$ rpki-client -vvf repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft File: 889933E416F356762F7F72858168C9C8A2E241C7.mft (raw, json) Hash identifier: hZb65jnvYmJBOhIeh1p9cjuwTPkVr0yQAFdguOr9HkQ= Subject key identifier: 83:85:56:01:EE:4B:17:9A:39:8E:7F:EC:F0:9A:9B:93:20:37:57:68 Authority key identifier: 88:99:33:E4:16:F3:56:76:2F:7F:72:85:81:68:C9:C8:A2:E2:41:C7 Certificate issuer: /CN=889933E416F356762F7F72858168C9C8A2E241C7 Certificate serial: 2F848E77702221731AD9B112B204E2522B6E52B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/889933E416F356762F7F72858168C9C8A2E241C7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft Manifest number: 01BA Signing time: Sat 14 Jun 2025 16:10:35 +0000 Manifest this update: Sat 14 Jun 2025 16:05:35 +0000 Manifest next update: Wed 18 Jun 2025 01:35:35 +0000 Files and hashes: 1: 3130332e3136372e3233362e302f32342d3234203d3e20313432333038.roa (hash: uTvbyRMa3JtSusZO5ZSoZ1ULN8brLrTNIGs82j6nGCw=) 2: 889933E416F356762F7F72858168C9C8A2E241C7.crl (hash: +Q+0SslKdTrXMVk7PYW+wSuskOMSQCB/oRBaPoUoXpc=) 3: 3130332e3136372e3233372e302f32342d3234203d3e20313432333038.roa (hash: 0nr9gPQw5gg7weyVjVjmP4Ms0ouXxZyEGyyMhhjUA3E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.crl rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/889933E416F356762F7F72858168C9C8A2E241C7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 01:35:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:84:8e:77:70:22:21:73:1a:d9:b1:12:b2:04:e2:52:2b:6e:52:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=889933E416F356762F7F72858168C9C8A2E241C7 Validity Not Before: Jun 14 16:05:35 2025 GMT Not After : Jun 18 01:35:35 2025 GMT Subject: CN=83855601EE4B179A398E7FECF09A9B9320375768 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f1:e3:d4:bc:3d:e9:15:7e:34:a3:85:a1:2b: e9:3d:e5:c2:ae:8c:f9:de:89:25:a5:c1:42:2d:f9: e3:19:f9:65:ca:b3:94:bb:ef:4e:30:7e:da:26:df: d0:d7:64:f8:64:86:f6:04:4c:0e:f3:cc:81:76:b6: 86:99:23:7b:03:d7:df:37:88:18:cf:73:d5:df:be: 76:1f:4e:e0:7b:19:34:0c:cd:d0:59:5c:58:3e:95: d2:40:a1:45:7d:26:b1:4a:97:57:0c:13:91:59:a2: e3:4a:b6:63:02:9f:ad:0f:2d:ec:be:d8:35:d9:63: 95:36:e4:52:47:c7:f3:08:f0:5d:12:ad:ad:4e:55: a7:92:9d:9d:50:ad:21:a9:73:c0:91:d7:cd:e5:7b: 57:d0:95:c6:e4:7a:bb:68:fc:18:67:6b:b0:0b:17: 7a:c1:1e:47:91:9d:8c:75:d8:d5:ac:3f:fa:a7:ea: df:f3:6e:fd:56:d3:62:91:4a:07:c2:c7:12:70:1f: 95:31:33:a1:f3:9c:79:cd:6a:ee:45:0c:19:92:a3: 94:03:04:0f:ff:c2:8f:d0:88:93:ef:33:d6:dd:fc: 3f:ec:cb:58:d2:da:75:34:10:10:dd:13:bb:ff:f5: c1:4d:a4:be:a4:39:d4:d1:be:e4:f9:03:43:d4:89: 14:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:85:56:01:EE:4B:17:9A:39:8E:7F:EC:F0:9A:9B:93:20:37:57:68 X509v3 Authority Key Identifier: