$ rpki-client -vvf repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft File: 289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft (raw, json) Hash identifier: 3HSMR1/wmTQI6DQrYBZw+t0igaeqcN8BhwxBw2DDWmo= Subject key identifier: 42:DE:4F:68:A7:5D:9C:32:51:D1:5B:09:47:FD:51:0B:A7:1C:1C:C2 Authority key identifier: 28:91:51:EF:8A:E8:A7:9D:8F:42:66:83:D1:52:5A:D8:2F:AB:3D:5C Certificate issuer: /CN=289151EF8AE8A79D8F426683D1525AD82FAB3D5C Certificate serial: 05152F669BB9FBF3D64F66539FC1136530FBB04E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft Manifest number: 0159 Signing time: Sat 19 Jul 2025 22:31:39 +0000 Manifest this update: Sat 19 Jul 2025 22:26:39 +0000 Manifest next update: Wed 23 Jul 2025 01:11:39 +0000 Files and hashes: 1: 323030313a6466313a633263303a3a2f34382d3438203d3e20313439393039.roa (hash: 6LOGBCF5zTr7iAtxuc25TGgWiHmJgXAtcLTxMujO3no=) 2: 289151EF8AE8A79D8F426683D1525AD82FAB3D5C.crl (hash: gT/tuYjPZSDL4JDjQollWxufG3ol3PhdpdAOSoR7OkA=) 3: 3130332e3139312e35382e302f32332d3234203d3e20313439393039.roa (hash: uLA8drzoTGDdLRLknWkZIaOJdJxpC+UKHzjWLF3FpOA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.crl rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 01:11:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:15:2f:66:9b:b9:fb:f3:d6:4f:66:53:9f:c1:13:65:30:fb:b0:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=289151EF8AE8A79D8F426683D1525AD82FAB3D5C Validity Not Before: Jul 19 22:26:39 2025 GMT Not After : Jul 23 01:11:39 2025 GMT Subject: CN=42DE4F68A75D9C3251D15B0947FD510BA71C1CC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f1:c0:cd:5c:af:b5:08:72:dc:a4:07:25:98: 60:c4:a0:c5:d8:30:4e:90:32:cc:cd:49:9d:8f:ff: 6c:4b:3c:f2:f8:78:89:44:9f:09:9d:32:d5:ab:1c: ea:4e:97:08:73:1a:d8:61:cd:2b:22:4e:4d:3a:d9: 85:3a:d5:5f:89:f0:a3:de:ca:69:93:1d:44:60:a5: f0:81:c5:21:31:66:4b:52:86:d9:bc:a6:18:be:dc: 7c:da:47:52:69:20:dc:26:b3:aa:5e:83:03:ba:ad: c1:83:c6:d5:4d:69:83:72:e3:9b:33:df:0e:52:8c: 67:5d:9f:37:7f:93:91:a6:72:8c:60:c8:44:01:80: 1b:4d:26:e7:0b:ba:4b:79:02:16:4d:3e:19:78:f7: 7c:e8:5b:fb:e5:b9:55:e3:b4:3d:09:ae:b8:0d:ec: e9:bc:e3:01:6c:14:8a:f1:8d:e6:8b:dd:43:95:ef: 6b:bc:48:bc:f2:86:3f:d4:15:60:03:56:2c:11:8f: cd:18:3c:c7:3c:7e:fd:8e:1f:85:53:7d:97:14:46: 09:cf:dd:ad:70:4b:d0:5b:94:be:ec:9d:26:71:a3: 20:59:1e:53:60:d6:19:d1:b0:6e:82:1c:1f:6d:87: 1a:a1:3f:67:8b:e1:6e:8a:7b:25:7f:a6:92:70:ac: cd:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:DE:4F:68:A7:5D:9C:32:51:D1:5B:09:47:FD:51:0B:A7:1C:1C:C2 X509v3 Authority Key Identifier: