$ rpki-client -vvf repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft File: 889933E416F356762F7F72858168C9C8A2E241C7.mft (raw, json) Hash identifier: 8tn7l62XboTIOm5DusmIwtoCZH0D1Ga6EZ0aZlSMCcs= Subject key identifier: 6A:CA:70:CC:01:69:94:45:C1:D2:75:7D:E5:42:6B:C0:D9:7D:ED:AD Authority key identifier: 88:99:33:E4:16:F3:56:76:2F:7F:72:85:81:68:C9:C8:A2:E2:41:C7 Certificate issuer: /CN=889933E416F356762F7F72858168C9C8A2E241C7 Certificate serial: 387E81418D04C69A60DBA8F93AFFABDA0E51FA88 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/889933E416F356762F7F72858168C9C8A2E241C7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft Manifest number: 01D2 Signing time: Sat 09 Aug 2025 08:10:36 +0000 Manifest this update: Sat 09 Aug 2025 08:05:36 +0000 Manifest next update: Tue 12 Aug 2025 16:36:36 +0000 Files and hashes: 1: 889933E416F356762F7F72858168C9C8A2E241C7.crl (hash: 95h8EnWzGQ0hyzj2Veu1gZg10YCjfJVq+JMGP9GyPLM=) 2: 3130332e3136372e3233362e302f32342d3234203d3e20313432333038.roa (hash: uTvbyRMa3JtSusZO5ZSoZ1ULN8brLrTNIGs82j6nGCw=) 3: 3130332e3136372e3233372e302f32342d3234203d3e20313432333038.roa (hash: 0nr9gPQw5gg7weyVjVjmP4Ms0ouXxZyEGyyMhhjUA3E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.crl rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/889933E416F356762F7F72858168C9C8A2E241C7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 16:36:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:7e:81:41:8d:04:c6:9a:60:db:a8:f9:3a:ff:ab:da:0e:51:fa:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=889933E416F356762F7F72858168C9C8A2E241C7 Validity Not Before: Aug 9 08:05:36 2025 GMT Not After : Aug 12 16:36:36 2025 GMT Subject: CN=6ACA70CC01699445C1D2757DE5426BC0D97DEDAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:3d:78:3d:64:00:d0:04:73:5a:41:47:18:53: 05:39:06:ef:30:fe:c1:b5:eb:0e:23:25:e8:2a:e0: ce:b4:62:d8:cf:b8:74:de:6e:aa:1c:3a:46:53:3c: 28:00:f9:71:6e:93:41:f2:93:b7:d6:9e:b8:ff:7f: 42:7e:a7:3c:9a:e4:99:05:39:54:d4:35:9a:6b:3f: a8:d8:4a:04:b5:71:43:84:c0:41:f2:77:fd:45:95: e3:2d:6d:62:4d:ea:ce:14:a1:ec:cc:f0:c9:c9:d3: 13:cf:7a:97:57:99:0e:4d:bb:8c:4b:fc:14:5b:d2: 42:b7:8c:e2:2a:7d:3e:16:a6:4f:d0:e2:90:30:cc: 4b:11:55:76:50:30:da:8e:a2:d4:6a:5c:02:f0:81: 92:81:a1:28:ce:f6:16:ca:63:62:66:40:d7:32:28: e2:1c:10:77:e6:86:8d:23:6b:2d:d0:aa:ad:af:e0: 23:25:a3:4a:2d:bc:74:92:22:07:2c:04:53:b3:92: c2:35:e5:81:e6:fa:8a:b2:a3:6f:ca:f0:c5:74:97: 0d:71:3e:d1:18:39:0c:e5:36:48:ad:8a:b1:00:25: 6f:56:70:e7:80:5a:2e:82:71:9d:00:41:aa:20:94: a1:e8:56:1a:ca:ed:eb:e2:32:0d:66:6a:34:f0:52: c7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:CA:70:CC:01:69:94:45:C1:D2:75:7D:E5:42:6B:C0:D9:7D:ED:AD X509v3 Authority Key Identifier: keyid:88:99:33:E4:16:F3:56:76:2F:7F:72:85:81:68:C9:C8:A2:E2:41:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/889933E416F356762F7F72858168C9C8A2E241C7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:5a:e4:cd:2e:93:15:d7:d8:fd:fc:83:9b:d7:84:08:3b:1b: 1e:97:0f:a4:68:e3:7d:fe:79:6b:97:3c:c2:4f:d8:90:77:f9: 7b:a9:22:65:05:e7:47:6d:40:2c:89:4a:a8:b1:11:ed:0c:7a: ce:ac:15:13:0f:bc:b4:76:7f:12:4b:b6:4a:9c:ac:60:00:a4: 63:b4:7e:74:37:5d:39:c3:5e:05:61:19:72:b0:f8:78:36:97: 8a:a3:66:42:95:c9:22:af:4b:eb:4c:88:83:da:04:eb:e3:62: 64:ee:7a:9e:4b:b5:ef:99:e8:bf:dd:b2:27:37:c1:f6:7d:d7: 63:91:ab:50:60:58:ce:98:07:c8:24:1c:53:75:03:39:f3:7b: e0:82:cb:5b:ad:b3:c9:86:39:b3:1b:14:36:d2:66:9b:6e:6e: 1a:7d:03:a6:3c:cf:d1:c0:8f:55:a7:c0:e3:10:b0:1c:01:e5: 4d:98:88:ff:7a:ca:75:27:c5:2a:ae:93:54:17:97:9a:f4:be: 5e:54:af:4d:78:7e:8b:07:d0:db:19:d0:27:b1:29:42:5e:36: e4:e9:5e:2c:6f:96:be:67:2b:08:a7:7e:7b:57:8d:b4:db:f0: 65:1d:b2:05:52:5b:6e:28:85:83:39:d1:9b:14:99:af:a8:d5: e6:26:cb:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOH6BQY0Exppg26j5Ov+r2g5R+ogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg5OTMzRTQxNkYzNTY3NjJGN0Y3Mjg1ODE2OEM5QzhB MkUyNDFDNzAeFw0yNTA4MDkwODA1MzZaFw0yNTA4MTIxNjM2MzZaMDMxMTAvBgNV BAMTKDZBQ0E3MENDMDE2OTk0NDVDMUQyNzU3REU1NDI2QkMwRDk3REVEQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEPXg9ZADQBHNaQUcYUwU5Bu8w /sG16w4jJegq4M60YtjPuHTebqocOkZTPCgA+XFuk0Hyk7fWnrj/f0J+pzya5JkF OVTUNZprP6jYSgS1cUOEwEHyd/1FleMtbWJN6s4UoezM8MnJ0xPPepdXmQ5Nu4xL /BRb0kK3jOIqfT4Wpk/Q4pAwzEsRVXZQMNqOotRqXALwgZKBoSjO9hbKY2JmQNcy KOIcEHfmho0jay3Qqq2v4CMlo0otvHSSIgcsBFOzksI15YHm+oqyo2/K8MV0lw1x PtEYOQzlNkitirEAJW9WcOeAWi6CcZ0AQaoglKHoVhrK7eviMg1majTwUsf5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaspwzAFplEXB0nV95UJrwNl97a0wHwYDVR0j BBgwFoAUiJkz5BbzVnYvf3KFgWjJyKLiQccwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZWNmZDNmNS04NWRhLTQ4YTctYjUwMi1mNjFhNTk3OTZjMzMvMC84ODk5MzNFNDE2 RjM1Njc2MkY3RjcyODU4MTY4QzlDOEEyRTI0MUM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODg5OTMzRTQxNkYzNTY3NjJGN0Y3Mjg1ODE2OEM5QzhBMkUy NDFDNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWVjZmQzZjUtODVkYS00OGE3LWI1 MDItZjYxYTU5Nzk2YzMzLzAvODg5OTMzRTQxNkYzNTY3NjJGN0Y3Mjg1ODE2OEM5 QzhBMkUyNDFDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFFa5M0ukxXX2P38g5vXhAg7Gx6XD6Ro433+ eWuXPMJP2JB3+XupImUF50dtQCyJSqixEe0Mes6sFRMPvLR2fxJLtkqcrGAApGO0 fnQ3XTnDXgVhGXKw+Hg2l4qjZkKVySKvS+tMiIPaBOvjYmTuep5Lte+Z6L/dsic3 wfZ912ORq1BgWM6YB8gkHFN1Aznze+CCy1uts8mGObMbFDbSZptubhp9A6Y8z9HA j1WnwOMQsBwB5U2YiP96ynUnxSquk1QXl5r0vl5Ur014fosH0NsZ0CexKUJeNuTp Xixvlr5nKwinfntXjbTb8GUdsgVSW24ohYM50ZsUma+o1eYmy6A= -----END CERTIFICATE-----Generated at Sat Aug 9 22:35:24 2025 by rpki-client