$ rpki-client -vvf repo-rpki.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/8989D0431453556F22D882A21B2BBB9F4E4A2C24.mft File: 8989D0431453556F22D882A21B2BBB9F4E4A2C24.mft (raw, json) Hash identifier: kybHcwVHQict9fnJOvqF4De7pxzxvFEGbXtjPwDg+WY= Subject key identifier: 19:EA:B3:5D:EF:74:ED:7D:F3:EE:C3:57:CF:03:E8:F3:34:40:5F:3C Authority key identifier: 89:89:D0:43:14:53:55:6F:22:D8:82:A2:1B:2B:BB:9F:4E:4A:2C:24 Certificate issuer: /CN=8989D0431453556F22D882A21B2BBB9F4E4A2C24 Certificate serial: 3E5417DA214BA2E574629CCF5F9CF772BA9455AE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8989D0431453556F22D882A21B2BBB9F4E4A2C24.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/8989D0431453556F22D882A21B2BBB9F4E4A2C24.mft Manifest number: 01A5 Signing time: Mon 03 Nov 2025 21:22:18 +0000 Manifest this update: Mon 03 Nov 2025 21:17:18 +0000 Manifest next update: Thu 06 Nov 2025 23:37:18 +0000 Files and hashes: 1: 3130332e3133302e38322e302f32342d3234203d3e20313530393636.roa (hash: WdwAhrLb01WctAevsLo2E5F0+guZcHnuWIL6/QTKVQY=) 2: 8989D0431453556F22D882A21B2BBB9F4E4A2C24.crl (hash: y6WSsMv2hW0hso59u5FwaOX1i24zN2Rr06grsacmt8Q=) 3: 3130332e3133302e38332e302f32342d3234203d3e20313530393636.roa (hash: MueUJKcGkwue3xJukPLYM+05PMMpQl2v+Pz0FDXtNcM=) 4: 3130332e3133302e38322e302f32332d3233203d3e20313530393636.roa (hash: wzb3XBaqsWwxrRVk4X/B9M9lBaxhMB40Ug9owyKd8Yw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/8989D0431453556F22D882A21B2BBB9F4E4A2C24.crl rsync://repo-rpki.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/8989D0431453556F22D882A21B2BBB9F4E4A2C24.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8989D0431453556F22D882A21B2BBB9F4E4A2C24.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 23:37:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:54:17:da:21:4b:a2:e5:74:62:9c:cf:5f:9c:f7:72:ba:94:55:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8989D0431453556F22D882A21B2BBB9F4E4A2C24 Validity Not Before: Nov 3 21:17:18 2025 GMT Not After : Nov 6 23:37:18 2025 GMT Subject: CN=19EAB35DEF74ED7DF3EEC357CF03E8F334405F3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:cb:63:c5:6e:d4:bf:f4:1d:fd:e1:d2:4d:97: 9a:04:2d:97:dc:f7:45:1c:61:ed:5d:ce:33:9b:9f: 30:8b:75:27:96:88:73:fa:a4:72:8c:c4:97:61:a4: 01:9d:f8:67:2d:f4:67:27:6c:14:1f:f2:0c:4c:05: b2:c4:f9:93:b3:96:b5:4c:aa:c7:4c:8f:b0:42:bb: ed:53:53:98:67:79:08:db:ed:cf:74:77:3b:15:6b: 5f:f0:5f:9d:20:cc:35:c0:be:33:92:81:65:4e:10: dd:b6:5b:63:66:69:da:b1:f4:52:2a:8f:d5:f2:e7: 38:0b:0b:0d:cd:16:ae:b6:3f:af:59:ad:93:ef:0a: 25:60:e5:fd:bf:bb:b7:01:bf:ae:64:ac:33:c0:1c: f6:c4:4b:fe:b6:63:67:c4:05:38:53:28:5e:fb:b4: 8b:6c:42:17:9f:b4:c3:6e:63:6e:38:50:40:a9:1b: b1:c9:1d:f8:70:09:fa:b3:47:48:af:49:f1:52:9f: 15:9e:44:d3:99:ad:5c:af:0d:3c:b2:56:0f:62:0b: 2e:f6:87:34:5f:fb:8e:34:af:9f:65:48:83:17:02: bb:74:62:8f:dd:bc:5b:06:bc:fa:bc:a4:d2:94:00: 08:c4:c4:af:22:e1:1e:7e:28:1c:22:1c:f0:da:41: 70:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:EA:B3:5D:EF:74:ED:7D:F3:EE:C3:57:CF:03:E8:F3:34:40:5F:3C X509v3 Authority Key Identifier: keyid:89:89:D0:43:14:53:55:6F:22:D8:82:A2:1B:2B:BB:9F:4E:4A:2C:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/8989D0431453556F22D882A21B2BBB9F4E4A2C24.