$ rpki-client -vvf repo-rpki.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/2B90BB17E78B62C15179029C6583E42BD7E18277.mft File: 2B90BB17E78B62C15179029C6583E42BD7E18277.mft (raw, json) Hash identifier: O61o2uRihCzLmPmTBzFYHG+1NpBUdJoLJhvR3yTrpPs= Subject key identifier: 29:CD:1D:32:99:D7:FA:FA:CB:30:51:A8:B8:94:D1:24:A8:63:62:9C Authority key identifier: 2B:90:BB:17:E7:8B:62:C1:51:79:02:9C:65:83:E4:2B:D7:E1:82:77 Certificate issuer: /CN=2B90BB17E78B62C15179029C6583E42BD7E18277 Certificate serial: 1EAAEB1F2CF5D483E15B7F17BB64957DB93F15E5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B90BB17E78B62C15179029C6583E42BD7E18277.cer Subject info access: rsync://repo-rpki.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/2B90BB17E78B62C15179029C6583E42BD7E18277.mft Manifest number: 99 Signing time: Mon 03 Nov 2025 12:30:38 +0000 Manifest this update: Mon 03 Nov 2025 12:25:38 +0000 Manifest next update: Thu 06 Nov 2025 21:43:38 +0000 Files and hashes: 1: 3130332e38302e3231342e302f32332d3233203d3e20313533303932.roa (hash: kTHvzmqB/2veUohEP9ZdbxC595Rgd4EACGX8AypsPpY=) 2: 2B90BB17E78B62C15179029C6583E42BD7E18277.crl (hash: IBqAYs4dtqTxhnPOXpUDRQbaL7anr6hH/SVFqz3Ze54=) 3: 3130332e38302e3231352e302f32342d3234203d3e20313533303932.roa (hash: 4Y5Ddm6yUymC+qHSs8fVActMjjMDZEcHLdC59v78BoQ=) 4: 3130332e38302e3231342e302f32342d3234203d3e20313533303932.roa (hash: xGHUucKhH5kmQ+65YZMYfuYlyW3kJ8ie5abut/yqhlk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/2B90BB17E78B62C15179029C6583E42BD7E18277.crl rsync://repo-rpki.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/2B90BB17E78B62C15179029C6583E42BD7E18277.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B90BB17E78B62C15179029C6583E42BD7E18277.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 21:43:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:aa:eb:1f:2c:f5:d4:83:e1:5b:7f:17:bb:64:95:7d:b9:3f:15:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B90BB17E78B62C15179029C6583E42BD7E18277 Validity Not Before: Nov 3 12:25:38 2025 GMT Not After : Nov 6 21:43:38 2025 GMT Subject: CN=29CD1D3299D7FAFACB3051A8B894D124A863629C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a2:13:5a:4a:5e:f4:fd:c8:e9:57:ed:1b:75: 80:51:bf:6e:7a:4f:1f:ab:77:28:66:2f:75:36:bf: 7b:22:d2:fc:b6:94:14:0a:e5:7a:65:c3:6b:a5:c1: ac:a1:e8:e3:72:4f:c4:e7:c5:37:5e:1e:6b:85:44: 0f:31:49:25:02:c2:54:49:e8:ae:35:05:d9:37:62: f8:38:22:5c:61:8b:c7:8c:e4:9d:3e:9d:30:7a:d7: 8e:56:e5:9f:6d:8c:64:f9:a1:11:fd:f8:53:b3:7b: 4c:25:cd:fa:72:de:87:fd:44:ef:64:07:3b:bb:46: f4:c6:1c:fb:12:bb:a2:1b:aa:9a:97:09:08:5b:fc: 8e:2e:36:46:c9:e4:c0:34:23:58:ac:0f:3e:d1:e1: 1f:2b:f5:e9:d1:fb:97:96:e7:02:3e:aa:ea:8e:f2: 49:b4:78:e8:4c:09:c6:df:e2:75:8f:ad:c6:53:0b: 72:df:b7:bc:c4:00:82:10:71:04:9f:4c:4d:47:a8: ba:fd:66:d8:04:bd:99:80:3e:69:1d:93:ac:6c:04: 43:23:3f:66:e4:88:f5:9c:5e:cc:b6:8e:b6:12:fe: 76:3b:0e:b1:80:3a:b4:75:cb:82:a9:54:1f:eb:fc: 19:b1:39:a9:9d:93:6c:c0:27:23:18:31:56:f2:61: 7f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:CD:1D:32:99:D7:FA:FA:CB:30:51:A8:B8:94:D1:24:A8:63:62:9C X509v3 Authority Key Identifier: keyid:2B:90:BB:17:E7:8B:62:C1:51:79:02:9C:65:83:E4:2B:D7:E1:82:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/2B90BB17E78B62C15179029C6583E42BD7E18277.