$ rpki-client -vvf repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft File: 889933E416F356762F7F72858168C9C8A2E241C7.mft (raw, json) Hash identifier: UAVSycSJEX/VrTttUpYXb+3XVacpn67bm9GxbpNFS+s= Subject key identifier: BC:51:D0:BE:D4:27:41:8D:BA:9E:A2:69:13:85:5B:18:7C:75:D4:13 Authority key identifier: 88:99:33:E4:16:F3:56:76:2F:7F:72:85:81:68:C9:C8:A2:E2:41:C7 Certificate issuer: /CN=889933E416F356762F7F72858168C9C8A2E241C7 Certificate serial: 50D32A1D9B51E9F4103DDDF74FBA9CBF27FF7544 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/889933E416F356762F7F72858168C9C8A2E241C7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft Manifest number: 01C9 Signing time: Sat 19 Jul 2025 11:40:35 +0000 Manifest this update: Sat 19 Jul 2025 11:35:35 +0000 Manifest next update: Tue 22 Jul 2025 22:04:35 +0000 Files and hashes: 1: 3130332e3136372e3233362e302f32342d3234203d3e20313432333038.roa (hash: uTvbyRMa3JtSusZO5ZSoZ1ULN8brLrTNIGs82j6nGCw=) 2: 3130332e3136372e3233372e302f32342d3234203d3e20313432333038.roa (hash: 0nr9gPQw5gg7weyVjVjmP4Ms0ouXxZyEGyyMhhjUA3E=) 3: 889933E416F356762F7F72858168C9C8A2E241C7.crl (hash: KCX+BXVlcZVIVwqIjhiwhd0gJo0o3n05vptNtHEDVRc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.crl rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/889933E416F356762F7F72858168C9C8A2E241C7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 22:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:d3:2a:1d:9b:51:e9:f4:10:3d:dd:f7:4f:ba:9c:bf:27:ff:75:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=889933E416F356762F7F72858168C9C8A2E241C7 Validity Not Before: Jul 19 11:35:35 2025 GMT Not After : Jul 22 22:04:35 2025 GMT Subject: CN=BC51D0BED427418DBA9EA26913855B187C75D413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:43:25:ad:1d:36:ec:ad:71:21:3d:db:14:cb: 83:32:e9:d6:14:f5:70:03:5e:9d:05:32:78:3b:2b: 1c:9d:2b:ab:f9:b2:15:56:c9:1e:18:3a:55:a7:bb: b0:e5:3f:bc:a5:57:48:ab:a3:ab:7d:3c:a3:63:1e: 41:75:fb:f3:2f:0f:9e:d4:16:02:a3:3e:80:58:06: b4:ef:a5:b9:44:50:b1:13:03:8f:e7:0c:dd:8a:e0: ad:7b:af:21:38:3e:e8:7d:e8:eb:48:64:93:15:9e: ba:23:9f:a7:e1:0d:f4:47:bf:86:3f:1a:25:62:e7: 71:72:43:08:04:1c:2c:7c:ed:97:ae:c9:1f:b3:6d: 6d:d2:4f:fa:ce:88:89:bd:fe:67:6b:f9:70:52:ba: 87:ca:ef:7b:32:d2:6a:31:70:94:58:a4:48:4b:b5: 7c:30:a1:67:f5:ac:67:86:90:6c:ee:ce:01:03:90: 60:07:dd:07:3d:91:a8:84:14:86:f9:2e:3a:1e:ab: e9:9a:f5:75:bc:7f:2e:c4:bf:40:e2:b6:e7:ad:54: aa:db:24:29:5c:49:89:21:89:d1:cd:50:d4:5c:16: 45:6e:b3:52:a9:42:57:a4:bc:dc:88:e8:2e:6f:b7: ba:d8:05:41:07:4a:38:01:85:3d:d4:15:9b:87:2f: 44:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:51:D0:BE:D4:27:41:8D:BA:9E:A2:69:13:85:5B:18:7C:75:D4:13 X509v3 Authority Key Identifier: keyid:88:99:33:E4:16:F3:56:76:2F:7F:72:85:81:68:C9:C8:A2:E2:41:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/889933E416F356762F7F72858168C9C8A2E241C7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:40:85:79:75:52:1b:7f:d9:e0:5d:2e:2e:02:79:8a:bf:da: a8:64:85:96:37:2a:dc:be:3d:a8:20:25:09:cd:bc:49:e7:23: 6f:b1:30:a5:99:be:f1:41:a5:f0:a9:18:2a:be:df:52:17:6e: 96:c8:f8:fb:3c:33:1c:24:96:c4:90:5e:ee:fd:48:35:8c:18: c4:7e:fc:a6:f2:10:ba:cf:01:b8:cf:db:7b:82:3b:25:19:97: 83:9c:6d:dd:67:22:1e:3b:5e:e4:05:f8:ac:3c:2b:28:bf:0e: 16:0b:3e:05:5d:96:0a:f4:50:89:2f:9f:fb:78:90:9e:52:83: e1:cf:82:12:2c:e4:40:f4:62:5c:01:b4:f5:1b:41:50:d6:42: 93:92:0f:ab:e4:c1:ea:b1:6c:7d:77:26:c4:57:0b:c8:b9:c1: 87:d4:46:e8:73:32:91:30:80:dd:5a:04:9d:c1:99:b0:e6:45: 86:10:14:54:0a:e5:7f:8e:af:c5:51:ac:b5:70:e1:3a:04:b1: 8f:6e:ba:78:ad:fc:91:d8:ae:3e:0c:3c:ab:42:24:6a:63:0b: 70:e2:3a:e0:0f:6a:f7:04:59:50:3b:17:63:16:de:b8:a7:87: 18:74:5c:74:86:75:7a:72:96:68:cb:93:81:d8:c7:30:73:79: 4e:8f:84:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUNMqHZtR6fQQPd33T7qcvyf/dUQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg5OTMzRTQxNkYzNTY3NjJGN0Y3Mjg1ODE2OEM5QzhB MkUyNDFDNzAeFw0yNTA3MTkxMTM1MzVaFw0yNTA3MjIyMjA0MzVaMDMxMTAvBgNV BAMTKEJDNTFEMEJFRDQyNzQxOERCQTlFQTI2OTEzODU1QjE4N0M3NUQ0MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPQyWtHTbsrXEhPdsUy4My6dYU 9XADXp0FMng7KxydK6v5shVWyR4YOlWnu7DlP7ylV0iro6t9PKNjHkF1+/MvD57U FgKjPoBYBrTvpblEULETA4/nDN2K4K17ryE4Puh96OtIZJMVnrojn6fhDfRHv4Y/ GiVi53FyQwgEHCx87ZeuyR+zbW3ST/rOiIm9/mdr+XBSuofK73sy0moxcJRYpEhL tXwwoWf1rGeGkGzuzgEDkGAH3Qc9kaiEFIb5Ljoeq+ma9XW8fy7Ev0DituetVKrb JClcSYkhidHNUNRcFkVus1KpQlekvNyI6C5vt7rYBUEHSjgBhT3UFZuHL0QLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvFHQvtQnQY26nqJpE4VbGHx11BMwHwYDVR0j BBgwFoAUiJkz5BbzVnYvf3KFgWjJyKLiQccwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZWNmZDNmNS04NWRhLTQ4YTctYjUwMi1mNjFhNTk3OTZjMzMvMC84ODk5MzNFNDE2 RjM1Njc2MkY3RjcyODU4MTY4QzlDOEEyRTI0MUM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODg5OTMzRTQxNkYzNTY3NjJGN0Y3Mjg1ODE2OEM5QzhBMkUy NDFDNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWVjZmQzZjUtODVkYS00OGE3LWI1 MDItZjYxYTU5Nzk2YzMzLzAvODg5OTMzRTQxNkYzNTY3NjJGN0Y3Mjg1ODE2OEM5 QzhBMkUyNDFDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFhAhXl1Uht/2eBdLi4CeYq/2qhkhZY3Kty+ PaggJQnNvEnnI2+xMKWZvvFBpfCpGCq+31IXbpbI+Ps8MxwklsSQXu79SDWMGMR+ /KbyELrPAbjP23uCOyUZl4Ocbd1nIh47XuQF+Kw8Kyi/DhYLPgVdlgr0UIkvn/t4 kJ5Sg+HPghIs5ED0YlwBtPUbQVDWQpOSD6vkweqxbH13JsRXC8i5wYfURuhzMpEw gN1aBJ3BmbDmRYYQFFQK5X+Or8VRrLVw4ToEsY9uunit/JHYrj4MPKtCJGpjC3Di OuAPavcEWVA7F2MW3rinhxh0XHSGdXpylmjLk4HYxzBzeU6PhCw= -----END CERTIFICATE-----Generated at Mon Jul 21 08:55:08 2025 by rpki-client