$ rpki-client -vvf repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.mft File: 893997EF53FFBB5A3C55A47213135040C1C5B843.mft (raw, json) Hash identifier: yfWwNg9zQhGOcwGNZ1sPlIBzxvO1Dfqqc0pGMT2LFWE= Subject key identifier: E1:DB:92:4E:A2:1D:F9:F0:DF:54:33:6C:2E:3B:B8:8E:E0:57:3D:3E Authority key identifier: 89:39:97:EF:53:FF:BB:5A:3C:55:A4:72:13:13:50:40:C1:C5:B8:43 Certificate issuer: /CN=893997EF53FFBB5A3C55A47213135040C1C5B843 Certificate serial: 6D9ABA66470EF2A7A73DB3FC891CFE36AF12FBDA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/893997EF53FFBB5A3C55A47213135040C1C5B843.cer Subject info access: rsync://repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.mft Manifest number: 0159 Signing time: Tue 01 Jul 2025 18:40:44 +0000 Manifest this update: Tue 01 Jul 2025 18:35:44 +0000 Manifest next update: Fri 04 Jul 2025 20:00:44 +0000 Files and hashes: 1: 893997EF53FFBB5A3C55A47213135040C1C5B843.crl (hash: /pPOWpQt0o/lk5bXHCM4oSJVF+19bnsUM3jU3YcZN7o=) 2: 3130332e3139322e38312e302f32342d3234203d3e20313530393137.roa (hash: 3qZF8ggdlzs3ruDfQ9HAEp9ByaXAzt4cAU9kMTQ4y6s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.crl rsync://repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/893997EF53FFBB5A3C55A47213135040C1C5B843.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:9a:ba:66:47:0e:f2:a7:a7:3d:b3:fc:89:1c:fe:36:af:12:fb:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=893997EF53FFBB5A3C55A47213135040C1C5B843 Validity Not Before: Jul 1 18:35:44 2025 GMT Not After : Jul 4 20:00:44 2025 GMT Subject: CN=E1DB924EA21DF9F0DF54336C2E3BB88EE0573D3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8a:17:1e:da:0a:ef:e9:bb:fc:2b:ef:c7:8a: 9b:2a:07:74:8e:77:81:b1:14:9a:52:1f:0a:5f:02: 47:16:a5:c1:22:92:fb:e2:98:d6:36:25:70:c3:7a: 70:f8:76:66:71:a7:46:72:5b:b3:70:5c:7d:70:b7: 83:dc:59:07:f9:a7:3d:13:af:5c:6e:c3:09:8a:36: c3:2f:7a:24:0a:57:5e:c6:85:d5:75:53:06:b2:b7: 14:7b:7a:1d:da:5c:48:4b:11:b6:57:d5:e4:75:6d: da:86:50:b2:83:b6:8e:c7:99:2f:1a:d5:9b:87:bb: a5:d3:57:e1:3d:2f:c4:39:79:45:3a:6b:69:3a:1f: 3f:64:f4:fe:f7:57:e1:93:93:de:7a:b9:57:03:ec: 09:ea:e1:65:48:ff:ec:72:71:a6:4b:9e:1a:62:1e: 5c:2b:b6:76:c7:b6:fe:5e:c5:7b:25:f7:71:66:1c: ee:fc:57:4b:1f:48:38:f2:58:a9:80:e0:ee:42:53: 8f:ac:fc:65:61:a5:97:42:af:5c:a5:5a:f4:3e:a5: c5:2a:0a:06:22:da:1b:3c:61:cf:a8:15:17:22:3f: d8:30:fe:df:9d:72:2f:2d:2a:98:50:c0:d9:66:e2: 4a:9d:73:3e:dd:d6:65:6b:a2:ae:8c:f9:47:45:a8: eb:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:DB:92:4E:A2:1D:F9:F0:DF:54:33:6C:2E:3B:B8:8E:E0:57:3D:3E X509v3 Authority Key Identifier: keyid:89:39:97:EF:53:FF:BB:5A:3C:55:A4:72:13:13:50:40:C1:C5:B8:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/893997EF53FFBB5A3C55A47213135040C1C5B843.