$ rpki-client -vvf repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft File: F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft (raw, json) Hash identifier: hWsUPfQj0JxiHN1w7nfxwrbok5Txq4tPMLW3f5jMZGo= Subject key identifier: CE:57:D5:D2:96:7B:14:6E:17:16:99:12:6C:03:F4:E7:49:58:95:2D Authority key identifier: F8:99:69:E8:BA:BE:05:C4:5C:6D:6E:25:F6:25:E9:F1:84:5C:CC:9C Certificate issuer: /CN=F89969E8BABE05C45C6D6E25F625E9F1845CCC9C Certificate serial: 0EFBAFD8D7B67E421404DAAB869C6CCBC7E418F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft Manifest number: 04F7 Signing time: Tue 05 Aug 2025 09:20:51 +0000 Manifest this update: Tue 05 Aug 2025 09:15:51 +0000 Manifest next update: Fri 08 Aug 2025 15:55:51 +0000 Files and hashes: 1: F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.crl (hash: rpR3EWQi7aZGcpfzLecNfBoQzA5mMwov9knLGHNUFgg=) 2: 3130332e3132362e38342e302f32322d3234203d3e20313338313039.roa (hash: Fk8DplImfz+K8DXRwes7LY4gqzQurTG9SsMeFcuo2l8=) 3: 323430343a3763303a3a2f33322d3332203d3e20313338313039.roa (hash: 8YhkhAgabc++Mqu+wq5ak2VX+c1IFJBr8gOpgVG3Khk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.crl rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 15:55:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:fb:af:d8:d7:b6:7e:42:14:04:da:ab:86:9c:6c:cb:c7:e4:18:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F89969E8BABE05C45C6D6E25F625E9F1845CCC9C Validity Not Before: Aug 5 09:15:51 2025 GMT Not After : Aug 8 15:55:51 2025 GMT Subject: CN=CE57D5D2967B146E171699126C03F4E74958952D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:92:4f:10:a1:75:4e:23:e0:d9:ed:71:48:1b: 6d:91:42:27:9e:68:f6:5b:ea:da:bf:d6:37:a9:be: 87:39:22:b0:18:93:f7:00:c0:35:99:83:e6:e6:c1: 13:0b:6e:2c:25:26:b9:92:97:0c:ff:f7:56:fa:fd: be:09:e1:74:b4:85:be:eb:ae:c9:29:9e:fe:3d:7c: 01:cb:07:b8:1a:6c:08:9c:34:9d:45:8a:52:21:08: e7:9f:c4:73:cc:9f:76:a6:36:2b:e5:bb:0a:dd:36: cd:aa:f1:19:01:3c:1c:e9:78:e2:98:e0:2c:5b:9c: 5e:3e:9f:b9:af:41:a0:84:f5:69:0b:9d:43:d0:e5: e5:cc:8e:3b:4f:ba:38:12:81:23:25:67:08:f4:55: 27:05:02:7c:6b:76:6b:5c:9e:36:f5:ef:a0:0c:49: 6c:11:ea:83:d5:fc:25:60:9f:50:60:66:92:c9:86: 4a:a9:67:51:e1:60:fa:73:c8:9e:65:4e:0c:ed:a9: 2a:8f:32:68:f2:2a:9f:db:a8:a0:ce:94:c8:08:e2: c8:7a:5c:55:53:a8:c9:74:fb:91:6a:0f:32:8f:53: af:45:7e:c9:b4:d2:39:d3:af:f0:b1:2a:c5:be:a2: 94:24:d0:ae:42:3a:1e:57:42:f9:f6:25:f1:fe:e9: a7:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:57:D5:D2:96:7B:14:6E:17:16:99:12:6C:03:F4:E7:49:58:95:2D X509v3 Authority Key Identifier: keyid:F8:99:69:E8:BA:BE:05:C4:5C:6D:6E:25:F6:25:E9:F1:84:5C:CC:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4b4fb88-8f42-47f2-be80-09e43560dddf/0/F89969E8BABE05C45C6D6E25F625E9F1845CCC9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:82:27:52:68:bf:08:c6:e0:57:d3:69:19:61:b7:fd:67:90: 5e:ac:9e:9c:29:86:e7:f7:fc:c6:6f:25:cf:f3:c5:64:99:6c: 99:1a:c3:1c:f8:d6:bb:03:e0:80:32:03:58:4a:70:02:04:03: f1:4e:f8:ca:75:99:bc:8b:03:7a:cf:51:af:0a:5c:c9:fb:85: 49:f4:86:7c:69:2c:25:d5:f4:17:48:da:a3:86:6b:c6:8b:61: 09:9a:f4:52:1a:41:a1:67:52:4e:12:c1:dc:ae:e3:5a:be:c2: 88:80:76:43:7c:59:e7:bc:ab:23:60:fe:c4:f6:8b:79:6f:cf: 61:61:cc:02:e2:e1:34:af:a3:3a:a0:74:d8:7a:2c:f1:84:64: cd:fe:f8:9d:6b:84:93:bd:9a:5a:7e:c3:3c:e1:d9:b7:4d:64: 54:0d:10:57:e3:e5:c3:72:49:3f:ce:b2:d1:8a:3e:0b:b5:e1: cc:b3:ad:fc:e4:77:a7:65:7b:9c:d3:04:36:2e:3d:a4:7c:ee: 68:e7:47:98:48:91:bc:35:28:ef:7d:7d:1d:09:11:ec:73:44: 12:fc:e7:3f:f2:58:0f:99:5b:6f:f1:7a:fb:4c:cb:f8:ed:6f: ef:45:7c:91:c2:45:0a:52:76:94:44:ce:6a:06:cf:ea:d4:09: 95:9f:1d:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDvuv2Ne2fkIUBNqrhpxsy8fkGPUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjg5OTY5RThCQUJFMDVDNDVDNkQ2RTI1RjYyNUU5RjE4 NDVDQ0M5QzAeFw0yNTA4MDUwOTE1NTFaFw0yNTA4MDgxNTU1NTFaMDMxMTAvBgNV BAMTKENFNTdENUQyOTY3QjE0NkUxNzE2OTkxMjZDMDNGNEU3NDk1ODk1MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUkk8QoXVOI+DZ7XFIG22RQiee aPZb6tq/1jepvoc5IrAYk/cAwDWZg+bmwRMLbiwlJrmSlwz/91b6/b4J4XS0hb7r rskpnv49fAHLB7gabAicNJ1FilIhCOefxHPMn3amNivluwrdNs2q8RkBPBzpeOKY 4CxbnF4+n7mvQaCE9WkLnUPQ5eXMjjtPujgSgSMlZwj0VScFAnxrdmtcnjb176AM SWwR6oPV/CVgn1BgZpLJhkqpZ1HhYPpzyJ5lTgztqSqPMmjyKp/bqKDOlMgI4sh6 XFVTqMl0+5FqDzKPU69Ffsm00jnTr/CxKsW+opQk0K5COh5XQvn2JfH+6adbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzlfV0pZ7FG4XFpkSbAP050lYlS0wHwYDVR0j BBgwFoAU+Jlp6Lq+BcRcbW4l9iXp8YRczJwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NGI0ZmI4OC04ZjQyLTQ3ZjItYmU4MC0wOWU0MzU2MGRkZGYvMC9GODk5NjlFOEJB QkUwNUM0NUM2RDZFMjVGNjI1RTlGMTg0NUNDQzlDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjg5OTY5RThCQUJFMDVDNDVDNkQ2RTI1RjYyNUU5RjE4NDVD Q0M5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDRiNGZiODgtOGY0Mi00N2YyLWJl ODAtMDllNDM1NjBkZGRmLzAvRjg5OTY5RThCQUJFMDVDNDVDNkQ2RTI1RjYyNUU5 RjE4NDVDQ0M5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAImCJ1JovwjG4FfTaRlht/1nkF6snpwphuf3 /MZvJc/zxWSZbJkawxz41rsD4IAyA1hKcAIEA/FO+Mp1mbyLA3rPUa8KXMn7hUn0 hnxpLCXV9BdI2qOGa8aLYQma9FIaQaFnUk4Swdyu41q+woiAdkN8Wee8qyNg/sT2 i3lvz2FhzALi4TSvozqgdNh6LPGEZM3++J1rhJO9mlp+wzzh2bdNZFQNEFfj5cNy ST/OstGKPgu14cyzrfzkd6dle5zTBDYuPaR87mjnR5hIkbw1KO99fR0JEexzRBL8 5z/yWA+ZW2/xevtMy/jtb+9FfJHCRQpSdpREzmoGz+rUCZWfHcY= -----END CERTIFICATE-----Generated at Thu Aug 7 03:30:20 2025 by rpki-client