$ rpki-client -vvf repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.mft File: C89AFDB015B4516342E4702244E8B8AC331B8669.mft (raw, json) Hash identifier: D4ZAIaEyu+8S8WS/j3Z7x7r1lCO8ZrzZ+4elYdXHCO4= Subject key identifier: 23:CA:A9:E1:80:B6:3A:CC:5B:37:12:B5:40:BA:F9:01:B2:65:56:14 Authority key identifier: C8:9A:FD:B0:15:B4:51:63:42:E4:70:22:44:E8:B8:AC:33:1B:86:69 Certificate issuer: /CN=C89AFDB015B4516342E4702244E8B8AC331B8669 Certificate serial: 6E672C4F19DAC38DB2DCE04F4E8FE8D1E979A5AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C89AFDB015B4516342E4702244E8B8AC331B8669.cer Subject info access: rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.mft Manifest number: F7 Signing time: Sat 23 Aug 2025 01:00:47 +0000 Manifest this update: Sat 23 Aug 2025 00:55:47 +0000 Manifest next update: Tue 26 Aug 2025 10:17:47 +0000 Files and hashes: 1: C89AFDB015B4516342E4702244E8B8AC331B8669.crl (hash: FZ2wnC+KTeSzn5xnjNdL82IbhHHCnmdfLPTrTXoJHYQ=) 2: 3130332e34302e39342e302f32342d3234203d3e203633353036.roa (hash: yEUmOyWPO5f/A4sL+Yd825dO+D/6S8GK82Q3tLvqY0Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.crl rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C89AFDB015B4516342E4702244E8B8AC331B8669.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:17:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:67:2c:4f:19:da:c3:8d:b2:dc:e0:4f:4e:8f:e8:d1:e9:79:a5:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C89AFDB015B4516342E4702244E8B8AC331B8669 Validity Not Before: Aug 23 00:55:47 2025 GMT Not After : Aug 26 10:17:47 2025 GMT Subject: CN=23CAA9E180B63ACC5B3712B540BAF901B2655614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:28:ed:79:41:51:a2:46:98:f4:54:00:ce:d1: c7:8c:fa:cc:45:54:ca:ea:11:61:21:c7:cd:2c:5c: 23:6d:59:be:85:88:84:fa:87:42:f6:79:99:97:63: 71:89:4d:fd:33:47:d7:38:ee:e5:4f:b8:51:e1:40: 7e:75:14:e6:bf:97:06:a5:7f:5c:9f:e1:13:f2:15: 70:cb:39:2e:00:40:8d:e7:26:01:c0:7a:c8:c4:83: 8f:c2:45:29:b2:1d:c1:6c:22:9f:52:12:9e:6b:63: 97:41:7d:0b:80:db:f7:79:9b:b3:86:02:ee:29:e7: f0:9f:99:e7:28:97:ed:38:74:b4:e6:68:e9:3d:f3: e6:e5:6b:b0:0d:fd:cb:fe:98:a9:0c:21:75:5a:f6: 17:bf:7d:f1:4f:1e:50:92:41:87:d7:30:b1:08:75: 05:9e:54:b9:01:82:6b:44:77:38:31:17:a0:d8:e6: 7e:f2:a2:5a:a0:64:96:38:3d:dc:98:df:06:d0:f5: 13:85:8e:b0:e3:70:b6:0a:96:b6:d8:36:7c:bd:83: 53:0c:e1:3b:71:35:e7:75:06:a6:90:6c:04:c2:65: cf:c5:c4:92:27:d7:99:6d:0a:9d:ce:f7:4d:df:dc: bd:b8:22:81:d7:f2:7b:04:91:c7:48:a7:40:2c:f9: da:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:CA:A9:E1:80:B6:3A:CC:5B:37:12:B5:40:BA:F9:01:B2:65:56:14 X509v3 Authority Key Identifier: keyid:C8:9A:FD:B0:15:B4:51:63:42:E4:70:22:44:E8:B8:AC:33:1B:86:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C89AFDB015B4516342E4702244E8B8AC331B8669.