$ rpki-client -vvf repo-rpki.idnic.net/repo/14258e5c-0456-46a3-9632-709c767104bb/0/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.mft File: 89DCD9E9EB542D202BA36CB44CE75AD743EF544E.mft (raw, json) Hash identifier: K9CZ3sl+BNP5EN2hrpb3wGsbsI4pGVAI6UNzrlhzCWc= Subject key identifier: 22:0F:66:A6:32:57:E4:70:C7:73:95:58:1C:67:0E:A8:D3:AF:1F:D6 Authority key identifier: 89:DC:D9:E9:EB:54:2D:20:2B:A3:6C:B4:4C:E7:5A:D7:43:EF:54:4E Certificate issuer: /CN=89DCD9E9EB542D202BA36CB44CE75AD743EF544E Certificate serial: 3D629A75B99A949BDA0E7CE284EDFF273FCCE00C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/14258e5c-0456-46a3-9632-709c767104bb/0/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.mft Manifest number: F4 Signing time: Wed 06 Aug 2025 22:20:00 +0000 Manifest this update: Wed 06 Aug 2025 22:15:00 +0000 Manifest next update: Sun 10 Aug 2025 07:46:00 +0000 Files and hashes: 1: 3135372e31302e3135382e302f32342d3234203d3e20313532333535.roa (hash: PTT9MsWDPwZ9cRzvcXmuxxhA2JhY1zsKHAXPKrnZx/M=) 2: 3135372e31302e3135382e302f32332d3233203d3e20313532333535.roa (hash: lquMzYc1A9WezJfZrkZ7IH+M206UU3pQd22VWaKYVvM=) 3: 3135372e31302e3135392e302f32342d3234203d3e20313532333535.roa (hash: dGVpmdtEGT3h+fNYGvG5smP/PxkVYYYHGNHC/rEeLpo=) 4: 89DCD9E9EB542D202BA36CB44CE75AD743EF544E.crl (hash: /qe43LPDNG7lerwoKda3OXKGblKjuA1WsgJske3UMt8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/14258e5c-0456-46a3-9632-709c767104bb/0/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.crl rsync://repo-rpki.idnic.net/repo/14258e5c-0456-46a3-9632-709c767104bb/0/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 07:46:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:62:9a:75:b9:9a:94:9b:da:0e:7c:e2:84:ed:ff:27:3f:cc:e0:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89DCD9E9EB542D202BA36CB44CE75AD743EF544E Validity Not Before: Aug 6 22:15:00 2025 GMT Not After : Aug 10 07:46:00 2025 GMT Subject: CN=220F66A63257E470C77395581C670EA8D3AF1FD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e5:dd:a4:75:e9:bc:52:e8:84:49:62:d9:09: b5:02:5b:eb:92:c3:5d:e8:5f:71:10:12:3f:9a:70: bc:f7:d9:02:b0:20:c6:e5:68:f1:01:8e:a6:84:34: d1:e0:95:e2:e7:80:62:33:38:71:e8:dd:6f:c3:0b: 37:57:a5:7c:37:49:bf:36:2f:c7:a7:1a:20:3e:57: e3:3f:fc:e1:fe:c7:4b:bf:46:ca:7a:52:b9:5c:a4: 7e:89:21:da:83:93:2e:57:51:9e:87:63:38:c3:0e: 69:c3:3e:95:6a:9c:72:f5:2e:33:a2:1a:61:2b:f3: fa:4c:40:af:69:92:7b:b0:48:0a:0e:30:b2:c1:86: bf:77:c8:16:aa:1f:53:d0:5c:56:19:7d:33:85:95: 79:81:3f:78:4a:a0:c4:f1:7a:af:e0:55:e0:2d:f6: d4:f7:e6:3c:b2:16:52:7f:24:f6:30:ed:2e:b4:93: 55:c2:89:25:b1:67:d5:32:d4:a5:a8:b0:39:9d:8e: 36:03:18:76:61:99:80:a0:5f:17:d0:69:20:05:66: 5f:6d:df:a0:b0:7d:40:bd:a5:62:6b:ed:f5:5f:e0: 80:f9:a9:0d:f6:46:eb:55:0e:69:4a:dd:b1:00:40: f2:9f:2a:b0:8b:ee:d7:68:2d:7e:11:bc:8f:75:24: 6e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:0F:66:A6:32:57:E4:70:C7:73:95:58:1C:67:0E:A8:D3:AF:1F:D6 