$ rpki-client -vvf repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft File: 8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft (raw, json) Hash identifier: V2uYfFgl2bX+WVyq/GUtengcxUiB0YnqBCUWFOWXMTU= Subject key identifier: 5D:F1:77:49:49:74:AC:28:3C:6D:43:40:AF:DA:DC:8E:2D:15:8F:11 Authority key identifier: 85:39:E1:27:E1:6B:79:3E:FD:92:AE:6E:FC:2B:FB:58:79:00:8F:AD Certificate issuer: /CN=8539E127E16B793EFD92AE6EFC2BFB5879008FAD Certificate serial: 716678EA70F84B7FBF4E2C4D94178E956CEE1775 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft Manifest number: D5 Signing time: Sun 02 Nov 2025 22:11:46 +0000 Manifest this update: Sun 02 Nov 2025 22:06:46 +0000 Manifest next update: Thu 06 Nov 2025 04:00:46 +0000 Files and hashes: 1: 8539E127E16B793EFD92AE6EFC2BFB5879008FAD.crl (hash: nTmaBE4m7GrtKYQvmGeYPWCK1IE6Wq4565NdWLSqcRs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.crl rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 04:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:66:78:ea:70:f8:4b:7f:bf:4e:2c:4d:94:17:8e:95:6c:ee:17:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8539E127E16B793EFD92AE6EFC2BFB5879008FAD Validity Not Before: Nov 2 22:06:46 2025 GMT Not After : Nov 6 04:00:46 2025 GMT Subject: CN=5DF177494974AC283C6D4340AFDADC8E2D158F11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:17:43:bd:1d:ed:a9:d6:3a:84:96:d1:ad:b3: cf:a7:87:d7:a0:a8:3f:e2:b7:0c:16:85:70:67:6f: 57:2a:4a:2c:c3:73:a7:51:88:a2:00:c2:a5:e6:0f: e9:60:61:45:e7:3d:e6:a3:1d:d8:46:38:9d:0f:5d: 87:f1:dd:f3:95:d3:2a:40:d1:3a:d1:04:73:2b:b7: 5f:c2:02:0e:b4:76:63:34:23:89:54:e8:9d:7d:84: 11:ef:4d:e7:ef:27:65:a6:6a:34:8d:04:41:be:50: 67:c9:54:cf:26:ff:da:76:11:2c:9d:ca:73:54:b3: eb:6c:56:ed:ed:0f:e9:cb:b2:52:65:89:e2:ad:94: 8f:e6:fe:a4:fd:4f:13:8b:a2:43:89:a9:9a:b7:1f: a3:1c:59:9a:ae:d5:11:e8:05:5f:b8:1a:c7:68:c3: 7d:2e:b2:2d:48:67:84:05:e0:30:11:e4:d7:40:aa: 11:45:55:0f:83:62:5f:4c:8d:73:34:4e:e2:70:25: 76:91:66:27:32:7c:ec:bf:76:aa:bc:ca:2b:a6:70: d2:eb:94:a6:4e:97:82:0b:60:92:ea:51:46:8f:4f: b1:15:48:93:b9:12:92:7c:22:a4:ec:2e:e0:fd:14: 17:bf:0b:f8:fe:97:d1:40:67:4b:9b:6d:b3:ee:bc: cc:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:F1:77:49:49:74:AC:28:3C:6D:43:40:AF:DA:DC:8E:2D:15:8F:11 X509v3 Authority Key Identifier: keyid:85:39:E1:27:E1:6B:79:3E:FD:92:AE:6E:FC:2B:FB:58:79:00:8F:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88a8ea7f-2f61-446b-8b51-51945b082faa/0/8539E127E16B793EFD92AE6EFC2BFB5879008FAD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:29:c8:28:b6:c3:ac:9d:8e:b8:fe:41:11:63:07:19:ec:56: c5:df:41:d3:a5:dc:55:13:66:ee:fd:86:eb:74:92:bf:1a:91: 36:7c:20:c7:b0:0b:f7:dc:ff:7f:b9:88:66:58:54:3c:6a:5d: 04:05:1a:d0:09:19:8d:8d:2f:d4:b3:db:89:ea:6a:c9:15:c9: 3d:84:7d:75:fa:58:7d:50:4c:b4:52:d3:42:7a:de:0f:f0:72: 39:c4:fc:69:d0:38:83:c6:0f:0e:07:df:f8:bd:e8:77:4c:5d: d9:e3:41:eb:da:af:07:37:71:50:46:34:e5:1d:1b:71:dc:c0: 6e:69:a7:48:1b:e6:ad:98:aa:eb:af:a9:8b:16:b4:dc:73:02: b2:5a:89:eb:c2:66:b2:22:be:c7:c0:85:9c:35:7b:2c:1b:a9: 76:03:73:62:13:af:5b:2e:26:7c:c2:33:2b:ae:bc:bd:1d:73: 4e:43:f0:ed:54:da:55:80:87:d1:b5:f6:a7:9d:4a:87:06:20: fc:77:16:9e:28:46:6e:29:0d:0b:3a:5c:52:44:4a:92:57:a6: 89:ad:11:73:88:ea:07:b9:a4:fa:59:f5:97:7d:32:0a:79:6e: eb:bd:d0:e3:74:f3:7c:e3:30:a3:5d:f4:a7:ac:0c:91:d0:ea: 10:ce:fd:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcWZ46nD4S3+/TixNlBeOlWzuF3UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODUzOUUxMjdFMTZCNzkzRUZEOTJBRTZFRkMyQkZCNTg3 OTAwOEZBRDAeFw0yNTExMDIyMjA2NDZaFw0yNTExMDYwNDAwNDZaMDMxMTAvBgNV BAMTKDVERjE3NzQ5NDk3NEFDMjgzQzZENDM0MEFGREFEQzhFMkQxNThGMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtF0O9He2p1jqEltGts8+nh9eg qD/itwwWhXBnb1cqSizDc6dRiKIAwqXmD+lgYUXnPeajHdhGOJ0PXYfx3fOV0ypA 0TrRBHMrt1/CAg60dmM0I4lU6J19hBHvTefvJ2WmajSNBEG+UGfJVM8m/9p2ESyd ynNUs+tsVu3tD+nLslJlieKtlI/m/qT9TxOLokOJqZq3H6McWZqu1RHoBV+4Gsdo w30usi1IZ4QF4DAR5NdAqhFFVQ+DYl9MjXM0TuJwJXaRZicyfOy/dqq8yiumcNLr lKZOl4ILYJLqUUaPT7EVSJO5EpJ8IqTsLuD9FBe/C/j+l9FAZ0ubbbPuvMyzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXfF3SUl0rCg8bUNAr9rcji0VjxEwHwYDVR0j BBgwFoAUhTnhJ+FreT79kq5u/Cv7WHkAj60wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OGE4ZWE3Zi0yZjYxLTQ0NmItOGI1MS01MTk0NWIwODJmYWEvMC84NTM5RTEyN0Ux NkI3OTNFRkQ5MkFFNkVGQzJCRkI1ODc5MDA4RkFELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODUzOUUxMjdFMTZCNzkzRUZEOTJBRTZFRkMyQkZCNTg3OTAw OEZBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODhhOGVhN2YtMmY2MS00NDZiLThi NTEtNTE5NDViMDgyZmFhLzAvODUzOUUxMjdFMTZCNzkzRUZEOTJBRTZFRkMyQkZC NTg3OTAwOEZBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEwpyCi2w6ydjrj+QRFjBxnsVsXfQdOl3FUT Zu79hut0kr8akTZ8IMewC/fc/3+5iGZYVDxqXQQFGtAJGY2NL9Sz24nqaskVyT2E fXX6WH1QTLRS00J63g/wcjnE/GnQOIPGDw4H3/i96HdMXdnjQevarwc3cVBGNOUd G3HcwG5pp0gb5q2YquuvqYsWtNxzArJaievCZrIivsfAhZw1eywbqXYDc2ITr1su JnzCMyuuvL0dc05D8O1U2lWAh9G19qedSocGIPx3Fp4oRm4pDQs6XFJESpJXpomt EXOI6ge5pPpZ9Zd9Mgp5buu90ON083zjMKNd9KesDJHQ6hDO/ZM= -----END CERTIFICATE-----Generated at Tue Nov 4 08:12:51 2025 by rpki-client