$ rpki-client -vvf repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft File: 8E87AB0332210D864175F7A371230D7C6099AE30.mft (raw, json) Hash identifier: HYh4CEcpNLKLsGBxP70OGqhKiY1SKWDSXsjnRZUiul8= Subject key identifier: 08:78:AE:CE:4F:83:A7:C4:DD:3C:00:D1:81:C1:74:87:82:1F:DA:29 Authority key identifier: 8E:87:AB:03:32:21:0D:86:41:75:F7:A3:71:23:0D:7C:60:99:AE:30 Certificate issuer: /CN=8E87AB0332210D864175F7A371230D7C6099AE30 Certificate serial: 791AB826F3DF49C99280A69D5366D1A8909FECB5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E87AB0332210D864175F7A371230D7C6099AE30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft Manifest number: 0232 Signing time: Tue 04 Nov 2025 12:41:44 +0000 Manifest this update: Tue 04 Nov 2025 12:36:44 +0000 Manifest next update: Fri 07 Nov 2025 21:04:44 +0000 Files and hashes: 1: 8E87AB0332210D864175F7A371230D7C6099AE30.crl (hash: tmiyVldvLbWqCtu6JX62D+k2H+JARu8o/Qf2dHwN8Qk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.crl rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E87AB0332210D864175F7A371230D7C6099AE30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:1a:b8:26:f3:df:49:c9:92:80:a6:9d:53:66:d1:a8:90:9f:ec:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E87AB0332210D864175F7A371230D7C6099AE30 Validity Not Before: Nov 4 12:36:44 2025 GMT Not After : Nov 7 21:04:44 2025 GMT Subject: CN=0878AECE4F83A7C4DD3C00D181C17487821FDA29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:0e:d5:7d:8d:42:9a:9f:f3:19:21:71:d8:06: a9:d8:45:eb:11:d6:d1:16:84:4e:6a:a1:2f:b8:15: fb:42:2a:2c:d0:87:4d:3b:be:76:e6:01:69:db:91: ce:b7:b2:1b:7e:ec:52:f3:ed:f5:2a:82:85:ec:15: c0:77:8c:c2:cf:57:73:33:71:dd:3a:71:93:a9:b0: 19:f0:c7:b8:bb:10:24:69:3f:fa:4b:76:f7:18:89: 01:80:fa:09:56:b4:b4:1a:68:c7:71:79:b7:b0:4d: f0:68:b3:49:d1:60:3f:95:c2:13:02:1e:6d:e1:0a: 9e:d3:d5:90:44:3d:f3:10:20:26:b7:e1:5b:59:53: 18:00:b2:e0:8c:5e:c2:5d:d2:69:7f:7f:a9:82:f0: 4d:47:65:79:2b:76:dd:65:7a:30:01:40:ee:38:38: 91:d0:6d:40:7d:ee:c0:65:c7:8e:ec:88:6a:4c:a8: 73:c7:20:72:92:ba:8f:a8:cb:2d:71:c8:34:74:06: 9f:40:51:32:6e:96:d0:23:ba:15:2f:ad:ce:ed:c5: 68:97:1c:db:25:0c:1b:c0:32:0c:fc:21:41:e6:82: f8:f4:f4:4a:84:9f:73:6b:cb:0e:ac:18:2c:fe:69: ac:11:ea:8f:2a:c5:9a:28:f3:5a:c4:1a:2f:a4:df: a2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:78:AE:CE:4F:83:A7:C4:DD:3C:00:D1:81:C1:74:87:82:1F:DA:29 X509v3 Authority Key Identifier: keyid:8E:87:AB:03:32:21:0D:86:41:75:F7:A3:71:23:0D:7C:60:99:AE:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8E87AB0332210D864175F7A371230D7C6099AE30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f504e4c7-7a2d-4d66-8fb4-205565787f24/0/8E87AB0332210D864175F7A371230D7C6099AE30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:ef:24:70:55:11:ec:18:c3:da:e2:6f:40:7d:00:e0:88:94: fb:a7:c1:37:c6:01:0a:68:ee:b9:d9:77:01:be:c6:3d:82:8a: c5:ea:cc:6e:cf:25:d4:27:99:a0:c8:76:c1:2e:c1:af:d4:b6: 37:a6:3c:61:7a:a2:3f:82:a0:05:71:55:74:39:4b:ba:0e:90: 0e:46:83:0b:65:aa:23:9a:22:d6:29:6a:44:dc:82:7f:2f:51: 4c:21:eb:1a:e7:71:3f:9a:09:fb:ec:ea:a9:ae:62:53:25:e4: 64:df:0a:8b:d7:1f:17:b9:68:6f:01:8e:bb:7c:68:e4:91:8e: 65:2c:73:4e:59:d1:89:4c:5a:6b:db:6c:5f:f2:fd:08:7a:b4: 77:47:c8:31:01:54:ab:42:64:dd:3e:ba:46:c0:24:03:8c:a4: 3f:69:2b:7b:ec:71:19:87:23:09:28:f8:ee:0d:c3:94:39:0d: e0:d4:c2:b6:3d:ce:5a:ae:00:0f:e2:1d:91:19:df:8f:69:ef: 69:33:8d:2e:0a:5d:92:c3:0f:1c:1c:2e:36:91:f5:34:3e:07: 53:5b:d4:eb:fc:1f:a2:8e:90:d7:9a:32:bc:87:4f:67:dc:e6: 69:4b:f0:2e:d4:7c:51:e5:9d:32:a6:4e:70:4e:50:43:9d:3c: 8a:3d:59:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeRq4JvPfScmSgKadU2bRqJCf7LUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU4N0FCMDMzMjIxMEQ4NjQxNzVGN0EzNzEyMzBEN0M2 MDk5QUUzMDAeFw0yNTExMDQxMjM2NDRaFw0yNTExMDcyMTA0NDRaMDMxMTAvBgNV BAMTKDA4NzhBRUNFNEY4M0E3QzRERDNDMDBEMTgxQzE3NDg3ODIxRkRBMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzDtV9jUKan/MZIXHYBqnYResR 1tEWhE5qoS+4FftCKizQh007vnbmAWnbkc63sht+7FLz7fUqgoXsFcB3jMLPV3Mz cd06cZOpsBnwx7i7ECRpP/pLdvcYiQGA+glWtLQaaMdxebewTfBos0nRYD+VwhMC Hm3hCp7T1ZBEPfMQICa34VtZUxgAsuCMXsJd0ml/f6mC8E1HZXkrdt1lejABQO44 OJHQbUB97sBlx47siGpMqHPHIHKSuo+oyy1xyDR0Bp9AUTJultAjuhUvrc7txWiX HNslDBvAMgz8IUHmgvj09EqEn3Nryw6sGCz+aawR6o8qxZoo81rEGi+k36IlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCHiuzk+Dp8TdPADRgcF0h4If2ikwHwYDVR0j BBgwFoAUjoerAzIhDYZBdfejcSMNfGCZrjAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NTA0ZTRjNy03YTJkLTRkNjYtOGZiNC0yMDU1NjU3ODdmMjQvMC84RTg3QUIwMzMy MjEwRDg2NDE3NUY3QTM3MTIzMEQ3QzYwOTlBRTMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEU4N0FCMDMzMjIxMEQ4NjQxNzVGN0EzNzEyMzBEN0M2MDk5 QUUzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjUwNGU0YzctN2EyZC00ZDY2LThm YjQtMjA1NTY1Nzg3ZjI0LzAvOEU4N0FCMDMzMjIxMEQ4NjQxNzVGN0EzNzEyMzBE N0M2MDk5QUUzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACvvJHBVEewYw9rib0B9AOCIlPunwTfGAQpo 7rnZdwG+xj2CisXqzG7PJdQnmaDIdsEuwa/UtjemPGF6oj+CoAVxVXQ5S7oOkA5G gwtlqiOaItYpakTcgn8vUUwh6xrncT+aCfvs6qmuYlMl5GTfCovXHxe5aG8Bjrt8 aOSRjmUsc05Z0YlMWmvbbF/y/Qh6tHdHyDEBVKtCZN0+ukbAJAOMpD9pK3vscRmH Iwko+O4Nw5Q5DeDUwrY9zlquAA/iHZEZ349p72kzjS4KXZLDDxwcLjaR9TQ+B1Nb 1Ov8H6KOkNeaMryHT2fc5mlL8C7UfFHlnTKmTnBOUEOdPIo9WV0= -----END CERTIFICATE-----Generated at Tue Nov 4 16:31:39 2025 by rpki-client