$ rpki-client -vvf repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.mft File: C89AFDB015B4516342E4702244E8B8AC331B8669.mft (raw, json) Hash identifier: rdxx6VvrxgGe9iN2B2j5rqCF1F3paUZijxc0Eyc+ZYw= Subject key identifier: BA:FC:A7:EA:BD:79:73:AD:53:88:AC:6F:33:48:70:7F:EF:CF:D4:4E Authority key identifier: C8:9A:FD:B0:15:B4:51:63:42:E4:70:22:44:E8:B8:AC:33:1B:86:69 Certificate issuer: /CN=C89AFDB015B4516342E4702244E8B8AC331B8669 Certificate serial: 50F6F10181B4375CB5AFFA535B6B4C07B4973A57 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C89AFDB015B4516342E4702244E8B8AC331B8669.cer Subject info access: rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.mft Manifest number: 0110 Signing time: Sun 19 Oct 2025 13:40:48 +0000 Manifest this update: Sun 19 Oct 2025 13:35:48 +0000 Manifest next update: Wed 22 Oct 2025 19:55:48 +0000 Files and hashes: 1: 3130332e34302e39342e302f32342d3234203d3e203633353036.roa (hash: yEUmOyWPO5f/A4sL+Yd825dO+D/6S8GK82Q3tLvqY0Q=) 2: C89AFDB015B4516342E4702244E8B8AC331B8669.crl (hash: YfIVx0RlaHKPch8qwA5t5+iGVHmmNsqmvtR+CULhgFU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.crl rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C89AFDB015B4516342E4702244E8B8AC331B8669.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 19:55:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:f6:f1:01:81:b4:37:5c:b5:af:fa:53:5b:6b:4c:07:b4:97:3a:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C89AFDB015B4516342E4702244E8B8AC331B8669 Validity Not Before: Oct 19 13:35:48 2025 GMT Not After : Oct 22 19:55:48 2025 GMT Subject: CN=BAFCA7EABD7973AD5388AC6F3348707FEFCFD44E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f7:40:69:34:60:0a:50:4f:30:fc:c8:c0:f2: 8c:fa:75:42:5a:7b:9d:f6:ab:ef:cc:03:5b:13:cd: f4:1b:8d:ae:be:d5:54:86:63:f8:3c:f8:f8:be:99: ce:4e:cd:ac:bd:23:de:76:13:2e:29:09:7b:37:f2: c1:ac:a0:b4:26:ae:ff:af:a0:0c:fc:36:6c:f2:7d: c5:8c:66:32:d5:76:b6:d7:81:3c:7f:86:81:9e:bd: a3:f0:2f:05:b5:e5:85:58:1b:90:3a:fe:71:21:11: df:78:6a:6b:fb:c9:1d:eb:19:18:ea:93:f4:a2:ee: 64:8d:03:c7:85:52:61:6a:bb:f6:0f:de:9c:33:33: 3b:6a:83:29:5d:5d:52:76:3b:7c:e9:cb:92:1e:3b: 08:3d:ee:60:7b:02:89:28:35:e2:d6:fe:f2:aa:36: 75:54:8f:29:0f:be:aa:f7:de:ca:9c:25:25:0e:f0: 6a:1f:1c:bf:e3:d2:18:fb:f4:5c:51:9e:5b:3d:7d: c3:36:4f:fd:b5:ff:2b:77:df:b1:1c:ab:b6:cd:30: 6a:0c:4f:1c:25:7b:d7:d7:87:64:37:00:7b:27:34: 3a:b0:d4:4b:50:93:fc:fa:62:1b:ca:d9:30:86:e1: 74:dd:c2:e7:2a:d2:ea:d7:af:dc:66:91:2c:90:9a: d2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:FC:A7:EA:BD:79:73:AD:53:88:AC:6F:33:48:70:7F:EF:CF:D4:4E X509v3 Authority Key Identifier: keyid:C8:9A:FD:B0:15:B4:51:63:42:E4:70:22:44:E8:B8:AC:33:1B:86:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C89AFDB015B4516342E4702244E8B8AC331B8669.