$ rpki-client -vvf repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft File: 89402655017312B8CFCB367BA82966AA21E11F90.mft (raw, json) Hash identifier: rXnZu0GRw+HLDDaMLHqLzku1474FQ0N3frRAtdWaEdw= Subject key identifier: 9C:DA:F1:84:57:58:2A:39:D1:E0:2A:1A:45:AA:7B:A1:0F:E2:09:48 Authority key identifier: 89:40:26:55:01:73:12:B8:CF:CB:36:7B:A8:29:66:AA:21:E1:1F:90 Certificate issuer: /CN=89402655017312B8CFCB367BA82966AA21E11F90 Certificate serial: 19AF2CCB4A13C99EFD72E52F14E993EE1EE8CCF6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft Manifest number: 04CF Signing time: Wed 06 Aug 2025 05:31:52 +0000 Manifest this update: Wed 06 Aug 2025 05:26:52 +0000 Manifest next update: Sat 09 Aug 2025 11:13:52 +0000 Files and hashes: 1: 323430303a313838303a3a2f33322d3438203d3e203137363730.roa (hash: FP8IqHLkyX7Qj2+QyPrsBYEPwMn3gsRtfyfeKNBNdEg=) 2: 3130332e3231332e3132382e302f32322d3234203d3e203137363730.roa (hash: FYvSh1st1IicJh9tmsJCC36iwumwIFXZHMkoJwqA8Qw=) 3: 3230322e3134372e3139322e302f32302d3234203d3e203137363730.roa (hash: WsFr0RE3ZnujNzg56bjhtSV6UHqOuDU5rMSYq/HFAbw=) 4: 89402655017312B8CFCB367BA82966AA21E11F90.crl (hash: QEKjnMbBQEgjAsTx22nLxG+CEs4ZBCH+TLDwRVc2YUk=) 5: 3132332e3235332e3233322e302f32322d3234203d3e203137363730.roa (hash: R1hpl90tpuGr3S7MM3M7sdpYxwM9mEKg6oXY2ZteCXg=) 6: 3131302e35302e38302e302f32312d3234203d3e203137363730.roa (hash: ENs+ad22cCNfPNiUGh8Crfa5TLmxtOCxc9FzlyRTptI=) 7: 323430343a623238303a3a2f33322d3438203d3e203137363730.roa (hash: S1hTgzRInefDZ+nv4OU9cj+WPrGD6wknjfAjdl1JFoo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.crl rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 11:13:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:af:2c:cb:4a:13:c9:9e:fd:72:e5:2f:14:e9:93:ee:1e:e8:cc:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89402655017312B8CFCB367BA82966AA21E11F90 Validity Not Before: Aug 6 05:26:52 2025 GMT Not After : Aug 9 11:13:52 2025 GMT Subject: CN=9CDAF18457582A39D1E02A1A45AA7BA10FE20948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e7:b7:02:ff:bb:65:72:5d:0b:5a:c9:67:df: 68:d0:db:ff:fd:39:a8:c7:ff:3f:b8:98:5d:2b:bc: ca:f3:4c:03:77:72:a3:05:36:c4:36:99:67:3d:88: 1d:76:52:98:78:89:ac:f0:d2:c4:8a:c3:be:1b:9b: fe:00:ab:c2:c6:3d:e7:66:87:83:44:56:c1:d6:85: 91:60:4c:27:3a:05:f8:d8:54:2c:03:5a:d8:0a:d9: fb:c5:54:e6:76:83:12:89:f3:98:1d:84:63:44:86: 47:ae:81:0b:e1:67:fc:5f:1d:fb:9a:5c:a7:f5:71: dc:19:b6:82:55:0c:dd:cb:c7:e3:5f:19:2f:43:d3: cb:1b:5f:31:e9:35:4e:85:e2:52:6c:03:e2:af:6b: 5b:88:fb:bf:4b:e6:c3:53:38:3a:01:6a:55:7e:f6: c7:d2:bc:83:02:2e:39:aa:db:b2:ac:9d:6c:cf:9f: 75:88:20:90:aa:f3:cb:a2:f4:f4:c8:60:ce:e3:0f: de:65:45:83:87:d8:1f:ca:a9:c7:ff:e0:b8:ed:50: 87:da:d6:2e:a1:bc:8b:3d:fe:0e:87:a9:c2:cb:89: 33:85:31:e2:ee:21:f4:97:40:c3:c7:1a:5c:30:b9: 44:64:80:6d:41:7f:08:4e:aa:ec:3b:3e:85:09:08: 7a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:DA:F1:84:57:58:2A:39:D1:E0:2A:1A:45:AA:7B:A1:0F:E2:09:48 X509v3 Authority Key Identifier: keyid:89:40:26:55:01:73:12:B8:CF:CB:36:7B:A8:29:66:AA:21:E1:1F:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89402655017312B8CFCB367BA82966AA21E11F90.