$ rpki-client -vvf repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft File: 89402655017312B8CFCB367BA82966AA21E11F90.mft (raw, json) Hash identifier: 19OBOCc4RuLYrpe+ocmeoFJJAmov4NMGmN+jholPPnA= Subject key identifier: 51:69:1F:4F:AE:67:F4:60:1C:16:C7:1A:CE:7E:0E:99:00:3F:8E:A4 Authority key identifier: 89:40:26:55:01:73:12:B8:CF:CB:36:7B:A8:29:66:AA:21:E1:1F:90 Certificate issuer: /CN=89402655017312B8CFCB367BA82966AA21E11F90 Certificate serial: 125F1BAAECB491D2C837D154F1F45CDA7CA1096B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft Manifest number: 04D6 Signing time: Fri 22 Aug 2025 08:11:57 +0000 Manifest this update: Fri 22 Aug 2025 08:06:57 +0000 Manifest next update: Mon 25 Aug 2025 11:38:57 +0000 Files and hashes: 1: 89402655017312B8CFCB367BA82966AA21E11F90.crl (hash: 0Kn9mOcWIHrldKsfaemfQ0WiFceMTjUbfi2Kclfatbs=) 2: 323430343a623238303a3a2f33322d3438203d3e203137363730.roa (hash: S1hTgzRInefDZ+nv4OU9cj+WPrGD6wknjfAjdl1JFoo=) 3: 3131302e35302e38302e302f32312d3234203d3e203137363730.roa (hash: ENs+ad22cCNfPNiUGh8Crfa5TLmxtOCxc9FzlyRTptI=) 4: 323430303a313838303a3a2f33322d3438203d3e203137363730.roa (hash: FP8IqHLkyX7Qj2+QyPrsBYEPwMn3gsRtfyfeKNBNdEg=) 5: 3130332e3231332e3132382e302f32322d3234203d3e203137363730.roa (hash: FYvSh1st1IicJh9tmsJCC36iwumwIFXZHMkoJwqA8Qw=) 6: 3230322e3134372e3139322e302f32302d3234203d3e203137363730.roa (hash: WsFr0RE3ZnujNzg56bjhtSV6UHqOuDU5rMSYq/HFAbw=) 7: 3132332e3235332e3233322e302f32322d3234203d3e203137363730.roa (hash: R1hpl90tpuGr3S7MM3M7sdpYxwM9mEKg6oXY2ZteCXg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.crl rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 11:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:5f:1b:aa:ec:b4:91:d2:c8:37:d1:54:f1:f4:5c:da:7c:a1:09:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89402655017312B8CFCB367BA82966AA21E11F90 Validity Not Before: Aug 22 08:06:57 2025 GMT Not After : Aug 25 11:38:57 2025 GMT Subject: CN=51691F4FAE67F4601C16C71ACE7E0E99003F8EA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8b:62:ff:50:90:01:4b:a9:d7:33:55:36:7c: bf:bc:30:ec:ee:d7:de:9b:55:10:cd:29:48:74:d7: 38:69:d1:e4:12:63:34:92:12:50:42:d2:f3:58:2b: b5:f9:9a:36:76:15:b2:9c:57:f9:fb:00:66:73:1a: 79:86:36:e5:fd:f3:97:8a:ff:65:53:53:66:72:cb: 56:e4:1a:f7:9e:bd:b7:07:e0:25:33:00:84:73:e1: 0e:88:54:80:47:e4:15:97:dc:83:55:f8:5f:c1:14: e3:bd:45:cf:ff:c8:87:90:89:b2:92:97:b1:11:05: 42:f0:02:cf:e7:19:a0:56:34:56:30:aa:b0:42:da: 7f:28:34:a4:2f:4d:d2:a0:7b:c4:b4:9f:90:c3:95: 00:89:cf:3f:ef:b8:3b:da:e9:b8:39:87:eb:4a:f6: c9:0b:69:c0:b8:8b:87:fd:12:5c:fa:e2:89:a1:5c: 8c:20:1c:2b:bd:a5:1c:ec:34:91:c1:be:10:05:a7: 68:3c:4e:c6:35:b6:e1:4e:f2:3d:d9:56:78:ee:6e: ae:55:0b:7b:aa:2d:b8:64:aa:76:83:67:dc:0f:57: 8a:a4:0e:18:35:a7:0b:cd:7a:61:de:86:91:03:2e: c5:64:d2:1a:5b:da:be:45:59:0a:3c:f3:ba:33:5f: 14:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:69:1F:4F:AE:67:F4:60:1C:16:C7:1A:CE:7E:0E:99:00:3F:8E:A4 X509v3 Authority Key Identifier: keyid:89:40:26:55:01:73:12:B8:CF:CB:36:7B:A8:29:66:AA:21:E1:1F:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:ac:79:7d:de:c7:db:a6:c2:8a:4b:0d:dd:ae:0c:02:d9:71: b5:c8:53:76:51:63:bf:91:f0:d2:1e:07:bb:e4:0a:58:c1:13: a8:0a:71:69:e6:6e:2f:bf:9c:63:e1:d3:44:30:1d:20:c3:e6: 1f:16:1f:12:ec:b4:e4:da:a4:b5:a9:f9:de:76:95:70:5e:df: 80:27:ad:9b:2d:15:cc:9a:63:50:3f:b2:93:d3:f7:ba:78:13: ec:b0:01:07:01:94:be:5b:2e:da:e8:cf:31:90:e2:72:7f:26: cb:8e:ee:38:ef:a2:03:da:73:42:3a:cb:4c:31:1a:d9:b1:a0: f0:23:16:7d:54:30:e9:24:02:5c:77:02:b6:42:2c:62:aa:31: 5b:9e:ce:64:de:b4:61:7a:57:44:62:77:ec:5f:72:3a:f4:3c: a9:8c:b4:95:58:ae:0f:4d:f5:b2:eb:2d:37:5b:bc:8b:ba:d3: f5:f5:28:30:e9:59:82:aa:5d:a7:6f:dc:37:3e:57:bd:71:1f: ab:b8:90:78:c9:51:e4:17:6d:7f:75:59:2c:76:12:cd:e8:1a: fc:15:35:09:8b:4d:9d:c5:9b:85:09:bc:af:25:62:f0:b6:63: 70:7e:7e:c5:5f:63:a7:f3:10:ff:32:5a:6a:35:f3:4c:78:f5: 2a:34:07:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEl8bquy0kdLIN9FU8fRc2nyhCWswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk0MDI2NTUwMTczMTJCOENGQ0IzNjdCQTgyOTY2QUEy MUUxMUY5MDAeFw0yNTA4MjIwODA2NTdaFw0yNTA4MjUxMTM4NTdaMDMxMTAvBgNV BAMTKDUxNjkxRjRGQUU2N0Y0NjAxQzE2QzcxQUNFN0UwRTk5MDAzRjhFQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqi2L/UJABS6nXM1U2fL+8MOzu 196bVRDNKUh01zhp0eQSYzSSElBC0vNYK7X5mjZ2FbKcV/n7AGZzGnmGNuX985eK /2VTU2Zyy1bkGveevbcH4CUzAIRz4Q6IVIBH5BWX3INV+F/BFOO9Rc//yIeQibKS l7ERBULwAs/nGaBWNFYwqrBC2n8oNKQvTdKge8S0n5DDlQCJzz/vuDva6bg5h+tK 9skLacC4i4f9Elz64omhXIwgHCu9pRzsNJHBvhAFp2g8TsY1tuFO8j3ZVnjubq5V C3uqLbhkqnaDZ9wPV4qkDhg1pwvNemHehpEDLsVk0hpb2r5FWQo887ozXxSPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUWkfT65n9GAcFscazn4OmQA/jqQwHwYDVR0j BBgwFoAUiUAmVQFzErjPyzZ7qClmqiHhH5AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZmIxYzgwYy00ZDZjLTQ0MDgtODk0Ny1mYmE2ZTdjNGJlN2MvMC84OTQwMjY1NTAx NzMxMkI4Q0ZDQjM2N0JBODI5NjZBQTIxRTExRjkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODk0MDI2NTUwMTczMTJCOENGQ0IzNjdCQTgyOTY2QUEyMUUx MUY5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWZiMWM4MGMtNGQ2Yy00NDA4LTg5 NDctZmJhNmU3YzRiZTdjLzAvODk0MDI2NTUwMTczMTJCOENGQ0IzNjdCQTgyOTY2 QUEyMUUxMUY5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJiseX3ex9umwopLDd2uDALZcbXIU3ZRY7+R 8NIeB7vkCljBE6gKcWnmbi+/nGPh00QwHSDD5h8WHxLstOTapLWp+d52lXBe34An rZstFcyaY1A/spPT97p4E+ywAQcBlL5bLtrozzGQ4nJ/JsuO7jjvogPac0I6y0wx GtmxoPAjFn1UMOkkAlx3ArZCLGKqMVuezmTetGF6V0Rid+xfcjr0PKmMtJVYrg9N 9bLrLTdbvIu60/X1KDDpWYKqXadv3Dc+V71xH6u4kHjJUeQXbX91WSx2Es3oGvwV NQmLTZ3Fm4UJvK8lYvC2Y3B+fsVfY6fzEP8yWmo180x49So0B8M= -----END CERTIFICATE-----Generated at Sat Aug 23 11:57:11 2025 by rpki-client