$ rpki-client -vvf repo-rpki.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/2B90BB17E78B62C15179029C6583E42BD7E18277.mft File: 2B90BB17E78B62C15179029C6583E42BD7E18277.mft (raw, json) Hash identifier: 9rk1TVXdzQzphZ7Tli9/Kd3i7KBmYqaaHf2/9BPTphw= Subject key identifier: BB:8F:CD:08:49:34:D2:71:9F:FF:A6:FE:E1:C6:96:3C:C0:AF:26:BE Authority key identifier: 2B:90:BB:17:E7:8B:62:C1:51:79:02:9C:65:83:E4:2B:D7:E1:82:77 Certificate issuer: /CN=2B90BB17E78B62C15179029C6583E42BD7E18277 Certificate serial: 70654063A35BC24EABDC0D8FB1AFD07D0CB05CFC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B90BB17E78B62C15179029C6583E42BD7E18277.cer Subject info access: rsync://repo-rpki.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/2B90BB17E78B62C15179029C6583E42BD7E18277.mft Manifest number: 5A Signing time: Sun 15 Jun 2025 21:30:36 +0000 Manifest this update: Sun 15 Jun 2025 21:25:36 +0000 Manifest next update: Wed 18 Jun 2025 23:30:36 +0000 Files and hashes: 1: 3130332e38302e3231342e302f32342d3234203d3e20313533303932.roa (hash: xGHUucKhH5kmQ+65YZMYfuYlyW3kJ8ie5abut/yqhlk=) 2: 2B90BB17E78B62C15179029C6583E42BD7E18277.crl (hash: zLohdNiVvwR7i8vLeOfhAvkeOosm68jm9QWhJ3zOF3s=) 3: 3130332e38302e3231342e302f32332d3233203d3e20313533303932.roa (hash: kTHvzmqB/2veUohEP9ZdbxC595Rgd4EACGX8AypsPpY=) 4: 3130332e38302e3231352e302f32342d3234203d3e20313533303932.roa (hash: 4Y5Ddm6yUymC+qHSs8fVActMjjMDZEcHLdC59v78BoQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/2B90BB17E78B62C15179029C6583E42BD7E18277.crl rsync://repo-rpki.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/2B90BB17E78B62C15179029C6583E42BD7E18277.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B90BB17E78B62C15179029C6583E42BD7E18277.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 23:30:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:65:40:63:a3:5b:c2:4e:ab:dc:0d:8f:b1:af:d0:7d:0c:b0:5c:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B90BB17E78B62C15179029C6583E42BD7E18277 Validity Not Before: Jun 15 21:25:36 2025 GMT Not After : Jun 18 23:30:36 2025 GMT Subject: CN=BB8FCD084934D2719FFFA6FEE1C6963CC0AF26BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7b:37:43:48:c8:c3:55:55:3d:89:d3:8f:42: e7:6b:c9:50:ac:a0:83:4e:c3:00:2f:62:62:78:7c: 70:68:89:b7:0d:86:6b:fd:5d:0a:3e:0e:ca:b6:f1: 06:ba:d8:e8:56:9e:ed:83:0d:34:fa:92:ce:75:0f: fd:33:58:47:98:7c:e3:57:ce:12:53:cd:52:ab:60: f6:0c:27:c4:50:e2:72:28:a6:24:b8:9e:4f:f2:bd: 8c:7d:73:67:11:c3:77:6c:21:41:7a:62:25:ab:00: 59:0e:a7:35:a0:2e:a2:98:f1:34:18:1b:13:5f:04: d8:f7:1f:82:4b:b9:59:9e:3c:f1:45:f1:2e:66:aa: e5:9f:22:3a:ad:5e:c3:ad:cd:29:bb:d2:31:c8:e1: c1:4a:2f:1c:da:20:74:7e:3f:41:10:c9:02:44:4e: 23:75:0e:42:97:fd:d5:a0:96:e7:26:fa:8b:a5:66: 8e:9d:31:f5:cf:e8:3c:c0:9b:ea:87:0f:12:21:0a: 59:c9:7e:d9:94:18:5b:3e:6e:4f:91:a0:3c:12:09: f7:41:49:9e:b6:3f:19:ef:db:56:21:96:d8:67:10: c3:45:c8:2c:96:c2:f7:7b:bd:15:67:5a:07:96:6a: 79:24:07:75:43:99:01:25:6e:4b:61:ea:bf:96:cf: 63:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:8F:CD:08:49:34:D2:71:9F:FF:A6:FE:E1:C6:96:3C:C0:AF:26:BE X509v3 Authority Key Identifier: keyid:2B:90:BB:17:E7:8B:62:C1:51:79:02:9C:65:83:E4:2B:D7:E1:82:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/2B90BB17E78B62C15179029C6583E42BD7E18277.