$ rpki-client -vvf repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft File: 90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft (raw, json) Hash identifier: Q8jsqANpo3F8W1dCZC7qWhIpBODxR/lUJUMBJAHPzKQ= Subject key identifier: CD:00:AA:72:8F:2F:02:DF:1F:B7:49:B1:74:A9:D4:1E:CA:3C:9E:65 Authority key identifier: 90:E2:CC:AC:A3:23:EA:B2:14:5F:54:B7:CF:65:C5:FA:EC:EF:83:A3 Certificate issuer: /CN=90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3 Certificate serial: 352A6F5FEC232CD71890D375A1C96414DF4C25BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft Manifest number: 01B0 Signing time: Tue 05 Aug 2025 08:31:20 +0000 Manifest this update: Tue 05 Aug 2025 08:26:20 +0000 Manifest next update: Fri 08 Aug 2025 20:15:20 +0000 Files and hashes: 1: 3130332e3134352e35332e302f32342d3234203d3e20313339343535.roa (hash: t0f8hH0p5YUalqHFkiu1kyX28Ot7aEHcWn8PNYVXvq0=) 2: 3130332e3134352e35322e302f32332d3233203d3e20313339343535.roa (hash: 7DJwBHtzGlb/NDl1/3zGyCjwc3DhiipUzCGFUXWXjoE=) 3: 3130332e3134352e35322e302f32342d3234203d3e20313339343535.roa (hash: AnirtwiQcqhih7uqF14RHtBvHcWSRInmlpBmELQD3Bc=) 4: 90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.crl (hash: WWOrTuZag2VITox2VGKh6zLWSn3V/I21+4/qXTQg5Ro=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.crl rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 20:15:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:2a:6f:5f:ec:23:2c:d7:18:90:d3:75:a1:c9:64:14:df:4c:25:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3 Validity Not Before: Aug 5 08:26:20 2025 GMT Not After : Aug 8 20:15:20 2025 GMT Subject: CN=CD00AA728F2F02DF1FB749B174A9D41ECA3C9E65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:60:5e:fe:f5:c5:5d:e3:5b:da:83:ef:da:61: 9a:2d:18:eb:24:67:95:4a:f7:8a:e8:d4:a7:ee:96: ed:6c:3c:ea:ab:ff:51:68:ae:ab:4f:d1:dd:c9:5a: ef:79:eb:1d:aa:37:92:b5:5a:7a:34:f9:aa:4b:b2: 1c:46:56:f6:2c:1f:06:1e:c5:46:8b:35:ad:31:b3: 66:95:25:45:9d:2f:d9:f2:5d:80:12:61:e0:d1:9c: 19:ee:c3:89:cc:ef:3c:c7:e4:8e:9d:57:b0:b6:c6: 6f:d7:77:47:6b:9d:57:81:cb:2e:06:4f:37:23:48: 94:1c:31:f4:2d:d1:9f:52:4c:ca:4a:aa:94:39:3d: 75:91:67:67:50:02:ea:46:70:03:c3:5c:fe:8a:fe: bd:10:e0:ea:76:3c:ca:71:d7:81:aa:a7:1e:b7:db: 4c:bb:c7:f0:25:e4:a8:9e:46:3e:2a:58:a9:5f:38: 7d:c6:ec:fe:b7:3f:28:58:54:fc:65:4b:59:8d:7f: f7:56:a1:dc:27:ab:ce:84:25:49:78:5e:31:55:2c: d7:b3:1b:ad:00:a2:54:c9:f2:59:c6:ec:f1:83:b9: 8f:be:21:0c:95:22:5d:c4:b7:7f:8b:62:9e:65:92: 8e:9c:b6:84:3f:a6:20:03:69:26:cf:47:7a:63:62: 14:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:00:AA:72:8F:2F:02:DF:1F:B7:49:B1:74:A9:D4:1E:CA:3C:9E:65 X509v3 Authority Key