keyid:28:91:51:EF:8A:E8:A7:9D:8F:42:66:83:D1:52:5A:D8:2F:AB:3D:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:bd:3e:b0:e0:0f:21:d4:eb:da:8b:0f:f0:4e:a2:e8:0e:08: 2c:69:8c:c5:78:ae:c3:c1:47:67:83:ec:f8:5a:ab:00:53:0a: 4d:1c:a0:c0:29:b2:59:7d:19:7a:b1:8a:d1:0e:f1:2e:20:4e: fd:08:e0:90:8c:0b:d9:00:c7:e2:af:ec:16:de:33:cf:d4:98: f6:2b:e8:07:3c:fb:fd:64:b2:09:1b:74:c1:91:c9:59:8e:58: fc:a5:01:1e:04:1b:3f:0c:42:89:c8:40:58:38:59:eb:4f:9e: 06:b7:94:f1:49:2c:4a:84:2b:01:dc:a6:cd:be:a2:c4:b0:33: ba:e7:59:db:0a:f4:9c:4b:88:c6:63:5b:55:70:02:a2:36:56: c3:50:b4:ee:2f:dc:74:9d:91:b6:67:8a:4d:21:c8:db:d9:98: 1b:c2:21:e1:f8:f3:7e:5c:dd:ff:14:e9:f2:73:c5:28:84:ff: 50:63:39:23:75:5d:4a:e5:28:60:5b:3a:55:da:1c:b6:3a:33: 8d:46:f8:66:cf:01:e3:0b:09:b8:aa:c3:d9:08:d8:65:4e:04: fe:90:27:45:2a:0e:9e:bb:68:96:fb:46:6f:6d:4d:02:a5:6b: 41:aa:9d:b4:b1:2b:05:2c:c6:43:94:dd:e5:75:53:07:ce:eb: 4e:fa:f7:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBRUvZpu5+/PWT2ZTn8ETZTD7sE4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg5MTUxRUY4QUU4QTc5RDhGNDI2NjgzRDE1MjVBRDgy RkFCM0Q1QzAeFw0yNTA3MTkyMjI2MzlaFw0yNTA3MjMwMTExMzlaMDMxMTAvBgNV BAMTKDQyREU0RjY4QTc1RDlDMzI1MUQxNUIwOTQ3RkQ1MTBCQTcxQzFDQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB8cDNXK+1CHLcpAclmGDEoMXY ME6QMszNSZ2P/2xLPPL4eIlEnwmdMtWrHOpOlwhzGthhzSsiTk062YU61V+J8KPe ymmTHURgpfCBxSExZktShtm8phi+3HzaR1JpINwms6pegwO6rcGDxtVNaYNy45sz 3w5SjGddnzd/k5GmcoxgyEQBgBtNJucLukt5AhZNPhl493zoW/vluVXjtD0JrrgN 7Om84wFsFIrxjeaL3UOV72u8SLzyhj/UFWADViwRj80YPMc8fv2OH4VTfZcURgnP 3a1wS9BblL7snSZxoyBZHlNg1hnRsG6CHB9thxqhP2eL4W6KeyV/ppJwrM2HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQt5PaKddnDJR0VsJR/1RC6ccHMIwHwYDVR0j BBgwFoAUKJFR74rop52PQmaD0VJa2C+rPVwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YmJlNjgxNS0zMTBlLTQyMDYtYTUwMC02YmI5ZDMyNjNhYmYvMC8yODkxNTFFRjhB RThBNzlEOEY0MjY2ODNEMTUyNUFEODJGQUIzRDVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg5MTUxRUY4QUU4QTc5RDhGNDI2NjgzRDE1MjVBRDgyRkFC M0Q1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmJiZTY4MTUtMzEwZS00MjA2LWE1 MDAtNmJiOWQzMjYzYWJmLzAvMjg5MTUxRUY4QUU4QTc5RDhGNDI2NjgzRDE1MjVB RDgyRkFCM0Q1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAm9PrDgDyHU69qLD/BOougOCCxpjMV4rsPB R2eD7PhaqwBTCk0coMApsll9GXqxitEO8S4gTv0I4JCMC9kAx+Kv7BbeM8/UmPYr 6Ac8+/1ksgkbdMGRyVmOWPylAR4EGz8MQonIQFg4WetPnga3lPFJLEqEKwHcps2+ osSwM7rnWdsK9JxLiMZjW1VwAqI2VsNQtO4v3HSdkbZnik0hyNvZmBvCIeH4835c 3f8U6fJzxSiE/1BjOSN1XUrlKGBbOlXaHLY6M41G+GbPAeMLCbiqw9kI2GVOBP6Q J0UqDp67aJb7Rm9tTQKla0GqnbSxKwUsxkOU3eV1UwfO607696I= -----END CERTIFICATE-----Generated at Mon Jul 21 01:34:08 2025 by rpki-client