$ rpki-client -vvf repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.mft File: C89AFDB015B4516342E4702244E8B8AC331B8669.mft (raw, json) Hash identifier: P8IBlYOXNaQ6bFLeimSnnTZMDawgjjpjLbLxn/g0yR4= Subject key identifier: 28:CC:E0:FD:4B:97:6B:AE:BD:99:6B:A3:66:CE:8B:D9:45:DF:C1:3C Authority key identifier: C8:9A:FD:B0:15:B4:51:63:42:E4:70:22:44:E8:B8:AC:33:1B:86:69 Certificate issuer: /CN=C89AFDB015B4516342E4702244E8B8AC331B8669 Certificate serial: 38FC3B587AF4879F5862B8360AC1729C2ECF47F7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C89AFDB015B4516342E4702244E8B8AC331B8669.cer Subject info access: rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.mft Manifest number: FD Signing time: Fri 05 Sep 2025 09:40:47 +0000 Manifest this update: Fri 05 Sep 2025 09:35:47 +0000 Manifest next update: Mon 08 Sep 2025 19:52:47 +0000 Files and hashes: 1: C89AFDB015B4516342E4702244E8B8AC331B8669.crl (hash: r/2Sx2JRTu4IdsM5EQEoomwGP3Z4wKWzy0PgEAxw88c=) 2: 3130332e34302e39342e302f32342d3234203d3e203633353036.roa (hash: yEUmOyWPO5f/A4sL+Yd825dO+D/6S8GK82Q3tLvqY0Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.crl rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C89AFDB015B4516342E4702244E8B8AC331B8669.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 19:52:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:fc:3b:58:7a:f4:87:9f:58:62:b8:36:0a:c1:72:9c:2e:cf:47:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C89AFDB015B4516342E4702244E8B8AC331B8669 Validity Not Before: Sep 5 09:35:47 2025 GMT Not After : Sep 8 19:52:47 2025 GMT Subject: CN=28CCE0FD4B976BAEBD996BA366CE8BD945DFC13C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5f:1e:55:e1:b4:7d:3b:49:27:72:92:6a:31: f0:38:b3:55:9d:51:12:08:eb:25:5e:99:8b:d0:d9: 75:7d:c0:ab:e1:e9:ed:68:28:03:a8:e7:56:ae:0a: 5a:c9:22:10:43:f9:c2:52:e2:b5:c5:b5:b6:fe:13: c8:78:ee:15:cd:61:d0:35:1d:92:c9:68:39:7a:1d: 20:79:ed:44:c5:24:24:76:33:72:52:d5:85:30:c5: 18:db:cb:4a:94:89:ad:a1:fe:0b:39:23:88:ae:de: f3:28:9f:3b:75:49:c4:11:2c:67:09:ff:32:5b:43: 2c:2d:d3:02:93:39:92:98:c5:38:12:fc:6e:fb:7e: 1d:c9:1d:60:81:1a:06:08:b1:04:a4:0f:6e:70:01: cb:ae:57:f7:16:5c:a9:04:95:6d:82:11:79:4e:33: 7d:f0:a6:1e:4a:7f:a2:d5:e7:25:e4:7f:0d:47:5e: 45:05:64:c3:47:c9:23:18:d5:c0:df:80:05:b7:37: 8b:dc:a7:cc:ed:f4:bb:c2:3a:dc:9c:8f:cc:40:79: eb:56:2d:82:e4:1a:7c:a1:78:2e:f8:01:b1:34:03: 5c:c9:b8:9e:5a:6a:f1:c1:76:77:20:00:a3:52:a0: 9a:80:aa:93:40:87:74:e4:72:04:cd:90:ed:ba:3a: bc:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:CC:E0:FD:4B:97:6B:AE:BD:99:6B:A3:66:CE:8B:D9:45:DF:C1:3C X509v3 Authority Key Identifier: keyid:C8:9A:FD:B0:15:B4:51:63:42:E4:70:22:44:E8:B8:AC:33:1B:86:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C89AFDB015B4516342E4702244E8B8AC331B8669.