$ rpki-client -vvf repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.mft File: 89B98D1F135A7FC66C0284C34477C19604645554.mft (raw, json) Hash identifier: P70KTdxvDuDLrl8CI3OUIiSbRewWedxSPtuL9f2oyzk= Subject key identifier: 58:B4:72:37:BA:FB:90:C4:17:A2:A1:C0:42:29:DC:76:26:07:61:D7 Authority key identifier: 89:B9:8D:1F:13:5A:7F:C6:6C:02:84:C3:44:77:C1:96:04:64:55:54 Certificate issuer: /CN=89B98D1F135A7FC66C0284C34477C19604645554 Certificate serial: 5DA67071F6326DD4348EB650E53E3E21301290C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89B98D1F135A7FC66C0284C34477C19604645554.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.mft Manifest number: 0164 Signing time: Sat 07 Jun 2025 02:52:15 +0000 Manifest this update: Sat 07 Jun 2025 02:47:15 +0000 Manifest next update: Tue 10 Jun 2025 04:08:15 +0000 Files and hashes: 1: 3130332e37392e3233362e302f32342d3234203d3e20313530393535.roa (hash: onZqAL56YoMix5wpV03h5e8xuAaImMliGkPVBv6grnU=) 2: 89B98D1F135A7FC66C0284C34477C19604645554.crl (hash: Tsl2dN1q0iLnJNcIpxZG2FksZ7ItER0wb/ztVBb7Ch0=) 3: 3130332e37392e3233362e302f32332d3233203d3e20313530393535.roa (hash: P+PJmhSLpd83S2cxURBDcslsCmkTTuYqFLowXEXkTfY=) 4: 3130332e37392e3233372e302f32342d3234203d3e20313530393535.roa (hash: 2IWnXxowwOlz7I18Z25U30dGHsj5oRHYQH7WRuuUzKo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.crl rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89B98D1F135A7FC66C0284C34477C19604645554.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 04:08:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:a6:70:71:f6:32:6d:d4:34:8e:b6:50:e5:3e:3e:21:30:12:90:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89B98D1F135A7FC66C0284C34477C19604645554 Validity Not Before: Jun 7 02:47:15 2025 GMT Not After : Jun 10 04:08:15 2025 GMT Subject: CN=58B47237BAFB90C417A2A1C04229DC76260761D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a2:09:d4:7a:10:eb:03:3a:16:fc:4d:7d:15: 39:49:d7:a4:4c:a1:f8:2b:15:13:45:7a:cc:39:17: 30:d7:26:86:ae:f4:2c:c7:f3:40:2b:1b:1f:81:a2: 9c:47:c4:38:cd:86:e1:a9:db:6b:ea:42:e2:a0:b3: 13:68:b6:2e:d9:65:93:68:65:ec:bf:72:8f:cb:dd: 60:d9:fe:68:dd:7f:5d:84:55:2b:c3:5d:d7:f5:2e: 1f:4f:bd:79:76:d0:30:09:fb:25:90:92:21:00:76: 99:77:45:26:68:b4:46:5f:bd:e3:5c:e4:12:0e:f1: 38:28:df:66:f1:85:fb:a6:1e:9b:2f:e2:d5:86:8b: fc:fc:7a:9c:43:bf:d1:41:72:0a:40:d2:04:a8:36: 99:30:b1:37:a7:97:52:3b:4a:21:a3:e5:ff:89:b9: a1:33:67:eb:9b:08:a5:d8:f1:93:a2:f7:8b:7d:d7: ab:ec:85:4d:4c:8b:96:1a:80:e2:16:2e:5c:3a:c8: c2:7a:7a:e0:58:d0:9d:d5:f2:15:65:36:7d:c9:d1: 32:4a:ec:4a:55:f9:86:ba:85:b1:f1:93:41:ac:09: eb:c9:b5:3e:c1:74:65:30:d2:42:04:47:60:ef:9e: 69:ca:7f:8d:ca:3a:6d:4a:b8:67:78:c1:30:d4:39: f7:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:B4:72:37:BA:FB:90:C4:17:A2:A1:C0:42:29:DC:76:26:07:61:D7 X509v3 Authority Key Identifier: keyid:89:B9:8D:1F:13:5A:7F:C6:6C:02:84:C3:44:77:C1:96:04:64:55:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89B98D1F135A7FC66C0284C34477C19604645554.