$ rpki-client -vvf repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft File: 289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft (raw, json) Hash identifier: PjNuC1CSpAUe0O1wde/sbnj1loPCOugIl9Ks5PYT9U4= Subject key identifier: F9:19:4C:4C:52:D3:D4:3F:22:EB:C6:C1:BF:3F:88:04:BF:A2:43:E0 Authority key identifier: 28:91:51:EF:8A:E8:A7:9D:8F:42:66:83:D1:52:5A:D8:2F:AB:3D:5C Certificate issuer: /CN=289151EF8AE8A79D8F426683D1525AD82FAB3D5C Certificate serial: 0AE0E7BAA603CA641E522C32CFFD1ADF0D239BD5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft Manifest number: 016F Signing time: Sat 06 Sep 2025 11:51:42 +0000 Manifest this update: Sat 06 Sep 2025 11:46:42 +0000 Manifest next update: Tue 09 Sep 2025 19:48:42 +0000 Files and hashes: 1: 323030313a6466313a633263303a3a2f34382d3438203d3e20313439393039.roa (hash: 6LOGBCF5zTr7iAtxuc25TGgWiHmJgXAtcLTxMujO3no=) 2: 3130332e3139312e35382e302f32332d3234203d3e20313439393039.roa (hash: uLA8drzoTGDdLRLknWkZIaOJdJxpC+UKHzjWLF3FpOA=) 3: 289151EF8AE8A79D8F426683D1525AD82FAB3D5C.crl (hash: lbZJzdBnwkTS/Vfn8jYu6sbGKONbgMUpiHxdraJPEVc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.crl rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 19:48:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:e0:e7:ba:a6:03:ca:64:1e:52:2c:32:cf:fd:1a:df:0d:23:9b:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=289151EF8AE8A79D8F426683D1525AD82FAB3D5C Validity Not Before: Sep 6 11:46:42 2025 GMT Not After : Sep 9 19:48:42 2025 GMT Subject: CN=F9194C4C52D3D43F22EBC6C1BF3F8804BFA243E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b0:48:68:8a:f9:57:1b:ea:b9:81:b3:a2:6b: 43:47:77:e9:a8:21:af:ba:eb:95:ea:2d:20:73:ce: 3b:6d:8b:c2:16:15:cd:80:79:38:0d:6f:59:99:6d: 05:46:e0:75:6c:7e:7f:79:cc:6d:f6:72:57:6c:37: ee:cc:e6:d5:2d:b2:e9:f9:0c:50:08:11:fe:e0:9b: 93:de:93:e4:0f:12:88:fd:cd:64:1d:e5:8d:c1:c1: 2e:25:2b:ab:39:c0:1e:3f:29:bc:de:9e:53:12:4e: ed:be:31:f3:87:4c:9e:aa:1b:93:85:4e:79:d3:9e: 06:2c:2c:f7:3d:02:83:cd:d7:db:a9:de:23:7a:64: 2c:cd:12:ce:5e:df:66:44:d7:8e:c1:5a:63:54:23: 46:e4:5c:da:97:76:3e:7f:cb:87:1f:2b:d2:7a:cc: 12:ec:b5:77:22:37:47:2e:04:d4:69:43:5b:5f:d9: b6:4f:2e:0e:38:b3:55:bc:d5:ae:15:b1:22:4c:d4: 50:ea:b1:6d:4d:8c:3e:80:f4:ba:af:90:b2:b4:ff: c0:ca:f1:3f:20:5b:3e:c0:53:b9:e9:f0:c3:5e:6d: 14:d9:a0:14:92:b1:fd:02:3f:be:fd:5b:0e:32:5f: 00:c5:ef:7c:d4:d4:e7:9c:e4:65:25:33:21:50:05: 8f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:19:4C:4C:52:D3:D4:3F:22:EB:C6:C1:BF:3F:88:04:BF:A2:43:E0 X509v3 Authority Key Identifier: keyid:28:91:51:EF:8A:E8:A7:9D:8F:42:66:83:D1:52:5A:D8:2F:AB:3D:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2bbe6815-310e-4206-a500-6bb9d3263abf/0/289151EF8AE8A79D8F426683D1525AD82FAB3D5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:3c:3a:03:f3:f7:bd:c4:b4:a4:52:a9:2d:5f:3d:3d:0a:a8: cc:70:4f:ce:d7:40:4e:db:6a:f9:f5:ab:c7:d5:75:ac:5b:70: cf:db:ef:f8:ab:bc:84:c9:3c:a9:de:8b:42:e7:68:f9:30:5d: d1:8b:ad:75:6f:85:dc:1b:a2:38:e4:b7:d4:32:f3:da:56:06: 6a:50:8d:8f:1b:a4:7c:8f:7a:4e:1f:0f:a9:37:35:a0:cd:86: 81:64:10:8e:94:0f:3d:23:d2:fc:b8:db:fd:fb:2f:b6:da:b1: ee:74:34:00:d9:39:35:0b:50:2f:b2:30:8d:0e:44:6a:71:fa: 93:e4:42:5c:ef:79:16:17:d5:55:e2:4e:f9:33:f4:15:0c:4c: 81:18:28:59:97:61:d4:3d:a0:25:aa:ce:53:5f:91:ce:e5:6f: 04:27:f3:3c:8e:90:fb:80:23:d5:a2:fb:b4:8f:11:28:38:25: 5f:b7:08:64:80:f1:6a:72:3e:6a:c4:82:4c:63:16:db:00:f1: 4e:69:84:bf:d2:99:f9:88:59:0c:09:3d:c4:73:cb:00:d5:ad: 6a:c9:3c:e0:72:aa:ef:61:40:40:2b:31:37:ad:29:ef:26:f3: c3:83:09:28:54:2d:ac:55:14:6d:23:dd:e9:44:f7:5f:63:60: d3:5b:19:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCuDnuqYDymQeUiwyz/0a3w0jm9UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg5MTUxRUY4QUU4QTc5RDhGNDI2NjgzRDE1MjVBRDgy RkFCM0Q1QzAeFw0yNTA5MDYxMTQ2NDJaFw0yNTA5MDkxOTQ4NDJaMDMxMTAvBgNV BAMTKEY5MTk0QzRDNTJEM0Q0M0YyMkVCQzZDMUJGM0Y4ODA0QkZBMjQzRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVsEhoivlXG+q5gbOia0NHd+mo Ia+665XqLSBzzjtti8IWFc2AeTgNb1mZbQVG4HVsfn95zG32cldsN+7M5tUtsun5 DFAIEf7gm5Pek+QPEoj9zWQd5Y3BwS4lK6s5wB4/KbzenlMSTu2+MfOHTJ6qG5OF TnnTngYsLPc9AoPN19up3iN6ZCzNEs5e32ZE147BWmNUI0bkXNqXdj5/y4cfK9J6 zBLstXciN0cuBNRpQ1tf2bZPLg44s1W81a4VsSJM1FDqsW1NjD6A9LqvkLK0/8DK 8T8gWz7AU7np8MNebRTZoBSSsf0CP779Ww4yXwDF73zU1Oec5GUlMyFQBY/vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+RlMTFLT1D8i68bBvz+IBL+iQ+AwHwYDVR0j BBgwFoAUKJFR74rop52PQmaD0VJa2C+rPVwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YmJlNjgxNS0zMTBlLTQyMDYtYTUwMC02YmI5ZDMyNjNhYmYvMC8yODkxNTFFRjhB RThBNzlEOEY0MjY2ODNEMTUyNUFEODJGQUIzRDVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg5MTUxRUY4QUU4QTc5RDhGNDI2NjgzRDE1MjVBRDgyRkFC M0Q1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmJiZTY4MTUtMzEwZS00MjA2LWE1 MDAtNmJiOWQzMjYzYWJmLzAvMjg5MTUxRUY4QUU4QTc5RDhGNDI2NjgzRDE1MjVB RDgyRkFCM0Q1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALw8OgPz973EtKRSqS1fPT0KqMxwT87XQE7b avn1q8fVdaxbcM/b7/irvITJPKnei0LnaPkwXdGLrXVvhdwbojjkt9Qy89pWBmpQ jY8bpHyPek4fD6k3NaDNhoFkEI6UDz0j0vy42/37L7base50NADZOTULUC+yMI0O RGpx+pPkQlzveRYX1VXiTvkz9BUMTIEYKFmXYdQ9oCWqzlNfkc7lbwQn8zyOkPuA I9Wi+7SPESg4JV+3CGSA8WpyPmrEgkxjFtsA8U5phL/SmfmIWQwJPcRzywDVrWrJ POByqu9hQEArMTetKe8m88ODCShULaxVFG0j3elE919jYNNbGfo= -----END CERTIFICATE-----Generated at Sun Sep 7 15:27:00 2025 by rpki-client