$ rpki-client -vvf repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft File: E89C93F089A07D03B5794B0C02239EF67E1D721C.mft (raw, json) Hash identifier: 2BHUiRPTIq8GoIVknOmP5r9owXkILAZGEQPtpfMAGwk= Subject key identifier: 17:DA:9C:2D:3A:0A:12:B4:89:D0:BF:14:93:AC:CE:6F:86:95:69:86 Authority key identifier: E8:9C:93:F0:89:A0:7D:03:B5:79:4B:0C:02:23:9E:F6:7E:1D:72:1C Certificate issuer: /CN=E89C93F089A07D03B5794B0C02239EF67E1D721C Certificate serial: 4EFEA261E2974413020C947ACD51A52619D92CA3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E89C93F089A07D03B5794B0C02239EF67E1D721C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft Manifest number: 80 Signing time: Fri 08 Aug 2025 11:31:59 +0000 Manifest this update: Fri 08 Aug 2025 11:26:59 +0000 Manifest next update: Mon 11 Aug 2025 14:55:59 +0000 Files and hashes: 1: 3130332e35332e32302e302f32342d3234203d3e203436303334.roa (hash: YHAiLGhk7A6ZE4X7obU+oz12qWeh7X0M2hlk6hYX8jU=) 2: E89C93F089A07D03B5794B0C02239EF67E1D721C.crl (hash: YOnAIAoj5mzeg4hQE8Tx9aokkK7l9BYeNUAn0NN8BvA=) 3: 3130332e37342e3136342e302f32342d3234203d3e203436303334.roa (hash: QbAeIT3Ks6znT3hg7T+AnddPc66+/tThEc2QldGCSpw=) 4: 3130332e37342e3134332e302f32342d3234203d3e203436303334.roa (hash: JENEpsaygQnZfGVyo5B3YcYBAcWsk2wulHjqbKHp5Ko=) 5: 3230322e37302e3133362e302f32342d3234203d3e203436303334.roa (hash: 4RAp4F/7XGUDJWluz8ukd4JUDTUiL5R6CUgISPZWwHM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.crl rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E89C93F089A07D03B5794B0C02239EF67E1D721C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 14:55:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:fe:a2:61:e2:97:44:13:02:0c:94:7a:cd:51:a5:26:19:d9:2c:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E89C93F089A07D03B5794B0C02239EF67E1D721C Validity Not Before: Aug 8 11:26:59 2025 GMT Not After : Aug 11 14:55:59 2025 GMT Subject: CN=17DA9C2D3A0A12B489D0BF1493ACCE6F86956986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:02:a1:0b:6c:8b:04:98:b8:21:ef:c2:7f:2d: 39:c2:ef:76:01:6b:e5:71:da:fb:21:67:ff:6b:18: c8:76:ee:c8:7f:b1:0f:78:f1:37:67:b4:32:1a:76: 71:7b:ab:12:15:d1:81:f2:6e:83:df:21:66:d3:36: 7e:f6:e0:d1:c8:02:2c:c0:1c:89:ad:d5:4d:ce:bc: 10:4c:3d:5f:39:bb:3f:a8:ad:dc:f0:31:74:a4:34: df:75:b1:03:89:8f:7e:47:a8:4d:2e:28:3d:a7:19: 6c:94:31:46:a3:b4:bb:ca:54:1f:02:20:eb:03:e6: cf:c2:e3:e0:7c:18:ef:8f:7e:b9:99:5d:df:5e:1e: af:ab:c4:c7:8f:82:ca:bd:57:22:2c:61:6a:f9:5c: 02:5a:5b:5f:53:bd:c2:c3:0f:be:a2:a8:c5:99:57: c2:8a:37:8f:f4:73:88:85:32:39:c8:fe:58:73:59: 5c:06:83:db:20:a8:e8:8e:07:29:80:44:1b:7f:0e: 07:1e:f5:28:51:4c:3e:03:bb:30:9f:32:71:fd:3b: 56:6b:bb:9b:07:2e:a7:fb:19:55:f4:c9:eb:ea:38: 70:7b:4f:fc:76:a0:55:58:9b:67:89:8e:c5:22:54: 2f:52:d3:39:a1:f2:5a:16:24:51:a6:3e:36:84:85: 80:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:DA:9C:2D:3A:0A:12:B4:89:D0:BF:14:93:AC:CE:6F:86:95:69:86 