$ rpki-client -vvf repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft File: 8E87AB0332210D864175F7A371230D7C6099AE30.mft (raw, json) Hash identifier: wDmt3sJbVzjiBpZlpBQYq474pb3NmB4GOPSzfvpHJBE= Subject key identifier: 2E:15:A0:AA:6A:7E:86:14:77:B9:EC:F1:03:99:08:60:E5:61:8D:90 Authority key identifier: 8E:87:AB:03:32:21:0D:86:41:75:F7:A3:71:23:0D:7C:60:99:AE:30 Certificate issuer: /CN=8E87AB0332210D864175F7A371230D7C6099AE30 Certificate serial: 56C4BC8EA904C8D8652502F706F06D75D2EAB93D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E87AB0332210D864175F7A371230D7C6099AE30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft Manifest number: 01FA Signing time: Wed 02 Jul 2025 02:02:35 +0000 Manifest this update: Wed 02 Jul 2025 01:57:35 +0000 Manifest next update: Sat 05 Jul 2025 12:36:35 +0000 Files and hashes: 1: 8E87AB0332210D864175F7A371230D7C6099AE30.crl (hash: 2uK5riVmKRNdQLst4+T4qypAhHVTvJaSxqFKLg9O+N8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.crl rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E87AB0332210D864175F7A371230D7C6099AE30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 12:36:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:c4:bc:8e:a9:04:c8:d8:65:25:02:f7:06:f0:6d:75:d2:ea:b9:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E87AB0332210D864175F7A371230D7C6099AE30 Validity Not Before: Jul 2 01:57:35 2025 GMT Not After : Jul 5 12:36:35 2025 GMT Subject: CN=2E15A0AA6A7E861477B9ECF103990860E5618D90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:97:d7:05:b0:54:a5:81:c2:c1:7c:f9:ed:ab: 6c:80:45:9e:71:85:e5:bd:fd:3c:7d:09:33:11:ef: dc:8e:24:55:e9:0c:13:f6:5e:c6:f0:fd:30:fd:c3: c9:6d:3f:f1:7a:dc:f3:17:92:71:e3:0d:39:08:95: 14:27:84:7b:ea:8e:61:b8:6b:90:62:be:a3:5a:6a: 39:3c:f0:7d:7a:cb:cc:0f:f0:d3:40:cd:59:aa:c9: 94:b7:bd:35:54:46:e3:f1:fa:bd:ec:7d:67:d8:d2: d0:bf:ce:ee:d9:19:f4:10:49:65:b4:eb:3e:72:e5: f0:a7:1e:11:f4:87:56:20:07:cb:db:6d:ca:35:72: 15:99:96:3a:52:8e:f9:b3:e5:d1:50:78:89:ad:9d: 63:77:cb:5a:31:7e:8b:08:99:81:b9:49:3c:df:3d: 54:1f:6e:36:14:a2:dc:b9:da:48:b0:9a:4c:c2:8f: 60:61:05:e5:2c:e5:f7:9c:a7:bc:48:35:b6:9f:61: 99:bc:1a:45:43:93:52:e1:d3:91:f2:86:d7:a3:e5: 24:ac:82:4d:2a:18:f9:47:b6:c0:99:07:26:38:e3: ce:f8:86:e5:7a:b4:68:64:55:7d:7f:63:9d:f4:41: 80:8d:23:80:fa:32:1d:56:65:9f:3a:e7:b2:f0:26: ae:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:15:A0:AA:6A:7E:86:14:77:B9:EC:F1:03:99:08:60:E5:61:8D:90 X509v3 Authority Key Identifier: keyid:8E:87:AB:03:32:21:0D:86:41:75:F7:A3:71:23:0D:7C:60:99:AE:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E87AB0332210D864175F7A371230D7C6099AE30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:a4:1d:a3:b8:f1:ab:74:15:79:4f:ef:d3:8d:b5:06:0b:26: 86:c3:0e:5e:bf:66:b9:3f:d0:b9:3d:8d:74:1a:2c:9f:eb:ce: e7:63:eb:f3:dc:e9:2c:bd:29:ca:7d:5e:ef:93:e4:e0:2a:25: 4f:ba:89:d1:b9:b1:e7:b4:8e:df:d7:9d:1b:28:5e:e0:c9:dc: 57:05:25:78:51:14:6e:5d:97:ba:f5:88:bb:67:3c:c4:6b:d5: c6:dd:66:70:7d:d3:df:9f:20:cd:9c:2f:d9:dc:b8:8b:31:e0: f5:03:5b:91:c1:7b:f1:16:1f:2e:9d:42:ed:3e:7a:92:e4:ba: 2a:09:98:66:72:04:54:c1:06:50:17:16:a2:e6:21:29:c7:30: 2e:92:00:fa:5e:29:67:46:dc:46:2e:41:5b:14:cd:a9:aa:d2: 31:b3:56:e3:0f:81:86:7c:c5:9d:e2:e8:45:71:3b:b6:66:ed: 87:8e:bb:99:73:e6:92:73:e7:f2:fa:c3:32:16:77:3a:7a:f5: d2:c1:4d:ff:3a:24:28:0e:bd:22:63:a9:ba:e6:6f:50:d3:56: 5a:55:a1:16:8f:fb:ac:82:3e:4a:46:e1:67:52:ce:be:fa:2e: 4d:05:b8:fa:d3:8d:e0:20:7c:05:cd:6b:9d:68:2b:55:50:b1: dd:bf:23:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVsS8jqkEyNhlJQL3BvBtddLquT0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU4N0FCMDMzMjIxMEQ4NjQxNzVGN0EzNzEyMzBEN0M2 MDk5QUUzMDAeFw0yNTA3MDIwMTU3MzVaFw0yNTA3MDUxMjM2MzVaMDMxMTAvBgNV BAMTKDJFMTVBMEFBNkE3RTg2MTQ3N0I5RUNGMTAzOTkwODYwRTU2MThEOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkl9cFsFSlgcLBfPntq2yARZ5x heW9/Tx9CTMR79yOJFXpDBP2Xsbw/TD9w8ltP/F63PMXknHjDTkIlRQnhHvqjmG4 a5BivqNaajk88H16y8wP8NNAzVmqyZS3vTVURuPx+r3sfWfY0tC/zu7ZGfQQSWW0 6z5y5fCnHhH0h1YgB8vbbco1chWZljpSjvmz5dFQeImtnWN3y1oxfosImYG5STzf PVQfbjYUoty52kiwmkzCj2BhBeUs5fecp7xINbafYZm8GkVDk1Lh05Hyhtej5SSs gk0qGPlHtsCZByY44874huV6tGhkVX1/Y530QYCNI4D6Mh1WZZ8657LwJq7XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULhWgqmp+hhR3uezxA5kIYOVhjZAwHwYDVR0j BBgwFoAUjoerAzIhDYZBdfejcSMNfGCZrjAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NTA0ZTRjNy03YTJkLTRkNjYtOGZiNC0yMDU1NjU3ODdmMjQvMC84RTg3QUIwMzMy MjEwRDg2NDE3NUY3QTM3MTIzMEQ3QzYwOTlBRTMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEU4N0FCMDMzMjIxMEQ4NjQxNzVGN0EzNzEyMzBEN0M2MDk5 QUUzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjUwNGU0YzctN2EyZC00ZDY2LThm YjQtMjA1NTY1Nzg3ZjI0LzAvOEU4N0FCMDMzMjIxMEQ4NjQxNzVGN0EzNzEyMzBE N0M2MDk5QUUzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFKkHaO48at0FXlP79ONtQYLJobDDl6/Zrk/ 0Lk9jXQaLJ/rzudj6/Pc6Sy9Kcp9Xu+T5OAqJU+6idG5see0jt/XnRsoXuDJ3FcF JXhRFG5dl7r1iLtnPMRr1cbdZnB909+fIM2cL9ncuIsx4PUDW5HBe/EWHy6dQu0+ epLkuioJmGZyBFTBBlAXFqLmISnHMC6SAPpeKWdG3EYuQVsUzamq0jGzVuMPgYZ8 xZ3i6EVxO7Zm7YeOu5lz5pJz5/L6wzIWdzp69dLBTf86JCgOvSJjqbrmb1DTVlpV oRaP+6yCPkpG4WdSzr76Lk0FuPrTjeAgfAXNa51oK1VQsd2/I3E= -----END CERTIFICATE-----Generated at Thu Jul 3 03:44:08 2025 by rpki-client