$ rpki-client -vvf repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft File: B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft (raw, json) Hash identifier: zRian7eTEVbu3DIelcGdeAaomQ5VxvI1hrUlNYw5iAI= Subject key identifier: 4B:8D:84:09:28:8A:BF:77:BF:5E:8A:39:1D:BA:9B:E2:89:CD:45:9F Authority key identifier: B8:93:98:BA:60:3C:43:BD:F7:11:A2:B3:1F:AD:C8:CD:FF:C9:CC:16 Certificate issuer: /CN=B89398BA603C43BDF711A2B31FADC8CDFFC9CC16 Certificate serial: 0AA4BE2622D87F88AC0FC4D31838E9C466DA2252 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft Manifest number: 04F5 Signing time: Wed 06 Aug 2025 19:21:45 +0000 Manifest this update: Wed 06 Aug 2025 19:16:45 +0000 Manifest next update: Sat 09 Aug 2025 19:37:45 +0000 Files and hashes: 1: B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.crl (hash: ZL5831oFQ5z6jxZUKf8daDu1tYpTkyUdrnjkbLutPjk=) 2: 323030313a6466323a346238303a3a2f34382d3438203d3e20313339343537.roa (hash: O/T9Xztwa1eZpftLg0Xl5KOsLOQM47dFO4VcGsJ1wDg=) 3: 3130332e3134362e36322e302f32332d3234203d3e20313339343537.roa (hash: J9nhXOhW6jatN3t2cMwD6dQ3cCJrOL1soCUmU7Ehehg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.crl rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 19:37:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:a4:be:26:22:d8:7f:88:ac:0f:c4:d3:18:38:e9:c4:66:da:22:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B89398BA603C43BDF711A2B31FADC8CDFFC9CC16 Validity Not Before: Aug 6 19:16:45 2025 GMT Not After : Aug 9 19:37:45 2025 GMT Subject: CN=4B8D8409288ABF77BF5E8A391DBA9BE289CD459F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:5a:41:be:d3:b1:7d:af:d7:09:08:38:55:4e: 31:21:3a:c1:56:3e:dd:5f:23:43:00:a6:94:02:a3: fe:50:c9:15:11:44:df:d9:f2:6b:79:3d:a6:a2:2c: 9a:b2:13:6a:0e:65:2b:50:9a:da:2d:65:77:b6:76: 6e:dc:74:53:57:0c:24:fa:0b:71:24:ad:94:08:c5: bb:ea:11:ac:ea:ff:09:4f:e7:e2:b9:9d:95:5b:06: 2f:e0:e5:02:23:c7:ce:5e:91:f4:d6:40:95:3d:a0: 43:ff:86:13:75:9c:1c:0e:45:56:47:27:26:0a:49: 47:0b:e3:71:41:24:d6:2a:c3:4a:d9:02:ff:69:c5: ec:d1:c6:71:76:cc:b1:51:d3:a0:8c:f7:95:2d:ca: 7c:e6:f8:bd:38:c3:1c:68:f7:4d:10:dd:84:ed:10: 8c:f6:5c:56:1e:ac:a8:c6:1d:ab:5a:32:b7:74:a3: 18:8c:cb:2b:cd:3e:1d:8d:89:38:6a:90:0f:9b:11: 0a:79:9b:60:5e:8d:de:55:cc:0a:5f:49:b5:84:16: 87:0e:8c:18:86:a3:81:2c:c6:d9:29:86:34:a6:55: 85:91:aa:6b:ad:b4:bc:0e:ee:c3:25:09:77:48:89: df:62:5e:8d:4e:e2:ed:32:96:3a:97:ca:fb:92:fe: 54:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:8D:84:09:28:8A:BF:77:BF:5E:8A:39:1D:BA:9B:E2:89:CD:45:9F X509v3 Authority Key Identifier: keyid:B8:93:98:BA:60:3C:43:BD:F7:11:A2:B3:1F:AD:C8:CD:FF:C9:CC:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dea79340-4db2-458d-95dd-af20b4fcdb3d/0/B89398BA603C43BDF711A2B31FADC8CDFFC9CC16.