3GW10=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.crl rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E87AB0332210D864175F7A371230D7C6099AE30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 17:12:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:c9:72:c0:5b:2e:ce:91:0e:31:8f:32:d4:68:ac:4c:3c:33:96:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E87AB0332210D864175F7A371230D7C6099AE30 Validity Not Before: May 11 12:36:43 2025 GMT Not After : May 14 17:12:43 2025 GMT Subject: CN=B2ADC8D9247B9EC3302C8C23AF593C68C245F1FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:66:91:a7:38:2c:0b:b0:eb:95:b4:98:72:d1: e0:e4:66:d4:91:fd:1a:29:a9:15:87:8d:1b:20:5e: 5e:49:93:30:53:4b:42:4e:47:ee:7b:7a:31:1e:81: e0:59:b3:98:05:07:3e:b1:71:2b:f9:c3:2d:62:5d: 1a:fb:9c:1e:63:8b:7a:f0:8a:60:8c:35:5c:e9:90: 1e:35:cc:72:da:24:3c:0e:0a:2b:d0:12:c5:b9:95: cf:3b:ac:d8:2b:68:8b:cd:70:6c:00:f6:ec:a0:7e: d7:36:02:c8:2a:6f:44:f8:da:60:64:47:49:ec:e0: 46:67:b3:ee:7e:30:2d:ae:a9:b9:c3:1f:07:8c:28: b3:b0:f0:69:40:24:e5:72:0d:e5:be:38:45:63:00: 43:a7:fc:31:d5:a7:af:3e:7b:00:30:4e:88:76:ce: 10:26:97:e6:f0:bd:23:cb:06:ac:61:f2:17:82:2b: 97:ab:f8:48:43:a4:96:81:52:df:1a:11:6e:ad:d8: 81:e3:1f:ed:53:2e:aa:c5:52:ef:86:bf:fc:6c:63: a1:f2:c0:f8:4c:1b:20:db:20:b9:ae:e0:72:0b:bd: e9:fd:18:78:62:94:ce:d5:96:e5:c0:10:71:3d:f4: 1e:fe:b9:97:a0:34:b4:0e:41:9e:6c:2e:8a:88:c9: 7c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:AD:C8:D9:24:7B:9E:C3:30:2C:8C:23:AF:59:3C:68:C2:45:F1:FD X509v3 Authority Key Identifier: keyid:8E:87:AB:03:32:21:0D:86:41:75:F7:A3:71:23:0D:7C:60:99:AE:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E87AB0332210D864175F7A371230D7C6099AE30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:2c:fb:d2:1a:e5:31:38:21:83:17:7b:e3:74:10:f4:2b:1c: 3c:3d:d8:9e:00:52:43:48:9c:f5:1f:df:1d:d9:c6:bd:11:d3: 72:2d:72:e4:77:62:c9:3f:b5:0b:3d:74:1f:9c:c2:79:03:2c: 2f:e1:fd:4f:68:7e:67:ec:6e:b3:73:b1:fe:1b:83:04:4f:7c: 40:9f:dc:13:08:03:56:76:c3:74:49:ec:d6:31:ca:0d:96:c2: 14:16:31:eb:0e:d8:0a:e9:63:cf:ba:24:c7:85:99:1a:48:4a: ea:b2:f7:66:23:d4:89:7a:51:b7:66:98:b5:83:1d:0b:a1:42: 8f:49:53:84:21:da:44:e9:f4:3c:fc:b9:4c:1e:37:4b:b3:18: 90:3f:d7:56:0d:5c:99:25:7d:71:38:80:58:a8:55:e7:f1:f4: ef:0e:58:db:29:20:1f:6b:13:f4:2a:ef:a2:b5:8c:a5:6d:a1: c2:c8:0d:50:ce:73:58:df:70:70:75:78:2d:5c:f9:e2:ea:9a: 9a:b1:97:52:b5:69:76:b8:0a:53:a5:df:4f:38:9d:39:77:a8: 80:66:2f:01:e3:41:31:71:f1:e1:2d:f4:e2:d6:67:15:d4:5d: 05:c2:9e:90:68:b5:1b:b3:9e:dc:41:2b:8e:fe:be:06:c4:fb: ac:ed:06:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTclywFsuzpEOMY8y1GisTDwzlrswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU4N0FCMDMzMjIxMEQ4NjQxNzVGN0EzNzEyMzBEN0M2 MDk5QUUzMDAeFw0yNTA1MTExMjM2NDNaFw0yNTA1MTQxNzEyNDNaMDMxMTAvBgNV BAMTKEIyQURDOEQ5MjQ3QjlFQzMzMDJDOEMyM0FGNTkzQzY4QzI0NUYxRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHZpGnOCwLsOuVtJhy0eDkZtSR /RopqRWHjRsgXl5JkzBTS0JOR+57ejEegeBZs5gFBz6xcSv5wy1iXRr7nB5ji3rw imCMNVzpkB41zHLaJDwOCivQEsW5lc87rNgraIvNcGwA9uygftc2Asgqb0T42mBk R0ns4EZns+5+MC2uqbnDHweMKLOw8GlAJOVyDeW+OEVjAEOn/DHVp68+ewAwToh2 zhAml+bwvSPLBqxh8heCK5er+EhDpJaBUt8aEW6t2IHjH+1TLqrFUu+Gv/xsY6Hy wPhMGyDbILmu4HILven9GHhilM7VluXAEHE99B7+uZegNLQOQZ5sLoqIyXzlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsq3I2SR7nsMwLIwjr1k8aMJF8f0wHwYDVR0j BBgwFoAUjoerAzIhDYZBdfejcSMNfGCZrjAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NTA0ZTRjNy03YTJkLTRkNjYtOGZiNC0yMDU1NjU3ODdmMjQvMC84RTg3QUIwMzMy MjEwRDg2NDE3NUY3QTM3MTIzMEQ3QzYwOTlBRTMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEU4N0FCMDMzMjIxMEQ4NjQxNzVGN0EzNzEyMzBEN0M2MDk5 QUUzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjUwNGU0YzctN2EyZC00ZDY2LThm YjQtMjA1NTY1Nzg3ZjI0LzAvOEU4N0FCMDMzMjIxMEQ4NjQxNzVGN0EzNzEyMzBE N0M2MDk5QUUzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALUs+9Ia5TE4IYMXe+N0EPQrHDw92J4AUkNI nPUf3x3Zxr0R03ItcuR3Ysk/tQs9dB+cwnkDLC/h/U9ofmfsbrNzsf4bgwRPfECf 3BMIA1Z2w3RJ7NYxyg2WwhQWMesO2ArpY8+6JMeFmRpISuqy92Yj1Il6UbdmmLWD HQuhQo9JU4Qh2kTp9Dz8uUweN0uzGJA/11YNXJklfXE4gFioVefx9O8OWNspIB9r E/Qq76K1jKVtocLIDVDOc1jfcHB1eC1c+eLqmpqxl1K1aXa4ClOl3084nTl3qIBm LwHjQTFx8eEt9OLWZxXUXQXCnpBotRuzntxBK47+vgbE+6ztBrg= -----END CERTIFICATE-----Generated at Tue May 13 10:04:35 2025 by rpki-client