$ rpki-client -vvf repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.mft File: 89B98D1F135A7FC66C0284C34477C19604645554.mft (raw, json) Hash identifier: hiH19j7nZS5HQ9DyxY0jkaKsatehDnfxMUgDC2dr9Wc= Subject key identifier: 93:FD:98:26:FE:54:68:FA:6C:F9:CA:22:14:4C:65:83:F5:5C:48:5D Authority key identifier: 89:B9:8D:1F:13:5A:7F:C6:6C:02:84:C3:44:77:C1:96:04:64:55:54 Certificate issuer: /CN=89B98D1F135A7FC66C0284C34477C19604645554 Certificate serial: 5C472EC78C8EA77DF9A1BCF2EC5EE2741D53EE02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89B98D1F135A7FC66C0284C34477C19604645554.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.mft Manifest number: 01A6 Signing time: Sun 02 Nov 2025 11:52:26 +0000 Manifest this update: Sun 02 Nov 2025 11:47:26 +0000 Manifest next update: Wed 05 Nov 2025 23:12:26 +0000 Files and hashes: 1: 3130332e37392e3233362e302f32332d3233203d3e20313530393535.roa (hash: ThDgpbBTSfRRealh0FHjoyTHcEPiBLGvmWH7tSYcxdE=) 2: 3130332e37392e3233362e302f32342d3234203d3e20313530393535.roa (hash: onZqAL56YoMix5wpV03h5e8xuAaImMliGkPVBv6grnU=) 3: 89B98D1F135A7FC66C0284C34477C19604645554.crl (hash: dg9nMvz+WkXfhzoBScEHMh68UY1t76DqDOZrLmSAyI0=) 4: 3130332e37392e3233372e302f32342d3234203d3e20313530393535.roa (hash: 2IWnXxowwOlz7I18Z25U30dGHsj5oRHYQH7WRuuUzKo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.crl rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89B98D1F135A7FC66C0284C34477C19604645554.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 23:12:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:47:2e:c7:8c:8e:a7:7d:f9:a1:bc:f2:ec:5e:e2:74:1d:53:ee:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89B98D1F135A7FC66C0284C34477C19604645554 Validity Not Before: Nov 2 11:47:26 2025 GMT Not After : Nov 5 23:12:26 2025 GMT Subject: CN=93FD9826FE5468FA6CF9CA22144C6583F55C485D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:26:7f:12:9d:c9:dd:3d:79:aa:24:ab:bf:77: 03:38:c6:fa:2d:b8:f8:25:55:6d:0b:1b:0d:73:37: 93:5f:30:9e:98:62:fc:d3:c3:f6:c2:61:b8:5e:48: 6e:11:44:e5:b6:b9:2d:ec:a6:9d:4f:4c:d6:05:4e: ba:d6:81:1f:a8:9d:6c:d9:ce:65:00:9f:81:27:45: ae:ae:f4:f4:5e:9a:04:fc:d4:86:85:e6:71:fb:a1: 13:ab:1c:01:c8:55:8c:f4:31:ac:e2:36:b1:a9:48: 9e:ef:32:8f:42:a1:59:59:ff:7e:2a:bc:7d:93:9c: a5:bd:9e:7f:62:4c:85:10:e3:f5:c7:9d:9b:53:dd: 5d:b6:6f:06:0c:07:db:e5:ab:7c:51:cc:42:97:a3: 7b:1b:32:30:fb:f8:ed:47:7c:10:14:fc:aa:c3:7d: b1:9a:98:e0:15:77:39:2a:56:15:72:8d:9c:60:21: 2a:d2:40:13:79:98:53:25:ad:aa:4a:21:e7:61:ed: 40:b7:0e:7a:2e:33:2a:20:c6:28:bb:ca:da:2f:2a: f1:b5:d3:a0:ab:bf:ec:e0:ae:e5:76:aa:65:b6:7c: 6b:0f:5c:53:c0:3c:78:e9:36:e8:db:a7:fb:8b:d3: f6:88:06:90:0d:48:8c:22:97:73:8a:ea:7b:e2:d3: 91:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:FD:98:26:FE:54:68:FA:6C:F9:CA:22:14:4C:65:83:F5:5C:48:5D X509v3 Authority Key Identifier: keyid:89:B9:8D:1F:13:5A:7F:C6:6C:02:84:C3:44:77:C1:96:04:64:55:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/89B98D1F135A7FC66C0284C34477C19604645554.