$ rpki-client -vvf repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft File: 989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft (raw, json) Hash identifier: 2PqxORullJv8R8wbxQoI0827WikL2LmIcaM8dKU92sE= Subject key identifier: E1:A5:9F:3A:E8:73:42:42:2F:F8:E9:80:C6:9E:C1:21:0E:10:D1:D9 Authority key identifier: 98:9B:87:D4:0F:7C:9F:1B:A5:4A:BC:AE:9B:C7:97:A3:E6:B2:57:48 Certificate issuer: /CN=989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748 Certificate serial: 664F1DC7060E870A2C8F2FBC92C966AD240D3D4A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft Manifest number: 04E8 Signing time: Sat 28 Jun 2025 18:31:01 +0000 Manifest this update: Sat 28 Jun 2025 18:26:01 +0000 Manifest next update: Wed 02 Jul 2025 04:57:01 +0000 Files and hashes: 1: 989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.crl (hash: cs/1PGf7X5UiGLGTOlbInGFm5od4pr9/GrLLbpJd/k4=) 2: 323030313a6466363a313330303a3a2f34382d3438203d3e20313338313137.roa (hash: hzs93FaYaNphdZDJOy2a+k5Vr7J1TFpilPTw5TB+vyQ=) 3: 3130332e3132302e3132342e302f32332d3234203d3e20313338313137.roa (hash: 9pTXaEmfCAIZ2elcDY8x5651yYxommQlVzX4FaEZZFs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.crl rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 04:57:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:4f:1d:c7:06:0e:87:0a:2c:8f:2f:bc:92:c9:66:ad:24:0d:3d:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748 Validity Not Before: Jun 28 18:26:01 2025 GMT Not After : Jul 2 04:57:01 2025 GMT Subject: CN=E1A59F3AE87342422FF8E980C69EC1210E10D1D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:36:10:c7:68:60:59:a9:be:88:f8:b4:d9:c7: 89:96:11:a3:53:25:da:9e:d7:f4:91:62:c2:52:f0: 47:85:35:88:d4:4d:9e:ea:19:79:0a:87:94:0b:c4: c1:25:b8:b9:15:4b:2e:9e:7a:e9:74:65:a8:a0:5f: db:7b:2f:a6:37:67:48:c5:ad:e8:2e:0d:4e:c0:82: 6d:68:89:d5:f9:c6:9e:b8:a8:d8:f2:bd:7e:4f:bb: 2f:d7:3f:d1:5c:6a:18:46:b6:5d:53:50:2e:54:4b: 9b:92:ec:15:28:b4:d4:26:40:26:cc:6a:f1:e0:62: c4:07:92:8d:66:03:af:f0:13:8c:32:cd:5a:f1:7a: c9:ef:76:9d:33:7c:ac:6f:c1:6a:72:88:0e:37:52: 96:43:53:61:03:1d:f3:cc:e2:9e:dd:e0:51:9b:e1: 92:70:4b:2f:22:3e:80:a7:16:18:16:dd:d3:f0:ce: da:f6:15:3f:80:cd:39:54:aa:75:bf:e7:e6:46:d5: 63:44:64:9d:a6:9d:e6:f0:ff:a2:c1:77:c5:81:d6: 91:c3:07:61:0c:8e:dc:fb:00:58:4d:1b:17:6d:76: 35:d4:17:d5:d5:d1:49:8a:4d:38:95:32:f6:03:05: 30:82:2d:92:55:bc:e2:e3:9c:5c:f9:01:64:41:da: 80:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:A5:9F:3A:E8:73:42:42:2F:F8:E9:80:C6:9E:C1:21:0E:10:D1:D9 X509v3 Authority Key Identifier: keyid:98:9B:87:D4:0F:7C:9F:1B:A5:4A:BC:AE:9B:C7:97:A3:E6:B2:57:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:ae:e9:65:41:ff:20:8f:d2:04:41:35:25:03:be:d3:5a:07: b8:4d:22:0c:3c:e4:39:a3:de:ad:45:3a:cf:1a:e6:ae:95:ab: 66:af:ce:73:95:37:ee:50:a8:3e:10:7c:ac:f4:fd:5e:6e:ce: 82:68:cf:d3:c5:35:96:5c:f1:df:68:26:cd:15:02:aa:2d:f6: 13:f0:29:f6:2d:d1:6c:1e:a3:cd:82:f8:3c:95:82:9d:f3:53: 9c:9c:ab:a1:d4:ac:0f:c1:04:83:26:45:a0:01:84:f7:7c:56: 2d:78:61:42:99:2f:dc:f6:4a:85:5f:43:f7:7e:d6:82:bd:64: 2f:ac:7c:76:32:e5:1e:a5:e3:15:3e:a4:b7:74:d2:1f:9a:68: c1:60:a8:18:6a:dc:76:7d:74:7e:85:82:fd:a3:dd:b4:be:8b: ba:ce:e5:82:8d:ee:a2:8f:46:8c:ad:50:e6:59:17:2b:4f:02: b6:3f:f3:8d:59:6c:00:46:3f:74:29:39:ca:79:47:fb:52:79: 95:c5:eb:56:d7:d2:8a:fa:f4:3e:46:4f:2e:a4:1c:41:b4:53: d3:6c:d4:bb:8c:c5:4f:59:a7:41:79:02:40:39:af:bd:c4:57: af:cd:5f:14:b5:e2:62:4c:fe:19:52:f9:0d:53:f0:6d:80:97: 15:9a:1a:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZk8dxwYOhwosjy+8kslmrSQNPUowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg5Qjg3RDQwRjdDOUYxQkE1NEFCQ0FFOUJDNzk3QTNF NkIyNTc0ODAeFw0yNTA2MjgxODI2MDFaFw0yNTA3MDIwNDU3MDFaMDMxMTAvBgNV BAMTKEUxQTU5RjNBRTg3MzQyNDIyRkY4RTk4MEM2OUVDMTIxMEUxMEQxRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsNhDHaGBZqb6I+LTZx4mWEaNT Jdqe1/SRYsJS8EeFNYjUTZ7qGXkKh5QLxMEluLkVSy6eeul0ZaigX9t7L6Y3Z0jF reguDU7Agm1oidX5xp64qNjyvX5Puy/XP9FcahhGtl1TUC5US5uS7BUotNQmQCbM avHgYsQHko1mA6/wE4wyzVrxesnvdp0zfKxvwWpyiA43UpZDU2EDHfPM4p7d4FGb 4ZJwSy8iPoCnFhgW3dPwztr2FT+AzTlUqnW/5+ZG1WNEZJ2mnebw/6LBd8WB1pHD B2EMjtz7AFhNGxdtdjXUF9XV0UmKTTiVMvYDBTCCLZJVvOLjnFz5AWRB2oC3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4aWfOuhzQkIv+OmAxp7BIQ4Q0dkwHwYDVR0j BBgwFoAUmJuH1A98nxulSryum8eXo+ayV0gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTUwNjBiOC1mNTcwLTQyZDYtODZmZi0zM2VhN2ZkZjI1MTUvMC85ODlCODdENDBG N0M5RjFCQTU0QUJDQUU5QkM3OTdBM0U2QjI1NzQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg5Qjg3RDQwRjdDOUYxQkE1NEFCQ0FFOUJDNzk3QTNFNkIy NTc0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWU1MDYwYjgtZjU3MC00MmQ2LTg2 ZmYtMzNlYTdmZGYyNTE1LzAvOTg5Qjg3RDQwRjdDOUYxQkE1NEFCQ0FFOUJDNzk3 QTNFNkIyNTc0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEmu6WVB/yCP0gRBNSUDvtNaB7hNIgw85Dmj 3q1FOs8a5q6Vq2avznOVN+5QqD4QfKz0/V5uzoJoz9PFNZZc8d9oJs0VAqot9hPw KfYt0Wweo82C+DyVgp3zU5ycq6HUrA/BBIMmRaABhPd8Vi14YUKZL9z2SoVfQ/d+ 1oK9ZC+sfHYy5R6l4xU+pLd00h+aaMFgqBhq3HZ9dH6Fgv2j3bS+i7rO5YKN7qKP RoytUOZZFytPArY/841ZbABGP3QpOcp5R/tSeZXF61bX0or69D5GTy6kHEG0U9Ns 1LuMxU9Zp0F5AkA5r73EV6/NXxS14mJM/hlS+Q1T8G2AlxWaGl4= -----END CERTIFICATE-----Generated at Mon Jun 30 08:28:03 2025 by rpki-client