$ rpki-client -vvf repo-rpki.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/8989D0431453556F22D882A21B2BBB9F4E4A2C24.mft File: 8989D0431453556F22D882A21B2BBB9F4E4A2C24.mft (raw, json) Hash identifier: rLHzHwmU/SKPFPM8apeQO/+f24YIPMHSmoshcI2PRf4= Subject key identifier: 39:7C:C2:59:23:DE:DA:37:16:2C:9B:A5:62:55:D9:40:E3:E8:6C:62 Authority key identifier: 89:89:D0:43:14:53:55:6F:22:D8:82:A2:1B:2B:BB:9F:4E:4A:2C:24 Certificate issuer: /CN=8989D0431453556F22D882A21B2BBB9F4E4A2C24 Certificate serial: 13150FF27D4AAF83ABED215615B27077ADDE2320 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8989D0431453556F22D882A21B2BBB9F4E4A2C24.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/8989D0431453556F22D882A21B2BBB9F4E4A2C24.mft Manifest number: 0176 Signing time: Mon 21 Jul 2025 23:31:25 +0000 Manifest this update: Mon 21 Jul 2025 23:26:25 +0000 Manifest next update: Fri 25 Jul 2025 02:34:25 +0000 Files and hashes: 1: 8989D0431453556F22D882A21B2BBB9F4E4A2C24.crl (hash: vVIwWiE/fdscmkj3YXmISyMEJfO+7Fl5FUM4IOSbW0A=) 2: 3130332e3133302e38322e302f32332d3233203d3e20313530393636.roa (hash: wzb3XBaqsWwxrRVk4X/B9M9lBaxhMB40Ug9owyKd8Yw=) 3: 3130332e3133302e38332e302f32342d3234203d3e20313530393636.roa (hash: MueUJKcGkwue3xJukPLYM+05PMMpQl2v+Pz0FDXtNcM=) 4: 3130332e3133302e38322e302f32342d3234203d3e20313530393636.roa (hash: WdwAhrLb01WctAevsLo2E5F0+guZcHnuWIL6/QTKVQY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/8989D0431453556F22D882A21B2BBB9F4E4A2C24.crl rsync://repo-rpki.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/8989D0431453556F22D882A21B2BBB9F4E4A2C24.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8989D0431453556F22D882A21B2BBB9F4E4A2C24.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 02:34:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:15:0f:f2:7d:4a:af:83:ab:ed:21:56:15:b2:70:77:ad:de:23:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8989D0431453556F22D882A21B2BBB9F4E4A2C24 Validity Not Before: Jul 21 23:26:25 2025 GMT Not After : Jul 25 02:34:25 2025 GMT Subject: CN=397CC25923DEDA37162C9BA56255D940E3E86C62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:96:92:b9:8f:7c:61:64:ae:e5:96:95:fc:bd: 4f:48:30:6b:c1:c5:84:8d:7d:f0:8f:71:c7:8d:22: 66:45:ee:d4:8c:e9:54:b6:aa:c7:53:f6:22:75:98: 2e:7e:6f:a0:5f:5b:2d:48:18:3a:8a:da:f4:c7:5b: 52:db:07:1c:3c:72:e1:b9:ae:f3:62:dc:cd:38:e0: 40:2d:ac:4f:d3:59:74:89:02:42:30:c0:f7:97:67: e1:47:c3:0a:e8:ac:03:e8:1a:cb:74:f0:1f:2f:6a: 85:e0:1e:d7:90:76:8d:8d:62:c5:4e:64:6f:16:3b: 3c:dc:fe:c6:f4:0f:3e:81:5e:c5:47:12:3a:12:91: 5b:e5:ee:5b:0e:8d:4c:77:b5:ef:cc:9d:c4:f6:97: 4c:b7:0a:71:5a:b8:2a:ae:63:3e:84:df:16:14:c5: 6e:93:53:61:98:c2:a7:45:c4:39:7d:8e:da:b5:b2: f3:97:f3:8a:d6:26:91:7b:aa:bc:85:c8:90:d0:9e: c4:5c:4f:c9:07:17:a6:75:05:83:aa:84:9e:12:53: a5:10:d5:0a:af:38:9a:c1:3b:d3:58:ed:b1:47:e8: b4:30:37:61:c7:a3:ae:96:06:71:b0:58:36:39:56: 7a:a9:ee:ed:bc:18:f3:f4:8a:6f:aa:41:a3:b6:88: c8:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:7C:C2:59:23:DE:DA:37:16:2C:9B:A5:62:55:D9:40:E3:E8:6C:62 X509v3 Authority Key Identifier: keyid:89:89:D0:43:14:53:55:6F:22:D8:82:A2:1B:2B:BB:9F:4E:4A:2C:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/8989D0431453556F22D882A21B2BBB9F4E4A2C24.