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dbff1b3f-1190-4119-bbc6-1417df8aa258/0/89B98D1F135A7FC66C0284C34477C19604645554.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:9e:c1:18:52:f8:5b:0a:df:ca:56:71:67:ae:e0:43:ba:8d: 10:68:90:06:17:46:fc:1c:87:35:7a:b0:b6:6d:b0:53:6e:12: 91:b7:a0:0f:4c:2a:e4:f6:1b:1c:14:30:61:67:2e:5f:1c:c5: 94:71:c6:f1:d1:ac:7b:df:2c:a8:e0:2d:ad:d0:09:09:67:f5: d5:45:cd:cf:ac:ea:c5:0b:16:0c:32:56:52:69:4d:1b:fe:46: 15:6e:07:f6:26:7c:7a:de:72:29:65:13:38:7c:37:db:75:b1: 00:51:4a:47:b9:cc:ce:3d:66:98:0c:39:2e:99:1a:c6:ee:73: a3:16:92:16:c5:34:ee:56:9c:9a:8e:73:7d:1d:a9:b7:fa:77: 2e:f3:61:c2:c8:9c:bb:0f:d8:e5:66:ba:26:79:c8:a7:8a:42: 08:e7:6d:51:82:d1:8a:65:3f:b3:b4:fe:d5:d1:31:52:db:85: 11:53:9c:41:31:00:fa:03:05:c6:8b:8c:4c:2d:de:6a:9b:df: 96:92:a8:6a:fc:af:fb:07:29:df:9f:1a:c5:22:2e:05:be:62: cf:1f:9f:d4:b9:55:65:a7:4e:29:f0:3f:26:e8:ae:3f:d4:a9: c8:60:3c:4a:e4:1d:a7:b5:1e:60:b8:b3:29:74:cf:16:d0:f4: c8:3f:1c:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXEcux4yOp335obzy7F7idB1T7gIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODlCOThEMUYxMzVBN0ZDNjZDMDI4NEMzNDQ3N0MxOTYw NDY0NTU1NDAeFw0yNTExMDIxMTQ3MjZaFw0yNTExMDUyMzEyMjZaMDMxMTAvBgNV BAMTKDkzRkQ5ODI2RkU1NDY4RkE2Q0Y5Q0EyMjE0NEM2NTgzRjU1QzQ4NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYJn8SncndPXmqJKu/dwM4xvot uPglVW0LGw1zN5NfMJ6YYvzTw/bCYbheSG4RROW2uS3spp1PTNYFTrrWgR+onWzZ zmUAn4EnRa6u9PRemgT81IaF5nH7oROrHAHIVYz0MaziNrGpSJ7vMo9CoVlZ/34q vH2TnKW9nn9iTIUQ4/XHnZtT3V22bwYMB9vlq3xRzEKXo3sbMjD7+O1HfBAU/KrD fbGamOAVdzkqVhVyjZxgISrSQBN5mFMlrapKIedh7UC3DnouMyogxii7ytovKvG1 06Crv+zgruV2qmW2fGsPXFPAPHjpNujbp/uL0/aIBpANSIwil3OK6nvi05EpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk/2YJv5UaPps+coiFExlg/VcSF0wHwYDVR0j BBgwFoAUibmNHxNaf8ZsAoTDRHfBlgRkVVQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YmZmMWIzZi0xMTkwLTQxMTktYmJjNi0xNDE3ZGY4YWEyNTgvMC84OUI5OEQxRjEz NUE3RkM2NkMwMjg0QzM0NDc3QzE5NjA0NjQ1NTU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODlCOThEMUYxMzVBN0ZDNjZDMDI4NEMzNDQ3N0MxOTYwNDY0 NTU1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGJmZjFiM2YtMTE5MC00MTE5LWJi YzYtMTQxN2RmOGFhMjU4LzAvODlCOThEMUYxMzVBN0ZDNjZDMDI4NEMzNDQ3N0Mx OTYwNDY0NTU1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG6ewRhS+FsK38pWcWeu4EO6jRBokAYXRvwc hzV6sLZtsFNuEpG3oA9MKuT2GxwUMGFnLl8cxZRxxvHRrHvfLKjgLa3QCQln9dVF zc+s6sULFgwyVlJpTRv+RhVuB/YmfHrecillEzh8N9t1sQBRSke5zM49ZpgMOS6Z Gsbuc6MWkhbFNO5WnJqOc30dqbf6dy7zYcLInLsP2OVmuiZ5yKeKQgjnbVGC0Ypl P7O0/tXRMVLbhRFTnEExAPoDBcaLjEwt3mqb35aSqGr8r/sHKd+fGsUiLgW+Ys8f n9S5VWWnTinwPyborj/UqchgPErkHae1HmC4syl0zxbQ9Mg/HKI= -----END CERTIFICATE-----Generated at Tue Nov 4 08:21:19 2025 by rpki-client