$ rpki-client -vvf repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.mft File: 89B98D1F135A7FC66C0284C34477C19604645554.mft (raw, json) Hash identifier: TgmqhQhYmFM4R/IEZNfOVQdbRDH8+bb2Ym/XxxRZXUU= Subject key identifier: F9:52:8C:02:9B:BB:8C:55:89:0A:A7:24:8D:12:EF:FA:1B:DC:F9:81 Authority key identifier: 89:B9:8D:1F:13:5A:7F:C6:6C:02:84:C3:44:77:C1:96:04:64:55:54 Certificate issuer: /CN=89B98D1F135A7FC66C0284C34477C19604645554 Certificate serial: 3405506B763FCC2C0F08C8FA5CEA39821A4DF806 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89B98D1F135A7FC66C0284C34477C19604645554.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.mft Manifest number: 0168 Signing time: Sun 15 Jun 2025 14:12:12 +0000 Manifest this update: Sun 15 Jun 2025 14:07:12 +0000 Manifest next update: Thu 19 Jun 2025 01:27:12 +0000 Files and hashes: 1: 3130332e37392e3233362e302f32342d3234203d3e20313530393535.roa (hash: onZqAL56YoMix5wpV03h5e8xuAaImMliGkPVBv6grnU=) 2: 3130332e37392e3233372e302f32342d3234203d3e20313530393535.roa (hash: 2IWnXxowwOlz7I18Z25U30dGHsj5oRHYQH7WRuuUzKo=) 3: 89B98D1F135A7FC66C0284C34477C19604645554.crl (hash: rHMy42q6xf8ftOnIpSPuaO+PZ6+pZcZbfj5OkJKitSA=) 4: 3130332e37392e3233362e302f32332d3233203d3e20313530393535.roa (hash: P+PJmhSLpd83S2cxURBDcslsCmkTTuYqFLowXEXkTfY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.crl rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89B98D1F135A7FC66C0284C34477C19604645554.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 01:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:05:50:6b:76:3f:cc:2c:0f:08:c8:fa:5c:ea:39:82:1a:4d:f8:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89B98D1F135A7FC66C0284C34477C19604645554 Validity Not Before: Jun 15 14:07:12 2025 GMT Not After : Jun 19 01:27:12 2025 GMT Subject: CN=F9528C029BBB8C55890AA7248D12EFFA1BDCF981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1f:5b:93:c3:5b:b3:c5:f1:f3:54:db:65:b9: 2c:37:a1:ef:57:e6:3c:79:c3:07:88:44:d2:0d:d5: 61:ad:f2:6f:a6:5e:15:bb:55:fe:f5:a8:bc:66:4d: 8c:a4:2c:88:09:96:0c:02:f9:4d:2e:45:da:4d:19: 00:48:58:4e:9e:a3:40:06:33:e5:28:e2:8e:e7:cc: 4e:d9:0e:65:a9:da:dd:84:b7:8b:5c:47:19:08:07: e3:43:fb:ca:34:ae:fa:36:40:25:b9:9e:f3:bf:f0: 60:b5:95:be:f8:4d:a0:51:1f:e6:1f:0c:32:e5:f2: 5a:6f:cd:60:a1:96:2f:b3:93:66:50:0d:bb:37:15: 07:9a:af:74:72:4c:4a:bc:6e:33:21:f5:7e:d1:cf: 8a:ea:3e:71:8f:10:0a:d4:a3:68:cf:c7:39:75:8e: dd:55:88:d7:27:ee:a5:8c:b3:1a:37:7f:85:17:bc: f1:78:0d:a5:f7:02:76:5c:45:bb:79:a4:a5:1c:13: b1:ba:91:e6:c4:63:5a:d0:50:f7:2a:01:4f:98:c7: 5d:55:b6:87:03:38:79:5e:e1:b3:18:65:62:de:60: 46:32:e8:a7:89:56:f7:48:d4:37:e4:45:de:21:e7: 18:c5:21:2c:50:ea:08:f4:2f:b9:d1:52:89:ec:39: b6:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:52:8C:02:9B:BB:8C:55:89:0A:A7:24:8D:12:EF:FA:1B:DC:F9:81 X509v3 Authority Key Identifier: keyid:89:B9:8D:1F:13:5A:7F:C6:6C:02:84:C3:44:77:C1:96:04:64:55:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89B98D1F135A7FC66C0284C34477C19604645554.