$ rpki-client -vvf repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.mft File: 89B98D1F135A7FC66C0284C34477C19604645554.mft (raw, json) Hash identifier: blYdgD/pWP7JtvzouBBCAaW3Wis3aJi/oRTiSqVPyXs= Subject key identifier: 15:93:EF:44:AF:C3:5F:49:9A:38:F6:8E:66:75:21:5E:72:E8:8D:9B Authority key identifier: 89:B9:8D:1F:13:5A:7F:C6:6C:02:84:C3:44:77:C1:96:04:64:55:54 Certificate issuer: /CN=89B98D1F135A7FC66C0284C34477C19604645554 Certificate serial: 2EC928BDB9E64424CCA44EDFC1EBCDD78E98818F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89B98D1F135A7FC66C0284C34477C19604645554.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.mft Manifest number: 016F Signing time: Tue 01 Jul 2025 18:32:11 +0000 Manifest this update: Tue 01 Jul 2025 18:27:11 +0000 Manifest next update: Sat 05 Jul 2025 00:29:11 +0000 Files and hashes: 1: 3130332e37392e3233372e302f32342d3234203d3e20313530393535.roa (hash: 2IWnXxowwOlz7I18Z25U30dGHsj5oRHYQH7WRuuUzKo=) 2: 89B98D1F135A7FC66C0284C34477C19604645554.crl (hash: krZS2zQb81rS/LJf7Ko+dVjJ53ZCb0402b8FymXpTvA=) 3: 3130332e37392e3233362e302f32342d3234203d3e20313530393535.roa (hash: onZqAL56YoMix5wpV03h5e8xuAaImMliGkPVBv6grnU=) 4: 3130332e37392e3233362e302f32332d3233203d3e20313530393535.roa (hash: P+PJmhSLpd83S2cxURBDcslsCmkTTuYqFLowXEXkTfY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.crl rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89B98D1F135A7FC66C0284C34477C19604645554.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 15:45:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:c9:28:bd:b9:e6:44:24:cc:a4:4e:df:c1:eb:cd:d7:8e:98:81:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89B98D1F135A7FC66C0284C34477C19604645554 Validity Not Before: Jul 1 18:27:11 2025 GMT Not After : Jul 5 00:29:11 2025 GMT Subject: CN=1593EF44AFC35F499A38F68E6675215E72E88D9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:87:e6:0d:a2:69:8b:95:5d:74:e3:23:9b:e6: 80:9e:25:44:d3:f3:8d:b3:11:b9:43:fa:35:47:28: ea:5d:1f:53:7e:d2:10:cd:a1:25:ae:ba:c0:2a:dd: ca:00:8c:41:c9:ae:59:2d:a2:a8:59:8c:fc:7e:e4: d4:fc:58:31:1f:ee:b7:f0:29:f2:5f:13:b4:cc:bc: e6:f0:b7:51:c0:ce:46:00:ad:f1:fc:6c:6c:76:52: 87:91:57:bf:d0:94:1c:b4:d5:c5:af:14:b9:22:1c: 26:7f:04:50:d9:e1:72:92:4e:44:e0:ef:19:de:ef: 30:0a:22:84:ef:90:8b:f5:8c:ad:49:09:d0:aa:dc: f0:17:05:66:ee:72:51:09:6d:32:47:4d:aa:d0:b6: b2:d9:8e:77:57:72:de:87:f3:5f:2c:fd:07:ea:1c: d4:fc:a8:54:bf:9d:94:31:df:67:9e:06:6f:a2:17: ec:57:a6:b9:80:26:4b:6f:ad:b0:cf:20:a8:0c:e5: 8f:36:65:a1:55:d8:16:87:ea:7e:5a:68:b5:82:a4: 18:22:2c:d3:0e:6a:2c:0a:f0:d7:ab:2d:71:30:61: d8:15:32:83:0e:f5:88:b9:46:7d:45:8e:5e:24:08: ca:36:d3:27:23:26:41:ac:1c:27:c8:1c:60:c6:1f: 35:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:93:EF:44:AF:C3:5F:49:9A:38:F6:8E:66:75:21:5E:72:E8:8D:9B X509v3 Authority Key Identifier: keyid:89:B9:8D:1F:13:5A:7F:C6:6C:02:84:C3:44:77:C1:96:04:64:55:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89B98D1F135A7FC66C0284C34477C19604645554.