$ rpki-client -vvf repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft File: B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft (raw, json) Hash identifier: Yf4l4Qvg9rjhDsbBgjdMzxHh6khlPidZTmF6f6Jtjdk= Subject key identifier: 2F:EC:79:2F:45:A0:AD:71:C5:CD:E1:48:59:65:C4:9F:08:C1:6D:54 Authority key identifier: B8:93:98:BA:60:3C:43:BD:F7:11:A2:B3:1F:AD:C8:CD:FF:C9:CC:16 Certificate issuer: /CN=B89398BA603C43BDF711A2B31FADC8CDFFC9CC16 Certificate serial: 5B1D3BB141A83F3955D83AC251CB23C6A909E25D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft Manifest number: 0503 Signing time: Sat 06 Sep 2025 20:41:41 +0000 Manifest this update: Sat 06 Sep 2025 20:36:41 +0000 Manifest next update: Tue 09 Sep 2025 20:58:41 +0000 Files and hashes: 1: 323030313a6466323a346238303a3a2f34382d3438203d3e20313339343537.roa (hash: O/T9Xztwa1eZpftLg0Xl5KOsLOQM47dFO4VcGsJ1wDg=) 2: B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.crl (hash: eRNDkGA31azojTWy2v8ezx3ibNAWJmBwk6QAeZEPKUs=) 3: 3130332e3134362e36322e302f32332d3234203d3e20313339343537.roa (hash: J9nhXOhW6jatN3t2cMwD6dQ3cCJrOL1soCUmU7Ehehg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.crl rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 20:58:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:1d:3b:b1:41:a8:3f:39:55:d8:3a:c2:51:cb:23:c6:a9:09:e2:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B89398BA603C43BDF711A2B31FADC8CDFFC9CC16 Validity Not Before: Sep 6 20:36:41 2025 GMT Not After : Sep 9 20:58:41 2025 GMT Subject: CN=2FEC792F45A0AD71C5CDE1485965C49F08C16D54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:b2:79:d0:78:24:6e:fb:93:92:f2:8d:c6:4c: d3:73:22:fe:ee:18:ae:f6:4c:5f:4b:31:34:08:b0: 22:ca:22:62:da:52:fd:81:12:c6:9f:ca:80:46:f9: 46:e2:1b:43:35:c2:4b:95:ab:51:1e:1b:62:3b:be: 3f:e6:68:9b:db:11:e5:9e:fa:5c:7b:c5:87:36:d2: 89:b3:8b:d4:40:21:71:c3:88:85:08:03:74:a5:ec: 2c:be:06:62:db:ec:e1:32:cd:22:c7:76:ed:95:5a: 31:c6:88:d7:8a:00:7f:ab:cd:a8:52:be:d4:64:7d: 3d:55:bd:19:75:a8:9c:09:11:d2:3d:85:67:4c:bf: ad:ac:4b:3f:e6:37:3f:9c:af:01:29:cd:81:7d:08: 67:27:af:0c:29:a5:45:de:56:64:29:2a:7d:6e:0b: 13:fd:a9:f6:0a:80:2d:46:7c:f0:01:8a:2b:b9:8d: ac:59:82:62:ec:3b:e5:b3:64:b8:0a:c0:f8:97:86: 3f:1a:ea:b7:4b:59:95:ea:cb:fc:c4:44:a4:53:70: 65:2f:20:d4:b5:94:98:3b:cf:61:85:d7:0e:60:65: e6:ff:15:0e:cc:d7:75:71:35:49:ac:cf:0b:36:54: 41:5a:75:f5:f0:82:f3:20:7a:a3:d1:8b:04:fa:12: bb:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:EC:79:2F:45:A0:AD:71:C5:CD:E1:48:59:65:C4:9F:08:C1:6D:54 X509v3 Authority Key Identifier: keyid:B8:93:98:BA:60:3C:43:BD:F7:11:A2:B3:1F:AD:C8:CD:FF:C9:CC:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:ba:40:9e:fa:07:bd:86:b9:a7:a9:c7:8c:68:f6:c8:86:1e: 5e:8f:af:37:71:27:59:e0:ec:90:52:07:e3:81:ca:b1:01:f6: d5:36:c1:58:18:99:3d:3e:cc:7f:94:ac:89:90:a4:fd:e7:6a: 5e:e7:45:1d:c2:12:74:d1:40:aa:a0:0c:fe:05:21:8b:8b:8c: 67:0a:9d:ba:29:a4:33:fc:db:1a:76:2c:e6:38:95:21:8f:78: 69:b7:5a:4a:9b:9f:f9:c9:bb:10:56:5f:52:c0:e7:38:53:2d: 97:43:65:05:b7:d2:9d:c2:4d:9b:b7:01:05:70:3e:85:93:60: 65:54:cd:02:2e:aa:2b:66:03:bb:1a:24:af:11:ff:d0:19:b7: 4d:f2:4d:e7:c5:7e:61:6d:f8:d0:83:38:04:9c:b0:5b:6e:5e: bb:e9:e4:66:97:18:66:a7:45:c9:22:2f:55:fc:df:08:c1:2a: 3b:3e:02:55:b1:7e:6f:dd:77:47:32:8f:87:47:d2:83:62:d9: a0:6e:01:98:fd:b8:5e:81:0c:af:15:f7:f3:27:eb:b2:c5:99: ab:cb:33:4f:84:50:3e:24:92:ad:71:e7:d6:be:2b:35:ff:7c: 4c:4b:6a:ae:55:85:8e:b5:40:16:7d:d9:4a:65:32:79:68:d6: 29:ee:52:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWx07sUGoPzlV2DrCUcsjxqkJ4l0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg5Mzk4QkE2MDNDNDNCREY3MTFBMkIzMUZBREM4Q0RG RkM5Q0MxNjAeFw0yNTA5MDYyMDM2NDFaFw0yNTA5MDkyMDU4NDFaMDMxMTAvBgNV BAMTKDJGRUM3OTJGNDVBMEFENzFDNUNERTE0ODU5NjVDNDlGMDhDMTZENTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6snnQeCRu+5OS8o3GTNNzIv7u GK72TF9LMTQIsCLKImLaUv2BEsafyoBG+UbiG0M1wkuVq1EeG2I7vj/maJvbEeWe +lx7xYc20omzi9RAIXHDiIUIA3Sl7Cy+BmLb7OEyzSLHdu2VWjHGiNeKAH+rzahS vtRkfT1VvRl1qJwJEdI9hWdMv62sSz/mNz+crwEpzYF9CGcnrwwppUXeVmQpKn1u CxP9qfYKgC1GfPABiiu5jaxZgmLsO+WzZLgKwPiXhj8a6rdLWZXqy/zERKRTcGUv INS1lJg7z2GF1w5gZeb/FQ7M13VxNUmszws2VEFadfXwgvMgeqPRiwT6ErvbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL+x5L0WgrXHFzeFIWWXEnwjBbVQwHwYDVR0j BBgwFoAUuJOYumA8Q733EaKzH63Izf/JzBYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZWE3OTM0MC00ZGIyLTQ1OGQtOTVkZC1hZjIwYjRmY2RiM2QvMC9CODkzOThCQTYw M0M0M0JERjcxMUEyQjMxRkFEQzhDREZGQzlDQzE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjg5Mzk4QkE2MDNDNDNCREY3MTFBMkIzMUZBREM4Q0RGRkM5 Q0MxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGVhNzkzNDAtNGRiMi00NThkLTk1 ZGQtYWYyMGI0ZmNkYjNkLzAvQjg5Mzk4QkE2MDNDNDNCREY3MTFBMkIzMUZBREM4 Q0RGRkM5Q0MxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGO6QJ76B72Guaepx4xo9siGHl6PrzdxJ1ng 7JBSB+OByrEB9tU2wVgYmT0+zH+UrImQpP3nal7nRR3CEnTRQKqgDP4FIYuLjGcK nboppDP82xp2LOY4lSGPeGm3Wkqbn/nJuxBWX1LA5zhTLZdDZQW30p3CTZu3AQVw PoWTYGVUzQIuqitmA7saJK8R/9AZt03yTefFfmFt+NCDOAScsFtuXrvp5GaXGGan RckiL1X83wjBKjs+AlWxfm/dd0cyj4dH0oNi2aBuAZj9uF6BDK8V9/Mn67LFmavL M0+EUD4kkq1x59a+KzX/fExLaq5VhY61QBZ92UplMnlo1inuUls= -----END CERTIFICATE-----Generated at Sun Sep 7 14:03:55 2025 by rpki-client