$ rpki-client -vvf repo-rpki.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/8989D0431453556F22D882A21B2BBB9F4E4A2C24.mft File: 8989D0431453556F22D882A21B2BBB9F4E4A2C24.mft (raw, json) Hash identifier: Qc0aH7eyo810o26Ex/nn49Vdvdm7X+nrUkulB+QrPBY= Subject key identifier: F8:3E:4A:CE:F3:90:3C:50:B9:70:E5:D6:B4:80:FB:F7:87:A9:3D:55 Authority key identifier: 89:89:D0:43:14:53:55:6F:22:D8:82:A2:1B:2B:BB:9F:4E:4A:2C:24 Certificate issuer: /CN=8989D0431453556F22D882A21B2BBB9F4E4A2C24 Certificate serial: 0A43048FCE1AFCB88F920D4BFFA3422FDC38BAA9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8989D0431453556F22D882A21B2BBB9F4E4A2C24.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/8989D0431453556F22D882A21B2BBB9F4E4A2C24.mft Manifest number: 0166 Signing time: Sun 15 Jun 2025 16:51:25 +0000 Manifest this update: Sun 15 Jun 2025 16:46:25 +0000 Manifest next update: Thu 19 Jun 2025 02:22:25 +0000 Files and hashes: 1: 3130332e3133302e38332e302f32342d3234203d3e20313530393636.roa (hash: MueUJKcGkwue3xJukPLYM+05PMMpQl2v+Pz0FDXtNcM=) 2: 3130332e3133302e38322e302f32342d3234203d3e20313530393636.roa (hash: WdwAhrLb01WctAevsLo2E5F0+guZcHnuWIL6/QTKVQY=) 3: 3130332e3133302e38322e302f32332d3233203d3e20313530393636.roa (hash: wzb3XBaqsWwxrRVk4X/B9M9lBaxhMB40Ug9owyKd8Yw=) 4: 8989D0431453556F22D882A21B2BBB9F4E4A2C24.crl (hash: ZfJexXQr1gYwpnD0qSATURsdTj73JKKdAU9nbW6HYVA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/8989D0431453556F22D882A21B2BBB9F4E4A2C24.crl rsync://repo-rpki.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/8989D0431453556F22D882A21B2BBB9F4E4A2C24.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8989D0431453556F22D882A21B2BBB9F4E4A2C24.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 02:22:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:43:04:8f:ce:1a:fc:b8:8f:92:0d:4b:ff:a3:42:2f:dc:38:ba:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8989D0431453556F22D882A21B2BBB9F4E4A2C24 Validity Not Before: Jun 15 16:46:25 2025 GMT Not After : Jun 19 02:22:25 2025 GMT Subject: CN=F83E4ACEF3903C50B970E5D6B480FBF787A93D55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7b:a4:d9:43:e9:af:6e:77:8b:31:c0:03:f8: dc:66:51:76:e5:8b:10:08:c0:6c:81:09:f6:59:73: 48:64:63:36:10:11:e5:05:93:0e:21:ba:aa:69:07: 59:18:01:90:d8:bf:e4:ac:ba:3c:79:73:6e:ed:56: a5:fa:89:ab:c7:2c:df:51:15:50:fe:40:2b:7a:f5: f2:99:c9:44:64:26:e5:87:7b:c1:71:f6:bb:c5:dd: 4d:05:62:65:ab:11:4b:56:20:4b:9f:ec:cd:99:c3: 34:0b:ab:4c:56:d8:cc:ce:16:6d:10:47:57:59:8b: df:7c:54:cf:12:99:bd:53:79:f2:11:4e:11:54:00: f8:0d:a3:c3:a1:6a:74:e1:b4:e0:b6:26:21:0c:69: 8e:82:1d:2f:f7:20:ba:84:2e:9b:77:33:4e:f4:52: a8:1f:fe:54:8e:27:4d:e9:4c:e7:53:03:df:14:8e: aa:9c:d2:18:cf:85:53:54:08:7f:77:b5:02:1c:14: c8:5f:71:48:d0:28:b5:a8:c5:4e:61:50:f4:49:c0: 6c:cb:7e:4b:fd:73:17:22:57:70:6d:28:0d:1c:2c: f7:dc:39:31:06:94:61:78:e3:f8:cc:b5:e3:be:95: 46:cc:ef:a9:01:6f:30:0b:bb:1e:f1:0d:9d:11:05: 51:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:3E:4A:CE:F3:90:3C:50:B9:70:E5:D6:B4:80:FB:F7:87:A9:3D:55 X509v3 Authority Key Identifier: keyid:89:89:D0:43:14:53:55:6F:22:D8:82:A2:1B:2B:BB:9F:4E:4A:2C:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/8989D0431453556F22D882A21B2BBB9F4E4A2C24.