$ rpki-client -vvf repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft File: 8E87AB0332210D864175F7A371230D7C6099AE30.mft (raw, json) Hash identifier: ePFdjuitxn62GCIHv6wBQn1zz/NYcWqz9KGmpYzsaI4= Subject key identifier: 49:BB:57:6F:B4:63:12:8D:4A:B5:EF:82:33:1A:C1:30:D9:05:86:19 Authority key identifier: 8E:87:AB:03:32:21:0D:86:41:75:F7:A3:71:23:0D:7C:60:99:AE:30 Certificate issuer: /CN=8E87AB0332210D864175F7A371230D7C6099AE30 Certificate serial: 58BDDB98613A7594B25BC267B56443CCC810F833 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E87AB0332210D864175F7A371230D7C6099AE30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft Manifest number: 020B Signing time: Sat 09 Aug 2025 11:21:43 +0000 Manifest this update: Sat 09 Aug 2025 11:16:43 +0000 Manifest next update: Tue 12 Aug 2025 20:19:43 +0000 Files and hashes: 1: 8E87AB0332210D864175F7A371230D7C6099AE30.crl (hash: +EnBclULPg3vVy7RmnzWrPZvT9sDhbibq0yl9bKV+dY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.crl rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E87AB0332210D864175F7A371230D7C6099AE30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 20:19:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:bd:db:98:61:3a:75:94:b2:5b:c2:67:b5:64:43:cc:c8:10:f8:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E87AB0332210D864175F7A371230D7C6099AE30 Validity Not Before: Aug 9 11:16:43 2025 GMT Not After : Aug 12 20:19:43 2025 GMT Subject: CN=49BB576FB463128D4AB5EF82331AC130D9058619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:11:10:c5:d9:46:b9:f0:18:3a:25:93:f5:2a: 9d:b7:d6:e4:e6:fd:e7:3d:60:e4:4b:d3:03:86:cf: eb:a3:05:86:b8:8b:45:65:ba:f0:32:0c:71:ab:24: be:57:77:a0:c3:d3:ac:b2:4d:de:38:6c:3a:0c:03: 4b:4e:ea:57:66:54:84:9f:67:8d:54:e4:6d:3b:a5: 0f:57:a4:42:44:b8:c3:26:32:e7:3d:f2:7c:33:1e: 68:5f:4b:46:72:5d:99:6a:fd:e0:b1:bc:ef:66:34: f4:34:ba:d8:40:b0:64:29:ef:e7:11:f6:01:b8:c3: 4f:34:23:74:c5:56:69:fd:07:bf:84:3d:5b:f9:16: 23:77:54:29:80:4a:13:0d:3f:e4:17:59:7b:6b:d1: 26:77:cd:01:63:c8:00:80:76:4c:0d:64:d8:66:ae: c6:9a:7f:9d:a8:ef:21:20:b5:27:35:25:c6:6a:7f: 31:17:69:16:e9:0e:cb:37:63:ca:d3:32:f9:0a:d0: d4:06:d3:e9:60:d6:06:4e:c2:88:b5:f1:c4:97:eb: 06:ee:da:8f:40:0a:71:c3:a5:25:1b:aa:b4:49:d6: f3:4c:da:4a:ca:f6:e9:71:2c:34:83:6c:7d:a2:86: 61:46:96:16:bd:86:80:4b:84:db:89:a8:9a:2e:3b: 3d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:BB:57:6F:B4:63:12:8D:4A:B5:EF:82:33:1A:C1:30:D9:05:86:19 X509v3 Authority Key Identifier: