$ rpki-client -vvf repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft File: 89402655017312B8CFCB367BA82966AA21E11F90.mft (raw, json) Hash identifier: GPx63oykOtbzvuvLA6e/kd+Ed7D+vWr1IloUUwb3llM= Subject key identifier: A8:F3:20:57:33:A4:C1:B8:03:93:25:01:41:D5:A9:F7:0B:AC:8F:56 Authority key identifier: 89:40:26:55:01:73:12:B8:CF:CB:36:7B:A8:29:66:AA:21:E1:1F:90 Certificate issuer: /CN=89402655017312B8CFCB367BA82966AA21E11F90 Certificate serial: 2965E2081E98049FC33A1FE6AE7C03DFA19546E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft Manifest number: 04DD Signing time: Sat 06 Sep 2025 11:01:53 +0000 Manifest this update: Sat 06 Sep 2025 10:56:53 +0000 Manifest next update: Tue 09 Sep 2025 13:29:53 +0000 Files and hashes: 1: 323430303a313838303a3a2f33322d3438203d3e203137363730.roa (hash: FP8IqHLkyX7Qj2+QyPrsBYEPwMn3gsRtfyfeKNBNdEg=) 2: 89402655017312B8CFCB367BA82966AA21E11F90.crl (hash: 4tIvvnAhwX7ETtImgz4jF4ZaBeiQOxo0O8a1NZaou6E=) 3: 323430343a623238303a3a2f33322d3438203d3e203137363730.roa (hash: S1hTgzRInefDZ+nv4OU9cj+WPrGD6wknjfAjdl1JFoo=) 4: 3230322e3134372e3139322e302f32302d3234203d3e203137363730.roa (hash: WsFr0RE3ZnujNzg56bjhtSV6UHqOuDU5rMSYq/HFAbw=) 5: 3130332e3231332e3132382e302f32322d3234203d3e203137363730.roa (hash: FYvSh1st1IicJh9tmsJCC36iwumwIFXZHMkoJwqA8Qw=) 6: 3132332e3235332e3233322e302f32322d3234203d3e203137363730.roa (hash: R1hpl90tpuGr3S7MM3M7sdpYxwM9mEKg6oXY2ZteCXg=) 7: 3131302e35302e38302e302f32312d3234203d3e203137363730.roa (hash: ENs+ad22cCNfPNiUGh8Crfa5TLmxtOCxc9FzlyRTptI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.crl rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 13:29:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:65:e2:08:1e:98:04:9f:c3:3a:1f:e6:ae:7c:03:df:a1:95:46:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89402655017312B8CFCB367BA82966AA21E11F90 Validity Not Before: Sep 6 10:56:53 2025 GMT Not After : Sep 9 13:29:53 2025 GMT Subject: CN=A8F3205733A4C1B80393250141D5A9F70BAC8F56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b0:54:25:c4:33:02:31:cb:9c:49:03:0e:f5: b2:65:0e:d3:2a:d4:0e:2f:30:f6:8b:aa:aa:61:51: 84:7b:d6:48:7a:07:7a:77:69:84:dd:88:98:ed:3e: e9:f8:b0:c9:7b:4f:a2:dc:78:9a:e4:f5:de:e6:6d: c1:b8:5b:dc:cb:01:e5:ac:e0:65:c0:39:e3:55:79: 7e:ac:41:ca:75:b3:fb:0a:19:2f:57:31:32:df:07: 7c:93:00:1e:dd:c3:9b:85:76:bd:1c:cb:82:ad:1c: f9:a7:36:ef:f1:6d:98:eb:fe:db:8c:94:8c:c2:94: 07:77:de:2a:da:13:fd:cd:ad:cb:74:64:9b:1f:7d: d4:18:72:72:a4:8b:e3:85:cf:44:93:66:0e:85:e8: df:9a:ee:70:d4:60:1b:4f:95:ff:eb:be:ec:84:0b: 15:9d:52:b7:5c:e7:6b:12:df:c6:16:70:1e:18:48: 79:76:a5:92:a5:6a:20:34:f6:15:c9:c4:dd:ab:07: 81:73:c4:55:b5:f4:8f:cd:3a:5e:58:47:1d:b3:08: 87:2d:f4:3a:67:54:b7:60:7a:f6:b6:f0:1f:b8:a6: 91:0f:59:a1:0e:fc:48:da:00:8e:15:9d:20:c8:d4: 