$ rpki-client -vvf repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.mft File: 8902A1A2A87110119F8477271D6D224973A35F04.mft (raw, json) Hash identifier: /AdR/a582Mcm3u/pDvLOIludeMpniEr5GFgsPRdpMpw= Subject key identifier: A0:58:6D:4C:80:C2:D2:06:8B:C5:07:C6:73:9B:E9:0A:D3:86:70:78 Authority key identifier: 89:02:A1:A2:A8:71:10:11:9F:84:77:27:1D:6D:22:49:73:A3:5F:04 Certificate issuer: /CN=8902A1A2A87110119F8477271D6D224973A35F04 Certificate serial: 3020D5180C61780DE36C0F08858F5C90CC01E4F1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8902A1A2A87110119F8477271D6D224973A35F04.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.mft Manifest number: 02A8 Signing time: Mon 03 Nov 2025 05:10:03 +0000 Manifest this update: Mon 03 Nov 2025 05:05:03 +0000 Manifest next update: Thu 06 Nov 2025 07:29:03 +0000 Files and hashes: 1: 8902A1A2A87110119F8477271D6D224973A35F04.crl (hash: fl+aQte/iHvq1w4tNV6ZwSgf0Rv40odQn0SJoNsTgGk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.crl rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8902A1A2A87110119F8477271D6D224973A35F04.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 07:29:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:20:d5:18:0c:61:78:0d:e3:6c:0f:08:85:8f:5c:90:cc:01:e4:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8902A1A2A87110119F8477271D6D224973A35F04 Validity Not Before: Nov 3 05:05:03 2025 GMT Not After : Nov 6 07:29:03 2025 GMT Subject: CN=A0586D4C80C2D2068BC507C6739BE90AD3867078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1b:bd:d4:41:51:de:3a:d2:85:fd:e7:5a:83: 6c:eb:0f:2f:f3:19:ad:c6:a1:3d:60:a4:59:06:3e: 95:cc:79:e1:93:32:ad:bd:0b:cc:0d:59:12:01:13: 56:5a:f6:19:f4:00:0f:37:63:bd:2c:74:46:3a:ec: a6:12:6a:f6:e7:74:ab:91:0d:21:e3:b5:9a:f8:06: 78:1d:cb:2b:48:33:66:2a:00:70:d7:2d:05:5d:be: 73:8c:2e:dc:d4:fc:69:2b:8f:e9:e2:c7:01:06:ad: 8a:27:3b:16:2f:48:51:de:94:e9:17:3c:22:11:69: 61:ff:2f:89:36:0e:1b:7e:61:7f:44:a0:1e:81:9d: 8b:11:14:3a:f8:83:3e:23:73:8d:91:c5:96:b3:36: 25:58:00:4e:77:ec:e2:15:49:85:19:7d:ef:5d:51: 0a:99:53:29:7e:22:ea:2e:56:99:00:c9:0a:65:f2: db:6f:10:b7:65:b5:be:75:69:93:b9:a3:90:46:7c: 1d:e8:f0:27:28:63:72:db:0b:cb:3e:55:4d:a5:5d: f7:33:42:22:2a:02:e0:49:f1:42:97:af:82:a8:9c: 1e:19:7a:27:e3:06:8a:05:5a:13:09:19:6a:88:3d: 8f:cb:c7:20:6d:4b:19:32:3e:41:0e:54:76:56:03: e5:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:58:6D:4C:80:C2:D2:06:8B:C5:07:C6:73:9B:E9:0A:D3:86:70:78 X509v3 Authority Key Identifier: keyid:89:02:A1:A2:A8:71:10:11:9F:84:77:27:1D:6D:22:49:73:A3:5F:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8902A1A2A87110119F8477271D6D224973A35F04.