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8989D0431453556F22D882A21B2BBB9F4E4A2C24.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4a87064b-5f27-4270-90e4-99f43ae84db7/0/8989D0431453556F22D882A21B2BBB9F4E4A2C24.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:65:92:02:62:f5:29:82:03:d1:27:87:11:c9:40:9a:ec:0e: de:e4:3d:f9:d1:50:6b:48:6f:e7:49:43:35:74:99:c7:2a:09: 0d:e6:3f:d8:f0:b0:3e:4a:5e:a1:89:3b:db:2b:28:0b:e1:ce: 01:ee:d5:b1:61:00:b6:d9:e6:b4:c9:a0:fa:28:87:69:f1:6a: 56:a6:e8:22:6f:7d:83:ff:40:7c:aa:88:a1:76:18:ba:67:24: 11:cc:df:ba:40:77:83:b2:3b:4f:aa:f4:8c:1b:d8:08:d0:a9: 0e:d2:d7:60:01:cf:76:49:66:a9:29:8b:1c:c3:9f:d5:d9:c9: 90:91:8c:bd:a5:ef:bd:c6:54:7c:06:77:28:94:75:73:f2:f6: fd:32:df:58:5a:20:73:64:31:8b:0d:b0:60:91:80:44:88:b4: 1e:54:a5:25:85:0e:2f:d2:47:35:d0:91:6f:08:5c:be:89:50: 57:05:29:53:47:f4:dc:c9:0c:40:4c:1a:c0:12:33:d3:db:72: 2f:4f:95:8c:a4:29:ea:27:02:d7:ad:03:d5:86:59:c9:24:dc: 9f:58:e1:07:47:9d:bd:44:9e:6f:43:ee:26:9e:31:78:81:10: 6c:e8:a5:71:f4:92:1b:28:4c:9d:ef:92:69:ae:0a:03:98:71: 45:ad:b0:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCkMEj84a/LiPkg1L/6NCL9w4uqkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk4OUQwNDMxNDUzNTU2RjIyRDg4MkEyMUIyQkJCOUY0 RTRBMkMyNDAeFw0yNTA2MTUxNjQ2MjVaFw0yNTA2MTkwMjIyMjVaMDMxMTAvBgNV BAMTKEY4M0U0QUNFRjM5MDNDNTBCOTcwRTVENkI0ODBGQkY3ODdBOTNENTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCre6TZQ+mvbneLMcAD+NxmUXbl ixAIwGyBCfZZc0hkYzYQEeUFkw4huqppB1kYAZDYv+Ssujx5c27tVqX6iavHLN9R FVD+QCt69fKZyURkJuWHe8Fx9rvF3U0FYmWrEUtWIEuf7M2ZwzQLq0xW2MzOFm0Q R1dZi998VM8Smb1TefIRThFUAPgNo8OhanThtOC2JiEMaY6CHS/3ILqELpt3M070 Uqgf/lSOJ03pTOdTA98Ujqqc0hjPhVNUCH93tQIcFMhfcUjQKLWoxU5hUPRJwGzL fkv9cxciV3BtKA0cLPfcOTEGlGF44/jMteO+lUbM76kBbzALux7xDZ0RBVG/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+D5KzvOQPFC5cOXWtID794epPVUwHwYDVR0j BBgwFoAUiYnQQxRTVW8i2IKiGyu7n05KLCQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YTg3MDY0Yi01ZjI3LTQyNzAtOTBlNC05OWY0M2FlODRkYjcvMC84OTg5RDA0MzE0 NTM1NTZGMjJEODgyQTIxQjJCQkI5RjRFNEEyQzI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODk4OUQwNDMxNDUzNTU2RjIyRDg4MkEyMUIyQkJCOUY0RTRB MkMyNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGE4NzA2NGItNWYyNy00MjcwLTkw ZTQtOTlmNDNhZTg0ZGI3LzAvODk4OUQwNDMxNDUzNTU2RjIyRDg4MkEyMUIyQkJC OUY0RTRBMkMyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMdlkgJi9SmCA9EnhxHJQJrsDt7kPfnRUGtI b+dJQzV0mccqCQ3mP9jwsD5KXqGJO9srKAvhzgHu1bFhALbZ5rTJoPooh2nxalam 6CJvfYP/QHyqiKF2GLpnJBHM37pAd4OyO0+q9Iwb2AjQqQ7S12ABz3ZJZqkpixzD n9XZyZCRjL2l773GVHwGdyiUdXPy9v0y31haIHNkMYsNsGCRgESItB5UpSWFDi/S RzXQkW8IXL6JUFcFKVNH9NzJDEBMGsASM9Pbci9PlYykKeonAtetA9WGWckk3J9Y 4QdHnb1Enm9D7iaeMXiBEGzopXH0khsoTJ3vkmmuCgOYcUWtsEo= -----END CERTIFICATE-----Generated at Tue Jun 17 00:57:32 2025 by rpki-client