$ rpki-client -vvf repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft File: 89402655017312B8CFCB367BA82966AA21E11F90.mft (raw, json) Hash identifier: qTZmv2Nr+tAhSiUHbGcbJKIAqLdJlXHNUWc093Q7eYU= Subject key identifier: 9B:6A:30:54:6A:02:81:BF:16:1B:1F:4A:B4:CB:12:6F:D7:BB:90:4F Authority key identifier: 89:40:26:55:01:73:12:B8:CF:CB:36:7B:A8:29:66:AA:21:E1:1F:90 Certificate issuer: /CN=89402655017312B8CFCB367BA82966AA21E11F90 Certificate serial: 6138D3E2628F0E825C639FA04D33FBC9BCC7CF42 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft Manifest number: 04F0 Signing time: Sun 19 Oct 2025 19:11:54 +0000 Manifest this update: Sun 19 Oct 2025 19:06:54 +0000 Manifest next update: Thu 23 Oct 2025 01:38:54 +0000 Files and hashes: 1: 3132332e3235332e3233322e302f32322d3234203d3e203137363730.roa (hash: R1hpl90tpuGr3S7MM3M7sdpYxwM9mEKg6oXY2ZteCXg=) 2: 89402655017312B8CFCB367BA82966AA21E11F90.crl (hash: xWjtoWyF9wWsLibxGnUO2aedEX2znJDXqW38w9bs3CE=) 3: 323430303a313838303a3a2f33322d3438203d3e203137363730.roa (hash: FP8IqHLkyX7Qj2+QyPrsBYEPwMn3gsRtfyfeKNBNdEg=) 4: 323430343a623238303a3a2f33322d3438203d3e203137363730.roa (hash: S1hTgzRInefDZ+nv4OU9cj+WPrGD6wknjfAjdl1JFoo=) 5: 3131302e35302e38302e302f32312d3234203d3e203137363730.roa (hash: ENs+ad22cCNfPNiUGh8Crfa5TLmxtOCxc9FzlyRTptI=) 6: 3130332e3231332e3132382e302f32322d3234203d3e203137363730.roa (hash: FYvSh1st1IicJh9tmsJCC36iwumwIFXZHMkoJwqA8Qw=) 7: 3230322e3134372e3139322e302f32302d3234203d3e203137363730.roa (hash: WsFr0RE3ZnujNzg56bjhtSV6UHqOuDU5rMSYq/HFAbw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.crl rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 01:38:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:38:d3:e2:62:8f:0e:82:5c:63:9f:a0:4d:33:fb:c9:bc:c7:cf:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89402655017312B8CFCB367BA82966AA21E11F90 Validity Not Before: Oct 19 19:06:54 2025 GMT Not After : Oct 23 01:38:54 2025 GMT Subject: CN=9B6A30546A0281BF161B1F4AB4CB126FD7BB904F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:f6:fe:c9:ae:55:68:16:91:2a:34:c0:e4:29: a1:aa:86:ac:7f:74:b9:e5:c9:46:a4:a8:d9:6e:ee: 06:8d:aa:42:d4:9b:d5:19:cb:73:4b:30:1a:a4:8d: 55:8b:7d:53:d8:a4:e4:bf:06:43:fc:1e:5b:4b:ac: fb:3f:3e:84:3c:0f:11:7c:b7:7c:7f:f1:6e:43:84: 0b:79:82:bc:ff:d8:5e:59:7f:01:b1:e0:80:df:d4: 82:9d:d7:13:48:3f:a3:23:34:ee:25:84:a3:fb:c0: 39:eb:77:fe:03:f5:c3:28:c6:06:1f:d4:5b:cf:8f: 83:b4:42:5e:bf:96:9c:c6:72:c1:fd:0f:28:3f:54: ac:0e:19:23:1c:08:d4:84:59:4a:96:a1:5a:db:49: b8:6e:f8:92:bf:45:e8:dd:0e:39:96:c7:8f:00:de: 36:c3:e0:3a:ec:6e:d9:7f:bb:1b:ab:07:1a:22:71: 2d:bb:8c:73:7a:9c:fd:00:13:3f:53:13:77:b6:4c: f0:4a:01:63:0b:af:22:45:ec:02:f7:2e:84:7f:e6: d2:19:bd:8c:8c:ab:1e:1a:63:68:f6:40:e4:3a:4f: cc:29:14:ac:d4:55:d2:ad:b8:a1:64:53:ac:8a:f1: 