X509v3 Authority Key Identifier: keyid:89:DC:D9:E9:EB:54:2D:20:2B:A3:6C:B4:4C:E7:5A:D7:43:EF:54:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/14258e5c-0456-46a3-9632-709c767104bb/0/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14258e5c-0456-46a3-9632-709c767104bb/0/89DCD9E9EB542D202BA36CB44CE75AD743EF544E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:54:d6:b1:3b:12:5a:65:85:1c:60:cf:65:95:60:61:72:50: 85:b7:a7:da:1e:1c:33:aa:36:1a:5b:6d:45:5b:fc:4c:d6:69: 50:13:c9:93:2b:1c:73:f0:96:f9:88:3b:d6:fa:51:d6:03:d0: 4d:2d:e6:75:73:49:69:12:83:03:94:db:ef:7e:a9:b3:d7:51: 91:8f:a9:e9:fe:4d:cc:69:f5:05:59:6f:d9:3c:6c:08:02:d2: 09:ac:ca:f9:48:d4:85:ac:4a:b4:c5:09:a7:db:39:dd:eb:ba: 22:06:7f:84:57:d3:d3:54:05:26:f8:6c:97:50:e4:12:8d:db: b9:bc:87:f7:c7:f8:f8:36:a2:09:f1:cd:e4:68:86:61:fe:43: 41:a2:9e:ab:51:d3:94:b7:b4:ba:5f:4d:fe:37:b6:b2:11:fc: 3d:2b:9b:2b:7e:8b:d6:7a:7a:37:86:03:e9:f4:58:58:44:fc: d5:94:d7:dc:fd:a0:02:96:bc:8e:7b:67:7e:51:92:43:2f:77: f2:98:f2:5a:5a:3f:a6:b7:34:15:58:47:ec:3e:3d:ee:9f:bc: ad:a2:46:ce:01:4c:26:bb:b8:24:d0:9a:87:77:46:19:49:7a: 79:26:28:56:c5:41:c4:7f:1d:08:d4:1d:91:41:c3:86:1b:fe: 16:a9:71:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPWKadbmalJvaDnzihO3/Jz/M4AwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlEQ0Q5RTlFQjU0MkQyMDJCQTM2Q0I0NENFNzVBRDc0 M0VGNTQ0RTAeFw0yNTA4MDYyMjE1MDBaFw0yNTA4MTAwNzQ2MDBaMDMxMTAvBgNV BAMTKDIyMEY2NkE2MzI1N0U0NzBDNzczOTU1ODFDNjcwRUE4RDNBRjFGRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc5d2kdem8UuiESWLZCbUCW+uS w13oX3EQEj+acLz32QKwIMblaPEBjqaENNHgleLngGIzOHHo3W/DCzdXpXw3Sb82 L8enGiA+V+M//OH+x0u/Rsp6UrlcpH6JIdqDky5XUZ6HYzjDDmnDPpVqnHL1LjOi GmEr8/pMQK9pknuwSAoOMLLBhr93yBaqH1PQXFYZfTOFlXmBP3hKoMTxeq/gVeAt 9tT35jyyFlJ/JPYw7S60k1XCiSWxZ9Uy1KWosDmdjjYDGHZhmYCgXxfQaSAFZl9t 36CwfUC9pWJr7fVf4ID5qQ32RutVDmlK3bEAQPKfKrCL7tdoLX4RvI91JG6fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIg9mpjJX5HDHc5VYHGcOqNOvH9YwHwYDVR0j BBgwFoAUidzZ6etULSAro2y0TOda10PvVE4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDI1OGU1Yy0wNDU2LTQ2YTMtOTYzMi03MDljNzY3MTA0YmIvMC84OURDRDlFOUVC NTQyRDIwMkJBMzZDQjQ0Q0U3NUFENzQzRUY1NDRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODlEQ0Q5RTlFQjU0MkQyMDJCQTM2Q0I0NENFNzVBRDc0M0VG NTQ0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQyNThlNWMtMDQ1Ni00NmEzLTk2 MzItNzA5Yzc2NzEwNGJiLzAvODlEQ0Q5RTlFQjU0MkQyMDJCQTM2Q0I0NENFNzVB RDc0M0VGNTQ0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMZU1rE7ElplhRxgz2WVYGFyUIW3p9oeHDOq NhpbbUVb/EzWaVATyZMrHHPwlvmIO9b6UdYD0E0t5nVzSWkSgwOU2+9+qbPXUZGP qen+Tcxp9QVZb9k8bAgC0gmsyvlI1IWsSrTFCafbOd3ruiIGf4RX09NUBSb4bJdQ 5BKN27m8h/fH+Pg2ognxzeRohmH+Q0GinqtR05S3tLpfTf43trIR/D0rmyt+i9Z6 ejeGA+n0WFhE/NWU19z9oAKWvI57Z35RkkMvd/KY8lpaP6a3NBVYR+w+Pe6fvK2i Rs4BTCa7uCTQmod3RhlJenkmKFbFQcR/HQjUHZFBw4Yb/hapceI= -----END CERTIFICATE-----Generated at Thu Aug 7 11:21:56 2025 by rpki-client