$ rpki-client -vvf repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.mft File: 89B98D1F135A7FC66C0284C34477C19604645554.mft (raw, json) Hash identifier: NWdoykfdBFz8yP+lw+r6wWDBaA/my6rUCwcisCKpTns= Subject key identifier: D1:40:E8:B7:86:88:BC:22:65:53:D0:70:3A:AF:24:25:F4:29:08:95 Authority key identifier: 89:B9:8D:1F:13:5A:7F:C6:6C:02:84:C3:44:77:C1:96:04:64:55:54 Certificate issuer: /CN=89B98D1F135A7FC66C0284C34477C19604645554 Certificate serial: 108565F050FE298F9FA20D316C337091A92413CE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89B98D1F135A7FC66C0284C34477C19604645554.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.mft Manifest number: 0158 Signing time: Sun 11 May 2025 05:52:13 +0000 Manifest this update: Sun 11 May 2025 05:47:13 +0000 Manifest next update: Wed 14 May 2025 09:24:13 +0000 Files and hashes: 1: 3130332e37392e3233362e302f32342d3234203d3e20313530393535.roa (hash: onZqAL56YoMix5wpV03h5e8xuAaImMliGkPVBv6grnU=) 2: 3130332e37392e3233372e302f32342d3234203d3e20313530393535.roa (hash: 2IWnXxowwOlz7I18Z25U30dGHsj5oRHYQH7WRuuUzKo=) 3: 3130332e37392e3233362e302f32332d3233203d3e20313530393535.roa (hash: P+PJmhSLpd83S2cxURBDcslsCmkTTuYqFLowXEXkTfY=) 4: 89B98D1F135A7FC66C0284C34477C19604645554.crl (hash: Fh783gs+TpyWaYbMRDaRPPi3Augd6ZVsYpEW5vHqRWg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.crl rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89B98D1F135A7FC66C0284C34477C19604645554.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 09:24:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:85:65:f0:50:fe:29:8f:9f:a2:0d:31:6c:33:70:91:a9:24:13:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89B98D1F135A7FC66C0284C34477C19604645554 Validity Not Before: May 11 05:47:13 2025 GMT Not After : May 14 09:24:13 2025 GMT Subject: CN=D140E8B78688BC226553D0703AAF2425F4290895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:82:c4:bb:e5:ef:a0:b8:e1:37:28:8a:07:33: 94:f3:62:ea:50:a2:4f:92:f7:f4:d9:98:9e:26:a1: e0:c6:16:83:4d:81:2d:eb:46:41:73:4c:02:8b:a3: 55:ff:3d:08:d7:ba:1e:f7:a2:66:aa:87:e3:1a:1c: 6a:c7:86:8d:7d:95:d7:8c:ac:95:3b:94:3d:d7:1d: da:e8:ef:f6:89:42:ce:54:3e:89:d5:92:f6:52:40: 2f:52:e4:5c:26:6d:4f:29:f5:d0:71:a0:b7:10:7f: 18:6a:24:e2:3f:39:c0:bf:07:bf:f3:02:25:22:42: 5d:26:48:bb:9f:c2:7f:13:de:bf:91:d2:38:85:05: 9a:f6:c1:b2:38:af:c7:df:4f:06:96:d2:f8:5c:67: 51:9e:dc:3f:fc:34:ba:e1:97:52:58:37:9b:80:db: cc:de:b1:91:c4:a3:69:ba:25:fb:a5:22:23:ff:34: 34:56:d1:ce:b6:6a:43:a1:02:c7:09:37:d9:bf:25: e3:db:18:29:2f:ea:10:d1:45:59:7b:3c:54:8a:37: d8:65:37:61:65:3a:94:d0:d6:25:80:a2:1f:df:24: fe:ca:43:c4:31:b2:64:c1:75:5e:3e:0b:15:22:c4: fd:5e:8e:18:d7:0b:48:40:f5:65:b3:bd:89:b9:70: 8f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:40:E8:B7:86:88:BC:22:65:53:D0:70:3A:AF:24:25:F4:29:08:95 X509v3 Authority Key Identifier: keyid:89:B9:8D:1F:13:5A:7F:C6:6C:02:84:C3:44:77:C1:96:04:64:55:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89B98D1F135A7FC66C0284C34477C19604645554.