$ rpki-client -vvf repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft File: 90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft (raw, json) Hash identifier: 9ljwcEvEh8NEr+likgLXi1OI1Nb2OEFfbGQsi7YNWhM= Subject key identifier: 1F:E9:4A:C8:BE:CC:C0:32:B7:F7:B8:30:AC:7A:54:4B:25:CF:3F:08 Authority key identifier: 90:31:7E:26:9F:FE:9F:71:3F:20:CF:BA:CE:64:2A:6F:60:F7:8F:CA Certificate issuer: /CN=90317E269FFE9F713F20CFBACE642A6F60F78FCA Certificate serial: 0DFB3CD427BBC60AC5C11ADD6B4D050DB0F1640B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90317E269FFE9F713F20CFBACE642A6F60F78FCA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft Manifest number: 83 Signing time: Sun 15 Jun 2025 01:10:47 +0000 Manifest this update: Sun 15 Jun 2025 01:05:47 +0000 Manifest next update: Wed 18 Jun 2025 07:02:47 +0000 Files and hashes: 1: 323430313a633432303a3a2f33322d3438203d3e20313431303538.roa (hash: /agLGw0c81cHF8Topn/a9INtTEJnrvSh7/oHynB8qR0=) 2: 90317E269FFE9F713F20CFBACE642A6F60F78FCA.crl (hash: 77n2kF91aeb9Nbk7ToTiGiI2Gc2GgZzbZQFBKX4F324=) 3: 3130332e3135352e3131332e302f32342d3234203d3e20313431303538.roa (hash: Y3pOvFfrtyRbRGGWe5RbSl3GyhFyt942LzAk5FIpr9c=) 4: 3130332e33362e3235302e302f32342d3234203d3e20313431303538.roa (hash: gP8KkxonLoqcx7KZvnUv3ivtnAxFYtDlgM/zAdFC+W8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.crl rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90317E269FFE9F713F20CFBACE642A6F60F78FCA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 07:02:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:fb:3c:d4:27:bb:c6:0a:c5:c1:1a:dd:6b:4d:05:0d:b0:f1:64:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90317E269FFE9F713F20CFBACE642A6F60F78FCA Validity Not Before: Jun 15 01:05:47 2025 GMT Not After : Jun 18 07:02:47 2025 GMT Subject: CN=1FE94AC8BECCC032B7F7B830AC7A544B25CF3F08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:04:f0:af:e1:f4:72:02:fc:f6:ca:a4:1a:8e: b0:68:16:e7:45:a9:e9:4e:42:e6:0c:1b:1b:af:cb: 56:8f:b6:52:10:b7:2a:2e:5e:df:72:18:7a:b1:14: e4:61:04:1a:e0:81:d0:f7:74:60:15:b7:b9:30:01: 10:d8:aa:40:b4:be:6e:6b:bb:7e:08:e6:8f:ce:4a: 61:bc:4c:d7:39:00:ea:9f:b5:17:37:f6:87:f7:f2: d4:5f:f6:f0:5b:55:a4:b8:c6:76:24:5e:73:74:5e: ab:6c:3b:d7:27:e1:9b:8c:7f:cc:99:43:9d:66:7b: 04:b6:20:30:f7:25:a3:27:b1:8c:63:ab:ea:d9:ed: 7a:9d:50:12:8e:25:6b:67:8d:6c:9e:4e:a9:67:42: 30:f8:eb:ad:2e:99:c1:1e:f3:33:5c:e5:f5:c9:3b: 72:30:7d:c5:fa:3b:a9:26:53:e6:5d:e2:69:76:1e: 04:14:25:8f:75:e6:e8:97:b0:7c:69:60:1a:e1:fd: 30:d9:9d:d2:fa:9a:e9:55:12:15:c5:b4:ca:be:08: 40:71:ea:ba:37:d7:f8:fc:ac:1f:dc:e7:1c:19:b7: 4c:a2:42:46:74:3e:a9:16:03:89:80:cf:08:ce:6c: 87:84:75:cb:d9:29:20:db:0c:e2:7d:6d:9b:08:4d: f4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:E9:4A:C8:BE:CC:C0:32:B7:F7:B8:30:AC:7A:54:4B:25:CF:3F:08 