$ rpki-client -vvf repo-rpki.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/8989D0431453556F22D882A21B2BBB9F4E4A2C24.mft File: 8989D0431453556F22D882A21B2BBB9F4E4A2C24.mft (raw, json) Hash identifier: tnl7mDiNNOulrLLQrxiWYkOCnxzh3NA5ZgrZct4F/z8= Subject key identifier: F2:52:5F:0A:17:4D:5E:56:82:92:46:0A:A6:78:10:D5:53:B4:94:EE Authority key identifier: 89:89:D0:43:14:53:55:6F:22:D8:82:A2:1B:2B:BB:9F:4E:4A:2C:24 Certificate issuer: /CN=8989D0431453556F22D882A21B2BBB9F4E4A2C24 Certificate serial: 39957A25A9533A9F186AC7779DC9EC12D7CD4C64 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8989D0431453556F22D882A21B2BBB9F4E4A2C24.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/8989D0431453556F22D882A21B2BBB9F4E4A2C24.mft Manifest number: 0161 Signing time: Wed 04 Jun 2025 14:41:26 +0000 Manifest this update: Wed 04 Jun 2025 14:36:26 +0000 Manifest next update: Sat 07 Jun 2025 18:55:26 +0000 Files and hashes: 1: 3130332e3133302e38322e302f32342d3234203d3e20313530393636.roa (hash: WdwAhrLb01WctAevsLo2E5F0+guZcHnuWIL6/QTKVQY=) 2: 3130332e3133302e38332e302f32342d3234203d3e20313530393636.roa (hash: MueUJKcGkwue3xJukPLYM+05PMMpQl2v+Pz0FDXtNcM=) 3: 8989D0431453556F22D882A21B2BBB9F4E4A2C24.crl (hash: RRV1McRPvUM7NyPmkovYmoltjiJhBwYiS67eKNsoO+M=) 4: 3130332e3133302e38322e302f32332d3233203d3e20313530393636.roa (hash: wzb3XBaqsWwxrRVk4X/B9M9lBaxhMB40Ug9owyKd8Yw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/8989D0431453556F22D882A21B2BBB9F4E4A2C24.crl rsync://repo-rpki.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/8989D0431453556F22D882A21B2BBB9F4E4A2C24.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8989D0431453556F22D882A21B2BBB9F4E4A2C24.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 18:55:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:95:7a:25:a9:53:3a:9f:18:6a:c7:77:9d:c9:ec:12:d7:cd:4c:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8989D0431453556F22D882A21B2BBB9F4E4A2C24 Validity Not Before: Jun 4 14:36:26 2025 GMT Not After : Jun 7 18:55:26 2025 GMT Subject: CN=F2525F0A174D5E568292460AA67810D553B494EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:64:ab:66:7e:fa:9b:d3:11:eb:25:62:53:2c: b1:85:b7:98:9f:41:67:94:7d:ab:fe:16:08:d4:b8: 54:1d:1a:f6:72:6d:63:f5:0a:b3:8d:bd:bf:c5:d1: ca:10:4f:a4:9c:77:f4:b5:79:6f:0f:33:e7:6f:b7: fa:8a:59:2e:29:7a:e7:3b:49:a0:1d:a9:45:c5:d4: e0:75:35:7e:e4:f5:00:3e:06:a5:5b:7f:03:0b:3a: 31:69:78:99:50:86:fd:b2:f4:d1:c7:a8:6c:3a:bc: 0d:02:b9:98:f4:c0:5f:cc:be:9c:42:c3:b2:2e:fe: d6:57:b0:0e:d2:9d:b1:c2:b9:eb:32:20:cd:85:d6: d7:13:bf:aa:71:e6:32:af:7a:e0:dd:42:2f:fa:cb: b7:2a:7f:ce:f9:aa:d9:dc:29:b6:5e:28:8c:9a:3b: ab:d5:56:11:94:e0:69:ea:9f:9b:57:3b:4c:31:5f: 54:71:ae:cc:88:a1:39:ac:78:18:69:48:87:36:12: 82:f2:92:cb:79:2d:55:a7:7a:c3:43:8a:78:0e:3e: 2f:8d:28:fc:87:91:fd:f2:3e:87:dd:2a:74:b3:6b: 8c:f7:b4:c9:73:dc:96:e3:3d:e0:26:c5:c3:50:6f: 69:c6:77:9b:1c:8c:26:48:31:54:ae:b4:f7:43:73: 1c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:52:5F:0A:17:4D:5E:56:82:92:46:0A:A6:78:10:D5:53:B4:94:EE X509v3 Authority Key Identifier: keyid:89:89:D0:43:14:53:55:6F:22:D8:82:A2:1B:2B:BB:9F:4E:4A:2C:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/8989D0431453556F22D882A21B2BBB9F4E4A2C24.