$ rpki-client -vvf repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft File: 989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft (raw, json) Hash identifier: zssOA1KklAH44a71uv2u2H/IIuMMTBmQSXuJjgTkSgw= Subject key identifier: F4:7A:5D:E1:F3:43:DD:92:66:A9:11:A8:41:AB:B5:E5:42:6C:42:AC Authority key identifier: 98:9B:87:D4:0F:7C:9F:1B:A5:4A:BC:AE:9B:C7:97:A3:E6:B2:57:48 Certificate issuer: /CN=989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748 Certificate serial: 0E417CDE33A18564F042FD7C58BA7B9ADF30A2BF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft Manifest number: 04E1 Signing time: Fri 13 Jun 2025 13:01:01 +0000 Manifest this update: Fri 13 Jun 2025 12:56:01 +0000 Manifest next update: Mon 16 Jun 2025 22:22:01 +0000 Files and hashes: 1: 989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.crl (hash: rV3BjGRg1ksUhr3GF06Yv0dNdqzi4yIHS2lzvnS20G8=) 2: 323030313a6466363a313330303a3a2f34382d3438203d3e20313338313137.roa (hash: eEx4NWwR1k9vkDQfEfkXnOdl3qvSuzaAej2N1OIEynI=) 3: 3130332e3132302e3132342e302f32332d3234203d3e20313338313137.roa (hash: 9pTXaEmfCAIZ2elcDY8x5651yYxommQlVzX4FaEZZFs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.crl rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Jun 2025 22:22:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:41:7c:de:33:a1:85:64:f0:42:fd:7c:58:ba:7b:9a:df:30:a2:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748 Validity Not Before: Jun 13 12:56:01 2025 GMT Not After : Jun 16 22:22:01 2025 GMT Subject: CN=F47A5DE1F343DD9266A911A841ABB5E5426C42AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:71:21:72:c4:12:e4:c4:f6:59:16:63:26:eb: 2b:bd:42:b9:83:a7:ad:9f:bd:62:b2:85:2e:3f:eb: eb:a9:80:89:b5:60:83:ff:f6:f7:b6:cb:2b:89:ef: 0e:c1:9c:ea:e5:58:c1:84:d1:ea:6b:4a:25:51:0f: 1c:fd:06:3e:85:38:40:1a:b5:0d:c1:bf:4a:9f:b7: 68:70:fe:3e:88:5c:ad:83:24:10:d8:6a:d3:58:6c: 61:49:99:a7:b7:21:af:c4:68:2d:6a:84:d1:9f:ba: 95:47:ab:00:5f:ec:c0:e7:2a:b5:0e:f9:78:e8:57: 41:b7:68:44:11:6a:1f:d1:a0:3e:fb:72:6a:23:44: 48:75:ac:1b:90:15:37:af:1e:5c:ee:61:5d:ed:e3: 22:3c:19:19:54:81:f9:a9:9c:89:8e:ae:85:60:68: 28:55:86:da:f6:1e:5d:74:4b:f5:f4:9e:59:28:3a: ac:af:9b:a4:36:84:18:35:74:99:a9:9f:58:0f:4c: 75:8c:ec:89:f7:d6:35:df:cb:10:26:37:d6:06:87: c0:37:22:18:7c:84:be:fd:95:fa:bc:50:f0:f7:57: 36:f2:26:39:94:45:1e:f1:27:32:69:1b:1a:27:eb: 8f:ae:76:98:6d:ac:3f:95:3b:2f:4c:cf:37:7a:81: 98:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:7A:5D:E1:F3:43:DD:92:66:A9:11:A8:41:AB:B5:E5:42:6C:42:AC X509v3 Authority Key Identifier: keyid:98:9B:87:D4:0F:7C:9F:1B:A5:4A:BC:AE:9B:C7:97:A3:E6:B2:57:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e5060b8-f570-42d6-86ff-33ea7fdf2515/0/989B87D40F7C9F1BA54ABCAE9BC797A3E6B25748.