$ rpki-client -vvf repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft File: B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft (raw, json) Hash identifier: AmDSvpgzivWfcYi/HvXXro7AuQj4J9WSewH5hnofOZ0= Subject key identifier: 82:48:AE:E3:FC:F6:1E:37:AB:1F:18:B2:CF:D1:24:AC:6B:D9:E0:E6 Authority key identifier: B8:93:98:BA:60:3C:43:BD:F7:11:A2:B3:1F:AD:C8:CD:FF:C9:CC:16 Certificate issuer: /CN=B89398BA603C43BDF711A2B31FADC8CDFFC9CC16 Certificate serial: 1E1E16BDF54EA3BCA601566ECA070FD863FDBBBB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft Manifest number: 0516 Signing time: Mon 20 Oct 2025 02:21:40 +0000 Manifest this update: Mon 20 Oct 2025 02:16:40 +0000 Manifest next update: Thu 23 Oct 2025 08:24:40 +0000 Files and hashes: 1: 323030313a6466323a346238303a3a2f34382d3438203d3e20313339343537.roa (hash: O/T9Xztwa1eZpftLg0Xl5KOsLOQM47dFO4VcGsJ1wDg=) 2: B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.crl (hash: lcHJTzY8fUjEUdShIkT72kXzA078jV2FlAQk3XvTeS0=) 3: 3130332e3134362e36322e302f32332d3234203d3e20313339343537.roa (hash: J9nhXOhW6jatN3t2cMwD6dQ3cCJrOL1soCUmU7Ehehg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.crl rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 08:24:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:1e:16:bd:f5:4e:a3:bc:a6:01:56:6e:ca:07:0f:d8:63:fd:bb:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B89398BA603C43BDF711A2B31FADC8CDFFC9CC16 Validity Not Before: Oct 20 02:16:40 2025 GMT Not After : Oct 23 08:24:40 2025 GMT Subject: CN=8248AEE3FCF61E37AB1F18B2CFD124AC6BD9E0E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c7:ba:98:14:f2:67:c5:28:b9:13:c9:7e:4a: f5:30:77:02:af:45:cf:42:68:c2:4a:e4:25:0b:54: cf:c4:f2:9d:90:50:ff:2c:45:bf:83:54:ad:31:8b: 77:6f:00:6a:7e:da:ae:8b:7d:91:ce:99:ca:ea:fd: 50:59:e2:63:5f:3a:6d:a2:59:08:99:ec:69:9c:a7: a2:aa:88:04:1c:73:12:e4:73:4e:b5:11:ef:f7:0c: a7:b7:ac:cf:00:5e:2e:c8:75:eb:41:09:8c:c7:e5: ce:28:bd:eb:1e:92:d3:cf:e0:07:da:da:24:cc:71: a2:e4:b9:84:cf:2f:55:e9:f5:88:b8:21:a1:39:95: 22:3a:7f:8e:45:fd:db:1b:5a:e9:8c:de:2b:c3:4a: 7c:2c:10:87:cb:09:76:36:5e:5c:40:02:af:43:a5: a2:ee:e3:8e:da:f6:8e:07:ac:65:70:13:95:37:43: 56:61:38:f7:24:f3:98:73:37:62:a1:11:61:0f:9f: 43:49:05:6a:65:36:df:7b:0c:73:7c:2a:fc:c1:ad: 82:c7:4e:40:be:b0:f9:10:38:83:45:8a:61:4c:cd: 2c:c7:b5:40:5b:48:5f:f0:54:34:4c:2a:a7:e6:4c: 8e:62:5d:35:75:a5:1b:a5:73:d4:ed:2d:dd:8d:8b: 15:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:48:AE:E3:FC:F6:1E:37:AB:1F:18:B2:CF:D1:24:AC:6B:D9:E0:E6 X509v3 Authority Key Identifier: keyid:B8:93:98:BA:60:3C:43:BD:F7:11:A2:B3:1F:AD:C8:CD:FF:C9:CC:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:bd:cd:5c:21:6b:de:28:b2:ca:c3:4e:8b:15:87:eb:9f:39: 31:99:6f:15:c1:63:82:fd:55:25:8d:4b:d5:e0:e8:72:da:4b: a2:ad:2b:2a:68:2d:0f:8f:7b:34:a9:a1:12:1f:da:a4:a7:2c: a1:3c:66:63:a1:cd:31:7f:33:61:16:ef:cd:f9:33:2a:8d:16: be:ad:5b:56:84:8a:bd:7f:92:fa:7b:b7:2c:e7:a0:44:4f:1a: 79:6d:16:81:d1:46:9e:7b:1c:39:d2:5b:75:39:cf:dd:d0:98: 10:97:1d:60:17:7b:ec:4b:d5:3b:29:81:d6:50:c8:7e:b5:34: c9:8d:e1:76:e0:ec:d3:03:11:6a:91:59:93:91:68:8f:82:ea: e1:91:95:70:00:99:33:74:5d:0a:fc:2a:0c:82:f9:d8:97:c3: 2d:d2:19:d5:1e:23:87:4b:90:38:b3:7b:2d:f1:25:2d:08:bb: 1e:f3:1b:67:0d:8a:98:e8:94:d2:92:1d:3a:af:2f:df:0b:e5: 6b:30:c7:41:fc:4c:d7:0c:df:c2:f6:ff:d6:8d:b2:6a:06:99: d2:2e:4f:26:ba:42:93:26:18:40:ef:35:5e:b9:84:14:e6:f1: aa:94:b0:fe:d3:63:96:20:4b:1b:f7:c6:35:e1:e9:93:aa:4e: 47:87:2d:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHh4WvfVOo7ymAVZuygcP2GP9u7swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg5Mzk4QkE2MDNDNDNCREY3MTFBMkIzMUZBREM4Q0RG RkM5Q0MxNjAeFw0yNTEwMjAwMjE2NDBaFw0yNTEwMjMwODI0NDBaMDMxMTAvBgNV BAMTKDgyNDhBRUUzRkNGNjFFMzdBQjFGMThCMkNGRDEyNEFDNkJEOUUwRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcx7qYFPJnxSi5E8l+SvUwdwKv Rc9CaMJK5CULVM/E8p2QUP8sRb+DVK0xi3dvAGp+2q6LfZHOmcrq/VBZ4mNfOm2i WQiZ7Gmcp6KqiAQccxLkc061Ee/3DKe3rM8AXi7IdetBCYzH5c4ovesektPP4Afa 2iTMcaLkuYTPL1Xp9Yi4IaE5lSI6f45F/dsbWumM3ivDSnwsEIfLCXY2XlxAAq9D paLu447a9o4HrGVwE5U3Q1ZhOPck85hzN2KhEWEPn0NJBWplNt97DHN8KvzBrYLH TkC+sPkQOINFimFMzSzHtUBbSF/wVDRMKqfmTI5iXTV1pRulc9TtLd2NixWlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgkiu4/z2HjerHxiyz9EkrGvZ4OYwHwYDVR0j BBgwFoAUuJOYumA8Q733EaKzH63Izf/JzBYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZWE3OTM0MC00ZGIyLTQ1OGQtOTVkZC1hZjIwYjRmY2RiM2QvMC9CODkzOThCQTYw M0M0M0JERjcxMUEyQjMxRkFEQzhDREZGQzlDQzE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjg5Mzk4QkE2MDNDNDNCREY3MTFBMkIzMUZBREM4Q0RGRkM5 Q0MxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGVhNzkzNDAtNGRiMi00NThkLTk1 ZGQtYWYyMGI0ZmNkYjNkLzAvQjg5Mzk4QkE2MDNDNDNCREY3MTFBMkIzMUZBREM4 Q0RGRkM5Q0MxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAe9zVwha94ossrDTosVh+ufOTGZbxXBY4L9 VSWNS9Xg6HLaS6KtKypoLQ+PezSpoRIf2qSnLKE8ZmOhzTF/M2EW7835MyqNFr6t W1aEir1/kvp7tyznoERPGnltFoHRRp57HDnSW3U5z93QmBCXHWAXe+xL1TspgdZQ yH61NMmN4Xbg7NMDEWqRWZORaI+C6uGRlXAAmTN0XQr8KgyC+diXwy3SGdUeI4dL kDizey3xJS0Iux7zG2cNipjolNKSHTqvL98L5Wswx0H8TNcM38L2/9aNsmoGmdIu Tya6QpMmGEDvNV65hBTm8aqUsP7TY5YgSxv3xjXh6ZOqTkeHLbQ= -----END CERTIFICATE-----Generated at Mon Oct 20 12:08:47 2025 by rpki-client