$ rpki-client -vvf repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft File: 90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft (raw, json) Hash identifier: yURRev4yiyf/6CAQebiKiI4gbGJ1dLMbN2FRAJJiu5o= Subject key identifier: 81:E9:78:E4:2A:97:17:F3:54:F4:12:C9:52:83:6C:AF:30:22:A1:97 Authority key identifier: 90:31:7E:26:9F:FE:9F:71:3F:20:CF:BA:CE:64:2A:6F:60:F7:8F:CA Certificate issuer: /CN=90317E269FFE9F713F20CFBACE642A6F60F78FCA Certificate serial: 448DB5C679547BCA6551262EF7F5C1C181BEFA8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90317E269FFE9F713F20CFBACE642A6F60F78FCA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft Manifest number: 9B Signing time: Thu 07 Aug 2025 09:20:04 +0000 Manifest this update: Thu 07 Aug 2025 09:15:04 +0000 Manifest next update: Sun 10 Aug 2025 21:10:04 +0000 Files and hashes: 1: 323430313a633432303a3a2f33322d3438203d3e20313431303538.roa (hash: /agLGw0c81cHF8Topn/a9INtTEJnrvSh7/oHynB8qR0=) 2: 3130332e3135352e3131332e302f32342d3234203d3e20313431303538.roa (hash: Y3pOvFfrtyRbRGGWe5RbSl3GyhFyt942LzAk5FIpr9c=) 3: 3130332e33362e3235302e302f32342d3234203d3e20313431303538.roa (hash: gP8KkxonLoqcx7KZvnUv3ivtnAxFYtDlgM/zAdFC+W8=) 4: 90317E269FFE9F713F20CFBACE642A6F60F78FCA.crl (hash: JF8X8DsL/6hObxBDs7xKuAFN0pQEgn2Zg8OZOBaEld0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.crl rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90317E269FFE9F713F20CFBACE642A6F60F78FCA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 21:10:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:8d:b5:c6:79:54:7b:ca:65:51:26:2e:f7:f5:c1:c1:81:be:fa:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90317E269FFE9F713F20CFBACE642A6F60F78FCA Validity Not Before: Aug 7 09:15:04 2025 GMT Not After : Aug 10 21:10:04 2025 GMT Subject: CN=81E978E42A9717F354F412C952836CAF3022A197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2a:72:48:dc:ed:88:08:dc:f1:90:89:f7:e1: 1b:4c:9a:30:2d:fd:ee:af:34:58:95:47:c2:83:f1: 09:9a:85:cd:c4:24:0f:f0:2f:01:02:a1:ba:2b:98: f0:18:22:82:f3:6e:65:6d:86:b0:80:6c:85:8d:cf: 31:e1:03:88:6e:d3:8c:db:88:c8:81:34:01:f8:fc: ce:74:35:c9:b5:78:6f:e8:9e:84:87:d7:6f:fa:4e: 33:d8:40:15:df:a9:e1:9e:ab:66:e5:be:74:34:0f: 66:94:4e:c2:a8:1a:f8:ad:af:4a:bd:e0:64:a0:56: 21:4f:f4:16:da:8b:7e:19:78:5d:50:87:12:99:74: 36:15:8b:96:b6:36:5d:9f:67:8a:5a:ed:b6:25:b9: d5:82:46:f8:d3:8a:e1:a7:f0:7a:58:b9:21:98:26: 1e:32:03:95:1d:a4:b4:98:a1:e6:44:c1:e5:ee:0c: cc:c5:78:48:c0:15:ec:6c:03:da:0f:37:12:7d:a7: 82:80:43:82:e7:1e:aa:3b:95:e3:0a:13:e0:03:85: b5:66:54:88:00:19:58:65:21:0f:78:7a:7e:67:3c: ac:40:c3:de:57:28:4a:a6:f6:f6:ab:4b:fd:0e:1f: 6f:db:6b:d4:43:70:6d:f2:27:11:ad:3e:22:2a:c6: 56:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:E9:78:E4:2A:97:17:F3:54:F4:12:C9:52:83:6C:AF:30:22:A1:97 