X509v3 Authority Key Identifier: keyid:90:31:7E:26:9F:FE:9F:71:3F:20:CF:BA:CE:64:2A:6F:60:F7:8F:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90317E269FFE9F713F20CFBACE642A6F60F78FCA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:91:88:05:09:11:93:60:6f:8a:05:ea:d8:e9:77:3e:3d:af: e8:92:46:de:78:3f:73:c3:c1:c7:10:bc:4f:6b:8f:e4:84:0e: 64:94:38:47:23:b7:51:6d:15:90:3a:89:da:27:ad:9b:d6:c6: a3:2c:ca:a3:11:7a:ff:1b:df:ec:d2:35:c3:dc:a6:c9:11:c0: 96:ac:a3:f7:6e:cc:20:09:df:ee:71:df:40:72:7a:d8:8f:fd: 82:4f:75:8e:7f:de:65:20:49:78:7c:66:fb:be:71:44:a9:d0: 99:6e:64:ed:a8:88:f9:63:fc:1a:97:76:73:23:e7:fc:04:8b: 1a:e7:22:e0:85:7d:4b:c4:b8:92:34:62:40:b2:5f:b6:43:7c: bb:30:43:5a:03:74:1f:43:03:8b:46:a7:ed:80:41:f8:14:4e: f0:ac:0a:c4:64:3b:60:b5:28:48:ba:ae:30:2c:b7:40:c0:ca: 06:a1:cd:ea:e4:b2:0b:96:d7:a3:07:11:a5:4a:76:ea:34:20: 2c:71:5a:e1:9b:82:69:b8:1d:4f:8a:1b:01:d3:50:6a:74:83: 98:4e:c2:a9:a1:1b:ab:85:46:14:fa:df:5d:48:22:92:6b:20: 2d:25:52:dc:41:b6:5c:92:f2:26:fb:f9:5e:f3:ce:7a:65:53: 22:56:f8:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDfs81Ce7xgrFwRrda00FDbDxZAswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTAzMTdFMjY5RkZFOUY3MTNGMjBDRkJBQ0U2NDJBNkY2 MEY3OEZDQTAeFw0yNTA2MTUwMTA1NDdaFw0yNTA2MTgwNzAyNDdaMDMxMTAvBgNV BAMTKDFGRTk0QUM4QkVDQ0MwMzJCN0Y3QjgzMEFDN0E1NDRCMjVDRjNGMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmBPCv4fRyAvz2yqQajrBoFudF qelOQuYMGxuvy1aPtlIQtyouXt9yGHqxFORhBBrggdD3dGAVt7kwARDYqkC0vm5r u34I5o/OSmG8TNc5AOqftRc39of38tRf9vBbVaS4xnYkXnN0XqtsO9cn4ZuMf8yZ Q51mewS2IDD3JaMnsYxjq+rZ7XqdUBKOJWtnjWyeTqlnQjD4660umcEe8zNc5fXJ O3IwfcX6O6kmU+Zd4ml2HgQUJY915uiXsHxpYBrh/TDZndL6mulVEhXFtMq+CEBx 6ro31/j8rB/c5xwZt0yiQkZ0PqkWA4mAzwjObIeEdcvZKSDbDOJ9bZsITfRdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH+lKyL7MwDK397gwrHpUSyXPPwgwHwYDVR0j BBgwFoAUkDF+Jp/+n3E/IM+6zmQqb2D3j8owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 M2I4NThmNi1kZTIwLTQxMjEtYmNlYS05MDc2ZWRjY2MwOTcvMC85MDMxN0UyNjlG RkU5RjcxM0YyMENGQkFDRTY0MkE2RjYwRjc4RkNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTAzMTdFMjY5RkZFOUY3MTNGMjBDRkJBQ0U2NDJBNkY2MEY3 OEZDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTNiODU4ZjYtZGUyMC00MTIxLWJj ZWEtOTA3NmVkY2NjMDk3LzAvOTAzMTdFMjY5RkZFOUY3MTNGMjBDRkJBQ0U2NDJB NkY2MEY3OEZDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAGRiAUJEZNgb4oF6tjpdz49r+iSRt54P3PD wccQvE9rj+SEDmSUOEcjt1FtFZA6idonrZvWxqMsyqMRev8b3+zSNcPcpskRwJas o/duzCAJ3+5x30ByetiP/YJPdY5/3mUgSXh8Zvu+cUSp0JluZO2oiPlj/BqXdnMj 5/wEixrnIuCFfUvEuJI0YkCyX7ZDfLswQ1oDdB9DA4tGp+2AQfgUTvCsCsRkO2C1 KEi6rjAst0DAygahzerksguW16MHEaVKduo0ICxxWuGbgmm4HU+KGwHTUGp0g5hO wqmhG6uFRhT6311IIpJrIC0lUtxBtlyS8ib7+V7zznplUyJW+Fo= -----END CERTIFICATE-----Generated at Mon Jun 16 15:54:18 2025 by rpki-client