$ rpki-client -vvf repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft File: F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft (raw, json) Hash identifier: VhraPkRu86ZHdh8WmWDhnIessgOsk1qCxeewlXpC888= Subject key identifier: 65:3B:E9:A0:26:7C:AB:89:12:42:5E:BA:34:16:D2:BF:86:D5:AA:64 Authority key identifier: F8:99:69:E8:BA:BE:05:C4:5C:6D:6E:25:F6:25:E9:F1:84:5C:CC:9C Certificate issuer: /CN=F89969E8BABE05C45C6D6E25F625E9F1845CCC9C Certificate serial: 0AC538A23DE931EA0B814046B7C153F442178E8B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft Manifest number: 04FF Signing time: Sat 23 Aug 2025 11:10:51 +0000 Manifest this update: Sat 23 Aug 2025 11:05:51 +0000 Manifest next update: Tue 26 Aug 2025 11:19:51 +0000 Files and hashes: 1: 323430343a3763303a3a2f33322d3332203d3e20313338313039.roa (hash: 8YhkhAgabc++Mqu+wq5ak2VX+c1IFJBr8gOpgVG3Khk=) 2: F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.crl (hash: oQtIl3vZ3FgWeeQSpZX3YO4VPYZLbMpm4T98Wbj9Ae0=) 3: 3130332e3132362e38342e302f32322d3234203d3e20313338313039.roa (hash: Fk8DplImfz+K8DXRwes7LY4gqzQurTG9SsMeFcuo2l8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.crl rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 11:19:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:c5:38:a2:3d:e9:31:ea:0b:81:40:46:b7:c1:53:f4:42:17:8e:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F89969E8BABE05C45C6D6E25F625E9F1845CCC9C Validity Not Before: Aug 23 11:05:51 2025 GMT Not After : Aug 26 11:19:51 2025 GMT Subject: CN=653BE9A0267CAB8912425EBA3416D2BF86D5AA64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:38:5d:9b:bb:73:65:80:f6:36:50:b5:a7:5e: 08:4b:c0:b8:59:db:d2:74:4f:09:9c:1b:c1:3f:38: ef:b3:6e:9a:25:ef:ec:53:ae:86:d3:e0:e3:a3:5d: 7e:55:51:24:db:a3:97:4e:41:5e:3c:ff:da:7a:11: cd:4f:10:cd:c3:86:09:52:55:7c:c6:08:cc:c8:58: e4:70:f0:f4:35:e1:5d:08:b6:32:a1:df:d7:eb:fc: fe:c6:aa:54:09:04:81:f6:17:83:15:8d:85:69:70: a4:09:72:52:dd:eb:d8:43:76:00:c8:fc:92:59:2c: ed:09:74:36:56:ae:39:a5:d7:0f:1e:b7:b8:8b:f0: 15:a4:3f:a5:49:58:ae:e0:b8:c3:6c:40:91:bb:da: 51:d7:c9:66:04:b2:24:cd:18:1b:45:71:26:8a:95: d5:e3:29:92:73:36:38:5e:7c:a1:76:c9:c9:6e:75: 1c:ea:6c:51:18:e9:a9:2c:a6:13:44:cc:1f:49:67: a4:c2:3f:a8:77:43:ef:97:0a:6d:3a:fc:f1:29:19: 43:bb:04:79:fa:36:ec:75:89:2a:41:c1:bd:36:76: 6f:a7:fa:5e:d6:d5:32:44:af:dd:33:60:26:1c:af: e7:ac:a0:03:37:7f:a0:62:65:5e:d8:ca:72:30:e1: 20:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:3B:E9:A0:26:7C:AB:89:12:42:5E:BA:34:16:D2:BF:86:D5:AA:64 X509v3 Authority Key Identifier: keyid:F8:99:69:E8:BA:BE:05:C4:5C:6D:6E:25:F6:25:E9:F1:84:5C:CC:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:8f:77:d1:49:fe:fd:c5:56:cb:c2:81:05:28:b7:8d:fc:2c: 9b:94:3c:b1:aa:83:15:ee:26:6d:e3:78:3e:f8:85:49:4e:04: 6f:a9:56:31:6e:14:ef:07:71:8c:ac:6e:3f:c6:c0:3f:12:77: a6:62:f0:c8:49:fa:49:5a:4c:03:7a:3f:b6:a5:2f:c6:fb:42: 94:3b:9e:df:e7:54:a1:ad:8f:bf:2f:6c:c8:84:cf:dd:50:67: b8:48:72:d5:f3:56:08:b0:5f:9a:10:44:ea:93:76:c9:cc:63: e0:ec:ed:0b:67:d4:9d:66:46:56:80:9f:de:44:ac:ac:4f:5d: 04:f6:03:ea:23:fb:10:38:1a:0a:2b:19:92:9b:a7:9c:93:ff: c3:a7:c6:ca:52:95:57:ca:25:0f:69:b1:0f:57:90:8c:2b:ae: 81:ca:6e:31:58:4d:78:cc:e3:05:c4:28:b7:f7:31:03:fb:67: ff:70:2e:2a:9c:85:ce:d9:c5:5f:56:61:bd:1e:8c:97:c2:0a: 81:9c:9f:39:be:c0:15:49:fc:d3:7d:00:3f:70:b2:cd:10:77: f6:df:9e:f9:36:d2:7e:e0:37:3b:b0:48:00:25:a9:ee:5b:9c: ad:0e:03:5e:e5:aa:9a:f8:49:a3:4f:f8:53:17:b9:cc:dc:2b: 06:49:7f:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCsU4oj3pMeoLgUBGt8FT9EIXjoswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjg5OTY5RThCQUJFMDVDNDVDNkQ2RTI1RjYyNUU5RjE4 NDVDQ0M5QzAeFw0yNTA4MjMxMTA1NTFaFw0yNTA4MjYxMTE5NTFaMDMxMTAvBgNV BAMTKDY1M0JFOUEwMjY3Q0FCODkxMjQyNUVCQTM0MTZEMkJGODZENUFBNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTOF2bu3NlgPY2ULWnXghLwLhZ 29J0TwmcG8E/OO+zbpol7+xTrobT4OOjXX5VUSTbo5dOQV48/9p6Ec1PEM3DhglS VXzGCMzIWORw8PQ14V0ItjKh39fr/P7GqlQJBIH2F4MVjYVpcKQJclLd69hDdgDI /JJZLO0JdDZWrjml1w8et7iL8BWkP6VJWK7guMNsQJG72lHXyWYEsiTNGBtFcSaK ldXjKZJzNjhefKF2ycludRzqbFEY6aksphNEzB9JZ6TCP6h3Q++XCm06/PEpGUO7 BHn6Nux1iSpBwb02dm+n+l7W1TJEr90zYCYcr+esoAM3f6BiZV7YynIw4SAbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZTvpoCZ8q4kSQl66NBbSv4bVqmQwHwYDVR0j BBgwFoAU+Jlp6Lq+BcRcbW4l9iXp8YRczJwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NGI0ZmI4OC04ZjQyLTQ3ZjItYmU4MC0wOWU0MzU2MGRkZGYvMC9GODk5NjlFOEJB QkUwNUM0NUM2RDZFMjVGNjI1RTlGMTg0NUNDQzlDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjg5OTY5RThCQUJFMDVDNDVDNkQ2RTI1RjYyNUU5RjE4NDVD Q0M5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDRiNGZiODgtOGY0Mi00N2YyLWJl ODAtMDllNDM1NjBkZGRmLzAvRjg5OTY5RThCQUJFMDVDNDVDNkQ2RTI1RjYyNUU5 RjE4NDVDQ0M5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFePd9FJ/v3FVsvCgQUot438LJuUPLGqgxXu Jm3jeD74hUlOBG+pVjFuFO8HcYysbj/GwD8Sd6Zi8MhJ+klaTAN6P7alL8b7QpQ7 nt/nVKGtj78vbMiEz91QZ7hIctXzVgiwX5oQROqTdsnMY+Ds7Qtn1J1mRlaAn95E rKxPXQT2A+oj+xA4GgorGZKbp5yT/8OnxspSlVfKJQ9psQ9XkIwrroHKbjFYTXjM 4wXEKLf3MQP7Z/9wLiqchc7ZxV9WYb0ejJfCCoGcnzm+wBVJ/NN9AD9wss0Qd/bf nvk20n7gNzuwSAAlqe5bnK0OA17lqpr4SaNP+FMXuczcKwZJf4M= -----END CERTIFICATE-----Generated at Sat Aug 23 15:35:47 2025 by rpki-client