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:13:4c:eb:1f:36:9a:73:b4:e5:50:44:1b:ee:05:56:77:fd: 66:f1:23:f7:3c:8c:ff:db:c6:6e:5e:35:e3:6e:62:95:8c:db: bc:e8:3a:a0:7a:38:d5:eb:6c:c3:ea:1d:08:15:b3:ab:2e:09: a3:47:b6:f6:84:e9:8f:a5:ce:8e:4e:e3:a8:e9:84:c7:8d:8d: ff:9d:17:ab:62:74:51:c2:c3:c2:cb:15:e0:e9:e5:5e:c6:04: c2:5c:b4:1b:80:ff:d0:a1:26:59:5a:64:84:d0:c1:fd:54:9f: 84:0b:02:3d:f5:d3:75:eb:7f:c6:07:ea:28:e1:8f:8c:e8:61: 87:bf:3c:87:92:3e:21:15:d4:eb:57:14:af:8c:bb:40:dc:45: 21:5b:a0:82:7f:95:28:97:de:56:37:ab:14:7c:22:fb:d8:dc: 4a:88:b1:6c:4f:04:61:03:5d:3f:d2:58:ca:47:0c:f3:aa:10: 29:11:f9:f3:ff:f7:17:dc:53:10:05:b6:4f:4c:fb:81:8e:9c: b6:3b:ce:cc:30:e2:10:73:3f:73:05:09:6e:5b:c9:6c:43:64: a7:69:87:e4:f4:39:0f:83:ea:70:84:be:61:89:1f:69:ae:d6: b1:4a:e1:4b:3d:3a:c9:fe:b3:fa:e0:d7:cf:67:c0:d7:64:4d: ac:f1:9c:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEIVl8FD+KY+fog0xbDNwkakkE84wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlCOThEMUYxMzVBN0ZDNjZDMDI4NEMzNDQ3N0MxOTYw NDY0NTU1NDAeFw0yNTA1MTEwNTQ3MTNaFw0yNTA1MTQwOTI0MTNaMDMxMTAvBgNV BAMTKEQxNDBFOEI3ODY4OEJDMjI2NTUzRDA3MDNBQUYyNDI1RjQyOTA4OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcgsS75e+guOE3KIoHM5TzYupQ ok+S9/TZmJ4moeDGFoNNgS3rRkFzTAKLo1X/PQjXuh73omaqh+MaHGrHho19ldeM rJU7lD3XHdro7/aJQs5UPonVkvZSQC9S5FwmbU8p9dBxoLcQfxhqJOI/OcC/B7/z AiUiQl0mSLufwn8T3r+R0jiFBZr2wbI4r8ffTwaW0vhcZ1Ge3D/8NLrhl1JYN5uA 28zesZHEo2m6JfulIiP/NDRW0c62akOhAscJN9m/JePbGCkv6hDRRVl7PFSKN9hl N2FlOpTQ1iWAoh/fJP7KQ8QxsmTBdV4+CxUixP1ejhjXC0hA9WWzvYm5cI/zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0UDot4aIvCJlU9BwOq8kJfQpCJUwHwYDVR0j BBgwFoAUibmNHxNaf8ZsAoTDRHfBlgRkVVQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YmZmMWIzZi0xMTkwLTQxMTktYmJjNi0xNDE3ZGY4YWEyNTgvMC84OUI5OEQxRjEz NUE3RkM2NkMwMjg0QzM0NDc3QzE5NjA0NjQ1NTU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODlCOThEMUYxMzVBN0ZDNjZDMDI4NEMzNDQ3N0MxOTYwNDY0 NTU1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGJmZjFiM2YtMTE5MC00MTE5LWJi YzYtMTQxN2RmOGFhMjU4LzAvODlCOThEMUYxMzVBN0ZDNjZDMDI4NEMzNDQ3N0Mx OTYwNDY0NTU1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHgTTOsfNppztOVQRBvuBVZ3/WbxI/c8jP/b xm5eNeNuYpWM27zoOqB6ONXrbMPqHQgVs6suCaNHtvaE6Y+lzo5O46jphMeNjf+d F6tidFHCw8LLFeDp5V7GBMJctBuA/9ChJllaZITQwf1Un4QLAj3103Xrf8YH6ijh j4zoYYe/PIeSPiEV1OtXFK+Mu0DcRSFboIJ/lSiX3lY3qxR8IvvY3EqIsWxPBGED XT/SWMpHDPOqECkR+fP/9xfcUxAFtk9M+4GOnLY7zsww4hBzP3MFCW5byWxDZKdp h+T0OQ+D6nCEvmGJH2mu1rFK4Us9Osn+s/rg189nwNdkTazxnAE= -----END CERTIFICATE-----Generated at Sun May 11 16:38:45 2025 by rpki-client