$ rpki-client -vvf repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft File: F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft (raw, json) Hash identifier: AZIOiv1gmTE6GAxcmOKxKp8Fqv9ITxA6fdr0uXh7NAk= Subject key identifier: 67:03:99:BA:BF:9F:5D:2B:A8:E9:ED:1D:90:AB:66:6B:C7:F4:DC:25 Authority key identifier: F8:99:69:E8:BA:BE:05:C4:5C:6D:6E:25:F6:25:E9:F1:84:5C:CC:9C Certificate issuer: /CN=F89969E8BABE05C45C6D6E25F625E9F1845CCC9C Certificate serial: 3EB49806B48D575C8FAA11D3181C6082C7A9B077 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft Manifest number: 04F0 Signing time: Sun 20 Jul 2025 04:00:51 +0000 Manifest this update: Sun 20 Jul 2025 03:55:51 +0000 Manifest next update: Wed 23 Jul 2025 06:36:51 +0000 Files and hashes: 1: F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.crl (hash: FxJU1V6W7QozdgUnIEuobXFcFlOpTmuD7BGiZ8ORD/Q=) 2: 3130332e3132362e38342e302f32322d3234203d3e20313338313039.roa (hash: Fk8DplImfz+K8DXRwes7LY4gqzQurTG9SsMeFcuo2l8=) 3: 323430343a3763303a3a2f33322d3332203d3e20313338313039.roa (hash: 8YhkhAgabc++Mqu+wq5ak2VX+c1IFJBr8gOpgVG3Khk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.crl rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 06:36:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:b4:98:06:b4:8d:57:5c:8f:aa:11:d3:18:1c:60:82:c7:a9:b0:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F89969E8BABE05C45C6D6E25F625E9F1845CCC9C Validity Not Before: Jul 20 03:55:51 2025 GMT Not After : Jul 23 06:36:51 2025 GMT Subject: CN=670399BABF9F5D2BA8E9ED1D90AB666BC7F4DC25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a3:a3:6a:7b:3a:57:6f:8f:0b:e4:3c:e4:ef: 4b:71:47:e3:76:77:ea:f9:0c:33:4a:82:b5:24:dd: e9:9b:cd:19:b9:82:8f:4a:6c:9d:82:27:b6:cf:11: 11:32:a7:45:f7:42:f0:c9:d0:a5:4d:a0:20:1e:9e: 50:68:ec:f3:99:17:00:df:23:81:7c:0a:8b:d9:b3: a1:e6:2f:3f:76:c5:12:c5:ca:58:dd:9b:b2:02:14: 87:8f:ed:21:81:95:dc:35:7e:0e:45:da:df:05:60: 20:94:65:5e:23:42:b2:8d:c4:9e:b4:b3:b3:17:1c: 15:77:3a:73:55:28:5b:01:72:8c:bc:e3:d2:cf:b4: 4f:8c:e2:71:33:b9:38:d1:b2:2f:96:47:cc:10:bc: d4:e9:0d:2d:51:c8:d8:43:16:e0:35:e9:66:aa:20: 95:a0:0d:3c:66:f5:5e:4b:b9:a4:b7:78:df:30:6a: c6:24:68:86:b1:92:81:fe:61:9f:73:d9:a2:63:e6: f4:a5:83:d8:d2:5d:10:64:52:6a:0e:3e:29:ce:0c: 3c:e5:74:59:74:8f:36:bb:d0:22:86:5f:83:c3:b3: 6d:ba:8f:d6:18:bc:c1:34:12:31:a6:38:8c:e1:93: 45:b3:e3:af:93:b9:bf:59:e0:88:c9:c0:48:80:31: 49:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:03:99:BA:BF:9F:5D:2B:A8:E9:ED:1D:90:AB:66:6B:C7:F4:DC:25 X509v3 Authority Key Identifier: