$ rpki-client -vvf repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.mft File: 8902A1A2A87110119F8477271D6D224973A35F04.mft (raw, json) Hash identifier: VgUYUsZ2T2NlgiL0DEfmYXB9aPCJ/BAR2klLGxo0fd4= Subject key identifier: DE:4A:31:3A:C7:69:C2:BA:D3:FB:81:8F:03:C0:B5:09:A5:91:44:68 Authority key identifier: 89:02:A1:A2:A8:71:10:11:9F:84:77:27:1D:6D:22:49:73:A3:5F:04 Certificate issuer: /CN=8902A1A2A87110119F8477271D6D224973A35F04 Certificate serial: 1675EE584A934289FE78B90E86EA4C586E2F9DC8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8902A1A2A87110119F8477271D6D224973A35F04.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.mft Manifest number: 0281 Signing time: Fri 08 Aug 2025 20:50:02 +0000 Manifest this update: Fri 08 Aug 2025 20:45:02 +0000 Manifest next update: Tue 12 Aug 2025 05:28:02 +0000 Files and hashes: 1: 8902A1A2A87110119F8477271D6D224973A35F04.crl (hash: WVnPkLxi7DqteY+AV4uCVk0QYyh1K4wR7KAXjCtTBew=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.crl rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8902A1A2A87110119F8477271D6D224973A35F04.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 05:28:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:75:ee:58:4a:93:42:89:fe:78:b9:0e:86:ea:4c:58:6e:2f:9d:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8902A1A2A87110119F8477271D6D224973A35F04 Validity Not Before: Aug 8 20:45:02 2025 GMT Not After : Aug 12 05:28:02 2025 GMT Subject: CN=DE4A313AC769C2BAD3FB818F03C0B509A5914468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e2:ee:87:96:48:df:cf:fc:ab:da:f2:17:b2: 9c:c3:8e:2c:23:0b:12:8f:61:01:ae:75:79:ca:89: b3:e7:e6:ee:b1:26:d4:62:ed:aa:3d:5c:51:18:5b: 53:41:90:86:4b:f2:52:9d:19:c9:c2:63:10:7d:00: ca:05:fe:4b:b6:14:8c:39:86:42:90:74:58:c2:33: 94:de:42:9c:77:e9:8c:d1:66:6f:a9:8c:c6:e8:2b: e8:44:f4:d1:12:8d:6a:f1:2f:a5:51:b7:8d:bd:87: 1c:25:dd:ca:90:2f:71:b8:72:43:b3:1f:6b:13:bf: 01:a6:44:a9:f3:5e:ec:81:72:b8:8a:69:66:5a:d7: c5:7c:2d:84:45:47:6a:fd:e2:d9:16:60:4b:1c:c4: 83:a3:f3:34:a1:7e:e2:c3:76:9f:e1:c8:4d:72:a0: 04:70:b5:2e:b4:1f:57:0b:0a:d9:63:75:a6:90:21: 15:65:ed:1b:8d:c9:f6:98:e0:f8:a8:fc:a0:8c:ee: 4f:e7:22:b0:8d:f0:f1:d1:ef:fb:98:52:e7:a6:cd: 9a:f0:08:ee:be:63:0e:eb:b4:3a:c9:7f:7a:13:78: bf:62:31:35:02:f9:14:c6:19:92:90:ec:b5:35:85: 92:c4:d2:49:ea:33:d2:19:12:30:c0:cb:78:4c:70: 77:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:4A:31:3A:C7:69:C2:BA:D3:FB:81:8F:03:C0:B5:09:A5:91:44:68 X509v3 Authority Key Identifier: keyid:89:02:A1:A2:A8:71:10:11:9F:84:77:27:1D:6D:22:49:73:A3:5F:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8902A1A2A87110119F8477271D6D224973A35F04.