$ rpki-client -vvf repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft File: 8E87AB0332210D864175F7A371230D7C6099AE30.mft (raw, json) Hash identifier: w6ygMKCxpUvvIVJAXWDa3V0rjVyMdU3pKZNox9EcVMw= Subject key identifier: A4:AC:4C:C5:62:36:9F:B9:FE:5F:85:09:1A:E8:B3:19:0A:D4:F5:76 Authority key identifier: 8E:87:AB:03:32:21:0D:86:41:75:F7:A3:71:23:0D:7C:60:99:AE:30 Certificate issuer: /CN=8E87AB0332210D864175F7A371230D7C6099AE30 Certificate serial: 4F5941341A7DC0E57B6AE969C348F52F7ED20A8A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E87AB0332210D864175F7A371230D7C6099AE30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft Manifest number: 0211 Signing time: Fri 22 Aug 2025 23:31:42 +0000 Manifest this update: Fri 22 Aug 2025 23:26:42 +0000 Manifest next update: Tue 26 Aug 2025 00:28:42 +0000 Files and hashes: 1: 8E87AB0332210D864175F7A371230D7C6099AE30.crl (hash: TXkRNEtp91sEoU+quOCBOGv+L50t673xJGT6o2vac54=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.crl rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E87AB0332210D864175F7A371230D7C6099AE30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 00:28:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:59:41:34:1a:7d:c0:e5:7b:6a:e9:69:c3:48:f5:2f:7e:d2:0a:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E87AB0332210D864175F7A371230D7C6099AE30 Validity Not Before: Aug 22 23:26:42 2025 GMT Not After : Aug 26 00:28:42 2025 GMT Subject: CN=A4AC4CC562369FB9FE5F85091AE8B3190AD4F576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:dc:41:d3:f3:01:e4:d9:8f:d8:bf:45:a4:2f: 86:93:4f:6a:1a:ab:ad:7c:0a:f9:88:b5:27:57:1d: ac:3a:90:c4:39:92:81:96:c9:fd:30:ef:bb:5c:14: 99:bf:19:43:40:c0:ef:24:22:cb:fd:4f:e7:a0:d9: 93:c2:c0:7b:8f:1b:5e:4a:eb:4a:a2:f6:d8:3a:f1: a2:9e:67:99:38:1c:11:ad:65:f5:83:49:77:48:6f: 5d:55:e3:b8:56:ee:f7:37:a6:3f:3d:90:04:3d:76: 20:b0:c0:95:fb:fa:19:84:67:c6:1a:d9:84:96:73: 9c:12:4a:85:1d:e4:c2:3b:9b:b6:6d:26:5d:82:41: 3b:65:27:2e:ce:73:5e:18:4e:c5:a5:80:3f:9c:70: 8a:d5:56:47:61:4c:a7:a8:64:ee:92:35:32:3a:89: 65:de:cd:ae:a2:93:02:7a:cd:18:ed:ed:02:60:62: a7:5c:01:d7:62:ae:46:89:c4:12:3a:ee:25:7c:0e: 56:b5:27:98:ed:53:3f:0d:97:59:4a:bf:7f:77:7f: a2:37:b5:af:58:c7:44:5e:3c:0c:1d:80:ad:11:df: d4:85:67:45:eb:a2:92:16:6e:3e:07:e0:06:39:13: 85:51:96:41:68:99:cf:18:16:db:6e:6a:b4:e2:55: 3b:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:AC:4C:C5:62:36:9F:B9:FE:5F:85:09:1A:E8:B3:19:0A:D4:F5:76 X509v3 Authority Key Identifier: keyid:8E:87:AB:03:32:21:0D:86:41:75:F7:A3:71:23:0D:7C:60:99:AE:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E87AB0332210D864175F7A371230D7C6099AE30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:9d:22:9e:47:eb:e0:20:13:de:30:57:5d:df:43:6c:2f:88: fa:1c:d3:7d:24:2a:94:71:41:d9:52:ea:56:70:b3:ca:a2:0d: 76:26:94:90:33:da:36:7a:07:48:1d:fa:38:85:6b:50:73:ec: e4:42:cd:3c:6e:1d:34:ad:50:f7:09:42:0f:53:ad:c4:be:01: 58:11:1b:d5:1f:d6:f4:60:09:52:c1:11:45:85:7d:36:f9:55: 18:ef:89:77:39:14:0c:a5:58:df:1a:6d:84:e9:d0:57:1c:9b: 52:9d:d3:a3:79:f3:9f:ef:09:80:6d:9b:35:8c:72:57:b5:cf: 23:a0:91:5d:9f:b6:68:fc:e7:ea:05:c1:25:21:c0:dd:b1:61: 2e:65:21:a3:df:df:e4:0f:2e:e0:e6:20:2a:37:a1:00:cc:ee: 64:26:84:40:de:21:7f:b5:5b:40:1a:99:0b:c2:c9:81:d3:3b: db:40:19:80:70:14:e7:97:d1:c2:3d:61:cb:52:3f:33:fd:a9: 0d:f4:de:9a:bf:57:23:01:2d:48:f6:17:33:fb:73:17:93:20: 84:35:58:3d:6f:96:a0:05:be:10:c5:9e:6a:27:9d:a7:e9:36: 6b:ab:1f:0c:ab:d0:74:7e:3b:44:62:8f:d3:05:be:8e:75:89: c6:ee:7d:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT1lBNBp9wOV7aulpw0j1L37SCoowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU4N0FCMDMzMjIxMEQ4NjQxNzVGN0EzNzEyMzBEN0M2 MDk5QUUzMDAeFw0yNTA4MjIyMzI2NDJaFw0yNTA4MjYwMDI4NDJaMDMxMTAvBgNV BAMTKEE0QUM0Q0M1NjIzNjlGQjlGRTVGODUwOTFBRThCMzE5MEFENEY1NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS3EHT8wHk2Y/Yv0WkL4aTT2oa q618CvmItSdXHaw6kMQ5koGWyf0w77tcFJm/GUNAwO8kIsv9T+eg2ZPCwHuPG15K 60qi9tg68aKeZ5k4HBGtZfWDSXdIb11V47hW7vc3pj89kAQ9diCwwJX7+hmEZ8Ya 2YSWc5wSSoUd5MI7m7ZtJl2CQTtlJy7Oc14YTsWlgD+ccIrVVkdhTKeoZO6SNTI6 iWXeza6ikwJ6zRjt7QJgYqdcAddirkaJxBI67iV8Dla1J5jtUz8Nl1lKv393f6I3 ta9Yx0RePAwdgK0R39SFZ0XropIWbj4H4AY5E4VRlkFomc8YFttuarTiVTs1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpKxMxWI2n7n+X4UJGuizGQrU9XYwHwYDVR0j BBgwFoAUjoerAzIhDYZBdfejcSMNfGCZrjAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NTA0ZTRjNy03YTJkLTRkNjYtOGZiNC0yMDU1NjU3ODdmMjQvMC84RTg3QUIwMzMy MjEwRDg2NDE3NUY3QTM3MTIzMEQ3QzYwOTlBRTMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEU4N0FCMDMzMjIxMEQ4NjQxNzVGN0EzNzEyMzBEN0M2MDk5 QUUzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjUwNGU0YzctN2EyZC00ZDY2LThm YjQtMjA1NTY1Nzg3ZjI0LzAvOEU4N0FCMDMzMjIxMEQ4NjQxNzVGN0EzNzEyMzBE N0M2MDk5QUUzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFSdIp5H6+AgE94wV13fQ2wviPoc030kKpRx QdlS6lZws8qiDXYmlJAz2jZ6B0gd+jiFa1Bz7ORCzTxuHTStUPcJQg9TrcS+AVgR G9Uf1vRgCVLBEUWFfTb5VRjviXc5FAylWN8abYTp0Fccm1Kd06N585/vCYBtmzWM cle1zyOgkV2ftmj85+oFwSUhwN2xYS5lIaPf3+QPLuDmICo3oQDM7mQmhEDeIX+1 W0AamQvCyYHTO9tAGYBwFOeX0cI9YctSPzP9qQ303pq/VyMBLUj2FzP7cxeTIIQ1 WD1vlqAFvhDFnmonnafpNmurHwyr0HR+O0Rij9MFvo51icbufY4= -----END CERTIFICATE-----Generated at Sat Aug 23 14:23:29 2025 by rpki-client