$ rpki-client -vvf repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.mft File: 89B98D1F135A7FC66C0284C34477C19604645554.mft (raw, json) Hash identifier: zZF+4wsPZY/fGME/zvwjuKHw/lKReQwJy4nfDLaUvJM= Subject key identifier: 6F:6A:42:E9:55:7F:28:76:0A:84:98:C9:35:09:7B:E0:8F:AC:C8:1D Authority key identifier: 89:B9:8D:1F:13:5A:7F:C6:6C:02:84:C3:44:77:C1:96:04:64:55:54 Certificate issuer: /CN=89B98D1F135A7FC66C0284C34477C19604645554 Certificate serial: 016E6B8365694094445AE87C565AAEEFDC8EEC67 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89B98D1F135A7FC66C0284C34477C19604645554.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.mft Manifest number: 0179 Signing time: Wed 23 Jul 2025 23:42:16 +0000 Manifest this update: Wed 23 Jul 2025 23:37:16 +0000 Manifest next update: Sun 27 Jul 2025 01:35:16 +0000 Files and hashes: 1: 3130332e37392e3233362e302f32332d3233203d3e20313530393535.roa (hash: P+PJmhSLpd83S2cxURBDcslsCmkTTuYqFLowXEXkTfY=) 2: 3130332e37392e3233362e302f32342d3234203d3e20313530393535.roa (hash: onZqAL56YoMix5wpV03h5e8xuAaImMliGkPVBv6grnU=) 3: 3130332e37392e3233372e302f32342d3234203d3e20313530393535.roa (hash: 2IWnXxowwOlz7I18Z25U30dGHsj5oRHYQH7WRuuUzKo=) 4: 89B98D1F135A7FC66C0284C34477C19604645554.crl (hash: kZLSMgytFZNDSc0jGe83jN5/MkJoiMNTTaasMIeC/nU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.crl rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89B98D1F135A7FC66C0284C34477C19604645554.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 01:35:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:6e:6b:83:65:69:40:94:44:5a:e8:7c:56:5a:ae:ef:dc:8e:ec:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89B98D1F135A7FC66C0284C34477C19604645554 Validity Not Before: Jul 23 23:37:16 2025 GMT Not After : Jul 27 01:35:16 2025 GMT Subject: CN=6F6A42E9557F28760A8498C935097BE08FACC81D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:1e:b9:f0:2d:af:72:e2:43:80:c3:71:30:c5: 04:41:eb:10:a5:d7:f2:7f:e5:51:43:82:67:0f:a2: e2:f3:49:60:68:a3:87:19:1d:b1:98:e7:6f:01:c5: 38:1d:88:8d:84:4c:df:37:40:ee:91:00:cb:a9:64: 63:d3:74:05:b4:96:fb:1f:fb:f9:7c:25:51:fd:9f: ee:e6:d7:22:3f:65:b0:f4:aa:db:6f:ac:ec:d7:5a: 08:88:7e:0d:71:be:0f:8a:bf:db:75:72:45:1e:92: b9:a2:06:a2:04:1f:24:4d:c6:cc:8e:8d:0b:56:3f: 95:aa:8c:5a:d7:94:40:52:86:4a:e7:8a:e8:2b:f2: ff:27:61:8f:aa:67:ac:7d:24:68:55:5c:c0:10:a5: 14:a0:cd:b0:2d:63:91:58:3d:d5:c2:f7:2d:1c:a3: 7b:a2:8e:1b:27:4b:5d:39:2d:83:e5:13:23:bf:2e: cf:37:2d:3c:8f:b2:7f:bf:b1:6d:80:7f:09:58:33: d0:60:21:b3:fb:55:76:39:df:92:76:72:20:30:9d: ac:be:ac:c2:0a:7f:a5:cc:2c:06:22:ad:13:4a:69: f5:71:cc:fa:c7:03:dc:78:69:94:ab:b3:a5:1d:43: 47:07:33:ec:81:da:19:69:90:2f:10:a0:fd:b0:a8: 03:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:6A:42:E9:55:7F:28:76:0A:84:98:C9:35:09:7B:E0:8F:AC:C8:1D X509v3 Authority Key Identifier: keyid:89:B9:8D:1F:13:5A:7F:C6:6C:02:84:C3:44:77:C1:96:04:64:55:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89B98D1F135A7FC66C0284C34477C19604645554.