$ rpki-client -vvf repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft File: AA90F6A6378710CD695B4CC742651F235E503C5B.mft (raw, json) Hash identifier: E0mvT1Eg1OGjfiuyJ8Euy2r49j6RB09Nm/UY4GLnJx8= Subject key identifier: 92:B1:F0:60:78:42:3F:A0:9B:9A:66:FB:A2:B9:03:8E:5D:2A:A2:E1 Authority key identifier: AA:90:F6:A6:37:87:10:CD:69:5B:4C:C7:42:65:1F:23:5E:50:3C:5B Certificate issuer: /CN=AA90F6A6378710CD695B4CC742651F235E503C5B Certificate serial: 503DB485E43763854B4CFECBEC3D95927E0D77EB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AA90F6A6378710CD695B4CC742651F235E503C5B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft Manifest number: 013E Signing time: Tue 04 Nov 2025 11:00:45 +0000 Manifest this update: Tue 04 Nov 2025 10:55:45 +0000 Manifest next update: Fri 07 Nov 2025 18:32:45 +0000 Files and hashes: 1: 3138302e3133312e3132382e302f32342d3234203d3e20313532303136.roa (hash: VFWMiazWmoGEVLtcrf1dTJMRZzx900Rx4cZwTnY4Hao=) 2: AA90F6A6378710CD695B4CC742651F235E503C5B.crl (hash: Ly0+IXQ3ydiEoDVx90qQG1skTHIgHfnYiq+y/Zpw/DU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.crl rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AA90F6A6378710CD695B4CC742651F235E503C5B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 18:32:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:3d:b4:85:e4:37:63:85:4b:4c:fe:cb:ec:3d:95:92:7e:0d:77:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA90F6A6378710CD695B4CC742651F235E503C5B Validity Not Before: Nov 4 10:55:45 2025 GMT Not After : Nov 7 18:32:45 2025 GMT Subject: CN=92B1F06078423FA09B9A66FBA2B9038E5D2AA2E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d2:84:b3:5c:8e:18:01:ad:35:74:68:dc:a2: cd:8c:7e:f1:c2:fc:19:a9:1c:8b:f6:9f:c3:53:33: 45:75:2a:21:90:06:e4:76:8d:d5:3d:f4:b3:59:50: 79:0e:d9:64:6d:c8:05:01:bc:82:08:97:24:f5:da: aa:4a:71:2c:1e:43:71:39:62:2d:c9:c2:47:43:16: 2c:53:38:b0:a3:b5:17:a6:22:09:27:20:96:d7:28: 59:8f:1e:4d:84:25:ec:3b:9e:97:bc:d2:51:e1:05: 13:5d:2f:93:78:d1:bb:01:7d:c7:35:e2:bf:d7:54: ef:b8:5b:54:92:5d:13:9c:43:8c:04:19:80:a5:6f: 4a:06:c9:20:18:3a:ea:fd:bc:69:08:ac:13:70:2d: a7:d5:08:a8:25:ac:3e:3e:b2:3d:b9:a3:01:d4:a9: f7:b0:0a:0f:0c:77:14:2f:f7:4f:c0:49:8b:c5:6e: a4:f5:eb:e4:6a:af:f8:1e:bf:b6:d7:4a:aa:11:b7: 86:3d:2f:dc:a9:a5:63:92:8e:f2:68:f0:d4:62:e9: 49:49:82:4d:88:fe:8a:6e:f3:56:c4:ff:e9:df:b5: 56:e2:5f:a6:a6:33:bc:ce:2e:9c:d3:02:5f:2f:09: 70:33:7b:bd:5c:f9:c7:ad:a4:a3:0e:ad:3f:83:58: 12:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:B1:F0:60:78:42:3F:A0:9B:9A:66:FB:A2:B9:03:8E:5D:2A:A2:E1 X509v3 Authority Key Identifier: keyid:AA:90:F6:A6:37:87:10:CD:69:5B:4C:C7:42:65:1F:23:5E:50:3C:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AA90F6A6378710CD695B4CC742651F235E503C5B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:4c:28:ef:e2:f7:f8:07:24:88:da:21:bf:17:82:a5:31:1f: 46:71:b1:85:7a:c8:8d:10:dd:5b:69:d7:bc:ca:e0:b1:4f:4d: 94:b1:52:41:d9:c2:12:d0:79:56:25:2d:e7:36:aa:9d:4a:82: b5:94:b3:e2:af:02:a2:94:f3:d3:f5:76:6f:ff:1e:c7:8c:f7: c6:e9:e4:10:37:15:38:58:2b:60:bb:12:5f:0f:ea:bb:0a:54: 60:5d:38:fc:f2:c8:0f:c0:fe:fe:c2:ae:46:17:95:92:9a:f6: a7:f7:af:24:e5:be:f3:30:24:05:70:db:4a:f4:72:a0:57:41: ba:98:14:86:e0:ad:00:48:d7:ff:f0:9e:46:38:1d:a0:27:f9: 60:3c:fe:7b:55:e5:05:44:8b:08:c0:3b:f4:4b:b9:fe:a3:1f: a6:f0:aa:f2:6c:47:76:bf:74:7d:22:7f:50:71:aa:1b:3e:4a: f4:c2:f4:56:a8:18:0c:b0:08:5c:9b:fb:14:65:b2:26:5e:5a: b7:40:fe:e1:76:8b:94:64:37:ef:e4:98:51:92:79:43:07:0c: f5:34:86:bd:89:8d:0d:9d:7d:c8:8f:fa:54:4b:5d:1b:43:2b: 4b:b7:d2:b0:e1:8a:8f:db:ba:e3:89:84:f0:28:d2:24:22:bd: b1:b3:17:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUD20heQ3Y4VLTP7L7D2Vkn4Nd+swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE5MEY2QTYzNzg3MTBDRDY5NUI0Q0M3NDI2NTFGMjM1 RTUwM0M1QjAeFw0yNTExMDQxMDU1NDVaFw0yNTExMDcxODMyNDVaMDMxMTAvBgNV BAMTKDkyQjFGMDYwNzg0MjNGQTA5QjlBNjZGQkEyQjkwMzhFNUQyQUEyRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO0oSzXI4YAa01dGjcos2MfvHC /BmpHIv2n8NTM0V1KiGQBuR2jdU99LNZUHkO2WRtyAUBvIIIlyT12qpKcSweQ3E5 Yi3JwkdDFixTOLCjtRemIgknIJbXKFmPHk2EJew7npe80lHhBRNdL5N40bsBfcc1 4r/XVO+4W1SSXROcQ4wEGYClb0oGySAYOur9vGkIrBNwLafVCKglrD4+sj25owHU qfewCg8MdxQv90/ASYvFbqT16+Rqr/gev7bXSqoRt4Y9L9yppWOSjvJo8NRi6UlJ gk2I/opu81bE/+nftVbiX6amM7zOLpzTAl8vCXAze71c+cetpKMOrT+DWBLhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkrHwYHhCP6Cbmmb7orkDjl0qouEwHwYDVR0j BBgwFoAUqpD2pjeHEM1pW0zHQmUfI15QPFswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDAyYTU4ZC1iOTU4LTQyMTktODZkMy02MWU0M2NlZTMxOWEvMC9BQTkwRjZBNjM3 ODcxMENENjk1QjRDQzc0MjY1MUYyMzVFNTAzQzVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUE5MEY2QTYzNzg3MTBDRDY5NUI0Q0M3NDI2NTFGMjM1RTUw M0M1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2QwMmE1OGQtYjk1OC00MjE5LTg2 ZDMtNjFlNDNjZWUzMTlhLzAvQUE5MEY2QTYzNzg3MTBDRDY5NUI0Q0M3NDI2NTFG MjM1RTUwM0M1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJBMKO/i9/gHJIjaIb8XgqUxH0ZxsYV6yI0Q 3Vtp17zK4LFPTZSxUkHZwhLQeVYlLec2qp1KgrWUs+KvAqKU89P1dm//HseM98bp 5BA3FThYK2C7El8P6rsKVGBdOPzyyA/A/v7CrkYXlZKa9qf3ryTlvvMwJAVw20r0 cqBXQbqYFIbgrQBI1//wnkY4HaAn+WA8/ntV5QVEiwjAO/RLuf6jH6bwqvJsR3a/ dH0if1Bxqhs+SvTC9FaoGAywCFyb+xRlsiZeWrdA/uF2i5RkN+/kmFGSeUMHDPU0 hr2JjQ2dfciP+lRLXRtDK0u30rDhio/buuOJhPAo0iQivbGzFz4= -----END CERTIFICATE-----Generated at Wed Nov 5 04:05:15 2025 by rpki-client