$ rpki-client -vvf repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft File: 90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft (raw, json) Hash identifier: q3EKssWxtkgyNa/VfAQTXPDLxLWU0cgPdvDtqON4HX4= Subject key identifier: E1:A7:C5:2C:FE:A1:2F:62:59:67:E1:8A:DF:52:F8:CE:29:44:81:9B Authority key identifier: 90:E2:CC:AC:A3:23:EA:B2:14:5F:54:B7:CF:65:C5:FA:EC:EF:83:A3 Certificate issuer: /CN=90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3 Certificate serial: 3AB494D95EA0028B07CB4E6FA375FE85798F42E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft Manifest number: 019A Signing time: Tue 17 Jun 2025 12:41:18 +0000 Manifest this update: Tue 17 Jun 2025 12:36:18 +0000 Manifest next update: Fri 20 Jun 2025 14:54:18 +0000 Files and hashes: 1: 3130332e3134352e35322e302f32342d3234203d3e20313339343535.roa (hash: AnirtwiQcqhih7uqF14RHtBvHcWSRInmlpBmELQD3Bc=) 2: 3130332e3134352e35332e302f32342d3234203d3e20313339343535.roa (hash: t0f8hH0p5YUalqHFkiu1kyX28Ot7aEHcWn8PNYVXvq0=) 3: 3130332e3134352e35322e302f32332d3233203d3e20313339343535.roa (hash: 7DJwBHtzGlb/NDl1/3zGyCjwc3DhiipUzCGFUXWXjoE=) 4: 90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.crl (hash: n3z6TOwl2IunmuCdVylgwkvOS8sW0jOim/Ug+k5zBKM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.crl rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 14:54:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:b4:94:d9:5e:a0:02:8b:07:cb:4e:6f:a3:75:fe:85:79:8f:42:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3 Validity Not Before: Jun 17 12:36:18 2025 GMT Not After : Jun 20 14:54:18 2025 GMT Subject: CN=E1A7C52CFEA12F625967E18ADF52F8CE2944819B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:df:8d:5d:2d:25:d0:59:d0:5d:71:13:a7:9b: a4:9d:81:eb:e1:23:3e:c1:9d:fe:3f:d7:e6:32:a4: 5a:1b:27:cd:6c:73:d7:b0:12:97:53:ea:49:fd:f3: 13:fe:99:46:b3:83:3a:f0:6f:51:69:2c:e6:e6:38: ce:01:04:c1:12:78:ca:01:3a:2e:62:8c:31:8d:46: 5c:0e:52:57:f4:8d:79:3a:d4:80:a1:b8:09:9f:ad: 8e:a0:0e:50:69:ea:d3:e4:bb:b8:1c:cf:27:8e:38: 9a:d4:4d:af:7b:bc:19:bc:2c:23:41:7e:24:65:85: 92:a8:78:06:25:b3:92:77:a6:3c:71:41:8e:82:2d: 36:70:88:91:52:98:38:65:31:f4:45:56:6e:16:72: f1:26:89:8c:12:b9:17:d4:77:1f:b1:3f:1e:1d:df: f1:5c:fa:d1:dd:ef:6e:d6:42:d9:ee:02:0c:f7:03: d8:95:e5:d3:90:fc:59:43:16:27:3a:13:27:ba:55: 9e:68:9b:92:19:16:e0:76:d4:8b:3d:8d:39:49:0e: 1d:7a:eb:cb:ad:d6:6e:cc:6b:56:f7:f8:77:44:06: 83:45:98:5f:93:86:d8:27:99:5c:32:86:9c:86:01: ff:af:e5:07:ff:3f:f9:51:4c:4b:c9:a0:93:53:d4: 1c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:A7:C5:2C:FE:A1:2F:62:59:67:E1:8A:DF:52:F8:CE:29:44:81:9B X509v3 Authority Key