$ rpki-client -vvf repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.mft File: 90173425DBB7D1DBD164BBA26F4657B17A266A97.mft (raw, json) Hash identifier: 4icedleIv4FeoeazJzsJIZOAwwsV5c95sD6BvrLcCg8= Subject key identifier: 7D:46:C0:DF:C0:88:1D:C1:0B:D9:89:D4:58:BC:1A:3F:12:45:6E:73 Authority key identifier: 90:17:34:25:DB:B7:D1:DB:D1:64:BB:A2:6F:46:57:B1:7A:26:6A:97 Certificate issuer: /CN=90173425DBB7D1DBD164BBA26F4657B17A266A97 Certificate serial: 2A036C19A83BDA39DA0D502721A27E588BA5A734 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90173425DBB7D1DBD164BBA26F4657B17A266A97.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.mft Manifest number: 0521 Signing time: Sun 02 Nov 2025 17:21:20 +0000 Manifest this update: Sun 02 Nov 2025 17:16:20 +0000 Manifest next update: Wed 05 Nov 2025 20:18:20 +0000 Files and hashes: 1: 323030313a6466373a376130303a3a2f34382d3438203d3e20313336303537.roa (hash: JVL+81yV9zQDwPcNgvThrCD77NCHFX7cSVK21vFtKao=) 2: 90173425DBB7D1DBD164BBA26F4657B17A266A97.crl (hash: i/wbkeZnLQGftrAdvnJ7OQd5NtP33APpIy5BNtayz+Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.crl rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90173425DBB7D1DBD164BBA26F4657B17A266A97.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 20:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:03:6c:19:a8:3b:da:39:da:0d:50:27:21:a2:7e:58:8b:a5:a7:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90173425DBB7D1DBD164BBA26F4657B17A266A97 Validity Not Before: Nov 2 17:16:20 2025 GMT Not After : Nov 5 20:18:20 2025 GMT Subject: CN=7D46C0DFC0881DC10BD989D458BC1A3F12456E73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:46:5f:96:53:65:75:15:3b:d0:74:14:6c:a5: 6e:1a:fa:6d:56:fa:77:e3:b6:8c:7e:4d:f8:b3:6c: c8:d3:bb:3e:b7:fc:e9:91:fc:a8:25:91:ed:e1:73: 2b:11:09:88:df:cb:47:e2:1f:ff:07:b9:2f:fc:6d: 05:48:30:f6:6a:88:de:77:06:10:a5:67:82:cb:1e: b3:ad:a5:d8:a3:0f:0f:4a:16:f1:89:e6:7b:a6:26: c6:37:96:c8:12:3a:ba:ab:4f:92:08:d6:f6:8e:ec: 80:15:b9:cb:e8:06:c0:e8:3f:10:df:c8:a1:ee:11: ed:36:73:02:b1:51:b7:ca:6d:ce:1f:79:ff:a7:66: 30:b6:07:64:bd:42:7e:76:4f:f2:c9:5a:a5:1f:11: 97:3e:69:ba:16:81:dd:b2:ee:40:67:dc:43:c5:31: d6:fe:3f:c6:ca:75:18:aa:18:70:14:36:c5:99:c5: 06:9a:6c:00:2e:64:4d:3d:3c:7f:11:11:dd:77:1a: c9:32:76:63:c6:e2:9d:c0:3c:57:0a:52:a7:2e:25: 9e:86:af:29:d3:86:82:71:09:dc:9e:87:83:1f:a0: 19:03:c8:86:d4:b6:7a:ce:70:57:55:38:34:24:b0: 91:f8:5b:19:2a:fe:2d:78:ce:e2:4c:52:f8:7a:28: 4c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:46:C0:DF:C0:88:1D:C1:0B:D9:89:D4:58:BC:1A:3F:12:45:6E:73 X509v3 Authority Key Identifier: keyid:90:17:34:25:DB:B7:D1:DB:D1:64:BB:A2:6F:46:57:B1:7A:26:6A:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90173425DBB7D1DBD164BBA26F4657B17A266A97.