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:fc:6f:89:e6:76:33:6f:13:4e:e5:1f:5c:77:94:07:b0:4c: 31:cd:09:57:e2:f8:59:b0:c6:49:c9:ef:06:51:25:34:07:57: 8f:ee:ec:b2:87:87:eb:c5:0b:7c:19:db:b2:c9:01:3f:51:a7: a5:4c:03:49:2d:39:92:88:9e:e5:06:6c:e3:24:c2:44:18:1e: da:b1:01:91:2d:5a:6f:d5:e9:6b:a5:33:a6:76:4f:b0:21:18: f8:e6:dd:4f:33:63:c1:8c:38:08:9c:e5:50:5a:99:1c:15:ab: 87:8c:58:d0:e0:7a:0f:fd:03:13:b5:e5:18:dd:74:cf:f8:ab: b2:a3:c1:04:df:8c:fe:1a:6b:04:98:8e:0d:bb:e6:94:48:0a: 30:e0:3b:bb:4b:22:3b:3d:a4:17:ea:04:0a:e3:35:d3:bc:cb: 66:a5:56:3d:a5:a9:63:cf:6f:0b:35:d5:46:5b:51:4e:fe:63: c0:46:53:23:90:c3:07:ae:40:51:6d:21:85:5e:4c:13:9f:83: 14:67:85:87:89:b0:3f:f3:ff:14:59:86:02:4e:c1:83:b3:2d: 15:df:4e:3d:b8:5c:8d:a9:f3:b4:b4:ae:bc:5b:d7:7d:0d:75: 1f:38:a3:e5:d6:74:28:9d:cd:9a:d6:a1:b0:e8:bb:dd:6f:80: 68:39:8e:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCqS+JiLYf4isD8TTGDjpxGbaIlIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg5Mzk4QkE2MDNDNDNCREY3MTFBMkIzMUZBREM4Q0RG RkM5Q0MxNjAeFw0yNTA4MDYxOTE2NDVaFw0yNTA4MDkxOTM3NDVaMDMxMTAvBgNV BAMTKDRCOEQ4NDA5Mjg4QUJGNzdCRjVFOEEzOTFEQkE5QkUyODlDRDQ1OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMWkG+07F9r9cJCDhVTjEhOsFW Pt1fI0MAppQCo/5QyRURRN/Z8mt5PaaiLJqyE2oOZStQmtotZXe2dm7cdFNXDCT6 C3EkrZQIxbvqEazq/wlP5+K5nZVbBi/g5QIjx85ekfTWQJU9oEP/hhN1nBwORVZH JyYKSUcL43FBJNYqw0rZAv9pxezRxnF2zLFR06CM95Utynzm+L04wxxo900Q3YTt EIz2XFYerKjGHataMrd0oxiMyyvNPh2NiThqkA+bEQp5m2Bejd5VzApfSbWEFocO jBiGo4EsxtkphjSmVYWRqmuttLwO7sMlCXdIid9iXo1O4u0yljqXyvuS/lQzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS42ECSiKv3e/Xoo5Hbqb4onNRZ8wHwYDVR0j BBgwFoAUuJOYumA8Q733EaKzH63Izf/JzBYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZWE3OTM0MC00ZGIyLTQ1OGQtOTVkZC1hZjIwYjRmY2RiM2QvMC9CODkzOThCQTYw M0M0M0JERjcxMUEyQjMxRkFEQzhDREZGQzlDQzE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjg5Mzk4QkE2MDNDNDNCREY3MTFBMkIzMUZBREM4Q0RGRkM5 Q0MxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGVhNzkzNDAtNGRiMi00NThkLTk1 ZGQtYWYyMGI0ZmNkYjNkLzAvQjg5Mzk4QkE2MDNDNDNCREY3MTFBMkIzMUZBREM4 Q0RGRkM5Q0MxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAL8b4nmdjNvE07lH1x3lAewTDHNCVfi+Fmw xknJ7wZRJTQHV4/u7LKHh+vFC3wZ27LJAT9Rp6VMA0ktOZKInuUGbOMkwkQYHtqx AZEtWm/V6WulM6Z2T7AhGPjm3U8zY8GMOAic5VBamRwVq4eMWNDgeg/9AxO15Rjd dM/4q7KjwQTfjP4aawSYjg275pRICjDgO7tLIjs9pBfqBArjNdO8y2alVj2lqWPP bws11UZbUU7+Y8BGUyOQwweuQFFtIYVeTBOfgxRnhYeJsD/z/xRZhgJOwYOzLRXf Tj24XI2p87S0rrxb130NdR84o+XWdCidzZrWobDou91vgGg5jmk= -----END CERTIFICATE-----Generated at Thu Aug 7 00:27:10 2025 by rpki-client