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8989D0431453556F22D882A21B2BBB9F4E4A2C24.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/8989D0431453556F22D882A21B2BBB9F4E4A2C24.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:c2:d8:6e:25:c6:2d:46:28:41:83:1c:8f:cc:e4:83:fa:88: f0:21:71:49:72:f5:bb:8f:7f:8e:0c:18:b8:78:4f:46:1f:95: d8:9d:ae:ff:c5:3c:0e:9e:20:f5:b6:13:9a:f6:0c:ba:54:86: 7f:97:80:24:83:93:03:89:a6:e0:0f:dd:90:14:24:e9:82:55: ed:57:89:f9:0c:a9:a3:bb:aa:ab:91:46:26:ef:29:cf:73:e1: f9:33:d2:b0:97:9d:c5:e3:fd:43:3e:f5:ca:c9:3a:c2:fd:db: ad:5e:b9:01:b8:f3:fa:ce:c2:7b:c7:19:38:29:40:6c:8c:ab: a0:12:7d:cd:e1:4f:b0:b7:0b:d5:55:91:bf:cc:3c:71:c0:e9: c9:17:df:d6:02:d5:72:80:0f:34:6d:81:47:62:60:40:db:9c: f8:f7:3f:27:9e:15:d8:b0:7a:0c:3c:ae:93:29:85:57:68:1a: ac:11:ff:e2:4f:f3:02:44:4e:38:68:4c:38:b7:fe:86:bd:7f: 82:56:f6:6a:2b:55:0d:0a:59:c6:05:05:e8:83:cc:e7:9a:8a: e3:16:b1:64:45:20:f0:7f:30:2f:29:65:7b:66:dc:ec:50:ee: ce:44:66:9b:8b:ad:11:fe:22:0c:c2:83:84:83:43:25:88:60: 4b:46:79:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUExUP8n1Kr4Or7SFWFbJwd63eIyAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk4OUQwNDMxNDUzNTU2RjIyRDg4MkEyMUIyQkJCOUY0 RTRBMkMyNDAeFw0yNTA3MjEyMzI2MjVaFw0yNTA3MjUwMjM0MjVaMDMxMTAvBgNV BAMTKDM5N0NDMjU5MjNERURBMzcxNjJDOUJBNTYyNTVEOTQwRTNFODZDNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXlpK5j3xhZK7llpX8vU9IMGvB xYSNffCPcceNImZF7tSM6VS2qsdT9iJ1mC5+b6BfWy1IGDqK2vTHW1LbBxw8cuG5 rvNi3M044EAtrE/TWXSJAkIwwPeXZ+FHwwrorAPoGst08B8vaoXgHteQdo2NYsVO ZG8WOzzc/sb0Dz6BXsVHEjoSkVvl7lsOjUx3te/MncT2l0y3CnFauCquYz6E3xYU xW6TU2GYwqdFxDl9jtq1svOX84rWJpF7qryFyJDQnsRcT8kHF6Z1BYOqhJ4SU6UQ 1QqvOJrBO9NY7bFH6LQwN2HHo66WBnGwWDY5Vnqp7u28GPP0im+qQaO2iMh/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOXzCWSPe2jcWLJulYlXZQOPobGIwHwYDVR0j BBgwFoAUiYnQQxRTVW8i2IKiGyu7n05KLCQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YTg3MDY0Yi01ZjI3LTQyNzAtOTBlNC05OWY0M2FlODRkYjcvMC84OTg5RDA0MzE0 NTM1NTZGMjJEODgyQTIxQjJCQkI5RjRFNEEyQzI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODk4OUQwNDMxNDUzNTU2RjIyRDg4MkEyMUIyQkJCOUY0RTRB MkMyNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGE4NzA2NGItNWYyNy00MjcwLTkw ZTQtOTlmNDNhZTg0ZGI3LzAvODk4OUQwNDMxNDUzNTU2RjIyRDg4MkEyMUIyQkJC OUY0RTRBMkMyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABLC2G4lxi1GKEGDHI/M5IP6iPAhcUly9buP f44MGLh4T0Yfldidrv/FPA6eIPW2E5r2DLpUhn+XgCSDkwOJpuAP3ZAUJOmCVe1X ifkMqaO7qquRRibvKc9z4fkz0rCXncXj/UM+9crJOsL9261euQG48/rOwnvHGTgp QGyMq6ASfc3hT7C3C9VVkb/MPHHA6ckX39YC1XKADzRtgUdiYEDbnPj3PyeeFdiw egw8rpMphVdoGqwR/+JP8wJETjhoTDi3/oa9f4JW9morVQ0KWcYFBeiDzOeaiuMW sWRFIPB/MC8pZXtm3OxQ7s5EZpuLrRH+IgzCg4SDQyWIYEtGeaw= -----END CERTIFICATE-----Generated at Wed Jul 23 02:07:06 2025 by rpki-client