
$ rpki-client -vvf repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.mft
File: C89AFDB015B4516342E4702244E8B8AC331B8669.mft (raw, json)
Hash identifier: Rd+abfSH/Q++hZ+rnAJdxidXn3MR2KGhWmkFC9/HkxY=
Subject key identifier: BB:20:E0:B9:74:07:F8:7A:51:8D:31:36:E2:3E:86:BD:15:21:CD:CC
Authority key identifier: C8:9A:FD:B0:15:B4:51:63:42:E4:70:22:44:E8:B8:AC:33:1B:86:69
Certificate issuer: /CN=C89AFDB015B4516342E4702244E8B8AC331B8669
Certificate serial: 5AAC8A7D23EA6DA208A92C124DE8700A9A59650D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C89AFDB015B4516342E4702244E8B8AC331B8669.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.mft
Manifest number: 0117
Signing time: Tue 04 Nov 2025 06:30:49 +0000
Manifest this update: Tue 04 Nov 2025 06:25:49 +0000
Manifest next update: Fri 07 Nov 2025 13:22:49 +0000
Files and hashes: 1: 3130332e34302e39342e302f32342d3234203d3e203633353036.roa (hash: yEUmOyWPO5f/A4sL+Yd825dO+D/6S8GK82Q3tLvqY0Q=)
2: C89AFDB015B4516342E4702244E8B8AC331B8669.crl (hash: cTlN54cJzAjY4nbqLeSIUgo+swd2jl4x4DfTf/1oR/8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.crl
rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C89AFDB015B4516342E4702244E8B8AC331B8669.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Nov 2025 13:22:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:ac:8a:7d:23:ea:6d:a2:08:a9:2c:12:4d:e8:70:0a:9a:59:65:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C89AFDB015B4516342E4702244E8B8AC331B8669
Validity
Not Before: Nov 4 06:25:49 2025 GMT
Not After : Nov 7 13:22:49 2025 GMT
Subject: CN=BB20E0B97407F87A518D3136E23E86BD1521CDCC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d6:9d:66:1e:21:23:19:44:ef:96:10:01:de:
f2:eb:be:53:58:ae:ea:55:b4:9c:0f:7d:8b:46:b6:
ba:a0:3e:eb:34:e1:8c:51:65:12:21:40:6a:67:a3:
93:23:ce:a1:18:7a:b3:f6:71:dd:61:b9:d3:43:35:
bd:93:c5:3c:cf:3a:25:26:d3:af:b7:62:04:75:0d:
c5:39:04:5b:89:4c:02:3d:fe:9c:ef:78:e6:96:67:
94:79:01:b5:ec:24:36:c0:26:cf:bf:de:1e:fe:be:
36:79:0e:56:e4:37:10:cd:09:9b:a9:9a:aa:41:a1:
73:40:82:1a:31:f4:4a:ac:49:42:36:d3:1a:c0:03:
1e:2f:49:75:8f:92:65:67:d6:af:3a:0f:f4:49:47:
dc:e5:0a:90:32:9c:e2:c2:0e:c5:e1:21:19:9c:a7:
05:d0:a8:af:fd:11:2a:23:15:eb:2d:b0:34:0c:89:
bc:49:49:09:c3:f5:c3:49:e3:f0:70:8e:53:bb:c1:
2a:6f:12:c8:df:1a:d1:e8:cf:66:d3:d5:d2:b4:d7:
55:3a:ea:47:a5:31:3f:b0:0a:8e:37:fd:8e:15:de:
c9:01:59:ee:38:e5:59:60:bf:fd:98:81:8c:c0:dd:
fb:79:45:2a:58:51:7a:7d:0b:bf:8a:27:39:4c:42:
aa:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:20:E0:B9:74:07:F8:7A:51:8D:31:36:E2:3E:86:BD:15:21:CD:CC
X509v3 Authority Key Identifier:
keyid:C8:9A:FD:B0:15:B4:51:63:42:E4:70:22:44:E8:B8:AC:33:1B:86:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C89AFDB015B4516342E4702244E8B8AC331B8669.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/1/C89AFDB015B4516342E4702244E8B8AC331B8669.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:a2:61:02:3d:bd:de:74:65:4a:91:c9:ad:47:0a:83:e8:90:
fd:e0:94:f2:17:72:c0:fb:e5:d2:18:2b:50:87:23:9f:53:ea:
c8:a4:20:1e:f0:f5:a0:5e:45:76:b7:e3:97:3d:cd:90:27:b1:
d4:56:fe:52:13:ab:16:04:cf:1b:81:e4:cb:b4:6d:a9:5b:5f:
5e:5c:66:12:74:9a:d7:02:98:89:c2:9a:7e:7e:a9:52:51:ba:
8f:e5:77:f4:b8:51:c4:15:ea:24:fb:a9:47:f9:0c:0f:7e:b2:
a9:6f:ae:a6:3b:43:9d:9f:58:91:16:5d:97:d4:bb:cf:ce:18:
cb:92:ce:58:29:47:38:4c:3f:34:5c:93:5d:8f:f8:b1:87:ad:
e0:8a:97:57:d4:d0:6f:e6:89:0c:bc:46:04:48:f5:5f:8c:48:
40:cd:5e:55:ea:18:d6:4f:18:cf:ec:3d:5c:75:9e:22:e6:79:
d8:b2:af:f1:b1:65:c0:b4:0e:c2:e4:6c:49:9f:31:2c:09:64:
1f:df:2f:f6:56:0f:88:52:c8:68:8c:95:fe:28:b0:76:26:22:
4c:9d:9b:93:5f:23:af:93:48:50:93:87:f8:ee:ae:76:dd:89:
e3:31:42:62:73:4e:ca:1c:ce:9f:3e:a7:a6:98:75:b4:8e:24:
3b:ce:95:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:19:23 2025 by rpki-client