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:f7:5f:aa:1d:48:b8:93:8b:71:03:e9:09:7a:52:9c:84:cb: dd:66:8d:cb:31:ca:02:60:d6:71:46:d0:7f:9d:fe:81:a6:f9: 5a:bd:0f:93:de:e5:06:40:c1:f4:8f:a4:f0:00:1c:ac:de:0d: 94:f3:4c:d8:0a:7f:77:20:23:7e:ad:c5:4e:ff:b9:15:db:44: 9b:0b:e6:db:5c:b7:ce:c9:ec:1b:dd:76:e6:6f:17:cf:85:cb: b4:b1:02:06:be:04:19:81:59:d5:ad:2a:24:87:16:53:b9:c6: b0:c9:78:2c:29:bb:ce:76:24:a8:d9:21:dc:d4:58:cb:f6:26: 7e:f5:f8:dd:34:eb:0b:80:70:28:50:5f:73:6a:91:fe:91:42: a8:ad:e2:1c:74:2d:d8:5f:50:fe:b6:37:cc:fb:28:fe:62:4a: 47:66:5a:55:f0:71:fd:e0:e1:f5:e7:dc:5e:81:d1:69:13:80: 1b:f5:71:40:80:db:fa:85:4d:b7:6b:79:66:05:66:9b:e1:28: 80:c7:11:fe:40:f2:b3:ef:7d:5c:4a:20:02:8c:f7:34:f5:e2: c8:c5:ce:0d:65:d2:73:5a:6b:d9:49:90:b8:13:0f:72:30:7a: 84:38:09:dd:9f:57:66:04:79:b1:d9:1e:4c:73:4c:aa:21:9a: cc:ef:0a:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUPbxAYG0N1y1r/pTW2tMB7SXOlcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg5QUZEQjAxNUI0NTE2MzQyRTQ3MDIyNDRFOEI4QUMz MzFCODY2OTAeFw0yNTEwMTkxMzM1NDhaFw0yNTEwMjIxOTU1NDhaMDMxMTAvBgNV BAMTKEJBRkNBN0VBQkQ3OTczQUQ1Mzg4QUM2RjMzNDg3MDdGRUZDRkQ0NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/90BpNGAKUE8w/MjA8oz6dUJa e532q+/MA1sTzfQbja6+1VSGY/g8+Pi+mc5Ozay9I952Ey4pCXs38sGsoLQmrv+v oAz8NmzyfcWMZjLVdrbXgTx/hoGevaPwLwW15YVYG5A6/nEhEd94amv7yR3rGRjq k/Si7mSNA8eFUmFqu/YP3pwzMztqgyldXVJ2O3zpy5IeOwg97mB7AokoNeLW/vKq NnVUjykPvqr33sqcJSUO8GofHL/j0hj79FxRnls9fcM2T/21/yt337Ecq7bNMGoM Txwle9fXh2Q3AHsnNDqw1EtQk/z6YhvK2TCG4XTdwucq0urXr9xmkSyQmtI5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuvyn6r15c61TiKxvM0hwf+/P1E4wHwYDVR0j BBgwFoAUyJr9sBW0UWNC5HAiROi4rDMbhmkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NWJhZTMwYy1iMzYzLTQwN2ItYTBhYi0zMTU0ZWIzMDlhZTkvMS9DODlBRkRCMDE1 QjQ1MTYzNDJFNDcwMjI0NEU4QjhBQzMzMUI4NjY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzg5QUZEQjAxNUI0NTE2MzQyRTQ3MDIyNDRFOEI4QUMzMzFC ODY2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTViYWUzMGMtYjM2My00MDdiLWEw YWItMzE1NGViMzA5YWU5LzEvQzg5QUZEQjAxNUI0NTE2MzQyRTQ3MDIyNDRFOEI4 QUMzMzFCODY2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIr3X6odSLiTi3ED6Ql6UpyEy91mjcsxygJg 1nFG0H+d/oGm+Vq9D5Pe5QZAwfSPpPAAHKzeDZTzTNgKf3cgI36txU7/uRXbRJsL 5ttct87J7BvdduZvF8+Fy7SxAga+BBmBWdWtKiSHFlO5xrDJeCwpu852JKjZIdzU WMv2Jn71+N006wuAcChQX3Nqkf6RQqit4hx0LdhfUP62N8z7KP5iSkdmWlXwcf3g 4fXn3F6B0WkTgBv1cUCA2/qFTbdreWYFZpvhKIDHEf5A8rPvfVxKIAKM9zT14sjF zg1l0nNaa9lJkLgTD3IweoQ4Cd2fV2YEebHZHkxzTKohmszvCqw= -----END CERTIFICATE-----Generated at Mon Oct 20 09:47:19 2025 by rpki-client