$ rpki-client -vvf repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft File: 889933E416F356762F7F72858168C9C8A2E241C7.mft (raw, json) Hash identifier: OX/wW+exRfXvcliz2levDT2DITaJ7/l/q+WY/AaOlUU= Subject key identifier: CB:01:92:C8:B2:24:77:03:64:FF:7A:0E:8D:F7:80:9A:BD:6F:04:73 Authority key identifier: 88:99:33:E4:16:F3:56:76:2F:7F:72:85:81:68:C9:C8:A2:E2:41:C7 Certificate issuer: /CN=889933E416F356762F7F72858168C9C8A2E241C7 Certificate serial: 38F2E86ADD39C7760613F007E8795C898A9F3387 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/889933E416F356762F7F72858168C9C8A2E241C7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft Manifest number: 01F3 Signing time: Sun 19 Oct 2025 08:20:37 +0000 Manifest this update: Sun 19 Oct 2025 08:15:37 +0000 Manifest next update: Wed 22 Oct 2025 12:27:37 +0000 Files and hashes: 1: 889933E416F356762F7F72858168C9C8A2E241C7.crl (hash: Y5O12J4h8jy/tLA38+bHNFYbrNe68T8MRLcT+l5WOpI=) 2: 3130332e3136372e3233372e302f32342d3234203d3e20313432333038.roa (hash: hhBm/QT4y8ib7FGAltONinYNWg1PiVjj/mn1RgecAFk=) 3: 3130332e3136372e3233362e302f32342d3234203d3e20313432333038.roa (hash: 5GvdROYQ95okUa1oax+KkGlSNt0oNcXWExwR/dpYZcg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.crl rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/889933E416F356762F7F72858168C9C8A2E241C7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 12:27:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:f2:e8:6a:dd:39:c7:76:06:13:f0:07:e8:79:5c:89:8a:9f:33:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=889933E416F356762F7F72858168C9C8A2E241C7 Validity Not Before: Oct 19 08:15:37 2025 GMT Not After : Oct 22 12:27:37 2025 GMT Subject: CN=CB0192C8B224770364FF7A0E8DF7809ABD6F0473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:df:fb:04:78:55:b9:32:a3:35:4b:53:8a:0b: 06:fc:7b:a1:03:8c:4f:8f:a7:a1:ee:57:d7:2c:ac: b1:bb:49:e4:03:9a:65:cc:fc:ff:38:57:6b:67:1e: 99:00:eb:b3:7c:3d:a3:74:1a:31:a3:f0:1e:22:06: b3:de:a3:ed:be:4b:bc:8d:55:3c:c4:be:cc:7c:32: 53:31:4c:0f:52:d6:c0:b2:31:26:f1:50:8f:c6:08: 51:e8:fc:e6:5a:91:c0:bb:94:d4:83:a3:e7:cb:01: e0:17:d0:0c:f7:2d:1c:7c:71:ec:7f:38:99:cd:36: b0:0c:72:a1:38:25:20:32:ae:10:ea:2e:68:9a:24: 10:f5:dd:81:80:a5:5b:88:cc:c0:65:41:b4:57:1f: dc:b6:4a:e6:2c:89:3c:52:6a:04:3a:b6:80:24:9c: 0a:19:6f:32:65:eb:95:31:b8:f4:93:ab:82:61:1d: eb:55:1b:2c:c4:88:8d:80:e4:29:fd:bc:6a:e1:03: 2f:d6:a5:c6:08:28:ee:b6:46:d5:a7:52:ed:e3:f4: 22:a4:75:6e:89:38:31:28:93:1f:43:7b:7b:14:3c: 62:6d:95:3d:c1:c0:e7:ed:0b:4d:7f:3d:5a:cf:59: fe:30:94:00:39:f8:ae:e4:d4:09:dc:ab:aa:a0:52: 4f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:01:92:C8:B2:24:77:03:64:FF:7A:0E:8D:F7:80:9A:BD:6F:04:73 X509v3 Authority Key Identifier: keyid:88:99:33:E4:16:F3:56:76:2F:7F:72:85:81:68:C9:C8:A2:E2:41:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/889933E416F356762F7F72858168C9C8A2E241C7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:4f:0e:e4:95:18:44:49:3a:a9:2d:75:42:a5:55:3b:d9:29: f5:1e:33:45:7f:aa:7d:1b:07:11:bb:74:0d:b8:21:d2:7a:5e: c7:b1:e3:0c:24:6c:64:63:5f:50:4b:09:69:21:37:f7:dc:1c: 7e:f6:88:7e:67:4a:fb:55:f0:df:fa:29:f9:96:e4:f9:aa:b4: ec:f3:fd:0c:8a:5c:c5:02:fc:dc:98:74:2b:ec:5d:27:ad:e1: 00:6b:2f:73:f8:29:ad:c1:82:15:1e:23:a3:f8:17:11:81:b6: c3:bc:3c:aa:97:aa:72:9e:a0:2f:17:64:93:69:8a:b9:d0:41: 92:ae:3c:77:9d:a1:43:5b:ee:18:fd:9a:1f:fb:3e:c2:01:4d: 5f:3a:e9:1c:8c:a4:fc:12:34:a1:fd:50:e0:2a:eb:1a:73:70: 92:0e:c7:5f:18:a2:bc:52:fe:e3:20:0e:03:1c:30:7b:b6:e6: 70:af:78:8d:d1:e7:45:47:6a:ed:34:23:2d:cd:05:54:9f:02: 7e:e1:d3:42:66:86:51:61:f3:01:de:37:84:85:5a:4d:a8:d8: ba:91:03:a8:e1:24:ea:7d:65:7d:9f:83:4a:69:a0:a1:88:7a: 68:1e:c5:c7:5b:5b:b2:d7:1d:22:61:b9:41:93:67:59:8f:fe: ed:ad:81:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOPLoat05x3YGE/AH6HlciYqfM4cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg5OTMzRTQxNkYzNTY3NjJGN0Y3Mjg1ODE2OEM5QzhB MkUyNDFDNzAeFw0yNTEwMTkwODE1MzdaFw0yNTEwMjIxMjI3MzdaMDMxMTAvBgNV BAMTKENCMDE5MkM4QjIyNDc3MDM2NEZGN0EwRThERjc4MDlBQkQ2RjA0NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU3/sEeFW5MqM1S1OKCwb8e6ED jE+Pp6HuV9csrLG7SeQDmmXM/P84V2tnHpkA67N8PaN0GjGj8B4iBrPeo+2+S7yN VTzEvsx8MlMxTA9S1sCyMSbxUI/GCFHo/OZakcC7lNSDo+fLAeAX0Az3LRx8cex/ OJnNNrAMcqE4JSAyrhDqLmiaJBD13YGApVuIzMBlQbRXH9y2SuYsiTxSagQ6toAk nAoZbzJl65UxuPSTq4JhHetVGyzEiI2A5Cn9vGrhAy/WpcYIKO62RtWnUu3j9CKk dW6JODEokx9De3sUPGJtlT3BwOftC01/PVrPWf4wlAA5+K7k1Ancq6qgUk/lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUywGSyLIkdwNk/3oOjfeAmr1vBHMwHwYDVR0j BBgwFoAUiJkz5BbzVnYvf3KFgWjJyKLiQccwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZWNmZDNmNS04NWRhLTQ4YTctYjUwMi1mNjFhNTk3OTZjMzMvMC84ODk5MzNFNDE2 RjM1Njc2MkY3RjcyODU4MTY4QzlDOEEyRTI0MUM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODg5OTMzRTQxNkYzNTY3NjJGN0Y3Mjg1ODE2OEM5QzhBMkUy NDFDNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWVjZmQzZjUtODVkYS00OGE3LWI1 MDItZjYxYTU5Nzk2YzMzLzAvODg5OTMzRTQxNkYzNTY3NjJGN0Y3Mjg1ODE2OEM5 QzhBMkUyNDFDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAItPDuSVGERJOqktdUKlVTvZKfUeM0V/qn0b BxG7dA24IdJ6Xsex4wwkbGRjX1BLCWkhN/fcHH72iH5nSvtV8N/6KfmW5PmqtOzz /QyKXMUC/NyYdCvsXSet4QBrL3P4Ka3BghUeI6P4FxGBtsO8PKqXqnKeoC8XZJNp irnQQZKuPHedoUNb7hj9mh/7PsIBTV866RyMpPwSNKH9UOAq6xpzcJIOx18YorxS /uMgDgMcMHu25nCveI3R50VHau00Iy3NBVSfAn7h00JmhlFh8wHeN4SFWk2o2LqR A6jhJOp9ZX2fg0ppoKGIemgexcdbW7LXHSJhuUGTZ1mP/u2tgQw= -----END CERTIFICATE-----Generated at Mon Oct 20 15:32:45 2025 by rpki-client