Identifier: keyid:90:E2:CC:AC:A3:23:EA:B2:14:5F:54:B7:CF:65:C5:FA:EC:EF:83:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:b4:7c:9e:d4:8e:a7:52:c2:fb:da:4b:b6:cd:13:b5:b8:60: 9d:0e:fe:05:50:25:04:6d:fb:57:67:6f:d5:f0:09:d0:ca:32: a2:2a:8d:f3:0b:ed:d1:d2:75:49:7c:2c:ae:1d:aa:f2:e9:7e: ed:83:c8:2f:7d:dc:81:19:90:50:27:fc:67:29:1c:a0:05:45: bf:60:29:71:e6:c8:ca:99:d3:21:8a:be:05:69:8c:93:24:66: 0e:3c:cb:6f:a3:bd:53:2f:81:92:0c:34:29:db:04:01:fc:75: e3:70:99:79:f4:e2:15:d8:6e:d3:46:c5:36:9f:c3:d3:ca:9b: 59:8b:0b:ef:dc:cd:17:eb:35:ed:1d:0c:2b:70:5a:c7:26:4f: b5:cf:24:74:85:9c:2c:3c:9c:bd:a4:a5:2b:85:a7:20:cb:ce: 34:9f:d7:ae:61:d9:00:4d:3b:f0:87:4f:3f:19:72:59:a7:2b: 4d:22:a7:cf:76:78:c0:bb:d4:0d:56:af:49:57:c7:1d:87:79: 80:5e:55:c4:38:15:97:13:7f:d1:63:d4:97:bd:de:b5:fd:19: 2c:7c:3c:69:e4:2f:57:fd:2d:6e:74:36:48:4e:f3:33:c5:88: 76:86:11:c7:80:e8:88:c6:11:02:e1:bf:3a:75:d3:8f:42:8a: 8a:66:1d:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOrSU2V6gAosHy05vo3X+hXmPQuYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTBFMkNDQUNBMzIzRUFCMjE0NUY1NEI3Q0Y2NUM1RkFF Q0VGODNBMzAeFw0yNTA2MTcxMjM2MThaFw0yNTA2MjAxNDU0MThaMDMxMTAvBgNV BAMTKEUxQTdDNTJDRkVBMTJGNjI1OTY3RTE4QURGNTJGOENFMjk0NDgxOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs341dLSXQWdBdcROnm6Sdgevh Iz7Bnf4/1+YypFobJ81sc9ewEpdT6kn98xP+mUazgzrwb1FpLObmOM4BBMESeMoB Oi5ijDGNRlwOUlf0jXk61IChuAmfrY6gDlBp6tPku7gczyeOOJrUTa97vBm8LCNB fiRlhZKoeAYls5J3pjxxQY6CLTZwiJFSmDhlMfRFVm4WcvEmiYwSuRfUdx+xPx4d 3/Fc+tHd727WQtnuAgz3A9iV5dOQ/FlDFic6Eye6VZ5om5IZFuB21Is9jTlJDh16 68ut1m7Ma1b3+HdEBoNFmF+ThtgnmVwyhpyGAf+v5Qf/P/lRTEvJoJNT1BwFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4afFLP6hL2JZZ+GK31L4zilEgZswHwYDVR0j BBgwFoAUkOLMrKMj6rIUX1S3z2XF+uzvg6MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzdmZmUyYS0zMWU0LTQ4MDAtOTdkNC03ODc0YzEyMzE5MTEvMC85MEUyQ0NBQ0Ez MjNFQUIyMTQ1RjU0QjdDRjY1QzVGQUVDRUY4M0EzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTBFMkNDQUNBMzIzRUFCMjE0NUY1NEI3Q0Y2NUM1RkFFQ0VG ODNBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjc3ZmZlMmEtMzFlNC00ODAwLTk3 ZDQtNzg3NGMxMjMxOTExLzAvOTBFMkNDQUNBMzIzRUFCMjE0NUY1NEI3Q0Y2NUM1 RkFFQ0VGODNBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALe0fJ7UjqdSwvvaS7bNE7W4YJ0O/gVQJQRt +1dnb9XwCdDKMqIqjfML7dHSdUl8LK4dqvLpfu2DyC993IEZkFAn/GcpHKAFRb9g KXHmyMqZ0yGKvgVpjJMkZg48y2+jvVMvgZIMNCnbBAH8deNwmXn04hXYbtNGxTaf w9PKm1mLC+/czRfrNe0dDCtwWscmT7XPJHSFnCw8nL2kpSuFpyDLzjSf165h2QBN O/CHTz8ZclmnK00ip892eMC71A1Wr0lXxx2HeYBeVcQ4FZcTf9Fj1Je93rX9GSx8 PGnkL1f9LW50NkhO8zPFiHaGEceA6IjGEQLhvzp1049CiopmHbg= -----END CERTIFICATE-----Generated at Wed Jun 18 08:58:48 2025 by rpki-client