$ rpki-client -vvf repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.mft File: 89B98D1F135A7FC66C0284C34477C19604645554.mft (raw, json) Hash identifier: QR7OJIOSKl6uighk8GFmARUdVadAYQLFR7tLJn7Zcu4= Subject key identifier: 40:9F:93:FD:9A:39:C9:D6:3A:FF:22:56:A8:3E:3C:43:14:63:0A:A4 Authority key identifier: 89:B9:8D:1F:13:5A:7F:C6:6C:02:84:C3:44:77:C1:96:04:64:55:54 Certificate issuer: /CN=89B98D1F135A7FC66C0284C34477C19604645554 Certificate serial: 670229293093C8C9C209065F60E760AE9C75FDC8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89B98D1F135A7FC66C0284C34477C19604645554.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.mft Manifest number: 01A0 Signing time: Mon 20 Oct 2025 07:12:19 +0000 Manifest this update: Mon 20 Oct 2025 07:07:19 +0000 Manifest next update: Thu 23 Oct 2025 09:41:19 +0000 Files and hashes: 1: 3130332e37392e3233372e302f32342d3234203d3e20313530393535.roa (hash: 2IWnXxowwOlz7I18Z25U30dGHsj5oRHYQH7WRuuUzKo=) 2: 3130332e37392e3233362e302f32332d3233203d3e20313530393535.roa (hash: ThDgpbBTSfRRealh0FHjoyTHcEPiBLGvmWH7tSYcxdE=) 3: 89B98D1F135A7FC66C0284C34477C19604645554.crl (hash: c5zxK78b1yD8rQ0LQ9bBH7vBStuAKjI8O2Pivmgxuc8=) 4: 3130332e37392e3233362e302f32342d3234203d3e20313530393535.roa (hash: onZqAL56YoMix5wpV03h5e8xuAaImMliGkPVBv6grnU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.crl rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89B98D1F135A7FC66C0284C34477C19604645554.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 09:41:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:02:29:29:30:93:c8:c9:c2:09:06:5f:60:e7:60:ae:9c:75:fd:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89B98D1F135A7FC66C0284C34477C19604645554 Validity Not Before: Oct 20 07:07:19 2025 GMT Not After : Oct 23 09:41:19 2025 GMT Subject: CN=409F93FD9A39C9D63AFF2256A83E3C4314630AA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:44:1c:84:df:cb:0f:4e:ee:af:5d:7b:69:65: c8:71:c4:10:43:ce:02:17:ba:8c:66:07:f2:d1:cf: 75:37:c6:b7:4d:87:50:bf:f5:86:e6:55:7b:9e:aa: 25:8d:4d:bc:d0:0d:27:3b:b0:2b:87:15:02:10:8d: 6b:91:ef:36:c3:48:56:c2:48:60:1f:ee:ef:88:ef: f0:41:f9:8d:30:67:bb:04:d4:71:8d:62:a7:7a:9a: 9b:f8:5d:8b:d3:be:d7:9b:26:44:bc:b7:3d:87:e7: 1f:f1:98:27:ef:03:84:21:7a:7b:4f:42:c5:80:2d: 64:a2:4a:d1:d7:5d:a0:5c:5b:4c:26:cd:6c:76:c9: 94:19:65:bf:08:b9:cd:e5:76:e6:3b:be:e1:a6:b6: 0b:db:bb:00:fa:72:b2:ed:1a:ca:6d:00:78:a8:3a: f3:c4:57:db:d7:f2:ab:a5:f0:06:00:8e:4e:45:bf: ef:88:ac:71:47:56:01:e7:e1:cc:f7:3a:9f:1d:00: 0c:12:1e:45:ed:a8:53:30:0a:e1:51:d0:fe:ca:a0: f2:b2:dc:2a:e2:c6:da:4c:47:43:03:11:ef:a2:97: 48:45:55:c0:ab:44:d1:f1:3d:6a:e7:df:58:7c:82: f4:d2:4a:54:bb:ad:c4:6f:02:1e:7d:6b:7f:20:f7: 8c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:9F:93:FD:9A:39:C9:D6:3A:FF:22:56:A8:3E:3C:43:14:63:0A:A4 X509v3 Authority Key Identifier: keyid:89:B9:8D:1F:13:5A:7F:C6:6C:02:84:C3:44:77:C1:96:04:64:55:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89B98D1F135A7FC66C0284C34477C19604645554.