$ rpki-client -vvf repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft File: 989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft (raw, json) Hash identifier: w/PEKsigLwco7fYj38wENDLlT2tD2U8BQTP5UximxP8= Subject key identifier: 84:87:ED:B5:04:14:E1:79:45:60:EC:D6:90:7C:93:69:6E:E2:8D:12 Authority key identifier: 98:9B:87:D4:0F:7C:9F:1B:A5:4A:BC:AE:9B:C7:97:A3:E6:B2:57:48 Certificate issuer: /CN=989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748 Certificate serial: 42A4C749AE2214EA81AA5006AE7E1219918EB73A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft Manifest number: 04F9 Signing time: Tue 05 Aug 2025 09:51:04 +0000 Manifest this update: Tue 05 Aug 2025 09:46:04 +0000 Manifest next update: Fri 08 Aug 2025 18:54:04 +0000 Files and hashes: 1: 323030313a6466363a313330303a3a2f34382d3438203d3e20313338313137.roa (hash: hzs93FaYaNphdZDJOy2a+k5Vr7J1TFpilPTw5TB+vyQ=) 2: 3130332e3132302e3132342e302f32332d3234203d3e20313338313137.roa (hash: 9pTXaEmfCAIZ2elcDY8x5651yYxommQlVzX4FaEZZFs=) 3: 989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.crl (hash: zGeiBSaVBWchVSju12DE1xuWYwqC+c8Dzd+f9MET42Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.crl rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 18:54:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:a4:c7:49:ae:22:14:ea:81:aa:50:06:ae:7e:12:19:91:8e:b7:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748 Validity Not Before: Aug 5 09:46:04 2025 GMT Not After : Aug 8 18:54:04 2025 GMT Subject: CN=8487EDB50414E1794560ECD6907C93696EE28D12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:70:1c:da:18:a5:32:4a:70:fb:89:0c:85:ab: d7:1b:44:79:82:4f:74:55:3d:5e:89:e8:ba:23:98: 47:34:98:f1:84:e5:11:ec:a7:15:3f:52:a2:a4:2b: 5e:eb:4e:2c:26:34:61:83:ac:54:55:27:03:d6:8b: 64:f6:4f:bd:1d:0b:94:a4:d2:c4:9a:33:56:98:c9: a9:e4:c4:13:19:7e:95:a6:e5:33:e5:27:8b:ae:1a: 04:92:00:10:1f:f0:5a:e1:16:db:2b:b0:5d:89:cf: d6:aa:13:aa:e8:50:b1:74:ee:0f:1f:a4:90:ef:a3: 65:1c:6d:c8:98:dd:10:3d:77:3f:3f:e7:0b:56:e4: ac:e2:92:26:8a:2c:b6:00:91:4d:f7:77:ce:cc:99: 05:24:8b:32:9f:3a:13:05:34:67:54:ce:0e:14:6c: 42:5a:3d:33:8b:47:38:08:79:90:74:32:ae:db:18: 8e:03:48:31:99:a0:bd:b1:10:c5:f7:33:10:bc:a0: 65:e3:4b:af:ea:61:a5:53:1b:25:72:38:96:e2:05: a2:5f:44:72:8f:a3:36:76:b4:b3:69:19:08:38:b7: 42:07:70:5d:a9:d6:6e:4b:6f:9b:a8:62:c4:22:24: 7b:a5:af:b5:0c:16:16:7a:0a:2d:63:59:c8:ba:9d: a1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:87:ED:B5:04:14:E1:79:45:60:EC:D6:90:7C:93:69:6E:E2:8D:12 X509v3 Authority Key Identifier: keyid:98:9B:87:D4:0F:7C:9F:1B:A5:4A:BC:AE:9B:C7:97:A3:E6:B2:57:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:e3:7a:35:3d:63:ee:e5:32:c7:8c:33:bb:16:df:c1:33:7b: eb:dc:3d:be:11:37:59:9c:8d:02:79:df:1a:a4:92:74:39:f4: 94:8c:ee:ff:83:aa:a2:00:0d:c5:17:1c:cc:59:3a:5a:4e:fe: 1f:f5:b0:29:46:2e:ee:b5:b6:fd:38:fe:ab:9c:e4:a8:c9:79: c7:c7:96:99:da:ef:c0:c1:d0:bd:78:46:19:c0:85:50:b8:3a: ec:a2:5d:dd:c5:e4:f4:56:8d:46:2e:4b:d4:f7:3c:c2:23:79: 39:5c:ee:cf:a7:29:41:05:31:60:b9:1c:9e:c6:11:4d:f2:3c: fa:57:de:d1:fb:80:c6:ca:b4:26:4d:cd:3a:e0:dc:2f:ea:7d: 21:12:22:57:f6:11:41:0d:15:be:4a:d5:ac:04:e2:7d:ff:c8: df:c1:da:cb:ff:32:d8:62:3f:6f:7c:7b:e3:81:ca:60:0c:24: ae:35:86:94:7a:ce:4d:da:0f:12:5f:1d:59:fd:44:41:af:61: 24:8c:e2:7d:c8:1c:8f:80:b5:5e:e2:6b:8a:56:7a:ca:8d:19: 33:19:64:2f:52:33:92:b5:77:fc:d5:70:38:17:38:fc:b7:77: 22:43:b0:61:1a:0e:35:eb:dc:43:e6:40:65:28:0a:07:9c:69: fb:38:d9:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQqTHSa4iFOqBqlAGrn4SGZGOtzowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg5Qjg3RDQwRjdDOUYxQkE1NEFCQ0FFOUJDNzk3QTNF NkIyNTc0ODAeFw0yNTA4MDUwOTQ2MDRaFw0yNTA4MDgxODU0MDRaMDMxMTAvBgNV BAMTKDg0ODdFREI1MDQxNEUxNzk0NTYwRUNENjkwN0M5MzY5NkVFMjhEMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6cBzaGKUySnD7iQyFq9cbRHmC T3RVPV6J6LojmEc0mPGE5RHspxU/UqKkK17rTiwmNGGDrFRVJwPWi2T2T70dC5Sk 0sSaM1aYyankxBMZfpWm5TPlJ4uuGgSSABAf8FrhFtsrsF2Jz9aqE6roULF07g8f pJDvo2UcbciY3RA9dz8/5wtW5KzikiaKLLYAkU33d87MmQUkizKfOhMFNGdUzg4U bEJaPTOLRzgIeZB0Mq7bGI4DSDGZoL2xEMX3MxC8oGXjS6/qYaVTGyVyOJbiBaJf RHKPozZ2tLNpGQg4t0IHcF2p1m5Lb5uoYsQiJHulr7UMFhZ6Ci1jWci6naFDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhIfttQQU4XlFYOzWkHyTaW7ijRIwHwYDVR0j BBgwFoAUmJuH1A98nxulSryum8eXo+ayV0gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTUwNjBiOC1mNTcwLTQyZDYtODZmZi0zM2VhN2ZkZjI1MTUvMC85ODlCODdENDBG N0M5RjFCQTU0QUJDQUU5QkM3OTdBM0U2QjI1NzQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg5Qjg3RDQwRjdDOUYxQkE1NEFCQ0FFOUJDNzk3QTNFNkIy NTc0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWU1MDYwYjgtZjU3MC00MmQ2LTg2 ZmYtMzNlYTdmZGYyNTE1LzAvOTg5Qjg3RDQwRjdDOUYxQkE1NEFCQ0FFOUJDNzk3 QTNFNkIyNTc0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKbjejU9Y+7lMseMM7sW38Eze+vcPb4RN1mc jQJ53xqkknQ59JSM7v+DqqIADcUXHMxZOlpO/h/1sClGLu61tv04/quc5KjJecfH lpna78DB0L14RhnAhVC4OuyiXd3F5PRWjUYuS9T3PMIjeTlc7s+nKUEFMWC5HJ7G EU3yPPpX3tH7gMbKtCZNzTrg3C/qfSESIlf2EUENFb5K1awE4n3/yN/B2sv/Mthi P298e+OBymAMJK41hpR6zk3aDxJfHVn9REGvYSSM4n3IHI+AtV7ia4pWesqNGTMZ ZC9SM5K1d/zVcDgXOPy3dyJDsGEaDjXr3EPmQGUoCgecafs42Q8= -----END CERTIFICATE-----Generated at Thu Aug 7 05:03:11 2025 by rpki-client