X509v3 Authority Key Identifier: keyid:E8:9C:93:F0:89:A0:7D:03:B5:79:4B:0C:02:23:9E:F6:7E:1D:72:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E89C93F089A07D03B5794B0C02239EF67E1D721C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f8851e5-ee5b-41e1-9abc-442651d27294/0/E89C93F089A07D03B5794B0C02239EF67E1D721C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:0b:cb:f0:77:c5:fd:4f:d9:30:32:99:10:eb:52:95:72:2c: 0c:80:cf:01:e1:24:44:7b:c6:e5:5b:90:15:42:10:c8:61:c7: ef:7f:32:40:71:01:40:eb:f4:cb:cd:d1:2f:bc:08:0d:68:60: ca:12:30:6e:48:da:f5:47:48:e7:c6:26:c4:69:97:98:44:20: e9:e5:66:c0:a7:06:3e:06:56:cd:67:35:83:1a:ce:fa:fd:59: 9f:73:12:73:e5:b0:a7:13:75:e7:ef:d4:33:06:62:4c:d5:26: c8:2a:c0:62:5b:c6:ee:44:ee:d5:8c:ca:b7:f7:11:aa:2a:ab: 3c:f9:5b:f4:18:c9:6e:34:d4:1c:e3:a0:02:06:55:dd:0a:ef: 83:f0:53:e7:65:b6:c0:77:a3:f7:d6:63:21:08:66:7f:b5:8d: bf:03:73:16:dd:d6:af:45:47:17:c9:3c:ec:62:eb:1f:6a:39: b2:8c:91:e9:4a:1a:26:19:8d:59:ed:65:77:d3:ba:3a:e7:d3: be:19:44:2e:a2:3e:ab:25:69:06:c7:8d:da:fa:1d:e1:23:da: fb:b3:71:d4:1a:3b:f9:8c:81:6b:bf:61:15:66:24:13:8c:a4: da:77:2e:57:a4:d7:e9:c2:c2:e3:d7:fa:1f:59:1f:9d:68:08: 5c:fd:9e:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTv6iYeKXRBMCDJR6zVGlJhnZLKMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5QzkzRjA4OUEwN0QwM0I1Nzk0QjBDMDIyMzlFRjY3 RTFENzIxQzAeFw0yNTA4MDgxMTI2NTlaFw0yNTA4MTExNDU1NTlaMDMxMTAvBgNV BAMTKDE3REE5QzJEM0EwQTEyQjQ4OUQwQkYxNDkzQUNDRTZGODY5NTY5ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/AqELbIsEmLgh78J/LTnC73YB a+Vx2vshZ/9rGMh27sh/sQ948TdntDIadnF7qxIV0YHyboPfIWbTNn724NHIAizA HImt1U3OvBBMPV85uz+ordzwMXSkNN91sQOJj35HqE0uKD2nGWyUMUajtLvKVB8C IOsD5s/C4+B8GO+PfrmZXd9eHq+rxMePgsq9VyIsYWr5XAJaW19TvcLDD76iqMWZ V8KKN4/0c4iFMjnI/lhzWVwGg9sgqOiOBymARBt/Dgce9ShRTD4DuzCfMnH9O1Zr u5sHLqf7GVX0yevqOHB7T/x2oFVYm2eJjsUiVC9S0zmh8loWJFGmPjaEhYDlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF9qcLToKErSJ0L8Uk6zOb4aVaYYwHwYDVR0j BBgwFoAU6JyT8ImgfQO1eUsMAiOe9n4dchwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 Zjg4NTFlNS1lZTViLTQxZTEtOWFiYy00NDI2NTFkMjcyOTQvMC9FODlDOTNGMDg5 QTA3RDAzQjU3OTRCMEMwMjIzOUVGNjdFMUQ3MjFDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTg5QzkzRjA4OUEwN0QwM0I1Nzk0QjBDMDIyMzlFRjY3RTFE NzIxQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGY4ODUxZTUtZWU1Yi00MWUxLTlh YmMtNDQyNjUxZDI3Mjk0LzAvRTg5QzkzRjA4OUEwN0QwM0I1Nzk0QjBDMDIyMzlF RjY3RTFENzIxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEgLy/B3xf1P2TAymRDrUpVyLAyAzwHhJER7 xuVbkBVCEMhhx+9/MkBxAUDr9MvN0S+8CA1oYMoSMG5I2vVHSOfGJsRpl5hEIOnl ZsCnBj4GVs1nNYMazvr9WZ9zEnPlsKcTdefv1DMGYkzVJsgqwGJbxu5E7tWMyrf3 Eaoqqzz5W/QYyW401BzjoAIGVd0K74PwU+dltsB3o/fWYyEIZn+1jb8Dcxbd1q9F RxfJPOxi6x9qObKMkelKGiYZjVntZXfTujrn074ZRC6iPqslaQbHjdr6HeEj2vuz cdQaO/mMgWu/YRVmJBOMpNp3Llek1+nCwuPX+h9ZH51oCFz9nh4= -----END CERTIFICATE-----Generated at Sat Aug 9 01:22:39 2025 by rpki-client