X509v3 Authority Key Identifier: keyid:90:31:7E:26:9F:FE:9F:71:3F:20:CF:BA:CE:64:2A:6F:60:F7:8F:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90317E269FFE9F713F20CFBACE642A6F60F78FCA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:bd:78:2c:72:c1:b2:6a:1c:58:9e:2f:86:39:d8:1e:36:e8: 36:df:d5:d2:23:e0:02:22:f7:5c:b4:6d:ba:b4:13:d0:eb:3d: 1a:7b:27:08:93:88:d0:9b:48:25:a3:af:92:a4:2e:a3:55:26: 41:65:02:25:34:55:a0:16:f2:13:0f:d2:0f:76:0e:28:55:00: 2c:17:19:39:61:4d:67:e9:3a:e8:9a:62:09:59:6f:8f:ce:c3: 27:2b:9b:8b:4a:17:8f:ef:09:22:12:07:cc:74:86:0e:42:92: c6:9f:7a:9b:41:72:e9:64:df:ed:c7:85:01:75:a8:01:90:f7: 45:a9:69:e1:3e:7a:8c:0e:b5:5e:72:c4:5a:b2:dc:af:43:9e: 18:be:cf:b7:c4:80:b3:11:48:ff:54:85:26:b1:e8:3c:71:40: d5:4d:17:0c:9b:ba:97:3b:e6:38:6e:a8:46:5d:29:0a:09:63: bc:8b:e0:0e:18:b3:04:e7:01:9b:34:97:32:11:53:cf:92:8c: 6f:46:4f:01:d2:bb:89:3a:b1:2a:30:6b:1a:2b:57:58:46:ee: e0:ea:d6:c1:fc:79:54:27:35:ef:bc:99:30:c2:ad:ef:65:c4: 06:b6:1b:30:d3:03:98:82:2f:f9:10:1a:e4:84:42:69:9b:1c: 69:93:05:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURI21xnlUe8plUSYu9/XBwYG++o4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTAzMTdFMjY5RkZFOUY3MTNGMjBDRkJBQ0U2NDJBNkY2 MEY3OEZDQTAeFw0yNTA4MDcwOTE1MDRaFw0yNTA4MTAyMTEwMDRaMDMxMTAvBgNV BAMTKDgxRTk3OEU0MkE5NzE3RjM1NEY0MTJDOTUyODM2Q0FGMzAyMkExOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3KnJI3O2ICNzxkIn34RtMmjAt /e6vNFiVR8KD8Qmahc3EJA/wLwECobormPAYIoLzbmVthrCAbIWNzzHhA4hu04zb iMiBNAH4/M50Ncm1eG/onoSH12/6TjPYQBXfqeGeq2blvnQ0D2aUTsKoGvitr0q9 4GSgViFP9Bbai34ZeF1QhxKZdDYVi5a2Nl2fZ4pa7bYludWCRvjTiuGn8HpYuSGY Jh4yA5UdpLSYoeZEweXuDMzFeEjAFexsA9oPNxJ9p4KAQ4LnHqo7leMKE+ADhbVm VIgAGVhlIQ94en5nPKxAw95XKEqm9varS/0OH2/ba9RDcG3yJxGtPiIqxlYbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgel45CqXF/NU9BLJUoNsrzAioZcwHwYDVR0j BBgwFoAUkDF+Jp/+n3E/IM+6zmQqb2D3j8owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 M2I4NThmNi1kZTIwLTQxMjEtYmNlYS05MDc2ZWRjY2MwOTcvMC85MDMxN0UyNjlG RkU5RjcxM0YyMENGQkFDRTY0MkE2RjYwRjc4RkNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTAzMTdFMjY5RkZFOUY3MTNGMjBDRkJBQ0U2NDJBNkY2MEY3 OEZDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTNiODU4ZjYtZGUyMC00MTIxLWJj ZWEtOTA3NmVkY2NjMDk3LzAvOTAzMTdFMjY5RkZFOUY3MTNGMjBDRkJBQ0U2NDJB NkY2MEY3OEZDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACm9eCxywbJqHFieL4Y52B426Dbf1dIj4AIi 91y0bbq0E9DrPRp7JwiTiNCbSCWjr5KkLqNVJkFlAiU0VaAW8hMP0g92DihVACwX GTlhTWfpOuiaYglZb4/Owycrm4tKF4/vCSISB8x0hg5CksafeptBculk3+3HhQF1 qAGQ90WpaeE+eowOtV5yxFqy3K9Dnhi+z7fEgLMRSP9UhSax6DxxQNVNFwybupc7 5jhuqEZdKQoJY7yL4A4YswTnAZs0lzIRU8+SjG9GTwHSu4k6sSowaxorV1hG7uDq 1sH8eVQnNe+8mTDCre9lxAa2GzDTA5iCL/kQGuSEQmmbHGmTBdM= -----END CERTIFICATE-----Generated at Fri Aug 8 13:05:58 2025 by rpki-client