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fb1c80c-4d6c-4408-8947-fba6e7c4be7c/0/89402655017312B8CFCB367BA82966AA21E11F90.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:8b:55:4d:28:ad:05:6e:6e:5b:cf:89:9a:b5:01:62:e7:90: 8f:b2:87:f1:e8:1f:78:0d:2f:cc:6d:8f:f6:13:fd:49:fe:6c: 29:76:89:96:4b:ed:2b:14:02:2a:85:c6:d7:63:54:78:25:36: 35:99:c6:12:14:ac:eb:b7:c6:41:2f:b7:ad:21:f6:c7:85:bf: 42:17:0e:54:99:3e:34:fb:79:79:4b:66:cb:c9:4c:04:f5:10: c9:61:e1:81:29:c3:c4:42:80:d2:81:8d:7e:3a:3c:2d:2c:ea: 3e:47:14:3b:a4:16:11:f9:aa:2e:81:34:f3:07:ac:ae:4b:d0: a3:5a:0f:9e:cd:e0:39:22:f7:da:fc:d9:ee:23:78:e5:ae:00: 3b:98:c5:6b:47:21:01:92:76:68:26:cf:05:32:1e:4f:20:cd: 80:19:9e:a9:b2:a8:c0:8b:d9:73:a7:7e:03:64:10:6d:c9:4e: b8:49:51:d5:50:e9:7a:a3:1f:65:ac:cc:ce:0f:0c:2a:3d:ad: ed:11:c3:74:52:c6:50:82:a1:fc:00:ae:99:6f:44:ee:b7:b6: 8f:9f:e9:de:f2:5c:ed:8f:62:20:8e:f3:b9:8a:ac:ab:21:b4: 85:cf:0e:bc:45:de:a5:e1:ad:58:de:5e:87:34:a2:f7:60:ac: f0:08:3c:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGa8sy0oTyZ79cuUvFOmT7h7ozPYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODk0MDI2NTUwMTczMTJCOENGQ0IzNjdCQTgyOTY2QUEy MUUxMUY5MDAeFw0yNTA4MDYwNTI2NTJaFw0yNTA4MDkxMTEzNTJaMDMxMTAvBgNV BAMTKDlDREFGMTg0NTc1ODJBMzlEMUUwMkExQTQ1QUE3QkExMEZFMjA5NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA57cC/7tlcl0LWsln32jQ2//9 OajH/z+4mF0rvMrzTAN3cqMFNsQ2mWc9iB12Uph4iazw0sSKw74bm/4Aq8LGPedm h4NEVsHWhZFgTCc6BfjYVCwDWtgK2fvFVOZ2gxKJ85gdhGNEhkeugQvhZ/xfHfua XKf1cdwZtoJVDN3Lx+NfGS9D08sbXzHpNU6F4lJsA+Kva1uI+79L5sNTODoBalV+ 9sfSvIMCLjmq27KsnWzPn3WIIJCq88ui9PTIYM7jD95lRYOH2B/Kqcf/4LjtUIfa 1i6hvIs9/g6HqcLLiTOFMeLuIfSXQMPHGlwwuURkgG1BfwhOquw7PoUJCHpxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnNrxhFdYKjnR4CoaRap7oQ/iCUgwHwYDVR0j BBgwFoAUiUAmVQFzErjPyzZ7qClmqiHhH5AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZmIxYzgwYy00ZDZjLTQ0MDgtODk0Ny1mYmE2ZTdjNGJlN2MvMC84OTQwMjY1NTAx NzMxMkI4Q0ZDQjM2N0JBODI5NjZBQTIxRTExRjkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODk0MDI2NTUwMTczMTJCOENGQ0IzNjdCQTgyOTY2QUEyMUUx MUY5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWZiMWM4MGMtNGQ2Yy00NDA4LTg5 NDctZmJhNmU3YzRiZTdjLzAvODk0MDI2NTUwMTczMTJCOENGQ0IzNjdCQTgyOTY2 QUEyMUUxMUY5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAECLVU0orQVublvPiZq1AWLnkI+yh/HoH3gN L8xtj/YT/Un+bCl2iZZL7SsUAiqFxtdjVHglNjWZxhIUrOu3xkEvt60h9seFv0IX DlSZPjT7eXlLZsvJTAT1EMlh4YEpw8RCgNKBjX46PC0s6j5HFDukFhH5qi6BNPMH rK5L0KNaD57N4Dki99r82e4jeOWuADuYxWtHIQGSdmgmzwUyHk8gzYAZnqmyqMCL 2XOnfgNkEG3JTrhJUdVQ6XqjH2WszM4PDCo9re0Rw3RSxlCCofwArplvRO63to+f 6d7yXO2PYiCO87mKrKshtIXPDrxF3qXhrVjeXoc0ovdgrPAIPJk= -----END CERTIFICATE-----Generated at Thu Aug 7 01:03:45 2025 by rpki-client