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8989D0431453556F22D882A21B2BBB9F4E4A2C24.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/8989D0431453556F22D882A21B2BBB9F4E4A2C24.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:7f:30:1f:42:ec:03:cd:ff:b6:f7:45:74:30:27:ac:c2:31: 21:93:11:35:38:6c:17:a4:6e:3c:bb:42:76:b8:e0:86:ea:64: 3f:21:3d:86:a8:12:45:c1:1f:a4:80:70:6d:ba:7f:a4:af:b4: b4:9e:10:99:a6:b4:d5:8d:74:4b:a7:01:03:cc:6c:21:5d:aa: 16:a9:38:4a:cb:88:49:6d:c2:e2:24:12:0a:8b:72:27:2b:46: b7:a7:ca:1b:13:2f:93:e9:29:a0:ee:06:6e:32:ad:b0:b2:6f: 37:d6:b8:54:0c:78:bb:80:d4:0c:eb:c7:77:ed:6f:40:ae:80: 02:ef:6a:4e:e1:f2:e1:87:5e:86:17:67:58:2e:72:ad:db:23: 02:d2:8e:86:1f:52:14:bf:37:82:8d:61:f7:3a:fd:46:f7:a1: 97:ca:a9:4e:fa:e9:ac:b4:20:61:d5:9d:9a:ea:92:5e:1e:e2: a8:b0:2b:d3:7f:7b:60:77:ba:b2:0d:28:34:82:2a:af:1a:90: 96:4d:40:f8:81:29:73:d5:b4:d9:82:b4:bf:5f:55:ff:96:e9: 57:cb:8e:36:ba:c9:6c:7c:3d:e9:d0:63:b5:83:eb:69:16:58: 7c:ef:60:12:4c:9f:4a:7c:dc:a7:fa:c6:77:52:e1:75:66:0b: cb:47:bc:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPlQX2iFLouV0YpzPX5z3crqUVa4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk4OUQwNDMxNDUzNTU2RjIyRDg4MkEyMUIyQkJCOUY0 RTRBMkMyNDAeFw0yNTExMDMyMTE3MThaFw0yNTExMDYyMzM3MThaMDMxMTAvBgNV BAMTKDE5RUFCMzVERUY3NEVEN0RGM0VFQzM1N0NGMDNFOEYzMzQ0MDVGM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDty2PFbtS/9B394dJNl5oELZfc 90UcYe1dzjObnzCLdSeWiHP6pHKMxJdhpAGd+Gct9GcnbBQf8gxMBbLE+ZOzlrVM qsdMj7BCu+1TU5hneQjb7c90dzsVa1/wX50gzDXAvjOSgWVOEN22W2Nmadqx9FIq j9Xy5zgLCw3NFq62P69ZrZPvCiVg5f2/u7cBv65krDPAHPbES/62Y2fEBThTKF77 tItsQheftMNuY244UECpG7HJHfhwCfqzR0ivSfFSnxWeRNOZrVyvDTyyVg9iCy72 hzRf+440r59lSIMXArt0Yo/dvFsGvPq8pNKUAAjExK8i4R5+KBwiHPDaQXCxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGeqzXe907X3z7sNXzwPo8zRAXzwwHwYDVR0j BBgwFoAUiYnQQxRTVW8i2IKiGyu7n05KLCQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YTg3MDY0Yi01ZjI3LTQyNzAtOTBlNC05OWY0M2FlODRkYjcvMC84OTg5RDA0MzE0 NTM1NTZGMjJEODgyQTIxQjJCQkI5RjRFNEEyQzI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODk4OUQwNDMxNDUzNTU2RjIyRDg4MkEyMUIyQkJCOUY0RTRB MkMyNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGE4NzA2NGItNWYyNy00MjcwLTkw ZTQtOTlmNDNhZTg0ZGI3LzAvODk4OUQwNDMxNDUzNTU2RjIyRDg4MkEyMUIyQkJC OUY0RTRBMkMyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAId/MB9C7APN/7b3RXQwJ6zCMSGTETU4bBek bjy7Qna44IbqZD8hPYaoEkXBH6SAcG26f6SvtLSeEJmmtNWNdEunAQPMbCFdqhap OErLiEltwuIkEgqLcicrRrenyhsTL5PpKaDuBm4yrbCybzfWuFQMeLuA1Azrx3ft b0CugALvak7h8uGHXoYXZ1gucq3bIwLSjoYfUhS/N4KNYfc6/Ub3oZfKqU766ay0 IGHVnZrqkl4e4qiwK9N/e2B3urINKDSCKq8akJZNQPiBKXPVtNmCtL9fVf+W6VfL jja6yWx8PenQY7WD62kWWHzvYBJMn0p83Kf6xndS4XVmC8tHvI8= -----END CERTIFICATE-----Generated at Tue Nov 4 12:46:33 2025 by rpki-client