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:7e:ca:dc:15:31:b9:d2:4a:5f:cb:a4:67:4f:33:97:2b:45: 81:1c:b5:5e:dd:3c:67:b0:9d:f4:62:e9:d9:3f:ca:10:8a:9b: b3:12:4f:b2:76:8c:1b:1c:0f:b1:32:b1:02:30:a9:78:ce:5d: 29:8c:c2:3b:5c:c6:ae:69:0b:5d:f6:5d:9c:71:e8:e0:9a:5c: fa:46:c3:93:e1:15:25:f4:49:06:32:45:cd:7e:bd:53:88:93: bb:9a:1c:b1:8e:74:d9:60:75:7f:ff:9c:15:4a:ac:2a:6b:9d: e7:20:bb:17:9a:04:11:f9:ee:9a:e9:0c:0a:9e:4d:e2:20:9c: be:4f:34:fa:43:0f:6d:f8:0f:4f:9a:7a:e8:cb:d2:37:c7:ae: 49:55:52:e1:37:b9:c4:4f:88:7a:f5:48:89:78:86:d2:b4:97: 02:4b:0e:ea:64:0a:18:12:ab:3f:8f:5c:0d:b4:e4:70:58:0f: de:fe:e6:9d:67:1d:1d:8b:7d:c7:71:8d:71:12:7e:e1:df:3c: 92:bf:79:f2:43:0b:12:3e:ea:8c:56:b6:61:03:f9:56:0f:3a: 06:6a:34:4e:76:c7:c6:12:5e:58:df:8e:52:0b:a4:2f:a4:61: 45:d5:b6:e9:05:72:f7:67:58:7c:8e:c8:67:52:a2:ed:5c:28: cf:3a:1a:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKgNsGag72jnaDVAnIaJ+WIulpzQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTAxNzM0MjVEQkI3RDFEQkQxNjRCQkEyNkY0NjU3QjE3 QTI2NkE5NzAeFw0yNTExMDIxNzE2MjBaFw0yNTExMDUyMDE4MjBaMDMxMTAvBgNV BAMTKDdENDZDMERGQzA4ODFEQzEwQkQ5ODlENDU4QkMxQTNGMTI0NTZFNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Rl+WU2V1FTvQdBRspW4a+m1W +nfjtox+TfizbMjTuz63/OmR/Kglke3hcysRCYjfy0fiH/8HuS/8bQVIMPZqiN53 BhClZ4LLHrOtpdijDw9KFvGJ5numJsY3lsgSOrqrT5II1vaO7IAVucvoBsDoPxDf yKHuEe02cwKxUbfKbc4fef+nZjC2B2S9Qn52T/LJWqUfEZc+aboWgd2y7kBn3EPF Mdb+P8bKdRiqGHAUNsWZxQaabAAuZE09PH8REd13GskydmPG4p3APFcKUqcuJZ6G rynThoJxCdyeh4MfoBkDyIbUtnrOcFdVODQksJH4Wxkq/i14zuJMUvh6KEyhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfUbA38CIHcEL2YnUWLwaPxJFbnMwHwYDVR0j BBgwFoAUkBc0Jdu30dvRZLuib0ZXsXomapcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YmQ0MzQwYi0yMWM0LTRmYzctYTI1OS1lMjM1NGM1M2ZkZDIvMC85MDE3MzQyNURC QjdEMURCRDE2NEJCQTI2RjQ2NTdCMTdBMjY2QTk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTAxNzM0MjVEQkI3RDFEQkQxNjRCQkEyNkY0NjU3QjE3QTI2 NkE5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWJkNDM0MGItMjFjNC00ZmM3LWEy NTktZTIzNTRjNTNmZGQyLzAvOTAxNzM0MjVEQkI3RDFEQkQxNjRCQkEyNkY0NjU3 QjE3QTI2NkE5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFl+ytwVMbnSSl/LpGdPM5crRYEctV7dPGew nfRi6dk/yhCKm7MST7J2jBscD7EysQIwqXjOXSmMwjtcxq5pC132XZxx6OCaXPpG w5PhFSX0SQYyRc1+vVOIk7uaHLGOdNlgdX//nBVKrCprnecguxeaBBH57prpDAqe TeIgnL5PNPpDD234D0+aeujL0jfHrklVUuE3ucRPiHr1SIl4htK0lwJLDupkChgS qz+PXA205HBYD97+5p1nHR2LfcdxjXESfuHfPJK/efJDCxI+6oxWtmED+VYPOgZq NE52x8YSXljfjlILpC+kYUXVtukFcvdnWHyOyGdSou1cKM86Gg4= -----END CERTIFICATE-----Generated at Tue Nov 4 08:12:44 2025 by rpki-client