$ rpki-client -vvf repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft File: 989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft (raw, json) Hash identifier: UEzMsIgwVoZg5QuHIF9zj6QtC8QxvFqQxFWYBP0VVoQ= Subject key identifier: CD:0E:63:30:B7:05:7C:CD:56:4C:B1:6E:43:B4:DD:48:6F:2F:78:18 Authority key identifier: 98:9B:87:D4:0F:7C:9F:1B:A5:4A:BC:AE:9B:C7:97:A3:E6:B2:57:48 Certificate issuer: /CN=989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748 Certificate serial: 28F367609D7966B8BC68D6AD4171A562DA1AAFC9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft Manifest number: 0500 Signing time: Thu 21 Aug 2025 06:01:04 +0000 Manifest this update: Thu 21 Aug 2025 05:56:04 +0000 Manifest next update: Sun 24 Aug 2025 17:04:04 +0000 Files and hashes: 1: 989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.crl (hash: m1olVtIxQUbH2MSj2BUVCNMW7pAeSM887rCsUzf4WjA=) 2: 3130332e3132302e3132342e302f32332d3234203d3e20313338313137.roa (hash: 9pTXaEmfCAIZ2elcDY8x5651yYxommQlVzX4FaEZZFs=) 3: 323030313a6466363a313330303a3a2f34382d3438203d3e20313338313137.roa (hash: hzs93FaYaNphdZDJOy2a+k5Vr7J1TFpilPTw5TB+vyQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.crl rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:04:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:f3:67:60:9d:79:66:b8:bc:68:d6:ad:41:71:a5:62:da:1a:af:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748 Validity Not Before: Aug 21 05:56:04 2025 GMT Not After : Aug 24 17:04:04 2025 GMT Subject: CN=CD0E6330B7057CCD564CB16E43B4DD486F2F7818 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3b:bd:78:5c:04:14:77:0e:af:4a:94:96:31: 20:a3:ac:00:18:40:88:6a:a7:e7:81:8b:70:f3:1e: cf:87:b3:8c:eb:47:2a:56:82:c1:8e:c5:da:2c:81: 26:d8:5e:26:ac:68:97:7b:18:ac:9f:87:0f:ee:df: 6f:bb:74:7a:0a:17:40:f3:7e:44:0e:2d:df:93:97: 6d:33:26:fd:f8:2d:fb:08:48:34:7d:09:4d:1f:fd: 93:53:02:de:17:2c:69:71:e3:cc:2b:cb:eb:56:f5: 4a:14:4f:4c:43:8d:0f:d4:73:2c:5c:e9:38:94:de: e2:d7:ad:bc:b3:54:41:f6:c1:fe:d1:dc:c1:e4:11: 03:89:77:4a:32:e6:41:a6:26:7f:c9:7d:70:7a:aa: 85:92:c5:e5:29:cf:46:02:a0:d5:e0:c9:af:96:ad: 60:3d:fe:81:a0:64:9d:2d:52:b3:e5:bb:e7:22:32: 17:80:98:77:e4:b3:f8:77:79:7f:6d:a9:df:0e:44: 7e:fd:0a:37:9f:5e:7b:fd:db:0c:76:73:a1:1d:cc: a7:36:a1:e5:c3:ba:85:81:86:b0:02:84:3f:bd:26: a9:b5:cc:87:cf:99:26:30:85:96:e9:cf:5e:8a:31: 76:6e:08:db:7d:47:80:5a:0a:bd:f0:46:a9:0d:bd: 4f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:0E:63:30:B7:05:7C:CD:56:4C:B1:6E:43:B4:DD:48:6F:2F:78:18 X509v3 Authority Key Identifier: keyid:98:9B:87:D4:0F:7C:9F:1B:A5:4A:BC:AE:9B:C7:97:A3:E6:B2:57:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:d1:de:10:9e:72:97:74:e4:01:71:4d:90:db:32:e4:01:0d: 85:96:44:1b:37:b2:4b:5f:f7:ac:f3:e2:c8:94:b1:fa:9d:ba: 68:4a:8a:a3:2e:e1:6b:0c:de:1e:e1:84:40:63:ab:2c:c5:7b: 60:34:b7:79:7c:67:d6:84:f0:40:b7:60:e5:b1:45:4d:61:aa: dc:88:5f:6e:5b:72:9f:39:c0:93:51:09:9d:e4:f3:2a:0c:b9: bd:dc:37:37:c2:d3:55:f4:ef:fc:23:ae:e4:11:96:a4:9b:33: ac:3d:14:c8:44:9e:39:56:f6:b2:f9:d2:91:5e:5d:28:83:c3: 0a:d1:27:0e:c6:20:ba:1d:81:ec:4f:d3:be:de:74:ae:e0:35: 8e:00:1e:1e:af:0f:f9:2c:2e:68:cd:05:92:79:cf:96:da:15: 9b:de:37:86:eb:8d:8b:e4:30:3a:be:b3:dc:d0:af:40:be:2c: 78:87:05:35:82:7d:92:47:c5:23:2d:02:d4:da:43:df:a0:e3: a0:7b:63:5c:b5:9c:74:15:03:16:27:53:18:61:44:96:f1:09: 78:7b:09:08:96:c4:3a:c1:98:22:2e:48:89:93:77:27:6d:a8: 56:8f:cc:00:49:12:99:de:c3:df:8c:df:9d:72:b5:cf:9f:16: d0:55:f3:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKPNnYJ15Zri8aNatQXGlYtoar8kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg5Qjg3RDQwRjdDOUYxQkE1NEFCQ0FFOUJDNzk3QTNF NkIyNTc0ODAeFw0yNTA4MjEwNTU2MDRaFw0yNTA4MjQxNzA0MDRaMDMxMTAvBgNV BAMTKENEMEU2MzMwQjcwNTdDQ0Q1NjRDQjE2RTQzQjRERDQ4NkYyRjc4MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxO714XAQUdw6vSpSWMSCjrAAY QIhqp+eBi3DzHs+Hs4zrRypWgsGOxdosgSbYXiasaJd7GKyfhw/u32+7dHoKF0Dz fkQOLd+Tl20zJv34LfsISDR9CU0f/ZNTAt4XLGlx48wry+tW9UoUT0xDjQ/Ucyxc 6TiU3uLXrbyzVEH2wf7R3MHkEQOJd0oy5kGmJn/JfXB6qoWSxeUpz0YCoNXgya+W rWA9/oGgZJ0tUrPlu+ciMheAmHfks/h3eX9tqd8ORH79CjefXnv92wx2c6EdzKc2 oeXDuoWBhrAChD+9Jqm1zIfPmSYwhZbpz16KMXZuCNt9R4BaCr3wRqkNvU+bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzQ5jMLcFfM1WTLFuQ7TdSG8veBgwHwYDVR0j BBgwFoAUmJuH1A98nxulSryum8eXo+ayV0gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTUwNjBiOC1mNTcwLTQyZDYtODZmZi0zM2VhN2ZkZjI1MTUvMC85ODlCODdENDBG N0M5RjFCQTU0QUJDQUU5QkM3OTdBM0U2QjI1NzQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg5Qjg3RDQwRjdDOUYxQkE1NEFCQ0FFOUJDNzk3QTNFNkIy NTc0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWU1MDYwYjgtZjU3MC00MmQ2LTg2 ZmYtMzNlYTdmZGYyNTE1LzAvOTg5Qjg3RDQwRjdDOUYxQkE1NEFCQ0FFOUJDNzk3 QTNFNkIyNTc0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJnR3hCecpd05AFxTZDbMuQBDYWWRBs3sktf 96zz4siUsfqdumhKiqMu4WsM3h7hhEBjqyzFe2A0t3l8Z9aE8EC3YOWxRU1hqtyI X25bcp85wJNRCZ3k8yoMub3cNzfC01X07/wjruQRlqSbM6w9FMhEnjlW9rL50pFe XSiDwwrRJw7GILodgexP077edK7gNY4AHh6vD/ksLmjNBZJ5z5baFZveN4brjYvk MDq+s9zQr0C+LHiHBTWCfZJHxSMtAtTaQ9+g46B7Y1y1nHQVAxYnUxhhRJbxCXh7 CQiWxDrBmCIuSImTdydtqFaPzABJEpnew9+M351ytc+fFtBV8zg= -----END CERTIFICATE-----Generated at Sat Aug 23 15:42:55 2025 by rpki-client