$ rpki-client -vvf repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft File: 989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft (raw, json) Hash identifier: OQ4ltParCH3v2/u48gK/xPj2mWGHT/wdxfp+z92QlD0= Subject key identifier: 02:43:E0:1B:F2:5F:FD:F5:1D:75:9A:7D:A7:27:68:F9:32:4E:4B:3C Authority key identifier: 98:9B:87:D4:0F:7C:9F:1B:A5:4A:BC:AE:9B:C7:97:A3:E6:B2:57:48 Certificate issuer: /CN=989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748 Certificate serial: 37066CDA0161D7C17A8779878C5742CEBD98C013 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft Manifest number: 0507 Signing time: Sat 06 Sep 2025 17:51:02 +0000 Manifest this update: Sat 06 Sep 2025 17:46:02 +0000 Manifest next update: Tue 09 Sep 2025 23:45:02 +0000 Files and hashes: 1: 989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.crl (hash: WJhlFISALqIeBbdQOydC9zmgMfno2pcJAwJ3LBw6p40=) 2: 323030313a6466363a313330303a3a2f34382d3438203d3e20313338313137.roa (hash: hzs93FaYaNphdZDJOy2a+k5Vr7J1TFpilPTw5TB+vyQ=) 3: 3130332e3132302e3132342e302f32332d3234203d3e20313338313137.roa (hash: 9pTXaEmfCAIZ2elcDY8x5651yYxommQlVzX4FaEZZFs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.crl rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 23:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:06:6c:da:01:61:d7:c1:7a:87:79:87:8c:57:42:ce:bd:98:c0:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748 Validity Not Before: Sep 6 17:46:02 2025 GMT Not After : Sep 9 23:45:02 2025 GMT Subject: CN=0243E01BF25FFDF51D759A7DA72768F9324E4B3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:9b:66:f2:9a:d8:20:f3:ef:45:2f:81:4c:ce: 67:63:15:f0:9f:d9:81:fb:6b:c3:36:7a:c8:fb:84: c5:ce:b8:fc:a6:0b:10:fb:6a:4c:20:bf:29:e7:a4: 50:a0:71:15:c0:06:72:bf:a6:85:d5:14:24:bf:f9: 62:5d:f1:78:e8:3b:20:b3:dc:05:d4:56:07:c7:1b: 38:05:ea:44:03:ac:e5:2e:e9:5a:01:3d:e4:f7:84: 52:d1:50:d3:cb:33:bb:da:e7:dd:a9:69:99:c0:4d: b2:d7:69:4a:42:c6:d0:e1:b1:bb:67:e1:1a:6f:f0: f1:7c:df:3e:97:ed:84:35:c2:59:52:a2:30:54:4b: d6:3c:99:59:fd:8c:59:27:69:13:6e:d6:22:95:40: 48:25:39:f1:ae:c5:ec:dd:1f:a6:9c:d4:bb:06:f9: e6:da:ac:28:9a:c0:f5:d4:f7:3c:2d:3a:85:86:7f: f4:22:00:8a:48:67:a9:bf:5c:13:68:45:9b:0e:22: c0:55:11:3d:32:2d:65:84:1f:18:d8:c3:c9:5a:2b: 3e:90:51:ee:90:84:42:a2:ed:cd:f9:f8:72:d1:77: 94:97:82:c8:e4:9d:b8:de:3e:0d:01:ab:4e:3f:45: 55:93:0a:ea:75:c2:c2:aa:dc:57:62:56:e6:2e:aa: 71:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:43:E0:1B:F2:5F:FD:F5:1D:75:9A:7D:A7:27:68:F9:32:4E:4B:3C X509v3 Authority Key Identifier: keyid:98:9B:87:D4:0F:7C:9F:1B:A5:4A:BC:AE:9B:C7:97:A3:E6:B2:57:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:7d:18:80:b5:66:ef:bb:fa:15:84:ab:a4:50:70:1e:e4:44: 0f:5f:00:6c:cc:dc:17:1c:15:fc:3e:45:b0:4b:fc:85:ff:94: 20:bd:a4:b0:a6:8c:50:20:bb:f9:3a:6d:01:f1:b4:7f:48:4b: b6:cb:4a:af:f4:a1:69:53:84:4c:fd:34:d5:a7:e3:fe:28:de: ee:cb:ce:bf:df:a1:b7:c8:8b:e7:37:70:93:c8:b8:da:c4:b8: 1c:c7:de:e9:03:98:8d:72:03:e3:21:b6:02:b8:c8:b5:c2:0b: ed:1a:87:5c:c4:48:68:70:74:c4:8e:98:8f:bd:b8:6b:1b:79: dc:be:d2:8b:1e:7a:e1:fb:cd:3d:9f:3d:11:b0:4f:3d:fe:6a: 04:ba:a3:96:8f:8e:61:85:db:1c:22:b6:c9:b6:20:c1:d3:25: 7b:b3:1e:aa:70:6c:2e:7a:d9:78:38:60:1f:c6:18:c7:a1:0d: 1a:b5:7f:e5:e2:0e:46:89:70:2b:fc:eb:95:ec:37:12:98:c6: c8:f2:75:fe:7b:49:84:3a:e1:20:9d:7b:c4:5d:e3:3c:bb:92: 43:46:7c:c0:d6:7a:f5:f4:10:3c:20:7b:ed:10:cd:3a:5a:b4: bf:d7:d4:94:8e:02:b7:32:21:de:35:7e:e2:13:c4:93:45:eb: 72:af:96:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNwZs2gFh18F6h3mHjFdCzr2YwBMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg5Qjg3RDQwRjdDOUYxQkE1NEFCQ0FFOUJDNzk3QTNF NkIyNTc0ODAeFw0yNTA5MDYxNzQ2MDJaFw0yNTA5MDkyMzQ1MDJaMDMxMTAvBgNV BAMTKDAyNDNFMDFCRjI1RkZERjUxRDc1OUE3REE3Mjc2OEY5MzI0RTRCM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDom2bymtgg8+9FL4FMzmdjFfCf 2YH7a8M2esj7hMXOuPymCxD7akwgvynnpFCgcRXABnK/poXVFCS/+WJd8XjoOyCz 3AXUVgfHGzgF6kQDrOUu6VoBPeT3hFLRUNPLM7va592paZnATbLXaUpCxtDhsbtn 4Rpv8PF83z6X7YQ1wllSojBUS9Y8mVn9jFknaRNu1iKVQEglOfGuxezdH6ac1LsG +ebarCiawPXU9zwtOoWGf/QiAIpIZ6m/XBNoRZsOIsBVET0yLWWEHxjYw8laKz6Q Ue6QhEKi7c35+HLRd5SXgsjknbjePg0Bq04/RVWTCup1wsKq3FdiVuYuqnGdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAkPgG/Jf/fUddZp9pydo+TJOSzwwHwYDVR0j BBgwFoAUmJuH1A98nxulSryum8eXo+ayV0gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTUwNjBiOC1mNTcwLTQyZDYtODZmZi0zM2VhN2ZkZjI1MTUvMC85ODlCODdENDBG N0M5RjFCQTU0QUJDQUU5QkM3OTdBM0U2QjI1NzQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg5Qjg3RDQwRjdDOUYxQkE1NEFCQ0FFOUJDNzk3QTNFNkIy NTc0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWU1MDYwYjgtZjU3MC00MmQ2LTg2 ZmYtMzNlYTdmZGYyNTE1LzAvOTg5Qjg3RDQwRjdDOUYxQkE1NEFCQ0FFOUJDNzk3 QTNFNkIyNTc0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADd9GIC1Zu+7+hWEq6RQcB7kRA9fAGzM3Bcc Ffw+RbBL/IX/lCC9pLCmjFAgu/k6bQHxtH9IS7bLSq/0oWlThEz9NNWn4/4o3u7L zr/fobfIi+c3cJPIuNrEuBzH3ukDmI1yA+MhtgK4yLXCC+0ah1zESGhwdMSOmI+9 uGsbedy+0oseeuH7zT2fPRGwTz3+agS6o5aPjmGF2xwitsm2IMHTJXuzHqpwbC56 2Xg4YB/GGMehDRq1f+XiDkaJcCv865XsNxKYxsjydf57SYQ64SCde8Rd4zy7kkNG fMDWevX0EDwge+0QzTpatL/X1JSOArcyId41fuITxJNF63KvltU= -----END CERTIFICATE-----Generated at Sun Sep 7 15:28:41 2025 by rpki-client