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B90BB17E78B62C15179029C6583E42BD7E18277.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/2B90BB17E78B62C15179029C6583E42BD7E18277.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:f8:6f:22:24:a4:80:0a:7f:e8:f3:10:3d:bd:91:50:3b:7c: 62:f0:3f:68:d6:94:aa:e0:f6:43:08:b7:58:72:60:15:82:e0: b9:c1:55:40:47:e8:6d:ae:1a:6a:d7:fa:5d:98:cf:78:41:b9: 87:03:35:ef:94:db:0d:fa:48:3c:a9:ea:8c:3a:6f:d2:d8:71: 18:17:44:e8:33:7c:f2:95:9f:fc:f9:0c:a0:4d:04:bd:d1:88: 14:e7:1d:bc:c8:22:38:1c:5a:4a:75:f5:66:ca:e2:58:7b:74: 6c:1d:46:8d:65:5b:a8:9d:00:dc:6a:36:02:c8:90:42:12:c6: 8f:64:63:4d:f3:f2:e1:52:13:48:01:7b:22:e4:f2:ee:e1:8b: 41:2a:53:69:ee:bc:b5:49:34:7f:09:cc:91:24:b8:bf:e2:7f: bb:d5:35:0c:6e:b0:1c:d3:ab:b2:0f:3c:f7:63:b8:56:df:29: ac:c0:b3:da:75:2f:22:19:f5:97:f7:bf:4e:ca:6e:11:a1:de: 7b:ac:c8:6c:c7:2d:c0:9b:97:55:9b:e9:7b:73:b8:63:3e:4b: 52:da:fb:4d:ce:51:c0:3c:80:c8:07:b8:61:18:0d:b7:6b:80: ff:f2:fd:83:01:55:98:3b:ab:5a:94:0b:33:b7:23:77:44:1d: 35:c7:e9:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcGVAY6Nbwk6r3A2Psa/QfQywXPwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkI5MEJCMTdFNzhCNjJDMTUxNzkwMjlDNjU4M0U0MkJE N0UxODI3NzAeFw0yNTA2MTUyMTI1MzZaFw0yNTA2MTgyMzMwMzZaMDMxMTAvBgNV BAMTKEJCOEZDRDA4NDkzNEQyNzE5RkZGQTZGRUUxQzY5NjNDQzBBRjI2QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5ezdDSMjDVVU9idOPQudryVCs oINOwwAvYmJ4fHBoibcNhmv9XQo+Dsq28Qa62OhWnu2DDTT6ks51D/0zWEeYfONX zhJTzVKrYPYMJ8RQ4nIopiS4nk/yvYx9c2cRw3dsIUF6YiWrAFkOpzWgLqKY8TQY GxNfBNj3H4JLuVmePPFF8S5mquWfIjqtXsOtzSm70jHI4cFKLxzaIHR+P0EQyQJE TiN1DkKX/dWglucm+oulZo6dMfXP6DzAm+qHDxIhClnJftmUGFs+bk+RoDwSCfdB SZ62Pxnv21YhlthnEMNFyCyWwvd7vRVnWgeWankkB3VDmQElbkth6r+Wz2OXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu4/NCEk00nGf/6b+4caWPMCvJr4wHwYDVR0j BBgwFoAUK5C7F+eLYsFReQKcZYPkK9fhgncwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZTVhNWU2ZC05MWVlLTQ0OTctYjQxNy04ZDMyZjY1M2U0YjAvMC8yQjkwQkIxN0U3 OEI2MkMxNTE3OTAyOUM2NTgzRTQyQkQ3RTE4Mjc3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkI5MEJCMTdFNzhCNjJDMTUxNzkwMjlDNjU4M0U0MkJEN0Ux ODI3Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGU1YTVlNmQtOTFlZS00NDk3LWI0 MTctOGQzMmY2NTNlNGIwLzAvMkI5MEJCMTdFNzhCNjJDMTUxNzkwMjlDNjU4M0U0 MkJEN0UxODI3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB74byIkpIAKf+jzED29kVA7fGLwP2jWlKrg 9kMIt1hyYBWC4LnBVUBH6G2uGmrX+l2Yz3hBuYcDNe+U2w36SDyp6ow6b9LYcRgX ROgzfPKVn/z5DKBNBL3RiBTnHbzIIjgcWkp19WbK4lh7dGwdRo1lW6idANxqNgLI kEISxo9kY03z8uFSE0gBeyLk8u7hi0EqU2nuvLVJNH8JzJEkuL/if7vVNQxusBzT q7IPPPdjuFbfKazAs9p1LyIZ9Zf3v07KbhGh3nusyGzHLcCbl1Wb6XtzuGM+S1La +03OUcA8gMgHuGEYDbdrgP/y/YMBVZg7q1qUCzO3I3dEHTXH6UM= -----END CERTIFICATE-----Generated at Tue Jun 17 04:44:02 2025 by rpki-client