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8989D0431453556F22D882A21B2BBB9F4E4A2C24.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/8989D0431453556F22D882A21B2BBB9F4E4A2C24.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:90:72:8f:10:3b:e1:ad:b9:27:21:9d:1f:07:27:c3:b8:50: ca:ef:37:31:5f:eb:7b:b7:df:e2:74:1c:80:b9:d2:d3:e9:9c: 83:f2:3b:a1:21:fe:0b:d1:99:cc:40:ec:2c:98:37:62:ad:49: b1:32:2a:b7:5a:6b:78:44:75:4b:0b:f7:84:ac:db:0e:94:7b: 1c:0f:a9:39:b6:ed:a9:de:77:cd:51:ab:5e:90:95:78:4b:23: 14:e1:75:96:a2:bb:63:de:76:d8:98:3a:ac:3d:d1:ad:fa:bd: dd:38:89:e0:64:9b:59:86:a4:1c:a1:45:02:9a:f0:7a:31:cc: b8:32:3f:a8:02:e9:8a:87:be:74:e0:ec:7c:39:f0:0f:7d:a4: 08:c2:b0:ff:87:b5:e4:97:dc:a5:c0:2d:4e:56:c3:41:38:71: 13:ba:d6:a5:34:9d:09:ec:9a:e2:1d:5f:dd:d1:0d:63:b8:39: 62:08:4d:c3:d8:02:c1:d6:ca:ce:1c:a6:8a:22:80:3f:37:6e: cc:d2:54:9d:12:bb:60:82:11:30:00:c7:5e:1d:aa:81:e4:b3: da:a0:ca:af:5a:f0:d2:b5:98:88:32:54:9f:2d:6c:5b:8b:95: e6:cf:ce:36:cf:e1:40:93:0f:85:c7:e1:14:7b:1f:1b:96:dd: c2:45:68:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOZV6JalTOp8Yasd3ncnsEtfNTGQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk4OUQwNDMxNDUzNTU2RjIyRDg4MkEyMUIyQkJCOUY0 RTRBMkMyNDAeFw0yNTA2MDQxNDM2MjZaFw0yNTA2MDcxODU1MjZaMDMxMTAvBgNV BAMTKEYyNTI1RjBBMTc0RDVFNTY4MjkyNDYwQUE2NzgxMEQ1NTNCNDk0RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRZKtmfvqb0xHrJWJTLLGFt5if QWeUfav+FgjUuFQdGvZybWP1CrONvb/F0coQT6Scd/S1eW8PM+dvt/qKWS4peuc7 SaAdqUXF1OB1NX7k9QA+BqVbfwMLOjFpeJlQhv2y9NHHqGw6vA0CuZj0wF/MvpxC w7Iu/tZXsA7SnbHCuesyIM2F1tcTv6px5jKveuDdQi/6y7cqf875qtncKbZeKIya O6vVVhGU4Gnqn5tXO0wxX1RxrsyIoTmseBhpSIc2EoLykst5LVWnesNDingOPi+N KPyHkf3yPofdKnSza4z3tMlz3JbjPeAmxcNQb2nGd5scjCZIMVSutPdDcxz5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8lJfChdNXlaCkkYKpngQ1VO0lO4wHwYDVR0j BBgwFoAUiYnQQxRTVW8i2IKiGyu7n05KLCQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YTg3MDY0Yi01ZjI3LTQyNzAtOTBlNC05OWY0M2FlODRkYjcvMC84OTg5RDA0MzE0 NTM1NTZGMjJEODgyQTIxQjJCQkI5RjRFNEEyQzI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODk4OUQwNDMxNDUzNTU2RjIyRDg4MkEyMUIyQkJCOUY0RTRB MkMyNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGE4NzA2NGItNWYyNy00MjcwLTkw ZTQtOTlmNDNhZTg0ZGI3LzAvODk4OUQwNDMxNDUzNTU2RjIyRDg4MkEyMUIyQkJC OUY0RTRBMkMyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFuQco8QO+GtuSchnR8HJ8O4UMrvNzFf63u3 3+J0HIC50tPpnIPyO6Eh/gvRmcxA7CyYN2KtSbEyKrdaa3hEdUsL94Ss2w6UexwP qTm27aned81Rq16QlXhLIxThdZaiu2PedtiYOqw90a36vd04ieBkm1mGpByhRQKa 8HoxzLgyP6gC6YqHvnTg7Hw58A99pAjCsP+HteSX3KXALU5Ww0E4cRO61qU0nQns muIdX93RDWO4OWIITcPYAsHWys4cpooigD83bszSVJ0Su2CCETAAx14dqoHks9qg yq9a8NK1mIgyVJ8tbFuLlebPzjbP4UCTD4XH4RR7HxuW3cJFaJ8= -----END CERTIFICATE-----Generated at Thu Jun 5 19:03:48 2025 by rpki-client