$ rpki-client -vvf repo-rpki.idnic.net/repo/14258e5c-0456-46a3-9632-709c767104bb/0/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.mft File: 89DCD9E9EB542D202BA36CB44CE75AD743EF544E.mft (raw, json) Hash identifier: oId+Jt6vFZiU7I9vcTKT7byGbHYQByXN6oAqKKpxCIk= Subject key identifier: FA:5A:F6:56:95:90:44:C7:69:3F:1C:F4:6A:76:A2:86:F7:5F:A0:FF Authority key identifier: 89:DC:D9:E9:EB:54:2D:20:2B:A3:6C:B4:4C:E7:5A:D7:43:EF:54:4E Certificate issuer: /CN=89DCD9E9EB542D202BA36CB44CE75AD743EF544E Certificate serial: 35439E7D15F2A50CF94EB3B75AD8044501186F0F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/14258e5c-0456-46a3-9632-709c767104bb/0/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.mft Manifest number: DE Signing time: Tue 17 Jun 2025 13:30:00 +0000 Manifest this update: Tue 17 Jun 2025 13:25:00 +0000 Manifest next update: Fri 20 Jun 2025 22:36:00 +0000 Files and hashes: 1: 3135372e31302e3135382e302f32332d3233203d3e20313532333535.roa (hash: lquMzYc1A9WezJfZrkZ7IH+M206UU3pQd22VWaKYVvM=) 2: 89DCD9E9EB542D202BA36CB44CE75AD743EF544E.crl (hash: wAUYYyxumFhWb9oGu9/dZ8lc5DmTj32/c6N/i0fqoKQ=) 3: 3135372e31302e3135382e302f32342d3234203d3e20313532333535.roa (hash: PTT9MsWDPwZ9cRzvcXmuxxhA2JhY1zsKHAXPKrnZx/M=) 4: 3135372e31302e3135392e302f32342d3234203d3e20313532333535.roa (hash: dGVpmdtEGT3h+fNYGvG5smP/PxkVYYYHGNHC/rEeLpo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/14258e5c-0456-46a3-9632-709c767104bb/0/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.crl rsync://repo-rpki.idnic.net/repo/14258e5c-0456-46a3-9632-709c767104bb/0/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 22:36:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:43:9e:7d:15:f2:a5:0c:f9:4e:b3:b7:5a:d8:04:45:01:18:6f:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89DCD9E9EB542D202BA36CB44CE75AD743EF544E Validity Not Before: Jun 17 13:25:00 2025 GMT Not After : Jun 20 22:36:00 2025 GMT Subject: CN=FA5AF656959044C7693F1CF46A76A286F75FA0FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:95:9e:2d:d6:a9:f4:7d:07:b3:4c:00:aa:05: dc:83:5d:38:69:cc:3a:10:54:1b:1f:31:e9:d5:f0: e2:4e:77:d0:b2:42:08:bf:4f:65:eb:7c:81:b5:cd: b3:5e:fc:32:a6:33:a5:62:d2:07:1a:42:13:92:f4: fd:3e:02:80:f4:3d:7c:b0:ae:0b:6d:64:4d:6b:54: e4:4a:99:ec:8a:0c:4f:65:e8:59:b3:fa:43:5f:54: 96:1c:16:ff:18:98:d6:e5:ab:a2:2b:8a:96:fb:80: 03:0c:d2:9e:da:e5:9b:d7:c5:b1:64:01:bd:0f:46: 09:47:f3:a2:fa:11:89:d6:42:4f:2b:78:f0:e5:9e: 3b:b4:75:c9:53:c3:5b:dd:7b:04:fc:42:67:e8:00: e3:7a:12:35:c4:8f:e7:f3:b8:1a:bc:43:e8:64:21: 6f:48:dd:d6:0d:3c:b8:d8:31:2a:24:a6:8f:7f:04: 1c:21:cc:f0:0c:14:b3:c8:c4:41:3b:a2:8a:8e:36: 1b:4e:66:4e:0c:65:2d:a6:77:0a:50:a2:0c:7f:ad: 7e:45:33:47:e9:8e:6b:cf:e0:79:ee:80:68:9d:cc: 8e:fa:30:04:de:06:21:7a:f5:af:ae:6f:8d:09:a4: d7:a1:2e:c4:19:52:fb:ca:f9:d4:76:0f:21:ed:c5: a5:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:5A:F6:56:95:90:44:C7:69:3F:1C:F4:6A:76:A2:86:F7:5F:A0:FF