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:36:fa:fd:92:c7:cb:89:1a:11:5d:a8:f6:c3:28:1d:42:ae: 6e:7b:5f:27:8e:1a:76:f8:87:ef:8f:31:f4:74:46:d3:78:43: 08:b6:2f:d9:ce:88:ec:d9:7e:c6:f4:f6:c8:f6:d5:38:fc:c0: bb:9e:40:ef:d8:0b:25:73:03:f9:eb:98:23:81:b2:82:e5:7a: c6:38:fa:55:1e:d1:66:66:29:6f:da:ba:5d:e5:57:a4:60:43: 9e:37:88:9d:96:75:23:2b:06:5a:f6:38:10:f1:a4:e9:de:a1: 2e:77:db:02:8c:1c:e0:19:e8:82:64:5f:3f:5f:f6:81:0a:70: 24:61:1b:85:62:e7:85:56:90:bf:de:81:8a:8d:47:89:83:d4: d9:55:ce:11:8f:05:72:e2:bd:05:01:04:a0:81:6c:84:58:12: 5d:ce:11:bb:52:58:f8:76:51:3a:0b:82:d6:22:9b:a3:03:7f: 8f:2e:75:10:e1:90:82:4c:f2:6d:6a:5f:34:3d:87:1d:bf:9b: 5a:31:da:e8:eb:72:fa:cc:a5:a5:f6:80:f0:45:f9:8d:58:d2: 72:b1:1c:58:55:8f:8a:5f:65:61:30:fe:e5:1d:d1:2d:4e:3a: aa:ba:22:4d:95:19:e9:24:ba:bf:9b:f3:0a:c1:bc:c8:64:5a: 74:d9:7e:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZwIpKTCTyMnCCQZfYOdgrpx1/cgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlCOThEMUYxMzVBN0ZDNjZDMDI4NEMzNDQ3N0MxOTYw NDY0NTU1NDAeFw0yNTEwMjAwNzA3MTlaFw0yNTEwMjMwOTQxMTlaMDMxMTAvBgNV BAMTKDQwOUY5M0ZEOUEzOUM5RDYzQUZGMjI1NkE4M0UzQzQzMTQ2MzBBQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLRByE38sPTu6vXXtpZchxxBBD zgIXuoxmB/LRz3U3xrdNh1C/9YbmVXueqiWNTbzQDSc7sCuHFQIQjWuR7zbDSFbC SGAf7u+I7/BB+Y0wZ7sE1HGNYqd6mpv4XYvTvtebJkS8tz2H5x/xmCfvA4QhentP QsWALWSiStHXXaBcW0wmzWx2yZQZZb8Iuc3lduY7vuGmtgvbuwD6crLtGsptAHio OvPEV9vX8qul8AYAjk5Fv++IrHFHVgHn4cz3Op8dAAwSHkXtqFMwCuFR0P7KoPKy 3CrixtpMR0MDEe+il0hFVcCrRNHxPWrn31h8gvTSSlS7rcRvAh59a38g94xFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQJ+T/Zo5ydY6/yJWqD48QxRjCqQwHwYDVR0j BBgwFoAUibmNHxNaf8ZsAoTDRHfBlgRkVVQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YmZmMWIzZi0xMTkwLTQxMTktYmJjNi0xNDE3ZGY4YWEyNTgvMC84OUI5OEQxRjEz NUE3RkM2NkMwMjg0QzM0NDc3QzE5NjA0NjQ1NTU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODlCOThEMUYxMzVBN0ZDNjZDMDI4NEMzNDQ3N0MxOTYwNDY0 NTU1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGJmZjFiM2YtMTE5MC00MTE5LWJi YzYtMTQxN2RmOGFhMjU4LzAvODlCOThEMUYxMzVBN0ZDNjZDMDI4NEMzNDQ3N0Mx OTYwNDY0NTU1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI82+v2Sx8uJGhFdqPbDKB1Crm57XyeOGnb4 h++PMfR0RtN4Qwi2L9nOiOzZfsb09sj21Tj8wLueQO/YCyVzA/nrmCOBsoLlesY4 +lUe0WZmKW/aul3lV6RgQ543iJ2WdSMrBlr2OBDxpOneoS532wKMHOAZ6IJkXz9f 9oEKcCRhG4Vi54VWkL/egYqNR4mD1NlVzhGPBXLivQUBBKCBbIRYEl3OEbtSWPh2 UToLgtYim6MDf48udRDhkIJM8m1qXzQ9hx2/m1ox2ujrcvrMpaX2gPBF+Y1Y0nKx HFhVj4pfZWEw/uUd0S1OOqq6Ik2VGekkur+b8wrBvMhkWnTZfik= -----END CERTIFICATE-----Generated at Mon Oct 20 13:58:23 2025 by rpki-client