53:2e:93:e2:67:fe:b7:87:21:51:44:e4:fd:a9:fe: 5f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:6A:30:54:6A:02:81:BF:16:1B:1F:4A:B4:CB:12:6F:D7:BB:90:4F X509v3 Authority Key Identifier: keyid:89:40:26:55:01:73:12:B8:CF:CB:36:7B:A8:29:66:AA:21:E1:1F:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:f7:f2:94:a6:1a:fd:4d:60:f2:b8:2b:72:80:c3:b4:eb:5c: 14:c0:b5:07:b8:14:f8:8e:35:78:f6:c3:ee:3a:bc:8e:c4:00: a3:40:b6:0f:8e:62:e2:1f:a6:96:8c:6a:9f:de:a7:b8:54:30: cf:bb:f3:46:f5:22:ad:0c:e5:56:fd:d4:5d:e3:4c:d1:e6:fb: e0:cf:a5:b2:26:3c:be:bd:3e:2c:db:02:59:12:a8:a2:39:1a: b7:4b:75:49:d2:ed:a2:fd:c0:65:97:5f:5e:b3:3f:52:fd:42: 7f:07:30:f6:d9:09:5d:57:a1:59:ef:4b:a1:40:37:b8:5c:1d: e6:47:34:0e:3b:50:41:12:35:46:92:c0:b1:ba:e1:89:14:38: 45:18:01:41:02:44:b6:28:5f:50:c9:11:b1:7e:28:d7:76:2a: 98:8d:af:3d:2b:b2:80:86:13:4a:5b:cb:68:6b:e0:64:58:38: 88:9c:5c:e3:28:f0:d7:57:ad:d8:d9:61:76:1d:fd:7e:90:b6: 10:51:a6:ae:43:58:d8:4f:1a:41:b5:d6:54:98:ba:49:41:f1: c7:76:e5:35:ce:47:97:c2:09:61:ed:ab:7e:f4:66:37:3e:e5: d9:92:1d:02:95:d0:67:4b:29:fd:16:ad:c4:9b:7c:c1:cc:39: d8:54:98:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYTjT4mKPDoJcY5+gTTP7ybzHz0IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk0MDI2NTUwMTczMTJCOENGQ0IzNjdCQTgyOTY2QUEy MUUxMUY5MDAeFw0yNTEwMTkxOTA2NTRaFw0yNTEwMjMwMTM4NTRaMDMxMTAvBgNV BAMTKDlCNkEzMDU0NkEwMjgxQkYxNjFCMUY0QUI0Q0IxMjZGRDdCQjkwNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv9v7JrlVoFpEqNMDkKaGqhqx/ dLnlyUakqNlu7gaNqkLUm9UZy3NLMBqkjVWLfVPYpOS/BkP8HltLrPs/PoQ8DxF8 t3x/8W5DhAt5grz/2F5ZfwGx4IDf1IKd1xNIP6MjNO4lhKP7wDnrd/4D9cMoxgYf 1FvPj4O0Ql6/lpzGcsH9Dyg/VKwOGSMcCNSEWUqWoVrbSbhu+JK/RejdDjmWx48A 3jbD4Drsbtl/uxurBxoicS27jHN6nP0AEz9TE3e2TPBKAWMLryJF7AL3LoR/5tIZ vYyMqx4aY2j2QOQ6T8wpFKzUVdKtuKFkU6yK8VMuk+Jn/reHIVFE5P2p/l/FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm2owVGoCgb8WGx9KtMsSb9e7kE8wHwYDVR0j BBgwFoAUiUAmVQFzErjPyzZ7qClmqiHhH5AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZmIxYzgwYy00ZDZjLTQ0MDgtODk0Ny1mYmE2ZTdjNGJlN2MvMC84OTQwMjY1NTAx NzMxMkI4Q0ZDQjM2N0JBODI5NjZBQTIxRTExRjkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODk0MDI2NTUwMTczMTJCOENGQ0IzNjdCQTgyOTY2QUEyMUUx MUY5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWZiMWM4MGMtNGQ2Yy00NDA4LTg5 NDctZmJhNmU3YzRiZTdjLzAvODk0MDI2NTUwMTczMTJCOENGQ0IzNjdCQTgyOTY2 QUEyMUUxMUY5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALD38pSmGv1NYPK4K3KAw7TrXBTAtQe4FPiO NXj2w+46vI7EAKNAtg+OYuIfppaMap/ep7hUMM+780b1Iq0M5Vb91F3jTNHm++DP pbImPL69PizbAlkSqKI5GrdLdUnS7aL9wGWXX16zP1L9Qn8HMPbZCV1XoVnvS6FA N7hcHeZHNA47UEESNUaSwLG64YkUOEUYAUECRLYoX1DJEbF+KNd2KpiNrz0rsoCG E0pby2hr4GRYOIicXOMo8NdXrdjZYXYd/X6QthBRpq5DWNhPGkG11lSYuklB8cd2 5TXOR5fCCWHtq370Zjc+5dmSHQKV0GdLKf0WrcSbfMHMOdhUmKU= -----END CERTIFICATE-----Generated at Mon Oct 20 09:11:34 2025 by rpki-client