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:b1:22:d0:9f:ef:e5:ad:76:15:12:5e:dc:4a:ed:e4:75:f6: 05:25:a4:21:88:b5:84:78:5b:45:0c:11:e2:44:d3:c7:ad:83: df:53:37:54:c7:53:b5:4c:94:06:40:3e:2b:cc:af:0c:2a:7d: 3c:cc:64:f7:4f:a3:7a:69:0e:64:f6:98:c9:13:25:c5:a5:55: ab:28:dd:c4:cc:e1:4d:ba:c3:e7:59:7e:c0:37:2d:30:39:ed: 7d:b1:c8:c1:97:2b:a8:75:21:a2:ba:9a:81:73:cd:2b:a8:48: 69:6c:26:4d:0e:e0:bc:71:6e:75:e9:f3:81:58:a1:31:88:0a: ca:d5:71:bc:70:8b:b0:04:b4:8e:24:1c:1c:48:b7:78:ca:d0: f8:c4:44:9d:be:af:b7:a9:b5:9c:39:9c:03:70:4e:5c:4a:ea: 50:65:a8:55:82:91:ec:32:0b:fe:6e:14:72:5c:36:a8:4b:59: 69:ab:ed:8e:53:62:c3:09:cb:b6:7b:06:9c:c5:42:82:ea:1a: ef:ee:2b:73:43:d8:93:41:f2:12:9f:32:65:49:3c:17:32:43: 4e:00:e7:af:8f:3b:41:6b:af:de:03:e3:fe:a2:f2:99:b0:3f: 7a:4d:ef:e8:4a:65:bd:fe:ee:dd:a3:5d:e7:9e:7e:99:52:83: 90:ce:a4:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDkF83jOhhWTwQv18WLp7mt8wor8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg5Qjg3RDQwRjdDOUYxQkE1NEFCQ0FFOUJDNzk3QTNF NkIyNTc0ODAeFw0yNTA2MTMxMjU2MDFaFw0yNTA2MTYyMjIyMDFaMDMxMTAvBgNV BAMTKEY0N0E1REUxRjM0M0REOTI2NkE5MTFBODQxQUJCNUU1NDI2QzQyQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqcSFyxBLkxPZZFmMm6yu9QrmD p62fvWKyhS4/6+upgIm1YIP/9ve2yyuJ7w7BnOrlWMGE0eprSiVRDxz9Bj6FOEAa tQ3Bv0qft2hw/j6IXK2DJBDYatNYbGFJmae3Ia/EaC1qhNGfupVHqwBf7MDnKrUO +XjoV0G3aEQRah/RoD77cmojREh1rBuQFTevHlzuYV3t4yI8GRlUgfmpnImOroVg aChVhtr2Hl10S/X0nlkoOqyvm6Q2hBg1dJmpn1gPTHWM7In31jXfyxAmN9YGh8A3 Ihh8hL79lfq8UPD3VzbyJjmURR7xJzJpGxon64+udphtrD+VOy9Mzzd6gZjDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9Hpd4fND3ZJmqRGoQau15UJsQqwwHwYDVR0j BBgwFoAUmJuH1A98nxulSryum8eXo+ayV0gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTUwNjBiOC1mNTcwLTQyZDYtODZmZi0zM2VhN2ZkZjI1MTUvMC85ODlCODdENDBG N0M5RjFCQTU0QUJDQUU5QkM3OTdBM0U2QjI1NzQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg5Qjg3RDQwRjdDOUYxQkE1NEFCQ0FFOUJDNzk3QTNFNkIy NTc0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWU1MDYwYjgtZjU3MC00MmQ2LTg2 ZmYtMzNlYTdmZGYyNTE1LzAvOTg5Qjg3RDQwRjdDOUYxQkE1NEFCQ0FFOUJDNzk3 QTNFNkIyNTc0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADqxItCf7+WtdhUSXtxK7eR19gUlpCGItYR4 W0UMEeJE08etg99TN1THU7VMlAZAPivMrwwqfTzMZPdPo3ppDmT2mMkTJcWlVaso 3cTM4U26w+dZfsA3LTA57X2xyMGXK6h1IaK6moFzzSuoSGlsJk0O4LxxbnXp84FY oTGICsrVcbxwi7AEtI4kHBxIt3jK0PjERJ2+r7eptZw5nANwTlxK6lBlqFWCkewy C/5uFHJcNqhLWWmr7Y5TYsMJy7Z7BpzFQoLqGu/uK3ND2JNB8hKfMmVJPBcyQ04A 56+PO0Frr94D4/6i8pmwP3pN7+hKZb3+7t2jXeeefplSg5DOpCQ= -----END CERTIFICATE-----Generated at Sun Jun 15 23:15:06 2025 by rpki-client