$ rpki-client -vvf repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft File: B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft (raw, json) Hash identifier: fWR4FtV8m+y+u4uptknwzM1H/KZ+M6+A8Vrmyps/sLg= Subject key identifier: B8:DD:1E:3D:14:78:B8:B4:61:2B:81:31:FD:75:B1:5A:95:00:47:B4 Authority key identifier: B8:93:98:BA:60:3C:43:BD:F7:11:A2:B3:1F:AD:C8:CD:FF:C9:CC:16 Certificate issuer: /CN=B89398BA603C43BDF711A2B31FADC8CDFFC9CC16 Certificate serial: 7DBA13DC60FDF937DA6149C07B7B6D9083CD5B0A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft Manifest number: 04FC Signing time: Fri 22 Aug 2025 19:51:50 +0000 Manifest this update: Fri 22 Aug 2025 19:46:50 +0000 Manifest next update: Mon 25 Aug 2025 19:52:50 +0000 Files and hashes: 1: 3130332e3134362e36322e302f32332d3234203d3e20313339343537.roa (hash: J9nhXOhW6jatN3t2cMwD6dQ3cCJrOL1soCUmU7Ehehg=) 2: 323030313a6466323a346238303a3a2f34382d3438203d3e20313339343537.roa (hash: O/T9Xztwa1eZpftLg0Xl5KOsLOQM47dFO4VcGsJ1wDg=) 3: B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.crl (hash: ptTjR6v9lpnyB/ooSlgB60zTjHop/UOuBj8Vzopacvo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.crl rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 19:52:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:ba:13:dc:60:fd:f9:37:da:61:49:c0:7b:7b:6d:90:83:cd:5b:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B89398BA603C43BDF711A2B31FADC8CDFFC9CC16 Validity Not Before: Aug 22 19:46:50 2025 GMT Not After : Aug 25 19:52:50 2025 GMT Subject: CN=B8DD1E3D1478B8B4612B8131FD75B15A950047B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f2:eb:9a:02:a2:b5:f8:d1:ae:2e:95:e5:8b: c9:b8:14:89:11:bf:a5:30:5b:ad:40:fe:5d:da:e8: 64:65:31:36:7d:f8:8e:85:bb:fd:dc:37:8f:de:62: 92:4e:aa:10:0a:dc:40:45:cc:a1:26:59:31:4a:e2: 2c:59:86:3d:d4:3b:bb:83:df:ea:c0:8b:c1:ab:42: 23:07:87:e3:53:f7:b3:c3:d2:54:49:cf:4d:58:6f: a5:cc:fc:57:87:3a:6c:6a:50:69:b2:56:e2:1e:e7: d6:df:be:12:d1:e2:5e:8a:81:9a:70:10:8e:9f:ab: 5a:4a:f9:69:a9:c7:b7:9e:fe:2b:58:9d:a8:da:4e: ee:95:ba:29:f7:da:91:59:45:d7:24:1d:cf:5d:45: a0:18:38:17:60:fb:90:be:a7:33:d9:8d:1a:49:61: d0:85:25:cc:bc:fc:1c:f6:11:be:25:0c:1d:e2:35: 84:dc:1d:61:2b:0a:4c:38:aa:05:ee:70:0b:3c:15: bb:bd:ed:33:fb:87:4b:22:07:b4:72:dc:9e:4d:d7: 86:a5:2c:f6:bd:c2:41:c1:ab:76:ea:4d:b7:cd:1a: 73:d2:4a:53:46:99:a1:b2:8f:d3:00:c1:28:ac:3b: 5d:a0:46:5d:50:04:08:d0:9d:93:0b:6e:cd:57:6e: 61:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:DD:1E:3D:14:78:B8:B4:61:2B:81:31:FD:75:B1:5A:95:00:47:B4 X509v3 Authority Key Identifier: keyid:B8:93:98:BA:60:3C:43:BD:F7:11:A2:B3:1F:AD:C8:CD:FF:C9:CC:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:71:b1:04:8c:a8:fa:2e:91:1b:11:b0:82:44:99:38:0e:86: 7d:13:05:4c:fe:2a:b0:b5:b9:97:40:62:3d:9d:fc:60:b9:a1: 38:28:14:c2:0a:02:ee:d5:5b:7b:bf:48:ea:3c:15:33:23:a7: 62:2c:08:68:31:36:f3:3b:af:ef:5d:5f:95:90:5d:5e:99:51: 3d:ec:9c:f1:a3:4e:e1:3e:3c:97:af:b2:71:f3:03:f0:bb:79: ca:5a:67:86:44:0d:c0:cd:38:b2:01:01:84:34:38:b1:3f:74: 84:9a:a6:7b:e4:78:85:5b:25:6f:99:43:89:af:2f:fd:82:48: 77:36:8a:3c:49:30:b1:e1:f2:81:3e:3e:e2:8a:67:c5:77:bb: da:90:c0:7e:16:8b:66:10:af:98:e6:9d:24:8e:d0:ab:14:04: 60:21:ef:77:e6:53:54:71:e3:68:ac:9d:df:2c:a4:db:48:9f: 9d:b1:73:38:4c:7a:df:0b:17:58:f5:f6:c6:f0:6f:c8:32:c9: bb:51:27:3b:ec:79:9d:b6:43:a1:d9:64:d8:a6:60:1d:68:1d: cf:24:77:43:a6:ae:62:30:39:79:b4:92:18:06:81:d1:93:1f: 8a:05:0f:c4:98:15:cc:3c:cc:db:7a:3c:29:9a:19:c0:aa:50: 37:6b:22:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfboT3GD9+TfaYUnAe3ttkIPNWwowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg5Mzk4QkE2MDNDNDNCREY3MTFBMkIzMUZBREM4Q0RG RkM5Q0MxNjAeFw0yNTA4MjIxOTQ2NTBaFw0yNTA4MjUxOTUyNTBaMDMxMTAvBgNV BAMTKEI4REQxRTNEMTQ3OEI4QjQ2MTJCODEzMUZENzVCMTVBOTUwMDQ3QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY8uuaAqK1+NGuLpXli8m4FIkR v6UwW61A/l3a6GRlMTZ9+I6Fu/3cN4/eYpJOqhAK3EBFzKEmWTFK4ixZhj3UO7uD 3+rAi8GrQiMHh+NT97PD0lRJz01Yb6XM/FeHOmxqUGmyVuIe59bfvhLR4l6KgZpw EI6fq1pK+Wmpx7ee/itYnajaTu6Vuin32pFZRdckHc9dRaAYOBdg+5C+pzPZjRpJ YdCFJcy8/Bz2Eb4lDB3iNYTcHWErCkw4qgXucAs8Fbu97TP7h0siB7Ry3J5N14al LPa9wkHBq3bqTbfNGnPSSlNGmaGyj9MAwSisO12gRl1QBAjQnZMLbs1XbmFRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuN0ePRR4uLRhK4Ex/XWxWpUAR7QwHwYDVR0j BBgwFoAUuJOYumA8Q733EaKzH63Izf/JzBYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZWE3OTM0MC00ZGIyLTQ1OGQtOTVkZC1hZjIwYjRmY2RiM2QvMC9CODkzOThCQTYw M0M0M0JERjcxMUEyQjMxRkFEQzhDREZGQzlDQzE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjg5Mzk4QkE2MDNDNDNCREY3MTFBMkIzMUZBREM4Q0RGRkM5 Q0MxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGVhNzkzNDAtNGRiMi00NThkLTk1 ZGQtYWYyMGI0ZmNkYjNkLzAvQjg5Mzk4QkE2MDNDNDNCREY3MTFBMkIzMUZBREM4 Q0RGRkM5Q0MxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADlxsQSMqPoukRsRsIJEmTgOhn0TBUz+KrC1 uZdAYj2d/GC5oTgoFMIKAu7VW3u/SOo8FTMjp2IsCGgxNvM7r+9dX5WQXV6ZUT3s nPGjTuE+PJevsnHzA/C7ecpaZ4ZEDcDNOLIBAYQ0OLE/dISapnvkeIVbJW+ZQ4mv L/2CSHc2ijxJMLHh8oE+PuKKZ8V3u9qQwH4Wi2YQr5jmnSSO0KsUBGAh73fmU1Rx 42isnd8spNtIn52xczhMet8LF1j19sbwb8gyybtRJzvseZ22Q6HZZNimYB1oHc8k d0OmrmIwOXm0khgGgdGTH4oFD8SYFcw8zNt6PCmaGcCqUDdrIuo= -----END CERTIFICATE-----Generated at Sat Aug 23 11:59:04 2025 by rpki-client