$ rpki-client -vvf repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft File: B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft (raw, json) Hash identifier: jzzTDOwZ4Ye6ACO6obO3kyLWuKo0T8wbSMBaeC1hFJs= Subject key identifier: 53:0D:7E:81:66:11:A6:9B:32:26:AF:7C:15:66:CC:46:FB:67:51:5F Authority key identifier: B8:93:98:BA:60:3C:43:BD:F7:11:A2:B3:1F:AD:C8:CD:FF:C9:CC:16 Certificate issuer: /CN=B89398BA603C43BDF711A2B31FADC8CDFFC9CC16 Certificate serial: 2AA5E50C2F8A35F02F17986537EBF81F6B1C088A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft Manifest number: 04E4 Signing time: Fri 27 Jun 2025 18:01:40 +0000 Manifest this update: Fri 27 Jun 2025 17:56:40 +0000 Manifest next update: Tue 01 Jul 2025 05:16:40 +0000 Files and hashes: 1: 323030313a6466323a346238303a3a2f34382d3438203d3e20313339343537.roa (hash: O/T9Xztwa1eZpftLg0Xl5KOsLOQM47dFO4VcGsJ1wDg=) 2: 3130332e3134362e36322e302f32332d3234203d3e20313339343537.roa (hash: J9nhXOhW6jatN3t2cMwD6dQ3cCJrOL1soCUmU7Ehehg=) 3: B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.crl (hash: eyj+DESsg+INh58CKh3NMr7IO+ZiG10HyUCmrVUb1OE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.crl rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 05:16:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:a5:e5:0c:2f:8a:35:f0:2f:17:98:65:37:eb:f8:1f:6b:1c:08:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B89398BA603C43BDF711A2B31FADC8CDFFC9CC16 Validity Not Before: Jun 27 17:56:40 2025 GMT Not After : Jul 1 05:16:40 2025 GMT Subject: CN=530D7E816611A69B3226AF7C1566CC46FB67515F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ab:ef:6d:27:84:22:92:9a:79:c3:65:17:82: 37:aa:da:58:41:b6:b8:cd:d7:61:08:92:f8:f4:cf: 32:ee:79:3a:ec:ea:f6:e8:56:47:51:88:ef:c1:88: 99:2a:bf:24:ad:7e:21:13:6b:e9:aa:11:cd:42:96: eb:a3:08:51:88:29:c0:65:28:8e:c5:95:ad:ff:d5: 4e:f6:61:8d:0c:ee:75:80:99:50:09:9d:4a:23:91: 88:a4:14:93:1f:8e:04:40:7d:2c:4d:57:fe:f6:28: 0f:75:33:dd:ee:1f:d3:48:c1:11:a8:aa:c5:70:ee: 18:4d:80:db:10:0d:5d:f8:27:14:50:80:8d:30:0e: 73:8f:cc:ec:dd:e1:7c:1d:39:ac:4d:b0:2a:85:cb: 00:78:83:f8:56:be:bf:c4:2d:51:2b:46:a9:55:1e: 81:74:0b:5a:ac:88:83:5a:f7:9a:bb:82:dd:dd:84: ed:f3:ee:d9:55:fa:da:4d:e5:92:bc:e7:34:db:57: 1d:5e:82:42:81:ec:3e:49:df:2b:55:e0:26:5c:4d: db:cc:1d:a0:45:0f:bf:7a:db:27:ef:f3:9c:4d:c1: f2:5d:95:ff:30:f5:89:6e:a9:b7:3c:d1:ad:cb:40: c1:22:0d:e9:5c:fa:d7:66:03:7f:3f:c3:06:12:99: 76:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:0D:7E:81:66:11:A6:9B:32:26:AF:7C:15:66:CC:46:FB:67:51:5F X509v3 Authority Key Identifier: keyid:B8:93:98:BA:60:3C:43:BD:F7:11:A2:B3:1F:AD:C8:CD:FF:C9:CC:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:49:20:97:d3:a3:4e:c7:55:49:28:6c:1b:31:eb:32:3d:75: 10:13:1f:54:da:ec:11:dd:e2:14:c9:1e:f6:ad:ee:80:c0:1c: 4c:e1:b0:dc:2a:eb:0e:ae:9f:4a:04:9f:84:f8:1b:ff:2b:78: 4f:6a:a8:35:1e:93:8f:f7:a5:51:fb:a7:98:db:b5:f4:8c:1e: c0:3d:2c:cc:f5:da:9a:59:80:23:4c:2b:4e:d5:a7:b4:2e:aa: 1e:47:f2:c4:6a:71:5f:a5:d6:4c:76:74:b0:24:c3:b1:94:bf: 77:e2:e8:ae:3f:23:58:38:e6:42:8e:d5:4f:48:60:96:8d:3d: a7:0a:14:c7:fa:9c:56:42:4a:29:3e:c9:d3:1e:cc:d4:e2:fd: 0c:bc:7f:e6:0b:b5:28:d8:a7:e9:03:1d:1c:11:85:77:8d:d2: 92:7a:fb:db:37:f8:24:d1:6e:ed:0c:13:66:b7:be:6a:32:93: dd:5f:56:6a:29:eb:52:71:1e:6d:9c:dd:91:8c:47:41:42:13: 6f:c6:81:4b:f5:0b:f0:6f:5f:5c:af:51:fa:79:4e:7d:06:b7: 48:34:b8:f0:6c:b5:9c:1c:3e:8b:e7:7e:cb:62:43:0f:97:a1: 2d:fe:f3:4c:d3:17:e7:e0:68:a8:cf:bc:f8:e8:ca:9f:74:c5: 16:39:27:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKqXlDC+KNfAvF5hlN+v4H2scCIowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg5Mzk4QkE2MDNDNDNCREY3MTFBMkIzMUZBREM4Q0RG RkM5Q0MxNjAeFw0yNTA2MjcxNzU2NDBaFw0yNTA3MDEwNTE2NDBaMDMxMTAvBgNV BAMTKDUzMEQ3RTgxNjYxMUE2OUIzMjI2QUY3QzE1NjZDQzQ2RkI2NzUxNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClq+9tJ4Qikpp5w2UXgjeq2lhB trjN12EIkvj0zzLueTrs6vboVkdRiO/BiJkqvyStfiETa+mqEc1CluujCFGIKcBl KI7Fla3/1U72YY0M7nWAmVAJnUojkYikFJMfjgRAfSxNV/72KA91M93uH9NIwRGo qsVw7hhNgNsQDV34JxRQgI0wDnOPzOzd4XwdOaxNsCqFywB4g/hWvr/ELVErRqlV HoF0C1qsiINa95q7gt3dhO3z7tlV+tpN5ZK85zTbVx1egkKB7D5J3ytV4CZcTdvM HaBFD7962yfv85xNwfJdlf8w9Yluqbc80a3LQMEiDelc+tdmA38/wwYSmXaRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUw1+gWYRppsyJq98FWbMRvtnUV8wHwYDVR0j BBgwFoAUuJOYumA8Q733EaKzH63Izf/JzBYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZWE3OTM0MC00ZGIyLTQ1OGQtOTVkZC1hZjIwYjRmY2RiM2QvMC9CODkzOThCQTYw M0M0M0JERjcxMUEyQjMxRkFEQzhDREZGQzlDQzE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjg5Mzk4QkE2MDNDNDNCREY3MTFBMkIzMUZBREM4Q0RGRkM5 Q0MxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGVhNzkzNDAtNGRiMi00NThkLTk1 ZGQtYWYyMGI0ZmNkYjNkLzAvQjg5Mzk4QkE2MDNDNDNCREY3MTFBMkIzMUZBREM4 Q0RGRkM5Q0MxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABpJIJfTo07HVUkobBsx6zI9dRATH1Ta7BHd 4hTJHvat7oDAHEzhsNwq6w6un0oEn4T4G/8reE9qqDUek4/3pVH7p5jbtfSMHsA9 LMz12ppZgCNMK07Vp7Quqh5H8sRqcV+l1kx2dLAkw7GUv3fi6K4/I1g45kKO1U9I YJaNPacKFMf6nFZCSik+ydMezNTi/Qy8f+YLtSjYp+kDHRwRhXeN0pJ6+9s3+CTR bu0ME2a3vmoyk91fVmop61JxHm2c3ZGMR0FCE2/GgUv1C/BvX1yvUfp5Tn0Gt0g0 uPBstZwcPovnfstiQw+XoS3+80zTF+fgaKjPvPjoyp90xRY5Jyk= -----END CERTIFICATE-----Generated at Sun Jun 29 18:08:54 2025 by rpki-client