$ rpki-client -vvf repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft File: 889933E416F356762F7F72858168C9C8A2E241C7.mft (raw, json) Hash identifier: xoSXt6mkMKHxF3l6sExgBwcKoBlhs/QdQjAc9vMCSes= Subject key identifier: 53:26:C2:95:E3:22:71:ED:C3:18:86:73:04:2E:35:20:D1:79:02:23 Authority key identifier: 88:99:33:E4:16:F3:56:76:2F:7F:72:85:81:68:C9:C8:A2:E2:41:C7 Certificate issuer: /CN=889933E416F356762F7F72858168C9C8A2E241C7 Certificate serial: 7B1AAA50734B0492B6D79CBFE6E0C9D65183A280 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/889933E416F356762F7F72858168C9C8A2E241C7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft Manifest number: 01FA Signing time: Mon 03 Nov 2025 22:00:37 +0000 Manifest this update: Mon 03 Nov 2025 21:55:37 +0000 Manifest next update: Thu 06 Nov 2025 22:22:37 +0000 Files and hashes: 1: 3130332e3136372e3233372e302f32342d3234203d3e20313432333038.roa (hash: hhBm/QT4y8ib7FGAltONinYNWg1PiVjj/mn1RgecAFk=) 2: 3130332e3136372e3233362e302f32342d3234203d3e20313432333038.roa (hash: 5GvdROYQ95okUa1oax+KkGlSNt0oNcXWExwR/dpYZcg=) 3: 889933E416F356762F7F72858168C9C8A2E241C7.crl (hash: vVB2qgonPzg+Q6Xf7eda33tWlfPGqAv7gAUGdtQ/67w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.crl rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/889933E416F356762F7F72858168C9C8A2E241C7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 22:22:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:1a:aa:50:73:4b:04:92:b6:d7:9c:bf:e6:e0:c9:d6:51:83:a2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=889933E416F356762F7F72858168C9C8A2E241C7 Validity Not Before: Nov 3 21:55:37 2025 GMT Not After : Nov 6 22:22:37 2025 GMT Subject: CN=5326C295E32271EDC3188673042E3520D1790223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cd:49:95:07:a0:b3:9c:ca:8b:78:56:54:09: 54:bf:01:c9:df:6f:ab:b6:86:a3:d5:b2:90:6d:15: 0f:5b:ef:5c:c0:7d:df:56:9d:06:c4:25:a0:c2:80: dd:14:11:43:38:89:ec:76:7b:f5:52:29:77:2d:d9: 4d:1d:15:3d:0b:ec:fe:ae:52:e5:78:89:fb:5e:78: e8:6f:36:97:a9:1b:f8:47:9b:f1:c2:86:cf:77:4c: a9:85:96:0c:e5:72:87:5b:8c:a3:57:54:a0:81:db: 7e:fd:09:7e:8b:cf:e0:0a:10:c4:68:fd:7d:9e:d1: 45:9b:63:37:9c:3e:5a:63:fd:01:54:12:53:a3:b4: 2d:35:db:6a:17:c5:b6:0b:47:99:8c:7c:5d:c6:3e: f1:cb:14:e2:d2:38:ee:50:53:5f:28:a9:25:d1:f3: d3:b1:c9:d4:20:32:71:bd:82:51:ba:87:d9:22:49: 2e:e5:dd:dd:5f:30:e0:6b:7f:e0:07:b7:c1:e5:e4: be:05:9a:8d:3b:af:6d:d8:a4:3d:ce:1e:3b:5e:c7: 5b:83:8d:aa:11:35:6a:6e:43:48:ce:49:b0:26:34: a4:a7:15:a6:a5:31:4f:c9:0c:f5:da:44:cc:4d:b6: 82:ec:e3:f7:4b:94:ef:09:10:ac:e9:11:bc:28:90: 33:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:26:C2:95:E3:22:71:ED:C3:18:86:73:04:2E:35:20:D1:79:02:23 X509v3 Authority Key Identifier: keyid:88:99:33:E4:16:F3:56:76:2F:7F:72:85:81:68:C9:C8:A2:E2:41:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/889933E416F356762F7F72858168C9C8A2E241C7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:2a:2d:82:d3:78:dd:74:e5:08:51:24:db:73:a4:1a:6d:77: e5:66:79:9a:38:ed:9e:f3:69:dc:20:38:59:54:13:60:ff:c2: 8a:bf:23:02:cb:db:53:67:53:50:df:ba:73:c3:fc:f4:b7:6c: c1:6c:f2:5d:a8:c2:b4:65:6a:51:31:91:d1:9c:82:d9:f2:07: 22:53:a4:9a:f2:7b:be:58:76:df:7f:41:b3:68:80:94:48:03: 08:b3:a4:bf:6e:8a:64:2f:6d:90:92:ad:47:07:93:98:1c:68: 2e:89:8d:5b:d7:5b:d3:a1:ab:0a:84:76:fe:d5:30:dc:3d:62: b1:a4:b3:37:65:fa:1b:ba:93:7e:09:69:66:1b:58:e7:e5:c3: 8b:2f:82:ab:75:28:4f:77:67:52:5d:59:38:c5:7d:54:f3:c7: 10:e5:78:f4:f7:57:d0:ea:4d:9a:f9:e5:cc:83:f8:4d:a7:0f: af:cb:0f:c9:04:7f:5d:ea:b8:5e:be:97:48:fa:7d:c7:a0:cb: f2:9c:50:91:2e:16:9c:d0:71:9c:c3:14:89:d1:41:f6:9a:43: 06:97:01:52:95:92:77:51:9c:39:81:26:ea:2a:5c:fd:4d:68: 17:a6:04:4a:be:f6:da:75:03:84:dc:80:7a:69:d1:96:ae:01: 63:4b:53:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUexqqUHNLBJK215y/5uDJ1lGDooAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg5OTMzRTQxNkYzNTY3NjJGN0Y3Mjg1ODE2OEM5QzhB MkUyNDFDNzAeFw0yNTExMDMyMTU1MzdaFw0yNTExMDYyMjIyMzdaMDMxMTAvBgNV BAMTKDUzMjZDMjk1RTMyMjcxRURDMzE4ODY3MzA0MkUzNTIwRDE3OTAyMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIzUmVB6CznMqLeFZUCVS/Acnf b6u2hqPVspBtFQ9b71zAfd9WnQbEJaDCgN0UEUM4iex2e/VSKXct2U0dFT0L7P6u UuV4ifteeOhvNpepG/hHm/HChs93TKmFlgzlcodbjKNXVKCB2379CX6Lz+AKEMRo /X2e0UWbYzecPlpj/QFUElOjtC0122oXxbYLR5mMfF3GPvHLFOLSOO5QU18oqSXR 89OxydQgMnG9glG6h9kiSS7l3d1fMOBrf+AHt8Hl5L4Fmo07r23YpD3OHjtex1uD jaoRNWpuQ0jOSbAmNKSnFaalMU/JDPXaRMxNtoLs4/dLlO8JEKzpEbwokDPrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUybCleMice3DGIZzBC41INF5AiMwHwYDVR0j BBgwFoAUiJkz5BbzVnYvf3KFgWjJyKLiQccwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZWNmZDNmNS04NWRhLTQ4YTctYjUwMi1mNjFhNTk3OTZjMzMvMC84ODk5MzNFNDE2 RjM1Njc2MkY3RjcyODU4MTY4QzlDOEEyRTI0MUM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODg5OTMzRTQxNkYzNTY3NjJGN0Y3Mjg1ODE2OEM5QzhBMkUy NDFDNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWVjZmQzZjUtODVkYS00OGE3LWI1 MDItZjYxYTU5Nzk2YzMzLzAvODg5OTMzRTQxNkYzNTY3NjJGN0Y3Mjg1ODE2OEM5 QzhBMkUyNDFDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG8qLYLTeN105QhRJNtzpBptd+VmeZo47Z7z adwgOFlUE2D/woq/IwLL21NnU1DfunPD/PS3bMFs8l2owrRlalExkdGcgtnyByJT pJrye75Ydt9/QbNogJRIAwizpL9uimQvbZCSrUcHk5gcaC6JjVvXW9OhqwqEdv7V MNw9YrGkszdl+hu6k34JaWYbWOflw4svgqt1KE93Z1JdWTjFfVTzxxDlePT3V9Dq TZr55cyD+E2nD6/LD8kEf13quF6+l0j6fcegy/KcUJEuFpzQcZzDFInRQfaaQwaX AVKVkndRnDmBJuoqXP1NaBemBEq+9tp1A4TcgHpp0ZauAWNLU/w= -----END CERTIFICATE-----Generated at Tue Nov 4 18:51:11 2025 by rpki-client