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:33:f9:45:3d:c4:54:59:8c:8b:cf:f9:10:13:08:a9:a6:5f: ee:44:e0:e9:79:b9:1b:64:6a:bc:55:01:cf:df:b2:9e:58:ce: 02:d6:6c:e4:23:a4:f7:73:b4:56:37:71:ad:ee:2c:c3:23:e6: ae:9a:81:9e:8f:2a:60:62:29:44:11:ec:67:0b:6e:d3:32:24: b3:59:1d:0e:8d:7a:1f:77:13:45:c9:02:6a:28:4a:63:d8:f4: f2:8b:71:76:b5:a5:d6:84:ba:eb:2a:22:1a:a1:12:58:99:2d: d4:09:01:8a:07:82:cd:ed:34:bd:90:1c:63:12:f9:85:7f:90: 31:cc:a4:4b:6b:60:85:5e:6f:bf:7f:5b:a4:87:c8:dc:bb:d9: 09:49:7f:d3:d7:31:00:d2:6a:6b:4d:89:ce:a2:ee:4a:74:95: 2c:0e:4a:c6:45:0a:83:c0:59:2e:e3:1c:fa:0f:2b:0f:65:e4: 2e:60:66:52:2d:10:c7:fc:b2:65:18:6f:f2:22:85:68:76:94: c5:f7:b8:80:b6:be:89:fb:2a:66:42:f4:50:d2:66:ac:06:f0: d5:5a:ff:e9:cd:80:27:d8:7a:45:1f:59:3f:39:91:ed:a1:da: 7e:de:95:9d:9b:1a:e3:6d:32:8a:bd:9f:a8:a7:e5:b8:ef:c9: 86:54:88:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMCDVGAxheA3jbA8IhY9ckMwB5PEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkwMkExQTJBODcxMTAxMTlGODQ3NzI3MUQ2RDIyNDk3 M0EzNUYwNDAeFw0yNTExMDMwNTA1MDNaFw0yNTExMDYwNzI5MDNaMDMxMTAvBgNV BAMTKEEwNTg2RDRDODBDMkQyMDY4QkM1MDdDNjczOUJFOTBBRDM4NjcwNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKG73UQVHeOtKF/edag2zrDy/z Ga3GoT1gpFkGPpXMeeGTMq29C8wNWRIBE1Za9hn0AA83Y70sdEY67KYSavbndKuR DSHjtZr4BngdyytIM2YqAHDXLQVdvnOMLtzU/Gkrj+nixwEGrYonOxYvSFHelOkX PCIRaWH/L4k2Dht+YX9EoB6BnYsRFDr4gz4jc42RxZazNiVYAE537OIVSYUZfe9d UQqZUyl+IuouVpkAyQpl8ttvELdltb51aZO5o5BGfB3o8CcoY3LbC8s+VU2lXfcz QiIqAuBJ8UKXr4KonB4ZeifjBooFWhMJGWqIPY/LxyBtSxkyPkEOVHZWA+WzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoFhtTIDC0gaLxQfGc5vpCtOGcHgwHwYDVR0j BBgwFoAUiQKhoqhxEBGfhHcnHW0iSXOjXwQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OTY1ZGQzOS00OGQwLTQ1NzgtOGZlNS02NmQ5NTMzODRlNTAvMC84OTAyQTFBMkE4 NzExMDExOUY4NDc3MjcxRDZEMjI0OTczQTM1RjA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODkwMkExQTJBODcxMTAxMTlGODQ3NzI3MUQ2RDIyNDk3M0Ez NUYwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzk2NWRkMzktNDhkMC00NTc4LThm ZTUtNjZkOTUzMzg0ZTUwLzAvODkwMkExQTJBODcxMTAxMTlGODQ3NzI3MUQ2RDIy NDk3M0EzNUYwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG8z+UU9xFRZjIvP+RATCKmmX+5E4Ol5uRtk arxVAc/fsp5YzgLWbOQjpPdztFY3ca3uLMMj5q6agZ6PKmBiKUQR7GcLbtMyJLNZ HQ6Neh93E0XJAmooSmPY9PKLcXa1pdaEuusqIhqhEliZLdQJAYoHgs3tNL2QHGMS +YV/kDHMpEtrYIVeb79/W6SHyNy72QlJf9PXMQDSamtNic6i7kp0lSwOSsZFCoPA WS7jHPoPKw9l5C5gZlItEMf8smUYb/IihWh2lMX3uIC2von7KmZC9FDSZqwG8NVa /+nNgCfYekUfWT85ke2h2n7elZ2bGuNtMoq9n6in5bjvyYZUiFk= -----END CERTIFICATE-----Generated at Tue Nov 4 02:20:28 2025 by rpki-client