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/064ff7c9-e905-44d6-bc35-c7dbb070b757/0/893997EF53FFBB5A3C55A47213135040C1C5B843.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:2a:94:97:57:1b:85:1a:e4:c8:79:b1:a9:a8:19:3b:85:2d: ac:24:db:87:b8:8a:ae:07:7f:63:ff:6b:97:ad:0f:32:b8:c4: e0:46:8c:62:07:40:c5:df:ab:a5:6c:93:cb:5e:74:73:b3:48: aa:40:89:d3:e7:b6:52:df:96:99:3e:a4:66:44:ac:81:95:38: 4c:0a:05:55:1e:73:f0:51:0f:ee:76:7f:9b:8e:44:26:8c:96: 24:ae:ef:81:63:c4:74:35:ac:24:2c:ba:f3:f6:18:43:e5:e6: 15:f4:99:b3:26:4c:1f:12:b1:97:fd:01:f1:44:26:92:27:e0: e1:f7:6f:d2:cd:4b:da:73:83:65:af:3b:32:0c:c2:5c:0c:f8: 8f:a2:db:6b:7c:c3:64:15:3c:2d:4e:6d:fa:34:fd:4f:c4:cc: e9:a6:3d:4b:80:2a:1b:48:13:0b:cd:c3:f4:e4:76:8f:5a:81: 95:b9:3e:dc:b6:2a:d1:3a:20:9b:b5:5e:e2:e2:91:35:87:4e: e6:a5:34:44:af:5d:7e:9a:34:be:c0:07:0b:62:c1:c5:74:d0: 23:cd:2c:3e:9d:93:02:ed:d0:25:ee:47:37:0e:ec:6b:19:90: 66:55:e4:4e:1b:7f:50:d0:2a:bd:e7:72:9b:07:b3:c0:ad:b3: 31:c1:68:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbZq6ZkcO8qenPbP8iRz+Nq8S+9owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODkzOTk3RUY1M0ZGQkI1QTNDNTVBNDcyMTMxMzUwNDBD MUM1Qjg0MzAeFw0yNTA3MDExODM1NDRaFw0yNTA3MDQyMDAwNDRaMDMxMTAvBgNV BAMTKEUxREI5MjRFQTIxREY5RjBERjU0MzM2QzJFM0JCODhFRTA1NzNEM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsihce2grv6bv8K+/HipsqB3SO d4GxFJpSHwpfAkcWpcEikvvimNY2JXDDenD4dmZxp0ZyW7NwXH1wt4PcWQf5pz0T r1xuwwmKNsMveiQKV17GhdV1UwaytxR7eh3aXEhLEbZX1eR1bdqGULKDto7HmS8a 1ZuHu6XTV+E9L8Q5eUU6a2k6Hz9k9P73V+GTk956uVcD7Anq4WVI/+xycaZLnhpi HlwrtnbHtv5exXsl93FmHO78V0sfSDjyWKmA4O5CU4+s/GVhpZdCr1ylWvQ+pcUq CgYi2hs8Yc+oFRciP9gw/t+dci8tKphQwNlm4kqdcz7d1mVroq6M+UdFqOvPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4duSTqId+fDfVDNsLju4juBXPT4wHwYDVR0j BBgwFoAUiTmX71P/u1o8VaRyExNQQMHFuEMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjRmZjdjOS1lOTA1LTQ0ZDYtYmMzNS1jN2RiYjA3MGI3NTcvMC84OTM5OTdFRjUz RkZCQjVBM0M1NUE0NzIxMzEzNTA0MEMxQzVCODQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODkzOTk3RUY1M0ZGQkI1QTNDNTVBNDcyMTMxMzUwNDBDMUM1 Qjg0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDY0ZmY3YzktZTkwNS00NGQ2LWJj MzUtYzdkYmIwNzBiNzU3LzAvODkzOTk3RUY1M0ZGQkI1QTNDNTVBNDcyMTMxMzUw NDBDMUM1Qjg0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFAqlJdXG4Ua5Mh5samoGTuFLawk24e4iq4H f2P/a5etDzK4xOBGjGIHQMXfq6Vsk8tedHOzSKpAidPntlLflpk+pGZErIGVOEwK BVUec/BRD+52f5uORCaMliSu74FjxHQ1rCQsuvP2GEPl5hX0mbMmTB8SsZf9AfFE JpIn4OH3b9LNS9pzg2WvOzIMwlwM+I+i22t8w2QVPC1Obfo0/U/EzOmmPUuAKhtI EwvNw/Tkdo9agZW5Pty2KtE6IJu1XuLikTWHTualNESvXX6aNL7ABwtiwcV00CPN LD6dkwLt0CXuRzcO7GsZkGZV5E4bf1DQKr3ncpsHs8CtszHBaLA= -----END CERTIFICATE-----Generated at Thu Jul 3 06:51:20 2025 by rpki-client