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:4d:59:cb:f0:12:9f:92:1d:0c:cc:d5:f0:a8:c1:fb:8b:b0: c5:34:51:1b:a6:8d:67:3c:9d:0f:1a:e1:62:6e:6a:77:94:86: 01:a1:33:bd:31:1c:ec:a7:63:9d:a8:f3:58:8f:d2:32:2c:8d: b0:bd:c7:1b:14:c3:ae:1f:fc:14:6f:54:f0:f7:9a:b5:db:57: 12:45:f3:b8:42:14:60:a1:4c:e0:60:e8:1d:32:e7:f5:c9:19: 58:6e:f8:69:41:b4:99:3e:1c:14:40:a1:6a:a3:ba:81:d7:03: 40:0f:b7:d2:1d:87:14:99:85:ce:80:2d:fc:2c:b1:cb:29:69: 66:64:0c:56:18:23:9f:e7:4e:af:9a:0a:e4:37:09:d3:f8:ed: 48:0b:d2:c4:b7:ed:43:48:8f:18:a5:3c:c8:94:d8:32:c9:a2: 05:f1:13:93:37:80:95:e4:f7:62:08:2d:b1:bb:a2:04:53:7a: 5b:53:7c:c4:e5:8a:9a:0c:6f:82:3b:25:de:c4:4f:e1:d9:3c: 41:ad:77:c9:61:97:d0:cf:d5:28:fa:6c:d2:ee:78:56:ad:f5: 69:f2:7f:af:74:53:14:b1:90:05:44:92:48:c2:1d:9f:90:76: 67:d7:12:20:ec:44:03:ab:2c:56:be:a3:b9:1a:11:4b:ad:7b: 63:e9:b9:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULskovbnmRCTMpE7fwevN146YgY8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlCOThEMUYxMzVBN0ZDNjZDMDI4NEMzNDQ3N0MxOTYw NDY0NTU1NDAeFw0yNTA3MDExODI3MTFaFw0yNTA3MDUwMDI5MTFaMDMxMTAvBgNV BAMTKDE1OTNFRjQ0QUZDMzVGNDk5QTM4RjY4RTY2NzUyMTVFNzJFODhEOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDph+YNommLlV104yOb5oCeJUTT 842zEblD+jVHKOpdH1N+0hDNoSWuusAq3coAjEHJrlktoqhZjPx+5NT8WDEf7rfw KfJfE7TMvObwt1HAzkYArfH8bGx2UoeRV7/QlBy01cWvFLkiHCZ/BFDZ4XKSTkTg 7xne7zAKIoTvkIv1jK1JCdCq3PAXBWbuclEJbTJHTarQtrLZjndXct6H818s/Qfq HNT8qFS/nZQx32eeBm+iF+xXprmAJktvrbDPIKgM5Y82ZaFV2BaH6n5aaLWCpBgi LNMOaiwK8NerLXEwYdgVMoMO9Yi5Rn1Fjl4kCMo20ycjJkGsHCfIHGDGHzVtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFZPvRK/DX0maOPaOZnUhXnLojZswHwYDVR0j BBgwFoAUibmNHxNaf8ZsAoTDRHfBlgRkVVQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YmZmMWIzZi0xMTkwLTQxMTktYmJjNi0xNDE3ZGY4YWEyNTgvMC84OUI5OEQxRjEz NUE3RkM2NkMwMjg0QzM0NDc3QzE5NjA0NjQ1NTU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODlCOThEMUYxMzVBN0ZDNjZDMDI4NEMzNDQ3N0MxOTYwNDY0 NTU1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGJmZjFiM2YtMTE5MC00MTE5LWJi YzYtMTQxN2RmOGFhMjU4LzAvODlCOThEMUYxMzVBN0ZDNjZDMDI4NEMzNDQ3N0Mx OTYwNDY0NTU1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAElNWcvwEp+SHQzM1fCowfuLsMU0URumjWc8 nQ8a4WJuaneUhgGhM70xHOynY52o81iP0jIsjbC9xxsUw64f/BRvVPD3mrXbVxJF 87hCFGChTOBg6B0y5/XJGVhu+GlBtJk+HBRAoWqjuoHXA0APt9IdhxSZhc6ALfws scspaWZkDFYYI5/nTq+aCuQ3CdP47UgL0sS37UNIjxilPMiU2DLJogXxE5M3gJXk 92IILbG7ogRTeltTfMTlipoMb4I7Jd7ET+HZPEGtd8lhl9DP1Sj6bNLueFat9Wny f690UxSxkAVEkkjCHZ+QdmfXEiDsRAOrLFa+o7kaEUute2Ppuek= -----END CERTIFICATE-----Generated at Wed Jul 2 01:25:06 2025 by rpki-client