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:e2:42:ee:e5:32:6e:f9:fe:f3:f6:17:92:7b:fe:3d:5a:59: 57:dd:89:39:2b:61:da:00:09:c8:08:8f:48:c2:63:a5:03:6e: 06:b2:70:77:b6:9a:64:93:d5:cf:bb:b3:19:f4:9b:0d:c1:50: 28:3e:9f:be:4c:83:fb:a2:fd:87:03:36:e9:37:5b:0f:92:18: ea:ed:ce:6c:38:53:0f:c9:c8:6f:c6:ee:37:4c:e5:1a:b2:18: 53:40:04:6e:4b:95:bc:5c:0e:a3:51:07:22:ae:6b:0e:d7:fd: 74:91:2e:f1:d1:3d:17:8e:f4:aa:31:9c:46:1c:91:8e:42:ea: 08:39:0f:0d:5d:fc:04:a0:1c:6b:d4:31:58:03:1e:77:c9:e1: ee:ed:3c:da:61:a4:de:9c:61:3f:9d:ec:d1:06:c8:eb:bf:c0: f6:72:08:0d:86:ea:70:9d:c7:c2:67:12:c1:a9:25:bf:71:25: 7e:41:f6:29:8a:c0:4d:bc:1d:71:68:f4:23:97:03:d6:3b:a8: 7b:de:e2:56:14:b4:2c:4f:e6:a0:6a:14:5b:40:b7:38:11:a6: 8f:22:ff:13:2a:42:00:42:15:f6:b7:88:8f:25:59:e7:12:5c: eb:99:ef:bd:76:68:44:77:86:8b:91:c3:0f:8e:85:99:72:e8: 90:85:54:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNAVQa3Y/zCwPCMj6XOo5ghpN+AYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlCOThEMUYxMzVBN0ZDNjZDMDI4NEMzNDQ3N0MxOTYw NDY0NTU1NDAeFw0yNTA2MTUxNDA3MTJaFw0yNTA2MTkwMTI3MTJaMDMxMTAvBgNV BAMTKEY5NTI4QzAyOUJCQjhDNTU4OTBBQTcyNDhEMTJFRkZBMUJEQ0Y5ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCH1uTw1uzxfHzVNtluSw3oe9X 5jx5wweIRNIN1WGt8m+mXhW7Vf71qLxmTYykLIgJlgwC+U0uRdpNGQBIWE6eo0AG M+Uo4o7nzE7ZDmWp2t2Et4tcRxkIB+ND+8o0rvo2QCW5nvO/8GC1lb74TaBRH+Yf DDLl8lpvzWChli+zk2ZQDbs3FQear3RyTEq8bjMh9X7Rz4rqPnGPEArUo2jPxzl1 jt1ViNcn7qWMsxo3f4UXvPF4DaX3AnZcRbt5pKUcE7G6kebEY1rQUPcqAU+Yx11V tocDOHle4bMYZWLeYEYy6KeJVvdI1DfkRd4h5xjFISxQ6gj0L7nRUonsObbZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+VKMApu7jFWJCqckjRLv+hvc+YEwHwYDVR0j BBgwFoAUibmNHxNaf8ZsAoTDRHfBlgRkVVQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YmZmMWIzZi0xMTkwLTQxMTktYmJjNi0xNDE3ZGY4YWEyNTgvMC84OUI5OEQxRjEz NUE3RkM2NkMwMjg0QzM0NDc3QzE5NjA0NjQ1NTU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODlCOThEMUYxMzVBN0ZDNjZDMDI4NEMzNDQ3N0MxOTYwNDY0 NTU1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGJmZjFiM2YtMTE5MC00MTE5LWJi YzYtMTQxN2RmOGFhMjU4LzAvODlCOThEMUYxMzVBN0ZDNjZDMDI4NEMzNDQ3N0Mx OTYwNDY0NTU1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAILiQu7lMm75/vP2F5J7/j1aWVfdiTkrYdoA CcgIj0jCY6UDbgaycHe2mmST1c+7sxn0mw3BUCg+n75Mg/ui/YcDNuk3Ww+SGOrt zmw4Uw/JyG/G7jdM5RqyGFNABG5LlbxcDqNRByKuaw7X/XSRLvHRPReO9KoxnEYc kY5C6gg5Dw1d/ASgHGvUMVgDHnfJ4e7tPNphpN6cYT+d7NEGyOu/wPZyCA2G6nCd x8JnEsGpJb9xJX5B9imKwE28HXFo9COXA9Y7qHve4lYUtCxP5qBqFFtAtzgRpo8i /xMqQgBCFfa3iI8lWecSXOuZ7712aER3houRww+OhZly6JCFVF0= -----END CERTIFICATE-----Generated at Tue Jun 17 10:35:14 2025 by rpki-client