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:38:73:70:b2:c4:7c:81:8f:17:28:28:d5:ac:1a:4e:61:b1: 5a:58:2e:14:dd:3c:df:23:87:ab:fa:f9:67:99:4d:54:6e:88: 25:5b:21:f9:0d:c8:f8:10:e8:56:9a:08:bd:6a:63:42:92:e2: 15:6b:10:f1:28:42:74:33:11:7b:43:d2:69:f8:c8:43:5b:00: ee:72:ea:53:d6:48:62:3c:33:b8:e3:2b:54:57:d7:5d:f2:a5: de:5c:fb:32:59:67:e7:31:74:f1:ec:9d:65:00:33:e0:83:a2: 40:a8:bd:a3:ce:ef:bb:6c:30:2f:24:c0:11:62:bb:87:a9:79: a4:e3:0c:d9:fb:5f:0c:9d:b5:79:64:12:fb:84:6c:b1:ae:54: 6c:22:94:24:b9:fb:f4:b7:f2:02:de:17:ab:4b:bc:39:2b:a1: 0d:6b:82:35:8d:bd:3f:50:ab:00:48:34:18:0d:ba:12:4a:40: 3b:a1:1f:a4:78:5a:26:1b:d8:02:54:67:7d:d2:0b:b1:86:92: 76:77:91:af:fe:9c:f8:55:11:a4:ad:fd:0f:7f:53:ce:0b:ae: 39:00:65:20:0a:32:de:37:9c:ae:40:ca:cb:8a:38:e8:3e:2d: 2d:d6:f3:4f:fa:37:b6:f4:b0:a4:f9:14:4c:1e:b7:3f:a0:43: 99:96:08:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAW5rg2VpQJREWuh8Vlqu79yO7GcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlCOThEMUYxMzVBN0ZDNjZDMDI4NEMzNDQ3N0MxOTYw NDY0NTU1NDAeFw0yNTA3MjMyMzM3MTZaFw0yNTA3MjcwMTM1MTZaMDMxMTAvBgNV BAMTKDZGNkE0MkU5NTU3RjI4NzYwQTg0OThDOTM1MDk3QkUwOEZBQ0M4MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZHrnwLa9y4kOAw3EwxQRB6xCl 1/J/5VFDgmcPouLzSWBoo4cZHbGY528BxTgdiI2ETN83QO6RAMupZGPTdAW0lvsf +/l8JVH9n+7m1yI/ZbD0qttvrOzXWgiIfg1xvg+Kv9t1ckUekrmiBqIEHyRNxsyO jQtWP5WqjFrXlEBShkrniugr8v8nYY+qZ6x9JGhVXMAQpRSgzbAtY5FYPdXC9y0c o3uijhsnS105LYPlEyO/Ls83LTyPsn+/sW2AfwlYM9BgIbP7VXY535J2ciAwnay+ rMIKf6XMLAYirRNKafVxzPrHA9x4aZSrs6UdQ0cHM+yB2hlpkC8QoP2wqANTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb2pC6VV/KHYKhJjJNQl74I+syB0wHwYDVR0j BBgwFoAUibmNHxNaf8ZsAoTDRHfBlgRkVVQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YmZmMWIzZi0xMTkwLTQxMTktYmJjNi0xNDE3ZGY4YWEyNTgvMC84OUI5OEQxRjEz NUE3RkM2NkMwMjg0QzM0NDc3QzE5NjA0NjQ1NTU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODlCOThEMUYxMzVBN0ZDNjZDMDI4NEMzNDQ3N0MxOTYwNDY0 NTU1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGJmZjFiM2YtMTE5MC00MTE5LWJi YzYtMTQxN2RmOGFhMjU4LzAvODlCOThEMUYxMzVBN0ZDNjZDMDI4NEMzNDQ3N0Mx OTYwNDY0NTU1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKk4c3CyxHyBjxcoKNWsGk5hsVpYLhTdPN8j h6v6+WeZTVRuiCVbIfkNyPgQ6FaaCL1qY0KS4hVrEPEoQnQzEXtD0mn4yENbAO5y 6lPWSGI8M7jjK1RX113ypd5c+zJZZ+cxdPHsnWUAM+CDokCovaPO77tsMC8kwBFi u4epeaTjDNn7XwydtXlkEvuEbLGuVGwilCS5+/S38gLeF6tLvDkroQ1rgjWNvT9Q qwBINBgNuhJKQDuhH6R4WiYb2AJUZ33SC7GGknZ3ka/+nPhVEaSt/Q9/U84LrjkA ZSAKMt43nK5AysuKOOg+LS3W80/6N7b0sKT5FEwetz+gQ5mWCPw= -----END CERTIFICATE-----Generated at Fri Jul 25 05:22:06 2025 by rpki-client