keyid:F8:99:69:E8:BA:BE:05:C4:5C:6D:6E:25:F6:25:E9:F1:84:5C:CC:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:ec:b6:21:4d:b9:d1:90:06:36:85:9f:28:75:bc:39:3b:9d: 38:5e:ef:b7:3e:6b:a2:7d:38:95:41:09:c3:72:f6:7b:dc:b9: bb:ef:6d:34:d3:5f:9e:f6:c6:3f:f7:89:57:2c:b2:b5:ac:3a: fc:e6:16:22:63:59:9a:09:36:c9:8f:f6:9c:b6:e2:6f:48:ad: b6:0b:38:11:b1:21:af:39:a1:ff:67:2e:91:f4:1d:e2:ec:1c: 44:80:79:24:59:9b:9f:dd:71:28:3e:17:2a:d4:06:d2:1c:3e: c8:02:21:4b:58:fd:12:82:18:92:31:4e:7e:bc:6d:27:8a:b2: fa:30:9d:8c:79:b7:52:5a:0c:f6:4c:45:1c:d8:e2:21:ea:80: ca:0c:0d:be:e0:94:a7:df:13:3d:09:a4:34:d2:41:e7:77:73: e5:16:21:86:b4:76:db:82:fc:f7:f2:4c:f8:61:b2:08:a6:59: 42:28:21:f8:e4:86:12:88:b2:56:5e:0c:23:b3:92:34:17:25: 32:7e:ca:82:a2:88:a9:00:8b:1d:6a:2f:3d:af:bb:27:27:4f: 65:3a:55:fa:a4:12:e2:e4:b7:cb:3b:97:e0:d4:82:16:13:83: a2:d9:36:20:03:9e:dc:07:e4:08:1f:a5:84:58:87:dd:dd:2c: 87:c4:92:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPrSYBrSNV1yPqhHTGBxggsepsHcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjg5OTY5RThCQUJFMDVDNDVDNkQ2RTI1RjYyNUU5RjE4 NDVDQ0M5QzAeFw0yNTA3MjAwMzU1NTFaFw0yNTA3MjMwNjM2NTFaMDMxMTAvBgNV BAMTKDY3MDM5OUJBQkY5RjVEMkJBOEU5RUQxRDkwQUI2NjZCQzdGNERDMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxo6NqezpXb48L5Dzk70txR+N2 d+r5DDNKgrUk3embzRm5go9KbJ2CJ7bPEREyp0X3QvDJ0KVNoCAenlBo7POZFwDf I4F8CovZs6HmLz92xRLFyljdm7ICFIeP7SGBldw1fg5F2t8FYCCUZV4jQrKNxJ60 s7MXHBV3OnNVKFsBcoy849LPtE+M4nEzuTjRsi+WR8wQvNTpDS1RyNhDFuA16Waq IJWgDTxm9V5LuaS3eN8wasYkaIaxkoH+YZ9z2aJj5vSlg9jSXRBkUmoOPinODDzl dFl0jza70CKGX4PDs226j9YYvME0EjGmOIzhk0Wz46+Tub9Z4IjJwEiAMUnDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZwOZur+fXSuo6e0dkKtma8f03CUwHwYDVR0j BBgwFoAU+Jlp6Lq+BcRcbW4l9iXp8YRczJwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NGI0ZmI4OC04ZjQyLTQ3ZjItYmU4MC0wOWU0MzU2MGRkZGYvMC9GODk5NjlFOEJB QkUwNUM0NUM2RDZFMjVGNjI1RTlGMTg0NUNDQzlDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjg5OTY5RThCQUJFMDVDNDVDNkQ2RTI1RjYyNUU5RjE4NDVD Q0M5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDRiNGZiODgtOGY0Mi00N2YyLWJl ODAtMDllNDM1NjBkZGRmLzAvRjg5OTY5RThCQUJFMDVDNDVDNkQ2RTI1RjYyNUU5 RjE4NDVDQ0M5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE7stiFNudGQBjaFnyh1vDk7nThe77c+a6J9 OJVBCcNy9nvcubvvbTTTX572xj/3iVcssrWsOvzmFiJjWZoJNsmP9py24m9IrbYL OBGxIa85of9nLpH0HeLsHESAeSRZm5/dcSg+FyrUBtIcPsgCIUtY/RKCGJIxTn68 bSeKsvownYx5t1JaDPZMRRzY4iHqgMoMDb7glKffEz0JpDTSQed3c+UWIYa0dtuC /PfyTPhhsgimWUIoIfjkhhKIslZeDCOzkjQXJTJ+yoKiiKkAix1qLz2vuycnT2U6 VfqkEuLkt8s7l+DUghYTg6LZNiADntwH5AgfpYRYh93dLIfEkns= -----END CERTIFICATE-----Generated at Mon Jul 21 07:27:02 2025 by rpki-client