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:e3:2c:fd:f8:f2:33:6f:ab:cc:0f:c4:6f:f1:12:67:a8:7b: 5e:ac:8f:e1:42:a2:e1:22:5f:8f:47:5c:57:12:9c:f5:cd:94: b4:04:c9:2f:a3:da:50:e9:fd:69:19:00:91:cb:d9:09:86:92: bc:0a:a8:8c:92:fd:64:9e:20:f2:19:82:5f:e0:5f:c5:91:52: a7:54:56:ad:67:bd:14:aa:f2:a6:14:e9:55:2b:a9:5c:dd:87: 39:03:8d:f9:f5:b3:b3:2b:a3:91:70:1f:23:da:77:bc:b8:c2: 8b:58:6e:5b:0c:e1:19:4e:77:78:a5:d4:20:c2:c2:97:1e:99: 99:0c:02:64:cd:47:10:f8:d7:0f:54:49:04:7d:7a:35:a2:f0: b9:57:19:e7:78:ef:eb:2f:e6:a3:52:35:ff:55:00:bc:87:0f: 83:ab:5a:20:c8:2a:b4:77:8c:15:b8:59:14:89:57:a8:7e:ce: 43:57:69:44:eb:cd:89:22:52:2e:ad:2c:d6:e1:5f:30:21:0c: 64:b5:38:c1:47:b9:6a:5d:35:b1:d7:5c:5b:57:d2:0f:5e:ef: 72:e9:26:be:eb:f7:34:b3:3a:f3:5b:05:f2:87:8c:e1:bd:9b: a0:be:23:73:f3:34:6a:a2:ce:5c:28:62:3a:36:15:30:37:ab: 7d:e7:aa:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXaZwcfYybdQ0jrZQ5T4+ITASkMgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlCOThEMUYxMzVBN0ZDNjZDMDI4NEMzNDQ3N0MxOTYw NDY0NTU1NDAeFw0yNTA2MDcwMjQ3MTVaFw0yNTA2MTAwNDA4MTVaMDMxMTAvBgNV BAMTKDU4QjQ3MjM3QkFGQjkwQzQxN0EyQTFDMDQyMjlEQzc2MjYwNzYxRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQognUehDrAzoW/E19FTlJ16RM ofgrFRNFesw5FzDXJoau9CzH80ArGx+BopxHxDjNhuGp22vqQuKgsxNoti7ZZZNo Zey/co/L3WDZ/mjdf12EVSvDXdf1Lh9PvXl20DAJ+yWQkiEAdpl3RSZotEZfveNc 5BIO8Tgo32bxhfumHpsv4tWGi/z8epxDv9FBcgpA0gSoNpkwsTenl1I7SiGj5f+J uaEzZ+ubCKXY8ZOi94t916vshU1Mi5YagOIWLlw6yMJ6euBY0J3V8hVlNn3J0TJK 7EpV+Ya6hbHxk0GsCevJtT7BdGUw0kIER2DvnmnKf43KOm1KuGd4wTDUOfe7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWLRyN7r7kMQXoqHAQincdiYHYdcwHwYDVR0j BBgwFoAUibmNHxNaf8ZsAoTDRHfBlgRkVVQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YmZmMWIzZi0xMTkwLTQxMTktYmJjNi0xNDE3ZGY4YWEyNTgvMC84OUI5OEQxRjEz NUE3RkM2NkMwMjg0QzM0NDc3QzE5NjA0NjQ1NTU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODlCOThEMUYxMzVBN0ZDNjZDMDI4NEMzNDQ3N0MxOTYwNDY0 NTU1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGJmZjFiM2YtMTE5MC00MTE5LWJi YzYtMTQxN2RmOGFhMjU4LzAvODlCOThEMUYxMzVBN0ZDNjZDMDI4NEMzNDQ3N0Mx OTYwNDY0NTU1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGLjLP348jNvq8wPxG/xEmeoe16sj+FCouEi X49HXFcSnPXNlLQEyS+j2lDp/WkZAJHL2QmGkrwKqIyS/WSeIPIZgl/gX8WRUqdU Vq1nvRSq8qYU6VUrqVzdhzkDjfn1s7Mro5FwHyPad7y4wotYblsM4RlOd3il1CDC wpcemZkMAmTNRxD41w9USQR9ejWi8LlXGed47+sv5qNSNf9VALyHD4OrWiDIKrR3 jBW4WRSJV6h+zkNXaUTrzYkiUi6tLNbhXzAhDGS1OMFHuWpdNbHXXFtX0g9e73Lp Jr7r9zSzOvNbBfKHjOG9m6C+I3PzNGqizlwoYjo2FTA3q33nqng= -----END CERTIFICATE-----Generated at Sun Jun 8 23:31:24 2025 by rpki-client