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:eb:23:2e:8f:2a:26:ef:eb:04:f1:e4:b5:39:a7:47:d4:51: 07:9a:37:3d:c8:dc:9f:ad:ad:22:67:8d:29:04:0f:b0:81:2f: 51:7d:7e:d5:32:ca:91:9f:36:3c:eb:ef:68:a4:21:ca:b2:8f: 7c:48:81:cb:ee:84:64:81:40:36:eb:fc:e5:0e:cc:1e:38:fb: 3f:fc:0e:06:e2:4f:3e:af:82:46:2b:dc:74:90:17:4a:51:fe: 18:6d:5b:f9:31:67:ca:4e:2e:6d:ab:01:fe:19:6f:80:01:b8: b8:3d:af:5c:6e:2f:39:b4:ee:20:26:6c:48:c6:b8:42:13:bb: cc:d4:a0:ae:5d:04:f1:2a:5e:84:8a:e0:b9:19:8b:41:c2:10: 04:63:74:22:6b:20:5d:7d:c5:cd:b8:35:c4:dd:e1:ed:1d:56: f2:ec:cb:e2:52:b9:4f:1e:66:5e:b9:61:c7:8d:a3:81:06:00: bd:16:23:5a:6b:cc:2e:e0:37:b6:87:0c:c4:52:e2:81:05:2d: 57:51:0f:14:6c:79:38:40:68:a3:16:17:4f:05:8a:38:ea:70: 9d:9b:75:88:ca:18:33:a0:0c:81:29:79:a2:f4:aa:35:ee:75: b1:ba:18:4b:8c:b8:80:0a:94:79:de:38:2f:bc:1c:af:c3:1f: ca:af:7e:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOPw7WHr0h59YYrg2CsFynC7PR/cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg5QUZEQjAxNUI0NTE2MzQyRTQ3MDIyNDRFOEI4QUMz MzFCODY2OTAeFw0yNTA5MDUwOTM1NDdaFw0yNTA5MDgxOTUyNDdaMDMxMTAvBgNV BAMTKDI4Q0NFMEZENEI5NzZCQUVCRDk5NkJBMzY2Q0U4QkQ5NDVERkMxM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Xx5V4bR9O0kncpJqMfA4s1Wd URII6yVemYvQ2XV9wKvh6e1oKAOo51auClrJIhBD+cJS4rXFtbb+E8h47hXNYdA1 HZLJaDl6HSB57UTFJCR2M3JS1YUwxRjby0qUia2h/gs5I4iu3vMonzt1ScQRLGcJ /zJbQywt0wKTOZKYxTgS/G77fh3JHWCBGgYIsQSkD25wAcuuV/cWXKkElW2CEXlO M33wph5Kf6LV5yXkfw1HXkUFZMNHySMY1cDfgAW3N4vcp8zt9LvCOtycj8xAeetW LYLkGnyheC74AbE0A1zJuJ5aavHBdncgAKNSoJqAqpNAh3TkcgTNkO26OrxFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKMzg/UuXa669mWujZs6L2UXfwTwwHwYDVR0j BBgwFoAUyJr9sBW0UWNC5HAiROi4rDMbhmkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NWJhZTMwYy1iMzYzLTQwN2ItYTBhYi0zMTU0ZWIzMDlhZTkvMS9DODlBRkRCMDE1 QjQ1MTYzNDJFNDcwMjI0NEU4QjhBQzMzMUI4NjY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzg5QUZEQjAxNUI0NTE2MzQyRTQ3MDIyNDRFOEI4QUMzMzFC ODY2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTViYWUzMGMtYjM2My00MDdiLWEw YWItMzE1NGViMzA5YWU5LzEvQzg5QUZEQjAxNUI0NTE2MzQyRTQ3MDIyNDRFOEI4 QUMzMzFCODY2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHnrIy6PKibv6wTx5LU5p0fUUQeaNz3I3J+t rSJnjSkED7CBL1F9ftUyypGfNjzr72ikIcqyj3xIgcvuhGSBQDbr/OUOzB44+z/8 DgbiTz6vgkYr3HSQF0pR/hhtW/kxZ8pOLm2rAf4Zb4ABuLg9r1xuLzm07iAmbEjG uEITu8zUoK5dBPEqXoSK4LkZi0HCEARjdCJrIF19xc24NcTd4e0dVvLsy+JSuU8e Zl65YceNo4EGAL0WI1przC7gN7aHDMRS4oEFLVdRDxRseThAaKMWF08FijjqcJ2b dYjKGDOgDIEpeaL0qjXudbG6GEuMuIAKlHneOC+8HK/DH8qvfsY= -----END CERTIFICATE-----Generated at Sun Sep 7 15:13:19 2025 by rpki-client