X509v3 Authority Key Identifier: keyid:89:DC:D9:E9:EB:54:2D:20:2B:A3:6C:B4:4C:E7:5A:D7:43:EF:54:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/14258e5c-0456-46a3-9632-709c767104bb/0/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14258e5c-0456-46a3-9632-709c767104bb/0/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption f6:72:d1:84:6f:fd:9a:04:2d:4f:3e:39:6f:54:2a:d2:a6:00: b6:f5:72:af:f8:7b:c1:62:fd:5c:8c:44:6c:bd:af:27:82:a1: 51:00:dc:9e:58:3a:31:9b:5f:57:4a:7b:69:63:3f:84:cf:db: 9c:21:00:d1:8c:e6:22:91:f6:8c:e3:01:c8:7b:d2:cf:62:f0: 90:47:6c:ac:f4:c0:a3:cb:61:0c:f7:8d:4e:81:a0:96:24:71: 29:3f:1c:7b:79:a0:3d:9b:5d:5c:9d:34:0d:da:d3:1b:a5:d7: d5:c8:cf:dd:99:68:c1:aa:3e:06:e0:da:60:b7:13:ea:61:97: 4a:6d:f6:bb:e7:29:37:73:e6:84:26:c7:d8:a2:4a:d2:4a:ba: 91:4b:8c:90:dc:b4:9d:b8:e8:8d:4b:c3:9d:ed:53:f6:ca:a5: 5b:b9:98:74:59:d8:64:f4:43:45:d7:14:82:0d:4e:6d:4c:7a: 61:6c:4e:60:25:8c:a1:fb:31:26:33:cf:34:38:1b:fb:bc:6e: d6:ed:fb:30:7d:e0:3a:18:36:13:bc:3a:d6:fa:12:6b:0a:4b: a3:a0:87:a8:28:81:ea:1b:f5:81:ab:19:3c:b1:22:93:81:b3: 67:88:75:4d:26:51:de:59:ef:9d:9e:31:b0:52:23:56:8c:7c: 26:dc:a7:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNUOefRXypQz5TrO3WtgERQEYbw8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlEQ0Q5RTlFQjU0MkQyMDJCQTM2Q0I0NENFNzVBRDc0 M0VGNTQ0RTAeFw0yNTA2MTcxMzI1MDBaFw0yNTA2MjAyMjM2MDBaMDMxMTAvBgNV BAMTKEZBNUFGNjU2OTU5MDQ0Qzc2OTNGMUNGNDZBNzZBMjg2Rjc1RkEwRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCulZ4t1qn0fQezTACqBdyDXThp zDoQVBsfMenV8OJOd9CyQgi/T2XrfIG1zbNe/DKmM6Vi0gcaQhOS9P0+AoD0PXyw rgttZE1rVORKmeyKDE9l6Fmz+kNfVJYcFv8YmNblq6Iripb7gAMM0p7a5ZvXxbFk Ab0PRglH86L6EYnWQk8rePDlnju0dclTw1vdewT8QmfoAON6EjXEj+fzuBq8Q+hk IW9I3dYNPLjYMSokpo9/BBwhzPAMFLPIxEE7ooqONhtOZk4MZS2mdwpQogx/rX5F M0fpjmvP4HnugGidzI76MATeBiF69a+ub40JpNehLsQZUvvK+dR2DyHtxaXTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+lr2VpWQRMdpPxz0anaihvdfoP8wHwYDVR0j BBgwFoAUidzZ6etULSAro2y0TOda10PvVE4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDI1OGU1Yy0wNDU2LTQ2YTMtOTYzMi03MDljNzY3MTA0YmIvMC84OURDRDlFOUVC NTQyRDIwMkJBMzZDQjQ0Q0U3NUFENzQzRUY1NDRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODlEQ0Q5RTlFQjU0MkQyMDJCQTM2Q0I0NENFNzVBRDc0M0VG NTQ0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQyNThlNWMtMDQ1Ni00NmEzLTk2 MzItNzA5Yzc2NzEwNGJiLzAvODlEQ0Q5RTlFQjU0MkQyMDJCQTM2Q0I0NENFNzVB RDc0M0VGNTQ0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAPZy0YRv/ZoELU8+OW9UKtKmALb1cq/4e8Fi /VyMRGy9ryeCoVEA3J5YOjGbX1dKe2ljP4TP25whANGM5iKR9ozjAch70s9i8JBH bKz0wKPLYQz3jU6BoJYkcSk/HHt5oD2bXVydNA3a0xul19XIz92ZaMGqPgbg2mC3 E+phl0pt9rvnKTdz5oQmx9iiStJKupFLjJDctJ246I1Lw53tU/bKpVu5mHRZ2GT0 Q0XXFIINTm1MemFsTmAljKH7MSYzzzQ4G/u8btbt+zB94DoYNhO8Otb6EmsKS6Og h6gogeob9YGrGTyxIpOBs2eIdU0mUd5Z752eMbBSI1aMfCbcp/M= -----END CERTIFICATE-----Generated at Thu Jun 19 12:41:49 2025 by rpki-client