keyid:88:99:33:E4:16:F3:56:76:2F:7F:72:85:81:68:C9:C8:A2:E2:41:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/889933E416F356762F7F72858168C9C8A2E241C7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ecfd3f5-85da-48a7-b502-f61a59796c33/0/889933E416F356762F7F72858168C9C8A2E241C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:52:b7:10:30:e1:21:a7:5b:64:f1:60:55:8a:e5:cc:5d:5e: 7f:45:cb:14:68:96:30:30:7e:10:3c:e8:b1:bc:01:51:b7:4d: b1:ac:12:56:38:70:7a:fe:fe:ab:19:3f:4b:be:dc:4b:36:b6: 5d:32:b4:79:91:f6:6a:43:a8:c8:db:20:ae:b8:98:e2:28:73: d5:ef:3b:60:c9:f3:73:c2:55:d6:4b:c7:04:64:c6:68:5b:a2: 97:60:43:e3:e8:8a:0f:72:bb:27:04:30:2c:66:9c:29:8b:9c: 77:b8:d2:48:94:f1:0e:0f:87:52:c4:4f:11:32:a8:a9:a9:11: 15:26:c4:d2:81:4b:e9:0b:8b:fe:c1:75:97:29:22:89:5a:24: ef:76:03:6c:c6:0d:c5:3f:47:0e:05:16:3c:9f:a9:ad:8c:8e: 50:4b:ee:f6:6a:a0:8d:1b:2d:52:21:11:2c:b2:63:1f:a9:53: 87:e6:91:c6:b4:27:dd:2a:86:80:95:13:89:b2:d3:2c:43:f2: 15:9b:49:57:86:bf:c1:72:a5:57:2c:19:f5:c8:e3:70:41:c1: 40:b8:50:07:d6:70:8e:ec:dd:39:05:67:6d:62:d8:04:68:48: 98:d8:f5:eb:97:b4:5e:c8:f5:f2:52:4c:0e:45:50:47:0b:d7: 44:ae:31:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL4SOd3AiIXMa2bESsgTiUituUrEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODg5OTMzRTQxNkYzNTY3NjJGN0Y3Mjg1ODE2OEM5QzhB MkUyNDFDNzAeFw0yNTA2MTQxNjA1MzVaFw0yNTA2MTgwMTM1MzVaMDMxMTAvBgNV BAMTKDgzODU1NjAxRUU0QjE3OUEzOThFN0ZFQ0YwOUE5QjkzMjAzNzU3NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI8ePUvD3pFX40o4WhK+k95cKu jPneiSWlwUIt+eMZ+WXKs5S7704wftom39DXZPhkhvYETA7zzIF2toaZI3sD1983 iBjPc9XfvnYfTuB7GTQMzdBZXFg+ldJAoUV9JrFKl1cME5FZouNKtmMCn60PLey+ 2DXZY5U25FJHx/MI8F0Sra1OVaeSnZ1QrSGpc8CR183le1fQlcbkerto/Bhna7AL F3rBHkeRnYx12NWsP/qn6t/zbv1W02KRSgfCxxJwH5UxM6HznHnNau5FDBmSo5QD BA//wo/QiJPvM9bd/D/sy1jS2nU0EBDdE7v/9cFNpL6kOdTRvuT5A0PUiRSHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg4VWAe5LF5o5jn/s8JqbkyA3V2gwHwYDVR0j BBgwFoAUiJkz5BbzVnYvf3KFgWjJyKLiQccwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZWNmZDNmNS04NWRhLTQ4YTctYjUwMi1mNjFhNTk3OTZjMzMvMC84ODk5MzNFNDE2 RjM1Njc2MkY3RjcyODU4MTY4QzlDOEEyRTI0MUM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODg5OTMzRTQxNkYzNTY3NjJGN0Y3Mjg1ODE2OEM5QzhBMkUy NDFDNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWVjZmQzZjUtODVkYS00OGE3LWI1 MDItZjYxYTU5Nzk2YzMzLzAvODg5OTMzRTQxNkYzNTY3NjJGN0Y3Mjg1ODE2OEM5 QzhBMkUyNDFDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMxStxAw4SGnW2TxYFWK5cxdXn9FyxRoljAw fhA86LG8AVG3TbGsElY4cHr+/qsZP0u+3Es2tl0ytHmR9mpDqMjbIK64mOIoc9Xv O2DJ83PCVdZLxwRkxmhbopdgQ+Poig9yuycEMCxmnCmLnHe40kiU8Q4Ph1LETxEy qKmpERUmxNKBS+kLi/7BdZcpIolaJO92A2zGDcU/Rw4FFjyfqa2MjlBL7vZqoI0b LVIhESyyYx+pU4fmkca0J90qhoCVE4my0yxD8hWbSVeGv8FypVcsGfXI43BBwUC4 UAfWcI7s3TkFZ21i2ARoSJjY9euXtF7I9fJSTA5FUEcL10SuMVs= -----END CERTIFICATE-----Generated at Sun Jun 15 17:32:05 2025 by rpki-client