$ rpki-client -vvf repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.mft File: 90508FF980097E19CEF65ED72A856616A6F690AB.mft (raw, json) Hash identifier: wong6U2C3/6umJFeznAe9dpf95DCnCOEgs4i5e6Xpvg= Subject key identifier: 1A:C8:93:59:E9:3A:9A:AA:5A:0A:A8:FC:FB:BB:42:E9:BD:4F:0D:9D Authority key identifier: 90:50:8F:F9:80:09:7E:19:CE:F6:5E:D7:2A:85:66:16:A6:F6:90:AB Certificate issuer: /CN=90508FF980097E19CEF65ED72A856616A6F690AB Certificate serial: 23371A933FBC08F6DCD449300F2519AEAB0DFF96 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90508FF980097E19CEF65ED72A856616A6F690AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.mft Manifest number: 051F Signing time: Sun 02 Nov 2025 21:12:01 +0000 Manifest this update: Sun 02 Nov 2025 21:07:01 +0000 Manifest next update: Thu 06 Nov 2025 03:33:01 +0000 Files and hashes: 1: 3130332e3131392e3233312e302f32342d3234203d3e203634333135.roa (hash: Yz5xkZY0xzo/trvfbAdTc4aF9ack7BIeyFzB+WOAYgQ=) 2: 3130332e3131392e3232382e302f32332d3234203d3e203634333135.roa (hash: JNjDlAZZhJPbXz9QnoPN2kXEdVorueRNiZ3y4BzRO+s=) 3: 90508FF980097E19CEF65ED72A856616A6F690AB.crl (hash: G9/pTNYdDh4li3FeO2O2ntGIrcvQrMyvACzLHqvVAZU=) 4: 3130332e3131392e3233302e302f32342d3234203d3e203634333135.roa (hash: NUlokuFe9GARtT8KTw9qoKUuu+MeiOKu86jOn++3TJ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.crl rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90508FF980097E19CEF65ED72A856616A6F690AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 03:33:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:37:1a:93:3f:bc:08:f6:dc:d4:49:30:0f:25:19:ae:ab:0d:ff:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90508FF980097E19CEF65ED72A856616A6F690AB Validity Not Before: Nov 2 21:07:01 2025 GMT Not After : Nov 6 03:33:01 2025 GMT Subject: CN=1AC89359E93A9AAA5A0AA8FCFBBB42E9BD4F0D9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ce:e1:2b:22:1f:7f:3b:9a:ae:28:0c:a5:c5: 48:96:52:07:4e:1c:e2:4f:e1:16:f5:3d:e1:ae:42: b1:6c:fd:db:d8:3e:e0:d3:11:c3:e4:a7:de:50:ac: 2b:a9:25:2e:dc:8d:2b:ce:a7:50:fb:c4:92:a9:1a: 72:40:03:e7:70:c3:a2:33:6b:1f:93:45:21:fd:eb: ca:02:df:87:da:8d:75:22:ca:ec:5c:dd:2d:41:67: aa:56:24:07:2b:42:c9:aa:91:4d:34:c9:f3:d3:e4: 71:3a:99:cf:d1:34:4e:fd:59:a2:02:40:54:56:a9: 1a:53:18:07:03:b5:c5:6b:e0:84:91:6b:80:f0:8b: 2c:d7:39:02:de:82:d3:b8:e0:49:65:1f:ab:5b:62: c7:7d:e2:c1:d1:c5:dc:12:56:9f:aa:2a:d6:19:a9: 17:14:b2:7d:d3:6c:26:60:6f:6a:c7:e2:c3:5a:48: 04:3b:81:9e:90:22:af:f1:17:83:22:c7:96:93:a9: dc:47:3b:6a:a9:ac:70:49:53:11:e2:6a:1b:8f:d1: b9:2c:b3:86:dd:93:11:1b:65:8c:c8:6e:ac:d5:12: f4:86:36:47:08:52:30:f2:90:3e:02:6a:1a:7d:65: a3:18:6a:8a:b4:b6:9a:c7:9e:9d:f5:92:80:ed:e7: 27:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:C8:93:59:E9:3A:9A:AA:5A:0A:A8:FC:FB:BB:42:E9:BD:4F:0D:9D