$ rpki-client -vvf repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft File: E89C93F089A07D03B5794B0C02239EF67E1D721C.mft (raw, json) Hash identifier: 1uLT+oSdDlnk3cqCnDt9aNflSYC/0QirSAugYv+B1VA= Subject key identifier: A0:F7:FF:58:CC:72:BB:3E:27:77:F6:58:FA:40:98:A0:FB:C0:AB:9D Authority key identifier: E8:9C:93:F0:89:A0:7D:03:B5:79:4B:0C:02:23:9E:F6:7E:1D:72:1C Certificate issuer: /CN=E89C93F089A07D03B5794B0C02239EF67E1D721C Certificate serial: 6C9BC45982B74B1F47DB51A7134BE2EDEAE1AFC8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E89C93F089A07D03B5794B0C02239EF67E1D721C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft Manifest number: 70 Signing time: Wed 02 Jul 2025 08:51:54 +0000 Manifest this update: Wed 02 Jul 2025 08:46:54 +0000 Manifest next update: Sat 05 Jul 2025 18:29:54 +0000 Files and hashes: 1: 3130332e35332e32302e302f32342d3234203d3e203436303334.roa (hash: YHAiLGhk7A6ZE4X7obU+oz12qWeh7X0M2hlk6hYX8jU=) 2: E89C93F089A07D03B5794B0C02239EF67E1D721C.crl (hash: 1ok/2PlrMs8j6iu0y+2YoSjSS8re73vueXhVZdb3rUs=) 3: 3130332e37342e3136342e302f32342d3234203d3e203436303334.roa (hash: QbAeIT3Ks6znT3hg7T+AnddPc66+/tThEc2QldGCSpw=) 4: 3230322e37302e3133362e302f32342d3234203d3e203436303334.roa (hash: 4RAp4F/7XGUDJWluz8ukd4JUDTUiL5R6CUgISPZWwHM=) 5: 3130332e37342e3134332e302f32342d3234203d3e203436303334.roa (hash: JENEpsaygQnZfGVyo5B3YcYBAcWsk2wulHjqbKHp5Ko=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.crl rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E89C93F089A07D03B5794B0C02239EF67E1D721C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 18:29:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:9b:c4:59:82:b7:4b:1f:47:db:51:a7:13:4b:e2:ed:ea:e1:af:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E89C93F089A07D03B5794B0C02239EF67E1D721C Validity Not Before: Jul 2 08:46:54 2025 GMT Not After : Jul 5 18:29:54 2025 GMT Subject: CN=A0F7FF58CC72BB3E2777F658FA4098A0FBC0AB9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ba:91:7b:a7:bb:c2:45:6c:ae:36:4d:54:b6: b8:a6:be:29:f7:87:be:53:f5:ae:a2:be:17:bc:1d: 38:32:0d:bd:22:43:01:74:e7:e2:02:ef:09:97:bd: e8:98:c7:98:61:ff:7a:46:e3:b1:3a:99:97:eb:eb: 29:f2:89:d4:36:e5:aa:cd:0d:29:96:8a:84:42:61: 4d:3d:58:4b:91:4a:16:ac:cf:dd:c1:21:cd:83:ba: a9:42:fb:73:24:5f:a8:5d:86:dd:d2:29:54:8a:b1: c2:68:df:77:99:b4:8e:d4:84:92:e1:64:00:18:a9: 3b:40:02:2d:43:29:8b:d7:be:5c:7f:cc:57:66:bc: 35:8d:37:84:19:ac:82:01:ca:26:f8:b5:13:d6:f0: a2:f7:4d:99:a3:4e:f5:d3:67:92:3d:cb:f7:af:cd: de:df:21:e5:27:ea:4e:6d:6d:24:35:d7:39:9e:18: 26:c1:83:13:7d:e0:de:64:9b:18:69:e7:82:c8:c3: 81:d9:da:03:11:4f:2b:81:3c:36:c2:1d:0a:44:cc: dd:a5:24:d7:97:5b:00:81:88:0a:66:1b:10:1d:af: a0:09:13:5b:f4:ac:23:f2:c7:8f:8a:32:e1:c9:c2: d9:6a:df:4b:ab:92:0a:cb:56:80:48:38:b2:6c:97: