$ rpki-client -vvf repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft File: E89C93F089A07D03B5794B0C02239EF67E1D721C.mft (raw, json) Hash identifier: xnMEjBRKn/UbcnHzleKrbNQ+yVDY64/flS6KWN22wp0= Subject key identifier: 32:0F:DC:A0:CA:41:9D:FB:82:4C:BA:92:38:CB:C4:16:3E:0D:B7:3B Authority key identifier: E8:9C:93:F0:89:A0:7D:03:B5:79:4B:0C:02:23:9E:F6:7E:1D:72:1C Certificate issuer: /CN=E89C93F089A07D03B5794B0C02239EF67E1D721C Certificate serial: 421390F896C5E6042B7C271720270FC72507E2EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E89C93F089A07D03B5794B0C02239EF67E1D721C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft Manifest number: 86 Signing time: Fri 22 Aug 2025 01:41:56 +0000 Manifest this update: Fri 22 Aug 2025 01:36:56 +0000 Manifest next update: Mon 25 Aug 2025 10:17:56 +0000 Files and hashes: 1: 3130332e37342e3136342e302f32342d3234203d3e203436303334.roa (hash: QbAeIT3Ks6znT3hg7T+AnddPc66+/tThEc2QldGCSpw=) 2: 3130332e35332e32302e302f32342d3234203d3e203436303334.roa (hash: YHAiLGhk7A6ZE4X7obU+oz12qWeh7X0M2hlk6hYX8jU=) 3: 3130332e37342e3134332e302f32342d3234203d3e203436303334.roa (hash: JENEpsaygQnZfGVyo5B3YcYBAcWsk2wulHjqbKHp5Ko=) 4: 3230322e37302e3133362e302f32342d3234203d3e203436303334.roa (hash: 4RAp4F/7XGUDJWluz8ukd4JUDTUiL5R6CUgISPZWwHM=) 5: E89C93F089A07D03B5794B0C02239EF67E1D721C.crl (hash: Xhbwz44AOZfoO6gD2z9T3amjIKDnrjgABqJbAZUN2l8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.crl rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E89C93F089A07D03B5794B0C02239EF67E1D721C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 10:17:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:13:90:f8:96:c5:e6:04:2b:7c:27:17:20:27:0f:c7:25:07:e2:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E89C93F089A07D03B5794B0C02239EF67E1D721C Validity Not Before: Aug 22 01:36:56 2025 GMT Not After : Aug 25 10:17:56 2025 GMT Subject: CN=320FDCA0CA419DFB824CBA9238CBC4163E0DB73B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:90:fc:5e:ab:54:54:ac:71:14:e3:32:e1:e3: 73:22:bf:a1:a6:c0:d1:f4:db:02:b6:29:91:d1:ef: 31:77:fd:c6:df:91:b5:5e:bb:90:7c:f8:30:2f:fe: 56:2b:b9:31:4e:10:0f:d5:a2:53:06:ea:4c:25:04: 52:ab:4a:76:83:6f:14:19:e1:9d:60:10:61:06:81: 9f:bd:61:e9:a5:6f:b6:df:fb:c6:67:76:bf:92:fd: 2a:7d:b5:75:63:a7:16:48:43:df:bd:9b:c9:36:88: 81:85:fb:c5:bf:62:b6:d4:db:9a:3f:91:97:01:14: 5b:4c:52:28:9c:d9:1c:00:6c:71:ff:86:2c:cd:4b: 2b:cc:e5:cc:63:15:96:ad:81:16:b1:25:af:18:c5: 50:02:82:d3:02:8b:e9:49:e3:f6:70:cc:52:77:73: fc:4f:b5:13:32:e2:46:1b:ec:0d:1a:01:37:d4:32: c3:13:33:9b:84:52:13:f7:f1:d7:b3:7b:8e:c9:ac: b8:d9:dd:5a:45:df:a3:4c:5f:0a:97:d2:d7:cf:93: f8:50:1d:80:43:84:fb:90:c1:13:11:67:bb:bb:a2: cf:d0:fa:50:8a:25:f0:4a:73:d6:3b:30:f9:7f:e0: 9c:59:48:f0:a5:7f:17:1d:5b:cc:ad:5e:57:cb:6f: cb:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:0F:DC:A0:CA:41:9D:FB:82:4C:BA:92:38:CB:C4:16:3E:0D:B7:3B X509v3 Authority Key Identifier: keyid:E8:9C:93:F0:89:A0:7D:03:B5:79:4B:0C:02:23:9E:F6:7E:1D:72:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E89C93F089A07D03B5794B0C02239EF67E1D721C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:e8:31:1b:98:12:e6:9a:79:00:8d:69:d9:49:6b:7e:9e:b9: 69:28:7d:b8:ae:a3:de:e3:4a:4d:11:6c:ff:d1:97:6e:34:0b: 8a:03:48:75:4a:6a:84:a8:ef:2c:bc:3c:40:24:62:00:ef:b7: 53:8e:21:59:f0:49:ce:0d:b4:76:b9:14:de:f5:5e:21:48:e7: b4:cb:e2:75:9d:dd:ee:f6:eb:05:35:86:44:4d:6d:dd:0d:38: fd:2d:53:27:df:ef:67:97:e5:cf:1c:89:db:5d:64:53:fd:7c: 10:f8:4b:b2:12:36:6c:f6:a2:c3:f5:f3:7c:76:3e:ed:48:1b: a8:15:7d:88:7b:68:23:d8:e5:c6:03:ff:18:5b:74:cc:a7:6d: 7c:ba:4f:dd:7a:43:27:74:84:89:c9:24:cb:e3:f5:e5:99:7e: 22:2d:8a:90:c5:bb:73:76:70:54:56:46:f6:eb:aa:4c:f3:df: 7f:eb:a4:95:b9:e2:2f:2a:77:e0:5c:d8:7d:be:94:6d:e6:68: 99:5d:3e:dd:17:af:07:bd:6a:6b:d6:1f:dc:50:e3:10:33:8e: bd:c3:a0:7c:a0:26:e4:ca:ea:72:d3:99:fd:15:ae:eb:10:b1: 5b:33:59:fc:5d:a4:50:a9:d1:6c:53:1b:01:68:a7:5a:78:9a: 8a:06:91:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQhOQ+JbF5gQrfCcXICcPxyUH4uwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5QzkzRjA4OUEwN0QwM0I1Nzk0QjBDMDIyMzlFRjY3 RTFENzIxQzAeFw0yNTA4MjIwMTM2NTZaFw0yNTA4MjUxMDE3NTZaMDMxMTAvBgNV BAMTKDMyMEZEQ0EwQ0E0MTlERkI4MjRDQkE5MjM4Q0JDNDE2M0UwREI3M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOkPxeq1RUrHEU4zLh43Miv6Gm wNH02wK2KZHR7zF3/cbfkbVeu5B8+DAv/lYruTFOEA/VolMG6kwlBFKrSnaDbxQZ 4Z1gEGEGgZ+9Yemlb7bf+8Zndr+S/Sp9tXVjpxZIQ9+9m8k2iIGF+8W/YrbU25o/ kZcBFFtMUiic2RwAbHH/hizNSyvM5cxjFZatgRaxJa8YxVACgtMCi+lJ4/ZwzFJ3 c/xPtRMy4kYb7A0aATfUMsMTM5uEUhP38deze47JrLjZ3VpF36NMXwqX0tfPk/hQ HYBDhPuQwRMRZ7u7os/Q+lCKJfBKc9Y7MPl/4JxZSPClfxcdW8ytXlfLb8sBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMg/coMpBnfuCTLqSOMvEFj4NtzswHwYDVR0j BBgwFoAU6JyT8ImgfQO1eUsMAiOe9n4dchwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 Zjg4NTFlNS1lZTViLTQxZTEtOWFiYy00NDI2NTFkMjcyOTQvMC9FODlDOTNGMDg5 QTA3RDAzQjU3OTRCMEMwMjIzOUVGNjdFMUQ3MjFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTg5QzkzRjA4OUEwN0QwM0I1Nzk0QjBDMDIyMzlFRjY3RTFE NzIxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGY4ODUxZTUtZWU1Yi00MWUxLTlh YmMtNDQyNjUxZDI3Mjk0LzAvRTg5QzkzRjA4OUEwN0QwM0I1Nzk0QjBDMDIyMzlF RjY3RTFENzIxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKDoMRuYEuaaeQCNadlJa36euWkofbiuo97j Sk0RbP/Rl240C4oDSHVKaoSo7yy8PEAkYgDvt1OOIVnwSc4NtHa5FN71XiFI57TL 4nWd3e726wU1hkRNbd0NOP0tUyff72eX5c8cidtdZFP9fBD4S7ISNmz2osP183x2 Pu1IG6gVfYh7aCPY5cYD/xhbdMynbXy6T916Qyd0hInJJMvj9eWZfiItipDFu3N2 cFRWRvbrqkzz33/rpJW54i8qd+Bc2H2+lG3maJldPt0Xrwe9amvWH9xQ4xAzjr3D oHygJuTK6nLTmf0VrusQsVszWfxdpFCp0WxTGwFop1p4mooGkeY= -----END CERTIFICATE-----Generated at Sat Aug 23 14:29:39 2025 by rpki-client