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B90BB17E78B62C15179029C6583E42BD7E18277.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/2B90BB17E78B62C15179029C6583E42BD7E18277.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:b0:6a:07:74:94:7a:74:1a:96:60:c6:f5:dd:88:f1:50:0e: 80:79:12:d8:ca:3b:3a:8b:8f:07:0a:4e:eb:43:9a:3a:49:cc: bc:cb:ec:7a:61:d2:0d:fb:20:dd:d9:c6:e8:41:44:69:ba:c8: 1c:04:7b:f3:6c:24:c0:76:e7:fd:7a:23:e0:ca:3c:38:bc:5e: ad:55:89:36:39:41:ba:80:c1:97:31:28:6d:9c:a0:fb:6a:5a: fa:83:13:5f:df:41:b8:07:4a:85:fb:b9:d8:dd:05:7f:5c:68: db:88:72:a5:38:42:77:98:95:ea:39:b3:a4:cd:7b:a8:5e:98: fe:91:04:d6:61:01:b0:c2:70:7e:90:76:bf:fd:5a:7b:07:36: fd:c8:f4:f8:55:2c:63:85:34:6f:64:15:07:b8:a4:da:98:20: 7d:d6:d2:bb:07:bb:c8:46:b9:4c:d7:22:80:68:30:0d:c0:76: a2:0b:b2:7e:99:79:86:cb:30:3a:df:da:0c:54:ac:dd:d5:ef: 69:ab:bd:9a:88:91:9d:f2:bd:66:c7:fc:b0:7c:88:e0:30:3d: 36:2c:33:43:7b:f0:81:e9:68:76:9f:d7:46:5e:81:1c:e4:7c: 89:fb:96:39:e9:fe:d5:98:50:39:87:76:74:50:7d:72:e8:35: 07:4a:b8:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHqrrHyz11IPhW38Xu2SVfbk/FeUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkI5MEJCMTdFNzhCNjJDMTUxNzkwMjlDNjU4M0U0MkJE N0UxODI3NzAeFw0yNTExMDMxMjI1MzhaFw0yNTExMDYyMTQzMzhaMDMxMTAvBgNV BAMTKDI5Q0QxRDMyOTlEN0ZBRkFDQjMwNTFBOEI4OTREMTI0QTg2MzYyOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnohNaSl70/cjpV+0bdYBRv256 Tx+rdyhmL3U2v3si0vy2lBQK5Xplw2ulwayh6ONyT8TnxTdeHmuFRA8xSSUCwlRJ 6K41Bdk3Yvg4Ilxhi8eM5J0+nTB6145W5Z9tjGT5oRH9+FOze0wlzfpy3of9RO9k Bzu7RvTGHPsSu6IbqpqXCQhb/I4uNkbJ5MA0I1isDz7R4R8r9enR+5eW5wI+quqO 8km0eOhMCcbf4nWPrcZTC3Lft7zEAIIQcQSfTE1HqLr9ZtgEvZmAPmkdk6xsBEMj P2bkiPWcXsy2jrYS/nY7DrGAOrR1y4KpVB/r/BmxOamdk2zAJyMYMVbyYX+3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKc0dMpnX+vrLMFGouJTRJKhjYpwwHwYDVR0j BBgwFoAUK5C7F+eLYsFReQKcZYPkK9fhgncwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZTVhNWU2ZC05MWVlLTQ0OTctYjQxNy04ZDMyZjY1M2U0YjAvMC8yQjkwQkIxN0U3 OEI2MkMxNTE3OTAyOUM2NTgzRTQyQkQ3RTE4Mjc3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkI5MEJCMTdFNzhCNjJDMTUxNzkwMjlDNjU4M0U0MkJEN0Ux ODI3Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGU1YTVlNmQtOTFlZS00NDk3LWI0 MTctOGQzMmY2NTNlNGIwLzAvMkI5MEJCMTdFNzhCNjJDMTUxNzkwMjlDNjU4M0U0 MkJEN0UxODI3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGawagd0lHp0GpZgxvXdiPFQDoB5EtjKOzqL jwcKTutDmjpJzLzL7Hph0g37IN3ZxuhBRGm6yBwEe/NsJMB25/16I+DKPDi8Xq1V iTY5QbqAwZcxKG2coPtqWvqDE1/fQbgHSoX7udjdBX9caNuIcqU4QneYleo5s6TN e6hemP6RBNZhAbDCcH6Qdr/9WnsHNv3I9PhVLGOFNG9kFQe4pNqYIH3W0rsHu8hG uUzXIoBoMA3AdqILsn6ZeYbLMDrf2gxUrN3V72mrvZqIkZ3yvWbH/LB8iOAwPTYs M0N78IHpaHaf10ZegRzkfIn7ljnp/tWYUDmHdnRQfXLoNQdKuL4= -----END CERTIFICATE-----Generated at Tue Nov 4 08:11:09 2025 by rpki-client