1b:2b:20:90:c8:85:8f:da:e0:c5:0d:71:0a:9f:60: 33:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:F3:20:57:33:A4:C1:B8:03:93:25:01:41:D5:A9:F7:0B:AC:8F:56 X509v3 Authority Key Identifier: keyid:89:40:26:55:01:73:12:B8:CF:CB:36:7B:A8:29:66:AA:21:E1:1F:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:2f:f7:e5:c8:10:ce:c2:ca:6d:40:eb:39:70:23:d2:43:82: e9:8a:5b:6a:4b:4a:dc:a2:8a:87:c1:6d:f8:1e:af:ec:81:2d: a8:c3:4e:c1:e9:68:02:2c:76:b7:7d:12:89:c5:88:f8:2c:68: 1a:81:3e:9d:77:6d:05:12:f1:a8:6d:c1:22:df:e0:61:4a:86: 1e:4c:74:6d:e1:63:f4:94:7d:4d:23:7b:7a:38:d1:ce:33:5f: a5:96:d8:4c:a8:71:f6:a5:3b:5b:91:25:96:1d:38:67:14:d7: 63:04:3f:e2:71:fe:04:fa:e0:77:38:f0:33:54:e2:3a:fb:52: bd:c9:71:2d:47:f1:b2:50:70:b9:9d:ec:e6:7a:44:a5:1b:e8: b0:c6:3d:3c:7f:49:fd:6a:ad:93:89:c9:70:9a:44:40:2f:0d: 55:59:ab:ca:ed:3d:60:14:ce:1f:cb:71:d0:93:4b:5b:48:d7: 9d:a1:b2:13:c5:52:17:88:93:4f:05:bb:86:06:d6:b2:95:87: bd:89:7b:22:8e:de:5f:3f:d3:ed:75:60:05:90:d8:7d:97:37: 6b:f6:50:56:07:10:7a:60:88:ea:ac:dc:e1:e7:f1:09:b3:66: 4d:e5:36:e4:ab:93:eb:d8:b9:16:fd:41:8a:5e:07:20:f3:d2: 72:79:c2:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKWXiCB6YBJ/DOh/mrnwD36GVRuEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk0MDI2NTUwMTczMTJCOENGQ0IzNjdCQTgyOTY2QUEy MUUxMUY5MDAeFw0yNTA5MDYxMDU2NTNaFw0yNTA5MDkxMzI5NTNaMDMxMTAvBgNV BAMTKEE4RjMyMDU3MzNBNEMxQjgwMzkzMjUwMTQxRDVBOUY3MEJBQzhGNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEsFQlxDMCMcucSQMO9bJlDtMq 1A4vMPaLqqphUYR71kh6B3p3aYTdiJjtPun4sMl7T6LceJrk9d7mbcG4W9zLAeWs 4GXAOeNVeX6sQcp1s/sKGS9XMTLfB3yTAB7dw5uFdr0cy4KtHPmnNu/xbZjr/tuM lIzClAd33iraE/3Nrct0ZJsffdQYcnKki+OFz0STZg6F6N+a7nDUYBtPlf/rvuyE CxWdUrdc52sS38YWcB4YSHl2pZKlaiA09hXJxN2rB4FzxFW19I/NOl5YRx2zCIct 9DpnVLdgeva28B+4ppEPWaEO/EjaAI4VnSDI1BsrIJDIhY/a4MUNcQqfYDPvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqPMgVzOkwbgDkyUBQdWp9wusj1YwHwYDVR0j BBgwFoAUiUAmVQFzErjPyzZ7qClmqiHhH5AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZmIxYzgwYy00ZDZjLTQ0MDgtODk0Ny1mYmE2ZTdjNGJlN2MvMC84OTQwMjY1NTAx NzMxMkI4Q0ZDQjM2N0JBODI5NjZBQTIxRTExRjkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODk0MDI2NTUwMTczMTJCOENGQ0IzNjdCQTgyOTY2QUEyMUUx MUY5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWZiMWM4MGMtNGQ2Yy00NDA4LTg5 NDctZmJhNmU3YzRiZTdjLzAvODk0MDI2NTUwMTczMTJCOENGQ0IzNjdCQTgyOTY2 QUEyMUUxMUY5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFAv9+XIEM7Cym1A6zlwI9JDgumKW2pLStyi iofBbfger+yBLajDTsHpaAIsdrd9EonFiPgsaBqBPp13bQUS8ahtwSLf4GFKhh5M dG3hY/SUfU0je3o40c4zX6WW2EyocfalO1uRJZYdOGcU12MEP+Jx/gT64Hc48DNU 4jr7Ur3JcS1H8bJQcLmd7OZ6RKUb6LDGPTx/Sf1qrZOJyXCaREAvDVVZq8rtPWAU zh/LcdCTS1tI152hshPFUheIk08Fu4YG1rKVh72JeyKO3l8/0+11YAWQ2H2XN2v2 UFYHEHpgiOqs3OHn8QmzZk3lNuSrk+vYuRb9QYpeByDz0nJ5wgA= -----END CERTIFICATE-----Generated at Sun Sep 7 15:35:08 2025 by rpki-client