$ rpki-client -vvf repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft File: 989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft (raw, json) Hash identifier: NK59/U+wNsuxO5B2obnuQLrpRSEwHnKpY65SuoQ2U1s= Subject key identifier: 06:FC:55:53:F1:05:C4:42:5E:3F:7B:80:84:F4:B1:63:6A:82:99:1E Authority key identifier: 98:9B:87:D4:0F:7C:9F:1B:A5:4A:BC:AE:9B:C7:97:A3:E6:B2:57:48 Certificate issuer: /CN=989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748 Certificate serial: 4CEA37A39A4769E51BEC206DDD637F80A30F77E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft Manifest number: 04D0 Signing time: Wed 07 May 2025 11:31:00 +0000 Manifest this update: Wed 07 May 2025 11:26:00 +0000 Manifest next update: Sat 10 May 2025 20:07:00 +0000 Files and hashes: 1: 323030313a6466363a313330303a3a2f34382d3438203d3e20313338313137.roa (hash: eEx4NWwR1k9vkDQfEfkXnOdl3qvSuzaAej2N1OIEynI=) 2: 3130332e3132302e3132342e302f32332d3234203d3e20313338313137.roa (hash: ehfavKJYShgP2TV1M1uRS+C1vrvpl5VhW1fhvktvS38=) 3: 989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.crl (hash: Dgmmvmp8wKEspiOukD5PbKIzIjJsVVAytaV7+HfL6cc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.crl rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 20:07:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:ea:37:a3:9a:47:69:e5:1b:ec:20:6d:dd:63:7f:80:a3:0f:77:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748 Validity Not Before: May 7 11:26:00 2025 GMT Not After : May 10 20:07:00 2025 GMT Subject: CN=06FC5553F105C4425E3F7B8084F4B1636A82991E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c9:c3:19:df:46:d9:1b:5c:3d:19:fd:f7:b6: b2:7a:56:78:20:d2:ab:a1:98:f6:68:63:c4:e7:14: 28:32:1c:b9:c7:52:ad:3d:9a:a6:f2:bf:6b:1a:c4: 4b:c0:9e:4e:bd:2e:aa:6c:db:b0:42:b8:e2:81:30: 86:56:14:d8:ff:81:e9:2f:87:53:99:4b:00:05:6a: 80:f1:8a:c7:17:ee:fd:cf:8c:8c:e9:5f:56:83:29: e9:72:6c:1b:a9:ee:3e:ee:24:ba:6a:02:ed:1a:0e: e0:28:cf:5a:d8:fc:26:73:f8:a1:c3:31:eb:fc:fc: cd:b2:78:06:19:c6:7c:b7:19:af:1b:0a:82:05:da: 27:7e:be:30:bb:fd:07:8b:1c:a2:cd:d1:ae:a5:8e: a2:13:df:8b:53:82:55:05:b7:30:30:f7:40:0e:bb: c5:26:9d:d3:4a:79:61:b4:1e:98:8d:94:e2:92:b4: 70:62:82:77:94:52:37:35:6a:61:89:8a:16:de:87: 41:4d:54:1e:bc:b6:5e:4b:4d:3d:69:25:2f:f9:cc: c3:ee:19:ab:0f:2a:bc:c1:b4:b3:20:21:b1:a5:e3: 55:07:50:cb:a9:6f:ca:81:c6:48:b4:14:9f:da:6a: c5:1b:80:c7:04:e0:88:e8:bb:8c:1b:64:a8:63:f3: 49:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:FC:55:53:F1:05:C4:42:5E:3F:7B:80:84:F4:B1:63:6A:82:99:1E X509v3 Authority Key Identifier: keyid:98:9B:87:D4:0F:7C:9F:1B:A5:4A:BC:AE:9B:C7:97:A3:E6:B2:57:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:ac:6d:11:34:c2:ab:73:7b:17:25:cd:a4:61:21:f8:65:8f: 9c:15:4a:22:be:3e:66:b4:cd:8a:73:eb:ba:91:60:45:ee:71: 3e:4a:7f:93:cb:fd:c5:63:fd:d7:0a:6c:bb:f5:21:cf:11:a5: 5b:72:3e:32:a9:18:18:ac:85:89:0a:95:75:be:a4:d5:7c:ab: 0a:60:15:61:b8:76:d8:58:e4:cf:1d:20:7d:e4:32:cb:2f:77: b6:c7:8f:e1:8c:ea:89:2d:30:90:61:c6:6f:79:f9:40:b5:69: 99:7f:e5:4a:35:91:eb:3c:94:92:46:79:59:2b:db:9c:39:87: 1f:2c:1f:77:e9:57:af:5d:cc:c1:50:5d:16:2b:55:ef:3f:38: 10:2b:47:f1:1c:a5:33:f7:a0:b4:a2:3a:5c:32:43:87:17:66: 63:bb:a9:ba:6f:72:ed:0a:1b:88:06:6b:3f:16:b1:15:ce:d4: 9e:bb:cc:86:2d:2f:c8:d5:77:07:72:0c:05:7c:1b:8b:48:fe: 0d:6b:f8:f9:5c:2d:05:d1:1e:fe:4c:a5:0b:08:09:68:72:a8: 30:ff:40:65:a7:4a:f4:4f:15:04:8b:af:1b:28:4e:e9:1a:34: 16:23:6e:3c:7b:1f:a6:b9:d4:ce:a4:da:5e:fc:94:7b:13:c6: 31:0c:93:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTOo3o5pHaeUb7CBt3WN/gKMPd+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg5Qjg3RDQwRjdDOUYxQkE1NEFCQ0FFOUJDNzk3QTNF NkIyNTc0ODAeFw0yNTA1MDcxMTI2MDBaFw0yNTA1MTAyMDA3MDBaMDMxMTAvBgNV BAMTKDA2RkM1NTUzRjEwNUM0NDI1RTNGN0I4MDg0RjRCMTYzNkE4Mjk5MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHycMZ30bZG1w9Gf33trJ6Vngg 0quhmPZoY8TnFCgyHLnHUq09mqbyv2saxEvAnk69Lqps27BCuOKBMIZWFNj/gekv h1OZSwAFaoDxiscX7v3PjIzpX1aDKelybBup7j7uJLpqAu0aDuAoz1rY/CZz+KHD Mev8/M2yeAYZxny3Ga8bCoIF2id+vjC7/QeLHKLN0a6ljqIT34tTglUFtzAw90AO u8UmndNKeWG0HpiNlOKStHBigneUUjc1amGJihbeh0FNVB68tl5LTT1pJS/5zMPu GasPKrzBtLMgIbGl41UHUMupb8qBxki0FJ/aasUbgMcE4Ijou4wbZKhj80nRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBvxVU/EFxEJeP3uAhPSxY2qCmR4wHwYDVR0j BBgwFoAUmJuH1A98nxulSryum8eXo+ayV0gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTUwNjBiOC1mNTcwLTQyZDYtODZmZi0zM2VhN2ZkZjI1MTUvMC85ODlCODdENDBG N0M5RjFCQTU0QUJDQUU5QkM3OTdBM0U2QjI1NzQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg5Qjg3RDQwRjdDOUYxQkE1NEFCQ0FFOUJDNzk3QTNFNkIy NTc0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWU1MDYwYjgtZjU3MC00MmQ2LTg2 ZmYtMzNlYTdmZGYyNTE1LzAvOTg5Qjg3RDQwRjdDOUYxQkE1NEFCQ0FFOUJDNzk3 QTNFNkIyNTc0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACqsbRE0wqtzexclzaRhIfhlj5wVSiK+Pma0 zYpz67qRYEXucT5Kf5PL/cVj/dcKbLv1Ic8RpVtyPjKpGBishYkKlXW+pNV8qwpg FWG4dthY5M8dIH3kMssvd7bHj+GM6oktMJBhxm95+UC1aZl/5Uo1kes8lJJGeVkr 25w5hx8sH3fpV69dzMFQXRYrVe8/OBArR/EcpTP3oLSiOlwyQ4cXZmO7qbpvcu0K G4gGaz8WsRXO1J67zIYtL8jVdwdyDAV8G4tI/g1r+PlcLQXRHv5MpQsICWhyqDD/ QGWnSvRPFQSLrxsoTukaNBYjbjx7H6a51M6k2l78lHsTxjEMkzo= -----END CERTIFICATE-----Generated at Thu May 8 02:34:02 2025 by rpki-client