X509v3 Authority Key Identifier: keyid:90:50:8F:F9:80:09:7E:19:CE:F6:5E:D7:2A:85:66:16:A6:F6:90:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90508FF980097E19CEF65ED72A856616A6F690AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:c8:76:d8:ef:cf:8f:e6:e0:2f:1b:af:89:04:50:4d:c1:25: bc:1c:e2:cf:02:23:78:e4:0c:2a:f0:31:31:fc:da:66:30:c9: e0:0b:cf:42:51:cc:21:77:a1:07:ab:43:c7:90:e7:7d:4e:c8: 71:36:f1:4f:21:4e:ab:8c:be:16:b7:4c:1b:b4:50:83:a1:d8: 3f:46:cc:bf:30:81:e2:a7:63:33:1f:4f:ae:3a:68:ee:1d:92: 9a:ed:32:19:d1:a4:aa:30:52:5a:a4:22:70:48:6c:d6:4c:1a: 32:6c:53:da:6a:45:e4:7a:06:98:a8:e8:11:08:a4:47:c8:f9: 78:4f:04:54:d4:97:11:96:13:1d:d5:89:33:b0:cd:6a:22:88: 73:a5:97:70:f9:1b:13:ab:95:7f:a8:e8:82:f8:f3:95:c1:17: 58:95:49:88:37:5c:9f:36:d5:a6:68:ea:c3:1e:54:10:b3:81: dc:2c:31:03:91:d9:4b:5c:73:ac:d4:db:67:52:87:ce:75:0f: 07:a7:36:da:9b:44:75:0e:01:f0:5e:bb:f0:f4:ae:eb:41:10: 06:32:37:79:46:6e:c1:b7:ea:6e:fe:05:af:43:c9:59:90:31: aa:06:3b:89:5a:a0:3c:69:14:5f:de:f2:ac:e0:5f:87:87:8a: 49:68:c2:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIzcakz+8CPbc1EkwDyUZrqsN/5YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTA1MDhGRjk4MDA5N0UxOUNFRjY1RUQ3MkE4NTY2MTZB NkY2OTBBQjAeFw0yNTExMDIyMTA3MDFaFw0yNTExMDYwMzMzMDFaMDMxMTAvBgNV BAMTKDFBQzg5MzU5RTkzQTlBQUE1QTBBQThGQ0ZCQkI0MkU5QkQ0RjBEOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzzuErIh9/O5quKAylxUiWUgdO HOJP4Rb1PeGuQrFs/dvYPuDTEcPkp95QrCupJS7cjSvOp1D7xJKpGnJAA+dww6Iz ax+TRSH968oC34fajXUiyuxc3S1BZ6pWJAcrQsmqkU00yfPT5HE6mc/RNE79WaIC QFRWqRpTGAcDtcVr4ISRa4DwiyzXOQLegtO44EllH6tbYsd94sHRxdwSVp+qKtYZ qRcUsn3TbCZgb2rH4sNaSAQ7gZ6QIq/xF4Mix5aTqdxHO2qprHBJUxHiahuP0bks s4bdkxEbZYzIbqzVEvSGNkcIUjDykD4Cahp9ZaMYaoq0tprHnp31koDt5ye5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGsiTWek6mqpaCqj8+7tC6b1PDZ0wHwYDVR0j BBgwFoAUkFCP+YAJfhnO9l7XKoVmFqb2kKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ODgzZTNiZS01N2UyLTQxMjUtYTBjNS05YTllYTUwMWJmMDUvMC85MDUwOEZGOTgw MDk3RTE5Q0VGNjVFRDcyQTg1NjYxNkE2RjY5MEFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTA1MDhGRjk4MDA5N0UxOUNFRjY1RUQ3MkE4NTY2MTZBNkY2 OTBBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjg4M2UzYmUtNTdlMi00MTI1LWEw YzUtOWE5ZWE1MDFiZjA1LzAvOTA1MDhGRjk4MDA5N0UxOUNFRjY1RUQ3MkE4NTY2 MTZBNkY2OTBBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADTIdtjvz4/m4C8br4kEUE3BJbwc4s8CI3jk DCrwMTH82mYwyeALz0JRzCF3oQerQ8eQ531OyHE28U8hTquMvha3TBu0UIOh2D9G zL8wgeKnYzMfT646aO4dkprtMhnRpKowUlqkInBIbNZMGjJsU9pqReR6Bpio6BEI pEfI+XhPBFTUlxGWEx3ViTOwzWoiiHOll3D5GxOrlX+o6IL485XBF1iVSYg3XJ82 1aZo6sMeVBCzgdwsMQOR2Utcc6zU22dSh851DwenNtqbRHUOAfBeu/D0rutBEAYy N3lGbsG36m7+Ba9DyVmQMaoGO4laoDxpFF/e8qzgX4eHiklowrk= -----END CERTIFICATE-----Generated at Wed Nov 5 02:55:11 2025 by rpki-client