$ rpki-client -vvf repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft File: F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft (raw, json) Hash identifier: DuBJ5gSOS8xPeplI0/zUxCBdoPWSZK/fsy911gRK+Tg= Subject key identifier: 63:30:80:5C:EA:44:7B:AF:E9:00:9C:63:70:C7:B1:4D:8C:86:C7:FC Authority key identifier: F8:99:69:E8:BA:BE:05:C4:5C:6D:6E:25:F6:25:E9:F1:84:5C:CC:9C Certificate issuer: /CN=F89969E8BABE05C45C6D6E25F625E9F1845CCC9C Certificate serial: 5468E69E0FA4EED628C943FC222FD99B2554E7FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft Manifest number: 0505 Signing time: Fri 05 Sep 2025 13:50:51 +0000 Manifest this update: Fri 05 Sep 2025 13:45:51 +0000 Manifest next update: Tue 09 Sep 2025 00:24:51 +0000 Files and hashes: 1: F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.crl (hash: kKfCOE541ySkeeWN97TnfIjM46yVeqZApuDeRKa3FVc=) 2: 323430343a3763303a3a2f33322d3332203d3e20313338313039.roa (hash: 8YhkhAgabc++Mqu+wq5ak2VX+c1IFJBr8gOpgVG3Khk=) 3: 3130332e3132362e38342e302f32322d3234203d3e20313338313039.roa (hash: Fk8DplImfz+K8DXRwes7LY4gqzQurTG9SsMeFcuo2l8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.crl rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 00:24:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:68:e6:9e:0f:a4:ee:d6:28:c9:43:fc:22:2f:d9:9b:25:54:e7:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F89969E8BABE05C45C6D6E25F625E9F1845CCC9C Validity Not Before: Sep 5 13:45:51 2025 GMT Not After : Sep 9 00:24:51 2025 GMT Subject: CN=6330805CEA447BAFE9009C6370C7B14D8C86C7FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:89:2b:bc:8f:e7:54:be:f5:cd:55:a7:f1:b9: 7d:00:16:44:ee:cc:81:29:1c:69:fc:45:ab:04:79: 34:e8:4b:40:cf:61:28:85:72:3d:80:26:00:e0:15: 73:c6:bc:99:41:62:9f:d8:ad:88:83:a2:f0:0b:12: 3d:51:ac:24:9c:74:a6:02:50:97:87:84:1c:f5:aa: 4b:67:1b:39:11:ec:21:15:cc:97:64:c3:63:c0:a9: 62:fe:84:c8:66:51:f4:29:e6:0a:21:78:77:c0:d7: 0a:b1:f3:a2:2f:18:49:6a:8f:c7:f7:39:c4:04:8f: 6b:38:64:c2:31:93:9f:51:7e:37:31:a7:52:58:f6: b7:9a:38:91:9a:e7:47:87:08:b8:12:67:7c:5a:5d: 32:9e:5d:2c:06:25:43:b0:56:6a:2a:ee:11:80:9c: 2d:4a:dd:11:01:a1:d9:ab:5a:57:5f:7e:e7:83:d8: bc:f3:b8:be:e4:6c:02:e1:13:9f:9d:51:fe:6d:18: 46:50:3f:e3:cf:06:94:c5:35:e3:82:68:30:74:0c: 1d:7a:f8:bf:97:53:a5:b2:9c:c8:58:8e:8a:c3:26: 6d:bc:fd:3d:fa:35:12:65:09:2f:77:77:1f:ad:7b: 28:46:c2:4f:d0:d7:3e:4a:4d:b4:b7:2e:b8:f6:e9: 80:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:30:80:5C:EA:44:7B:AF:E9:00:9C:63:70:C7:B1:4D:8C:86:C7:FC X509v3 Authority Key Identifier: keyid:F8:99:69:E8:BA:BE:05:C4:5C:6D:6E:25:F6:25:E9:F1:84:5C:CC:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:e2:56:58:c9:3a:b8:4b:08:ae:c9:8f:c4:04:1a:e1:6c:71: 3f:3c:3c:be:b1:8c:9a:8b:ba:c5:d5:ea:0c:f5:36:3c:a6:35: 6b:78:fd:07:34:26:c0:64:75:a0:46:2f:54:47:23:f3:c3:22: 93:cf:ac:dd:49:af:d0:5c:8a:b7:25:e4:73:e5:79:fd:50:0b: 54:6c:be:66:a7:92:d3:2f:7d:39:46:a6:0f:43:5e:dc:04:a6: 37:02:63:c2:d4:5c:06:a0:04:3a:33:5d:3b:d9:05:b0:95:45: 2e:3f:b0:3b:34:4f:2c:d3:77:9f:49:46:2c:aa:9e:df:0f:76: 7a:5b:b9:e5:55:6e:ad:91:3c:f9:62:63:fc:4e:44:7a:2b:97: ef:2f:46:3f:37:e2:95:fd:91:57:49:2d:a7:ce:60:c0:5a:c5: bb:93:d8:9e:42:c2:dd:0e:18:5c:59:86:40:e7:48:00:ac:a5: 5a:b7:43:63:e5:b4:e3:ba:0e:fc:e9:60:d1:df:f5:fe:45:82: 3e:60:da:03:e4:2c:54:9a:5b:f5:40:1b:3e:e3:86:45:26:a7: 7e:26:ec:60:d2:1d:67:33:90:e1:92:58:e9:b1:d2:77:61:30: 17:6b:19:b0:59:b3:67:34:36:a3:84:55:f5:b1:ae:46:7c:55: 91:bf:8e:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVGjmng+k7tYoyUP8Ii/ZmyVU5/0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjg5OTY5RThCQUJFMDVDNDVDNkQ2RTI1RjYyNUU5RjE4 NDVDQ0M5QzAeFw0yNTA5MDUxMzQ1NTFaFw0yNTA5MDkwMDI0NTFaMDMxMTAvBgNV BAMTKDYzMzA4MDVDRUE0NDdCQUZFOTAwOUM2MzcwQzdCMTREOEM4NkM3RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3iSu8j+dUvvXNVafxuX0AFkTu zIEpHGn8RasEeTToS0DPYSiFcj2AJgDgFXPGvJlBYp/YrYiDovALEj1RrCScdKYC UJeHhBz1qktnGzkR7CEVzJdkw2PAqWL+hMhmUfQp5goheHfA1wqx86IvGElqj8f3 OcQEj2s4ZMIxk59Rfjcxp1JY9reaOJGa50eHCLgSZ3xaXTKeXSwGJUOwVmoq7hGA nC1K3REBodmrWldffueD2LzzuL7kbALhE5+dUf5tGEZQP+PPBpTFNeOCaDB0DB16 +L+XU6WynMhYjorDJm28/T36NRJlCS93dx+teyhGwk/Q1z5KTbS3Lrj26YAnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYzCAXOpEe6/pAJxjcMexTYyGx/wwHwYDVR0j BBgwFoAU+Jlp6Lq+BcRcbW4l9iXp8YRczJwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NGI0ZmI4OC04ZjQyLTQ3ZjItYmU4MC0wOWU0MzU2MGRkZGYvMC9GODk5NjlFOEJB QkUwNUM0NUM2RDZFMjVGNjI1RTlGMTg0NUNDQzlDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjg5OTY5RThCQUJFMDVDNDVDNkQ2RTI1RjYyNUU5RjE4NDVD Q0M5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDRiNGZiODgtOGY0Mi00N2YyLWJl ODAtMDllNDM1NjBkZGRmLzAvRjg5OTY5RThCQUJFMDVDNDVDNkQ2RTI1RjYyNUU5 RjE4NDVDQ0M5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGfiVljJOrhLCK7Jj8QEGuFscT88PL6xjJqL usXV6gz1NjymNWt4/Qc0JsBkdaBGL1RHI/PDIpPPrN1Jr9Bcircl5HPlef1QC1Rs vmanktMvfTlGpg9DXtwEpjcCY8LUXAagBDozXTvZBbCVRS4/sDs0TyzTd59JRiyq nt8PdnpbueVVbq2RPPliY/xORHorl+8vRj834pX9kVdJLafOYMBaxbuT2J5Cwt0O GFxZhkDnSACspVq3Q2PltOO6DvzpYNHf9f5Fgj5g2gPkLFSaW/VAGz7jhkUmp34m 7GDSHWczkOGSWOmx0ndhMBdrGbBZs2c0NqOEVfWxrkZ8VZG/jsg= -----END CERTIFICATE-----Generated at Sun Sep 7 15:36:47 2025 by rpki-client