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c965dd39-48d0-4578-8fe5-66d953384e50/0/8902A1A2A87110119F8477271D6D224973A35F04.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:15:2f:66:bf:05:ae:8c:dc:0b:2c:ae:b7:2d:64:d4:98:92: 1f:91:3d:be:ce:47:04:e6:30:f3:59:6f:51:65:11:68:8d:af: d4:f7:e9:12:e2:26:e1:2c:cb:1f:be:0f:e7:fe:af:50:cf:05: a7:dc:44:68:78:1d:2e:32:40:b7:00:cb:9f:e9:df:3c:0b:5b: c7:ae:3c:fa:6f:fc:41:e8:7d:50:31:f7:e1:dd:13:47:f8:df: 3e:81:66:a7:3f:fc:61:87:74:02:43:d6:80:53:ac:d7:f6:77: d5:21:42:ea:04:44:4f:57:32:55:b0:bd:f4:3d:d2:eb:3f:c0: 8b:77:79:02:e0:eb:6f:71:17:f0:24:83:8e:67:d7:b7:68:47: 73:65:d1:ae:ca:ac:66:21:ae:76:22:fd:24:48:e2:94:32:bf: 4c:18:96:a5:4a:ea:43:73:86:4f:3b:0a:5a:ce:65:34:20:3f: 18:49:ee:1e:10:87:52:e5:41:31:53:14:dc:5d:15:b2:27:bc: a8:41:9a:4e:85:ef:93:0a:57:f1:5d:f1:52:d6:ff:77:94:0c: 7d:4c:96:de:a6:f4:73:b5:f7:61:a5:84:25:9e:2a:b2:8d:a4: 55:ea:b7:12:78:19:3d:77:2f:d7:f0:25:9e:8a:35:f9:e6:c7: 4c:92:0a:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFnXuWEqTQon+eLkOhupMWG4vncgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkwMkExQTJBODcxMTAxMTlGODQ3NzI3MUQ2RDIyNDk3 M0EzNUYwNDAeFw0yNTA4MDgyMDQ1MDJaFw0yNTA4MTIwNTI4MDJaMDMxMTAvBgNV BAMTKERFNEEzMTNBQzc2OUMyQkFEM0ZCODE4RjAzQzBCNTA5QTU5MTQ0NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV4u6Hlkjfz/yr2vIXspzDjiwj CxKPYQGudXnKibPn5u6xJtRi7ao9XFEYW1NBkIZL8lKdGcnCYxB9AMoF/ku2FIw5 hkKQdFjCM5TeQpx36YzRZm+pjMboK+hE9NESjWrxL6VRt429hxwl3cqQL3G4ckOz H2sTvwGmRKnzXuyBcriKaWZa18V8LYRFR2r94tkWYEscxIOj8zShfuLDdp/hyE1y oARwtS60H1cLCtljdaaQIRVl7RuNyfaY4Pio/KCM7k/nIrCN8PHR7/uYUuemzZrw CO6+Yw7rtDrJf3oTeL9iMTUC+RTGGZKQ7LU1hZLE0knqM9IZEjDAy3hMcHedAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3koxOsdpwrrT+4GPA8C1CaWRRGgwHwYDVR0j BBgwFoAUiQKhoqhxEBGfhHcnHW0iSXOjXwQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OTY1ZGQzOS00OGQwLTQ1NzgtOGZlNS02NmQ5NTMzODRlNTAvMC84OTAyQTFBMkE4 NzExMDExOUY4NDc3MjcxRDZEMjI0OTczQTM1RjA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODkwMkExQTJBODcxMTAxMTlGODQ3NzI3MUQ2RDIyNDk3M0Ez NUYwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzk2NWRkMzktNDhkMC00NTc4LThm ZTUtNjZkOTUzMzg0ZTUwLzAvODkwMkExQTJBODcxMTAxMTlGODQ3NzI3MUQ2RDIy NDk3M0EzNUYwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAkVL2a/Ba6M3AssrrctZNSYkh+RPb7ORwTm MPNZb1FlEWiNr9T36RLiJuEsyx++D+f+r1DPBafcRGh4HS4yQLcAy5/p3zwLW8eu PPpv/EHofVAx9+HdE0f43z6BZqc//GGHdAJD1oBTrNf2d9UhQuoERE9XMlWwvfQ9 0us/wIt3eQLg629xF/Akg45n17doR3Nl0a7KrGYhrnYi/SRI4pQyv0wYlqVK6kNz hk87ClrOZTQgPxhJ7h4Qh1LlQTFTFNxdFbInvKhBmk6F75MKV/Fd8VLW/3eUDH1M lt6m9HO192GlhCWeKrKNpFXqtxJ4GT13L9fwJZ6KNfnmx0ySCgE= -----END CERTIFICATE-----Generated at Sat Aug 9 05:52:45 2025 by rpki-client