$ rpki-client -vvf repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft File: AA90F6A6378710CD695B4CC742651F235E503C5B.mft (raw, json) Hash identifier: uiS7sx8QeyfjPI1Bqn8kTwTnRDjZKlk0HrvLMacY4+c= Subject key identifier: 07:EA:1A:22:E0:08:D7:88:A5:2B:F1:6E:1A:63:4A:61:11:DF:A0:42 Authority key identifier: AA:90:F6:A6:37:87:10:CD:69:5B:4C:C7:42:65:1F:23:5E:50:3C:5B Certificate issuer: /CN=AA90F6A6378710CD695B4CC742651F235E503C5B Certificate serial: 5807B811713B5DC9912313540AD95BA5544744EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AA90F6A6378710CD695B4CC742651F235E503C5B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft Manifest number: 0117 Signing time: Sat 09 Aug 2025 20:10:44 +0000 Manifest this update: Sat 09 Aug 2025 20:05:44 +0000 Manifest next update: Tue 12 Aug 2025 23:02:44 +0000 Files and hashes: 1: AA90F6A6378710CD695B4CC742651F235E503C5B.crl (hash: WXP+RP9+0U7uQfMLbCRV73FSXq1/cAKY/5Vgiz9FQVY=) 2: 3138302e3133312e3132382e302f32342d3234203d3e20313532303136.roa (hash: YmpzZpg+cWSd+9uJixfrwNPdQ5zM3aLz4TuMuxHWLMU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.crl rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AA90F6A6378710CD695B4CC742651F235E503C5B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 23:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:07:b8:11:71:3b:5d:c9:91:23:13:54:0a:d9:5b:a5:54:47:44:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA90F6A6378710CD695B4CC742651F235E503C5B Validity Not Before: Aug 9 20:05:44 2025 GMT Not After : Aug 12 23:02:44 2025 GMT Subject: CN=07EA1A22E008D788A52BF16E1A634A6111DFA042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:06:f9:18:92:2a:ae:2d:d7:a3:ce:e9:57:d4: d5:b6:06:ee:37:c8:1a:cc:d5:b8:a2:36:46:6f:3f: 6c:7f:12:c1:f2:dc:c5:78:df:31:60:11:bf:dd:f7: ce:8c:7d:ef:d5:48:29:d8:32:4b:d6:3b:0e:e6:73: fa:8e:b1:a3:80:f4:2d:47:77:ec:30:98:44:45:d0: 59:3c:74:00:43:4c:eb:7b:cf:df:13:c4:7c:9b:80: 77:56:1f:42:68:00:41:8f:79:07:d5:a1:7f:2e:22: f8:ac:65:33:f6:88:aa:66:78:95:ed:cc:3a:d0:d9: 5a:f6:99:f8:51:b7:94:75:78:fa:16:47:51:3b:5a: 0a:7b:f6:41:87:5e:89:02:1b:d5:c8:ef:d3:0a:85: 4a:11:b5:ff:28:d5:b3:5d:30:d6:ee:03:fe:3d:93: 89:18:3b:e2:90:e6:81:ac:0f:b9:e8:32:57:50:35: 47:bd:d9:68:dc:79:a3:b4:56:0c:54:66:13:f8:40: 16:4a:46:55:14:2c:db:24:e2:2e:37:0f:30:d0:93: 75:e7:f7:29:5c:70:96:01:a8:8a:70:1b:5c:24:94: 8d:19:2c:8c:01:86:87:29:ce:07:c8:df:c7:fd:0d: b3:d9:7b:5e:b4:1f:21:52:e2:2c:4a:8e:b4:db:4b: 34:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:EA:1A:22:E0:08:D7:88:A5:2B:F1:6E:1A:63:4A:61:11:DF:A0:42 X509v3 Authority Key Identifier: keyid:AA:90:F6:A6:37:87:10:CD:69:5B:4C:C7:42:65:1F:23:5E:50:3C:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AA90F6A6378710CD695B4CC742651F235E503C5B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:6a:94:ba:b5:1b:2e:83:4d:04:19:ca:d6:4b:19:e1:ee:69: eb:92:17:03:f0:65:20:96:a1:58:20:73:5f:49:84:5f:b1:b8: 89:74:29:20:70:c4:cd:2b:f8:79:ca:c7:3f:9c:9a:08:f5:ab: 9f:6a:05:a4:af:c1:80:3f:ab:0d:e4:17:29:dd:0a:9f:3c:4a: 51:bc:5c:87:0c:b2:6e:3b:5a:f0:35:30:70:b4:65:f1:44:6e: 7e:66:d6:f9:09:8c:d9:0f:fd:ea:37:6c:6b:92:cc:98:57:3f: 73:b4:db:54:3f:5b:b8:c2:1d:ce:a8:6f:a2:b4:3e:7f:7a:f2: be:36:d4:22:ff:4f:c3:ef:10:24:77:58:76:58:a8:cb:85:1e: 00:69:6d:92:01:9e:15:d4:63:1b:2d:f4:64:8a:b0:22:65:86: c6:66:43:3f:78:b5:cd:e7:da:1f:93:96:45:8e:0f:42:4f:35: 8e:1a:84:e9:b5:af:61:ba:8f:67:e7:65:63:a4:0b:76:0c:0d: 73:47:02:3e:0a:f6:9e:5f:bc:be:1f:cc:79:73:28:94:04:63: be:9d:77:7a:76:e7:6d:8b:75:f9:fd:a7:67:c2:d0:cd:bf:d3: 20:72:40:48:52:fe:e4:f9:2d:ee:f1:69:69:ef:6e:ea:de:c6: 0e:1f:7a:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWAe4EXE7XcmRIxNUCtlbpVRHROwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE5MEY2QTYzNzg3MTBDRDY5NUI0Q0M3NDI2NTFGMjM1 RTUwM0M1QjAeFw0yNTA4MDkyMDA1NDRaFw0yNTA4MTIyMzAyNDRaMDMxMTAvBgNV BAMTKDA3RUExQTIyRTAwOEQ3ODhBNTJCRjE2RTFBNjM0QTYxMTFERkEwNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0BvkYkiquLdejzulX1NW2Bu43 yBrM1biiNkZvP2x/EsHy3MV43zFgEb/d986Mfe/VSCnYMkvWOw7mc/qOsaOA9C1H d+wwmERF0Fk8dABDTOt7z98TxHybgHdWH0JoAEGPeQfVoX8uIvisZTP2iKpmeJXt zDrQ2Vr2mfhRt5R1ePoWR1E7Wgp79kGHXokCG9XI79MKhUoRtf8o1bNdMNbuA/49 k4kYO+KQ5oGsD7noMldQNUe92WjceaO0VgxUZhP4QBZKRlUULNsk4i43DzDQk3Xn 9ylccJYBqIpwG1wklI0ZLIwBhocpzgfI38f9DbPZe160HyFS4ixKjrTbSzSNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB+oaIuAI14ilK/FuGmNKYRHfoEIwHwYDVR0j BBgwFoAUqpD2pjeHEM1pW0zHQmUfI15QPFswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDAyYTU4ZC1iOTU4LTQyMTktODZkMy02MWU0M2NlZTMxOWEvMC9BQTkwRjZBNjM3 ODcxMENENjk1QjRDQzc0MjY1MUYyMzVFNTAzQzVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUE5MEY2QTYzNzg3MTBDRDY5NUI0Q0M3NDI2NTFGMjM1RTUw M0M1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2QwMmE1OGQtYjk1OC00MjE5LTg2 ZDMtNjFlNDNjZWUzMTlhLzAvQUE5MEY2QTYzNzg3MTBDRDY5NUI0Q0M3NDI2NTFG MjM1RTUwM0M1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJZqlLq1Gy6DTQQZytZLGeHuaeuSFwPwZSCW oVggc19JhF+xuIl0KSBwxM0r+HnKxz+cmgj1q59qBaSvwYA/qw3kFyndCp88SlG8 XIcMsm47WvA1MHC0ZfFEbn5m1vkJjNkP/eo3bGuSzJhXP3O021Q/W7jCHc6ob6K0 Pn968r421CL/T8PvECR3WHZYqMuFHgBpbZIBnhXUYxst9GSKsCJlhsZmQz94tc3n 2h+TlkWOD0JPNY4ahOm1r2G6j2fnZWOkC3YMDXNHAj4K9p5fvL4fzHlzKJQEY76d d3p2522Ldfn9p2fC0M2/0yByQEhS/uT5Le7xaWnvburexg4fei0= -----END CERTIFICATE-----Generated at Sun Aug 10 13:45:01 2025 by rpki-client