keyid:8E:87:AB:03:32:21:0D:86:41:75:F7:A3:71:23:0D:7C:60:99:AE:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E87AB0332210D864175F7A371230D7C6099AE30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:93:38:51:09:33:2e:17:86:bc:eb:6d:cb:85:dc:f6:2b:b9: 50:29:2a:65:bd:e6:37:cb:28:86:08:b0:4c:b4:85:97:3b:8d: 6d:b5:15:c6:ce:3b:2a:f2:4f:99:0d:2e:fa:f3:7b:ee:b2:e2: 0a:7e:a5:59:ce:27:63:2b:aa:6f:32:af:b0:63:f1:27:16:b5: 22:21:bb:b9:ca:3e:ec:13:e3:7c:34:75:47:af:c8:fa:ae:7e: 3c:74:52:41:c0:71:8e:0e:9f:0a:ce:43:e8:d1:ed:ba:3b:c2: 35:b4:f5:4f:42:bd:f4:51:13:1b:11:ab:3e:8d:7e:d6:9f:57: 6b:26:d5:55:59:c8:7b:ef:a9:c0:11:e9:9e:02:90:af:8c:15: da:ef:09:78:9a:50:3a:43:a1:80:75:67:13:8c:a0:28:ff:84: a0:e2:51:8b:d4:97:bc:bd:1b:74:23:02:3a:f6:d6:ea:70:0c: 5a:ab:78:9b:34:dd:ca:6a:1f:09:4f:fc:fc:89:67:83:e7:c1: 2d:ff:9c:93:d8:bb:47:da:d3:ab:96:49:31:ef:51:3c:d3:c1: 22:35:33:4f:71:55:e0:79:9a:bb:4a:a1:3b:84:b5:99:a1:12: a5:84:63:b4:f2:dc:50:d3:1f:91:7f:e1:df:c7:79:82:41:cf: a9:fd:a4:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWL3bmGE6dZSyW8JntWRDzMgQ+DMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU4N0FCMDMzMjIxMEQ4NjQxNzVGN0EzNzEyMzBEN0M2 MDk5QUUzMDAeFw0yNTA4MDkxMTE2NDNaFw0yNTA4MTIyMDE5NDNaMDMxMTAvBgNV BAMTKDQ5QkI1NzZGQjQ2MzEyOEQ0QUI1RUY4MjMzMUFDMTMwRDkwNTg2MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZERDF2Ua58Bg6JZP1Kp231uTm /ec9YORL0wOGz+ujBYa4i0VluvAyDHGrJL5Xd6DD06yyTd44bDoMA0tO6ldmVISf Z41U5G07pQ9XpEJEuMMmMuc98nwzHmhfS0ZyXZlq/eCxvO9mNPQ0uthAsGQp7+cR 9gG4w080I3TFVmn9B7+EPVv5FiN3VCmAShMNP+QXWXtr0SZ3zQFjyACAdkwNZNhm rsaaf52o7yEgtSc1JcZqfzEXaRbpDss3Y8rTMvkK0NQG0+lg1gZOwoi18cSX6wbu 2o9ACnHDpSUbqrRJ1vNM2krK9ulxLDSDbH2ihmFGlha9hoBLhNuJqJouOz25AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSbtXb7RjEo1Kte+CMxrBMNkFhhkwHwYDVR0j BBgwFoAUjoerAzIhDYZBdfejcSMNfGCZrjAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NTA0ZTRjNy03YTJkLTRkNjYtOGZiNC0yMDU1NjU3ODdmMjQvMC84RTg3QUIwMzMy MjEwRDg2NDE3NUY3QTM3MTIzMEQ3QzYwOTlBRTMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEU4N0FCMDMzMjIxMEQ4NjQxNzVGN0EzNzEyMzBEN0M2MDk5 QUUzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjUwNGU0YzctN2EyZC00ZDY2LThm YjQtMjA1NTY1Nzg3ZjI0LzAvOEU4N0FCMDMzMjIxMEQ4NjQxNzVGN0EzNzEyMzBE N0M2MDk5QUUzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABOTOFEJMy4XhrzrbcuF3PYruVApKmW95jfL KIYIsEy0hZc7jW21FcbOOyryT5kNLvrze+6y4gp+pVnOJ2Mrqm8yr7Bj8ScWtSIh u7nKPuwT43w0dUevyPqufjx0UkHAcY4OnwrOQ+jR7bo7wjW09U9CvfRRExsRqz6N ftafV2sm1VVZyHvvqcAR6Z4CkK+MFdrvCXiaUDpDoYB1ZxOMoCj/hKDiUYvUl7y9 G3QjAjr21upwDFqreJs03cpqHwlP/PyJZ4PnwS3/nJPYu0fa06uWSTHvUTzTwSI1 M09xVeB5mrtKoTuEtZmhEqWEY7Ty3FDTH5F/4d/HeYJBz6n9pCE= -----END CERTIFICATE-----Generated at Mon Aug 11 04:08:00 2025 by rpki-client