$ rpki-client -vvf repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.mft File: B90B0AED87ECD7C87066450AB56ADE2996647CD5.mft (raw, json) Hash identifier: yYBFmAeHzF5MvtL1A0l8sbJv2Fp2defQiIBub5mUICg= Subject key identifier: 4B:57:EB:9E:6E:71:94:09:E3:D7:44:5B:73:0F:FF:E0:83:61:B0:51 Authority key identifier: B9:0B:0A:ED:87:EC:D7:C8:70:66:45:0A:B5:6A:DE:29:96:64:7C:D5 Certificate issuer: /CN=B90B0AED87ECD7C87066450AB56ADE2996647CD5 Certificate serial: 1B3AEC9880A5683FAAABE266954C733293A35A06 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B90B0AED87ECD7C87066450AB56ADE2996647CD5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.mft Manifest number: 0260 Signing time: Tue 05 Aug 2025 17:41:27 +0000 Manifest this update: Tue 05 Aug 2025 17:36:27 +0000 Manifest next update: Sat 09 Aug 2025 03:05:27 +0000 Files and hashes: 1: 3130332e3137302e33322e302f32342d3234203d3e20313432333631.roa (hash: lzUMPrw8n3pOIcK3z918mZsLDeZOm1wMYf7ktj1KFkU=) 2: B90B0AED87ECD7C87066450AB56ADE2996647CD5.crl (hash: Hfn2mgqRV+b9MJ+KQ/4ySpaZbS8Gp6vktn1Rhfo3dPI=) 3: 3130332e3137302e33332e302f32342d3234203d3e20313432333933.roa (hash: Y898pFGpBLNuRCPjm01v0/pmUXmwJOu+OeM8IgqOT94=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.crl rsync://repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B90B0AED87ECD7C87066450AB56ADE2996647CD5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 03:05:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:3a:ec:98:80:a5:68:3f:aa:ab:e2:66:95:4c:73:32:93:a3:5a:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B90B0AED87ECD7C87066450AB56ADE2996647CD5 Validity Not Before: Aug 5 17:36:27 2025 GMT Not After : Aug 9 03:05:27 2025 GMT Subject: CN=4B57EB9E6E719409E3D7445B730FFFE08361B051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:21:e6:98:80:10:a1:4b:a8:77:e8:69:70:4a: 4a:4b:33:3a:6b:f2:54:c7:99:c3:68:35:59:9e:f9: 0c:db:b1:48:6a:df:b0:9d:3e:23:15:4b:b9:3d:aa: dc:ba:50:f4:f1:9f:21:92:4f:fc:17:26:40:81:0a: 45:f7:77:07:b5:be:37:90:a3:c3:f1:1a:13:f4:7b: b3:69:a4:6a:6e:24:9f:61:23:e5:18:0b:23:38:e5: f6:95:95:3e:9a:28:e5:cd:51:d2:6c:43:16:b6:2b: 20:2e:92:ac:65:3d:8f:b1:98:66:91:82:41:03:6b: 13:11:44:56:b8:e0:9a:5f:4d:a4:96:ca:90:28:01: 08:b9:e1:b1:79:ee:42:f7:ef:5f:71:92:56:04:47: c6:d0:9a:49:81:25:ac:be:dd:e0:0b:b7:3d:13:c1: 23:c4:7a:45:0a:54:e0:96:5d:a8:e7:0f:c2:41:51: e3:53:b0:1e:a6:22:ca:d1:5b:63:d3:cc:fc:be:56: e1:24:04:a3:5f:16:3c:ac:1a:a8:c3:f1:3a:bc:16: f6:50:82:84:06:88:65:60:38:66:59:53:9a:19:b8: 6d:75:62:15:7e:d2:a7:8f:85:ea:17:ed:05:86:37: cb:c4:f4:7c:46:32:58:7c:f0:f4:67:2c:33:01:3a: 09:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:57:EB:9E:6E:71:94:09:E3:D7:44:5B:73:0F:FF:E0:83:61:B0:51 X509v3 Authority Key Identifier: keyid:B9:0B:0A:ED:87:EC:D7:C8:70:66:45:0A:B5:6A:DE:29:96:64:7C:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B90B0AED87ECD7C87066450AB56ADE2996647CD5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:23:c0:d6:74:a4:46:30:f6:9d:a7:d0:ad:05:5e:77:aa:b3: bb:9d:8b:a3:6e:f5:1f:23:71:db:9e:b9:d6:ef:1a:25:ef:04: 9c:3a:16:0d:83:fa:f1:d8:2d:1f:4b:bb:48:5f:ef:f0:51:cf: 32:f5:cf:78:df:e5:f1:7a:be:4a:d5:23:98:15:84:2a:77:80: cd:c5:ad:f4:72:eb:0d:48:a0:23:63:eb:7f:84:52:f7:93:4b: b0:04:f0:b4:25:40:16:36:7b:71:11:ec:3e:63:dd:a0:8e:25: e6:a1:6a:34:5f:15:b9:7b:85:d9:c3:fc:c8:b4:40:fa:9d:66: 22:53:51:27:3e:99:ef:e5:3f:37:2a:5e:ea:2e:c0:74:50:84: 20:a2:66:1d:8b:f4:e9:81:b7:4d:47:b8:45:82:1e:2c:40:23: fc:fa:45:73:01:1b:89:79:07:3d:e6:41:a9:1a:16:29:b1:49: 76:56:46:a1:a7:f3:c5:ec:f4:51:36:d1:e8:29:45:c8:18:d2: fb:71:c3:37:f0:cc:6e:ec:88:68:26:06:d3:37:4b:99:5e:cc: 30:c3:2f:4d:07:f8:0f:04:93:cb:b1:61:72:de:49:e8:1e:70: f5:88:f2:7f:18:a9:88:d6:71:d5:27:25:38:4a:b1:72:1b:4c: 37:bc:71:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGzrsmIClaD+qq+JmlUxzMpOjWgYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkwQjBBRUQ4N0VDRDdDODcwNjY0NTBBQjU2QURFMjk5 NjY0N0NENTAeFw0yNTA4MDUxNzM2MjdaFw0yNTA4MDkwMzA1MjdaMDMxMTAvBgNV BAMTKDRCNTdFQjlFNkU3MTk0MDlFM0Q3NDQ1QjczMEZGRkUwODM2MUIwNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFIeaYgBChS6h36GlwSkpLMzpr 8lTHmcNoNVme+QzbsUhq37CdPiMVS7k9qty6UPTxnyGST/wXJkCBCkX3dwe1vjeQ o8PxGhP0e7NppGpuJJ9hI+UYCyM45faVlT6aKOXNUdJsQxa2KyAukqxlPY+xmGaR gkEDaxMRRFa44JpfTaSWypAoAQi54bF57kL3719xklYER8bQmkmBJay+3eALtz0T wSPEekUKVOCWXajnD8JBUeNTsB6mIsrRW2PTzPy+VuEkBKNfFjysGqjD8Tq8FvZQ goQGiGVgOGZZU5oZuG11YhV+0qePheoX7QWGN8vE9HxGMlh88PRnLDMBOgmBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS1frnm5xlAnj10Rbcw//4INhsFEwHwYDVR0j BBgwFoAUuQsK7Yfs18hwZkUKtWreKZZkfNUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWU2Mzc5ZS1iODg2LTQzNmUtYjBlZC0zYWFmZjljMDg1MDEvMC9COTBCMEFFRDg3 RUNEN0M4NzA2NjQ1MEFCNTZBREUyOTk2NjQ3Q0Q1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjkwQjBBRUQ4N0VDRDdDODcwNjY0NTBBQjU2QURFMjk5NjY0 N0NENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFlNjM3OWUtYjg4Ni00MzZlLWIw ZWQtM2FhZmY5YzA4NTAxLzAvQjkwQjBBRUQ4N0VDRDdDODcwNjY0NTBBQjU2QURF Mjk5NjY0N0NENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGQjwNZ0pEYw9p2n0K0FXneqs7udi6Nu9R8j cdueudbvGiXvBJw6Fg2D+vHYLR9Lu0hf7/BRzzL1z3jf5fF6vkrVI5gVhCp3gM3F rfRy6w1IoCNj63+EUveTS7AE8LQlQBY2e3ER7D5j3aCOJeahajRfFbl7hdnD/Mi0 QPqdZiJTUSc+me/lPzcqXuouwHRQhCCiZh2L9OmBt01HuEWCHixAI/z6RXMBG4l5 Bz3mQakaFimxSXZWRqGn88Xs9FE20egpRcgY0vtxwzfwzG7siGgmBtM3S5lezDDD L00H+A8Ek8uxYXLeSegecPWI8n8YqYjWcdUnJThKsXIbTDe8cX8= -----END CERTIFICATE-----Generated at Thu Aug 7 00:32:15 2025 by rpki-client