b9:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F7:FF:58:CC:72:BB:3E:27:77:F6:58:FA:40:98:A0:FB:C0:AB:9D X509v3 Authority Key Identifier: keyid:E8:9C:93:F0:89:A0:7D:03:B5:79:4B:0C:02:23:9E:F6:7E:1D:72:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E89C93F089A07D03B5794B0C02239EF67E1D721C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:da:d4:53:43:0f:00:86:e0:b7:c3:e3:21:ea:b7:da:23:32: 46:03:df:1e:da:28:50:14:9c:08:67:77:ca:8f:a5:0a:a8:71: 28:5c:e5:60:59:8d:74:d9:ac:20:61:50:db:8a:65:d0:59:ca: a6:b0:a6:b2:55:79:a2:81:b2:02:96:66:a6:50:a6:43:bb:5a: c9:f5:ca:37:60:04:d9:4b:a6:78:38:76:90:bb:a4:85:b8:83: 9d:07:31:4e:f0:1d:32:98:e2:ba:21:ea:1b:00:fd:1c:33:35: 49:ba:90:49:db:af:5b:40:68:ed:59:8e:47:34:f1:c4:ff:46: 62:6d:02:4f:b9:6a:86:af:cb:ba:c2:52:38:34:79:a6:bf:3c: a1:e3:76:1a:56:6b:97:20:87:ce:e2:3d:5e:26:e6:3d:95:45: 1a:58:13:2a:79:aa:f5:f7:32:c1:e8:b1:ca:a2:c8:5e:b2:27: f8:24:95:5b:52:89:c3:ca:a9:fd:69:9a:bb:12:c6:c4:7b:50: c1:96:76:be:b3:46:6a:5c:69:5e:7b:b6:24:56:ef:2d:23:be: 01:f5:29:33:0c:9e:6c:fd:d1:cf:f3:db:2d:1a:6c:1c:33:4b: 0c:82:60:00:79:57:75:02:f1:82:70:63:8e:19:5a:32:c2:6c: 89:bd:3c:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbJvEWYK3Sx9H21GnE0vi7erhr8gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5QzkzRjA4OUEwN0QwM0I1Nzk0QjBDMDIyMzlFRjY3 RTFENzIxQzAeFw0yNTA3MDIwODQ2NTRaFw0yNTA3MDUxODI5NTRaMDMxMTAvBgNV BAMTKEEwRjdGRjU4Q0M3MkJCM0UyNzc3RjY1OEZBNDA5OEEwRkJDMEFCOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGupF7p7vCRWyuNk1Utrimvin3 h75T9a6ivhe8HTgyDb0iQwF05+IC7wmXveiYx5hh/3pG47E6mZfr6ynyidQ25arN DSmWioRCYU09WEuRShasz93BIc2DuqlC+3MkX6hdht3SKVSKscJo33eZtI7UhJLh ZAAYqTtAAi1DKYvXvlx/zFdmvDWNN4QZrIIByib4tRPW8KL3TZmjTvXTZ5I9y/ev zd7fIeUn6k5tbSQ11zmeGCbBgxN94N5kmxhp54LIw4HZ2gMRTyuBPDbCHQpEzN2l JNeXWwCBiApmGxAdr6AJE1v0rCPyx4+KMuHJwtlq30urkgrLVoBIOLJsl7mzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoPf/WMxyuz4nd/ZY+kCYoPvAq50wHwYDVR0j BBgwFoAU6JyT8ImgfQO1eUsMAiOe9n4dchwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 Zjg4NTFlNS1lZTViLTQxZTEtOWFiYy00NDI2NTFkMjcyOTQvMC9FODlDOTNGMDg5 QTA3RDAzQjU3OTRCMEMwMjIzOUVGNjdFMUQ3MjFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTg5QzkzRjA4OUEwN0QwM0I1Nzk0QjBDMDIyMzlFRjY3RTFE NzIxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGY4ODUxZTUtZWU1Yi00MWUxLTlh YmMtNDQyNjUxZDI3Mjk0LzAvRTg5QzkzRjA4OUEwN0QwM0I1Nzk0QjBDMDIyMzlF RjY3RTFENzIxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIba1FNDDwCG4LfD4yHqt9ojMkYD3x7aKFAU nAhnd8qPpQqocShc5WBZjXTZrCBhUNuKZdBZyqawprJVeaKBsgKWZqZQpkO7Wsn1 yjdgBNlLpng4dpC7pIW4g50HMU7wHTKY4roh6hsA/RwzNUm6kEnbr1tAaO1Zjkc0 8cT/RmJtAk+5aoavy7rCUjg0eaa/PKHjdhpWa5cgh87iPV4m5j2VRRpYEyp5qvX3 MsHoscqiyF6yJ/gklVtSicPKqf1pmrsSxsR7UMGWdr6zRmpcaV57tiRW7y0jvgH1 KTMMnmz90c/z2y0abBwzSwyCYAB5V3UC8YJwY44ZWjLCbIm9PMI= -----END CERTIFICATE-----Generated at Thu Jul 3 03:45:15 2025 by rpki-client