$ rpki-client -vvf repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft File: 889933E416F356762F7F72858168C9C8A2E241C7.mft (raw, json) Hash identifier: 9W8NxzYZ3Zwex+tl3PGnASNN51/S1Mdk3HTnGahE3w4= Subject key identifier: 5C:32:CE:05:D1:CF:27:1E:A7:4F:DB:46:79:4E:CB:31:48:03:2E:20 Authority key identifier: 88:99:33:E4:16:F3:56:76:2F:7F:72:85:81:68:C9:C8:A2:E2:41:C7 Certificate issuer: /CN=889933E416F356762F7F72858168C9C8A2E241C7 Certificate serial: 275BB260B2D5B08B37C24E39C5FC20A22E224360 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/889933E416F356762F7F72858168C9C8A2E241C7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft Manifest number: 01DE Signing time: Wed 03 Sep 2025 10:50:36 +0000 Manifest this update: Wed 03 Sep 2025 10:45:36 +0000 Manifest next update: Sat 06 Sep 2025 12:52:36 +0000 Files and hashes: 1: 889933E416F356762F7F72858168C9C8A2E241C7.crl (hash: TNrTGPCugZ6xkRTtEw9+HcqR/jU3Tm1M34ZlwL8jT5k=) 2: 3130332e3136372e3233362e302f32342d3234203d3e20313432333038.roa (hash: 5GvdROYQ95okUa1oax+KkGlSNt0oNcXWExwR/dpYZcg=) 3: 3130332e3136372e3233372e302f32342d3234203d3e20313432333038.roa (hash: hhBm/QT4y8ib7FGAltONinYNWg1PiVjj/mn1RgecAFk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.crl rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/889933E416F356762F7F72858168C9C8A2E241C7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 12:52:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:5b:b2:60:b2:d5:b0:8b:37:c2:4e:39:c5:fc:20:a2:2e:22:43:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=889933E416F356762F7F72858168C9C8A2E241C7 Validity Not Before: Sep 3 10:45:36 2025 GMT Not After : Sep 6 12:52:36 2025 GMT Subject: CN=5C32CE05D1CF271EA74FDB46794ECB3148032E20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:44:f2:96:94:b1:15:e0:91:b1:cc:33:2d:61: 52:f9:f3:d5:c3:c9:18:46:d5:c8:0d:ef:b7:88:c4: 49:0f:c6:d7:06:31:2a:6a:12:93:4d:94:80:09:2e: 60:f1:51:45:53:37:d1:51:80:af:1b:df:ce:e2:3b: cf:b1:08:9e:0f:e1:79:f3:e1:75:aa:75:bd:0d:8c: ae:8b:9a:53:1f:65:50:4b:0e:ba:f4:6b:bc:17:a6: 07:96:b2:7c:e9:8c:d8:20:f9:c1:0d:04:a2:bf:68: 16:ec:2c:1b:1e:7d:45:c8:9a:26:d2:fa:50:e6:b9: f5:74:38:b3:9b:45:6c:9c:21:6e:4c:ef:05:c9:fc: d2:27:1a:59:cb:ec:ae:b4:dd:60:bd:8b:3d:62:63: b4:5a:41:8f:b0:11:99:ef:f6:db:c8:15:7e:9b:e6: b8:5e:a8:df:43:f7:88:8a:07:cf:b4:36:be:57:79: 28:40:ea:03:e3:3d:ac:8a:a4:7d:bd:69:21:bc:cf: f3:d5:c7:55:5b:60:67:82:f2:10:4c:40:fa:49:26: 58:65:9c:b7:68:a1:22:5a:3b:5c:42:34:46:ef:7b: 36:46:0a:fb:79:5f:20:ca:84:55:b8:ce:17:7e:f6: 53:06:74:d3:67:72:7c:4e:14:0c:55:0d:46:90:b1: 58:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:32:CE:05:D1:CF:27:1E:A7:4F:DB:46:79:4E:CB:31:48:03:2E:20 X509v3 Authority Key Identifier: keyid:88:99:33:E4:16:F3:56:76:2F:7F:72:85:81:68:C9:C8:A2:E2:41:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/889933E416F356762F7F72858168C9C8A2E241C7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:9c:df:2e:d5:be:8f:bb:36:e9:aa:28:59:6d:6d:a7:84:c5: 45:42:e1:1b:c4:21:4c:17:c3:f8:bd:b2:c4:19:da:ff:57:e2: dc:c1:4c:19:dc:69:ba:ce:33:d1:3a:75:3c:a9:6f:16:67:e1: 1f:b5:db:1b:aa:5f:51:53:dc:0a:bd:24:7e:b7:54:2b:2d:52: f0:c8:64:46:96:c5:d7:f4:8a:f0:1d:d0:a5:4d:10:c3:21:2e: 8c:21:24:49:e6:74:d2:ba:1e:48:32:36:af:36:d8:84:b3:c3: d3:00:e3:09:54:12:c6:3f:76:f8:35:61:39:30:bc:4a:ca:06: f3:e9:e5:b0:d2:1f:09:dc:b8:d1:82:d3:7d:8c:83:ad:3e:0b: d3:83:ba:fc:94:53:7a:05:ce:f9:ec:59:1f:fb:78:0e:dd:0f: 96:b8:89:30:ac:9b:77:95:eb:99:23:36:93:8b:ee:79:2d:7a: 66:46:57:10:e1:86:4a:1d:0a:81:3e:7e:53:6b:a2:14:c8:69: 5e:95:2f:a2:ce:26:b5:ae:72:a9:78:37:34:c7:60:9c:04:10: df:ab:f2:b4:57:70:fc:2f:0f:c7:f4:4e:89:3f:68:23:bf:76: cf:23:a1:60:b2:a6:d0:b1:1a:e4:54:c2:fc:d1:f7:0e:52:25: 54:5f:64:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ1uyYLLVsIs3wk45xfwgoi4iQ2AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg5OTMzRTQxNkYzNTY3NjJGN0Y3Mjg1ODE2OEM5QzhB MkUyNDFDNzAeFw0yNTA5MDMxMDQ1MzZaFw0yNTA5MDYxMjUyMzZaMDMxMTAvBgNV BAMTKDVDMzJDRTA1RDFDRjI3MUVBNzRGREI0Njc5NEVDQjMxNDgwMzJFMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtRPKWlLEV4JGxzDMtYVL589XD yRhG1cgN77eIxEkPxtcGMSpqEpNNlIAJLmDxUUVTN9FRgK8b387iO8+xCJ4P4Xnz 4XWqdb0NjK6LmlMfZVBLDrr0a7wXpgeWsnzpjNgg+cENBKK/aBbsLBsefUXImibS +lDmufV0OLObRWycIW5M7wXJ/NInGlnL7K603WC9iz1iY7RaQY+wEZnv9tvIFX6b 5rheqN9D94iKB8+0Nr5XeShA6gPjPayKpH29aSG8z/PVx1VbYGeC8hBMQPpJJlhl nLdooSJaO1xCNEbvezZGCvt5XyDKhFW4zhd+9lMGdNNncnxOFAxVDUaQsVgVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXDLOBdHPJx6nT9tGeU7LMUgDLiAwHwYDVR0j BBgwFoAUiJkz5BbzVnYvf3KFgWjJyKLiQccwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZWNmZDNmNS04NWRhLTQ4YTctYjUwMi1mNjFhNTk3OTZjMzMvMC84ODk5MzNFNDE2 RjM1Njc2MkY3RjcyODU4MTY4QzlDOEEyRTI0MUM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODg5OTMzRTQxNkYzNTY3NjJGN0Y3Mjg1ODE2OEM5QzhBMkUy NDFDNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWVjZmQzZjUtODVkYS00OGE3LWI1 MDItZjYxYTU5Nzk2YzMzLzAvODg5OTMzRTQxNkYzNTY3NjJGN0Y3Mjg1ODE2OEM5 QzhBMkUyNDFDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEWc3y7Vvo+7NumqKFltbaeExUVC4RvEIUwX w/i9ssQZ2v9X4tzBTBncabrOM9E6dTypbxZn4R+12xuqX1FT3Aq9JH63VCstUvDI ZEaWxdf0ivAd0KVNEMMhLowhJEnmdNK6HkgyNq822ISzw9MA4wlUEsY/dvg1YTkw vErKBvPp5bDSHwncuNGC032Mg60+C9ODuvyUU3oFzvnsWR/7eA7dD5a4iTCsm3eV 65kjNpOL7nktemZGVxDhhkodCoE+flNrohTIaV6VL6LOJrWucql4NzTHYJwEEN+r 8rRXcPwvD8f0Tok/aCO/ds8joWCyptCxGuRUwvzR9w5SJVRfZC8= -----END CERTIFICATE-----Generated at Fri Sep 5 10:13:43 2025 by rpki-client