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:a7:1c:ee:bf:78:e8:c9:8b:e9:8f:6c:e3:ed:13:57:18:76: 74:9e:e1:eb:23:3c:1f:e0:2a:36:89:9c:1a:ee:50:11:d0:31: f3:c0:15:70:fc:66:c2:57:88:2c:6e:33:3c:8c:74:ab:53:00: f3:02:7f:89:36:2f:fc:69:9a:dc:68:c3:a2:b5:80:ab:34:af: 78:e4:9c:36:25:4c:8d:26:cf:9e:97:c5:c9:2d:cb:3e:ba:74: f1:20:45:b2:af:f1:da:90:4f:9d:12:73:41:2d:a1:ed:82:cb: 7c:33:49:70:8f:8a:b7:90:5a:d6:5d:8b:70:cc:ee:c2:dd:28: 91:11:ca:aa:cd:9b:30:3f:d6:9f:07:96:13:73:17:95:a0:b4: 66:b6:f9:2d:b9:37:33:80:d1:22:19:ce:49:c9:8b:1c:7a:ce: 27:57:45:c6:90:a8:90:93:0a:d1:2d:c2:af:62:15:92:58:ec: fa:28:b4:6f:01:07:96:ac:d4:73:bf:f1:84:8e:fd:00:34:50: ef:60:3f:25:50:be:e2:5b:1f:7f:d0:d7:6d:5c:d5:69:04:e4: 76:5d:b5:43:c3:74:60:37:4b:89:c7:ce:b5:54:98:66:49:6e: ed:66:b0:00:97:6b:44:27:db:bf:da:35:51:1d:c1:ca:00:00: 96:c5:20:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbmcsTxnaw42y3OBPTo/o0el5paswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg5QUZEQjAxNUI0NTE2MzQyRTQ3MDIyNDRFOEI4QUMz MzFCODY2OTAeFw0yNTA4MjMwMDU1NDdaFw0yNTA4MjYxMDE3NDdaMDMxMTAvBgNV BAMTKDIzQ0FBOUUxODBCNjNBQ0M1QjM3MTJCNTQwQkFGOTAxQjI2NTU2MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmKO15QVGiRpj0VADO0ceM+sxF VMrqEWEhx80sXCNtWb6FiIT6h0L2eZmXY3GJTf0zR9c47uVPuFHhQH51FOa/lwal f1yf4RPyFXDLOS4AQI3nJgHAesjEg4/CRSmyHcFsIp9SEp5rY5dBfQuA2/d5m7OG Au4p5/Cfmecol+04dLTmaOk98+bla7AN/cv+mKkMIXVa9he/ffFPHlCSQYfXMLEI dQWeVLkBgmtEdzgxF6DY5n7yolqgZJY4PdyY3wbQ9ROFjrDjcLYKlrbYNny9g1MM 4TtxNed1BqaQbATCZc/FxJIn15ltCp3O903f3L24IoHX8nsEkcdIp0As+dq/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI8qp4YC2OsxbNxK1QLr5AbJlVhQwHwYDVR0j BBgwFoAUyJr9sBW0UWNC5HAiROi4rDMbhmkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NWJhZTMwYy1iMzYzLTQwN2ItYTBhYi0zMTU0ZWIzMDlhZTkvMS9DODlBRkRCMDE1 QjQ1MTYzNDJFNDcwMjI0NEU4QjhBQzMzMUI4NjY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzg5QUZEQjAxNUI0NTE2MzQyRTQ3MDIyNDRFOEI4QUMzMzFC ODY2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTViYWUzMGMtYjM2My00MDdiLWEw YWItMzE1NGViMzA5YWU5LzEvQzg5QUZEQjAxNUI0NTE2MzQyRTQ3MDIyNDRFOEI4 QUMzMzFCODY2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIynHO6/eOjJi+mPbOPtE1cYdnSe4esjPB/g KjaJnBruUBHQMfPAFXD8ZsJXiCxuMzyMdKtTAPMCf4k2L/xpmtxow6K1gKs0r3jk nDYlTI0mz56Xxcktyz66dPEgRbKv8dqQT50Sc0Etoe2Cy3wzSXCPireQWtZdi3DM 7sLdKJERyqrNmzA/1p8HlhNzF5WgtGa2+S25NzOA0SIZzknJixx6zidXRcaQqJCT CtEtwq9iFZJY7PootG8BB5as1HO/8YSO/QA0UO9gPyVQvuJbH3/Q121c1WkE5HZd tUPDdGA3S4nHzrVUmGZJbu1msACXa0Qn27/aNVEdwcoAAJbFIOM= -----END CERTIFICATE-----Generated at Sat Aug 23 17:40:26 2025 by rpki-client