Identifier: keyid:90:E2:CC:AC:A3:23:EA:B2:14:5F:54:B7:CF:65:C5:FA:EC:EF:83:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:1e:44:b9:75:35:98:63:3e:a9:16:ba:d9:88:8f:e4:0f:e6: a3:da:6d:91:b2:fa:77:f1:9f:d4:0c:e4:ae:11:cf:37:8a:27: ff:4f:3c:8e:d7:10:90:cc:23:1d:9c:6e:49:f6:9a:44:b2:52: 24:0e:92:cb:43:22:94:16:28:26:1e:35:53:8f:18:94:f8:86: 96:1c:31:6d:79:a7:f5:4e:e0:97:ab:f7:06:9d:79:13:0f:24: 45:63:75:f0:be:ad:70:50:6f:65:e4:c4:ff:16:52:93:61:d7: 68:1e:a5:e4:ac:ea:c8:73:c5:85:82:45:d5:31:d8:4a:6c:ad: c7:e4:8a:ec:ee:60:c6:82:e2:1f:52:ca:51:a8:0c:9d:8c:cf: d2:5c:64:17:a8:e0:1a:15:bd:90:f3:38:bc:a9:54:d9:34:33: 5e:d4:53:0f:70:29:21:54:63:c2:7a:41:aa:de:6f:d3:10:e8: 0b:07:e3:74:43:2b:89:43:c5:63:99:31:73:7e:d3:d2:ea:9f: 05:65:d5:1c:6a:11:b6:cb:ec:78:c7:3a:cb:e0:90:07:53:1a: 6f:3f:74:a8:e5:cc:75:8f:7c:3b:6a:00:d8:85:2a:5b:58:84: 8a:0a:75:90:7a:e0:bd:b3:e6:e3:a6:6a:ce:8d:d1:69:21:d5: 02:21:46:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNSpvX+wjLNcYkNN1oclkFN9MJbswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTBFMkNDQUNBMzIzRUFCMjE0NUY1NEI3Q0Y2NUM1RkFF Q0VGODNBMzAeFw0yNTA4MDUwODI2MjBaFw0yNTA4MDgyMDE1MjBaMDMxMTAvBgNV BAMTKENEMDBBQTcyOEYyRjAyREYxRkI3NDlCMTc0QTlENDFFQ0EzQzlFNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNYF7+9cVd41vag+/aYZotGOsk Z5VK94ro1Kfulu1sPOqr/1ForqtP0d3JWu956x2qN5K1Wno0+apLshxGVvYsHwYe xUaLNa0xs2aVJUWdL9nyXYASYeDRnBnuw4nM7zzH5I6dV7C2xm/Xd0drnVeByy4G TzcjSJQcMfQt0Z9STMpKqpQ5PXWRZ2dQAupGcAPDXP6K/r0Q4Op2PMpx14Gqpx63 20y7x/Al5KieRj4qWKlfOH3G7P63PyhYVPxlS1mNf/dWodwnq86EJUl4XjFVLNez G60AolTJ8lnG7PGDuY++IQyVIl3Et3+LYp5lko6ctoQ/piADaSbPR3pjYhQ9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzQCqco8vAt8ft0mxdKnUHso8nmUwHwYDVR0j BBgwFoAUkOLMrKMj6rIUX1S3z2XF+uzvg6MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzdmZmUyYS0zMWU0LTQ4MDAtOTdkNC03ODc0YzEyMzE5MTEvMC85MEUyQ0NBQ0Ez MjNFQUIyMTQ1RjU0QjdDRjY1QzVGQUVDRUY4M0EzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTBFMkNDQUNBMzIzRUFCMjE0NUY1NEI3Q0Y2NUM1RkFFQ0VG ODNBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjc3ZmZlMmEtMzFlNC00ODAwLTk3 ZDQtNzg3NGMxMjMxOTExLzAvOTBFMkNDQUNBMzIzRUFCMjE0NUY1NEI3Q0Y2NUM1 RkFFQ0VGODNBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJgeRLl1NZhjPqkWutmIj+QP5qPabZGy+nfx n9QM5K4RzzeKJ/9PPI7XEJDMIx2cbkn2mkSyUiQOkstDIpQWKCYeNVOPGJT4hpYc MW15p/VO4Jer9wadeRMPJEVjdfC+rXBQb2XkxP8WUpNh12gepeSs6shzxYWCRdUx 2EpsrcfkiuzuYMaC4h9SylGoDJ2Mz9JcZBeo4BoVvZDzOLypVNk0M17UUw9wKSFU Y8J6Qareb9MQ6AsH43RDK4lDxWOZMXN+09LqnwVl1RxqEbbL7HjHOsvgkAdTGm8/ dKjlzHWPfDtqANiFKltYhIoKdZB64L2z5uOmas6N0Wkh1QIhRlo= -----END CERTIFICATE-----Generated at Thu Aug 7 04:24:38 2025 by rpki-client