$ rpki-client -vvf repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft File: 90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft (raw, json) Hash identifier: DfcMnTbAV3n40i4ohkvEs2on2sL7HV0HjOn/e9bWFNg= Subject key identifier: 39:84:51:14:86:1E:F6:0D:12:E2:B2:C9:11:B9:BB:97:37:35:59:E0 Authority key identifier: 90:31:7E:26:9F:FE:9F:71:3F:20:CF:BA:CE:64:2A:6F:60:F7:8F:CA Certificate issuer: /CN=90317E269FFE9F713F20CFBACE642A6F60F78FCA Certificate serial: 3755F8AC5C618D6B2FD988785362F3FC2155F4CD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90317E269FFE9F713F20CFBACE642A6F60F78FCA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft Manifest number: A1 Signing time: Thu 21 Aug 2025 03:30:04 +0000 Manifest this update: Thu 21 Aug 2025 03:25:04 +0000 Manifest next update: Sun 24 Aug 2025 13:45:04 +0000 Files and hashes: 1: 3130332e3135352e3131332e302f32342d3234203d3e20313431303538.roa (hash: Y3pOvFfrtyRbRGGWe5RbSl3GyhFyt942LzAk5FIpr9c=) 2: 90317E269FFE9F713F20CFBACE642A6F60F78FCA.crl (hash: dn0UFxdN97W0tU4N+Akz+yW1xtmrVly50Ug0fKSwpMo=) 3: 323430313a633432303a3a2f33322d3438203d3e20313431303538.roa (hash: /agLGw0c81cHF8Topn/a9INtTEJnrvSh7/oHynB8qR0=) 4: 3130332e33362e3235302e302f32342d3234203d3e20313431303538.roa (hash: gP8KkxonLoqcx7KZvnUv3ivtnAxFYtDlgM/zAdFC+W8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.crl rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90317E269FFE9F713F20CFBACE642A6F60F78FCA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:45:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:55:f8:ac:5c:61:8d:6b:2f:d9:88:78:53:62:f3:fc:21:55:f4:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90317E269FFE9F713F20CFBACE642A6F60F78FCA Validity Not Before: Aug 21 03:25:04 2025 GMT Not After : Aug 24 13:45:04 2025 GMT Subject: CN=39845114861EF60D12E2B2C911B9BB97373559E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:27:55:16:c2:65:92:6a:0f:1b:cb:c3:94:05: a4:b8:c4:2f:7e:dc:c1:0a:60:19:3d:0e:8c:bf:66: 9a:c9:34:05:08:49:b5:4f:17:74:9f:16:dd:21:85: 02:3b:07:7b:58:d1:2d:fe:72:45:80:04:a3:f0:99: 22:bd:0d:24:bc:e1:d6:0c:06:f7:44:7c:c6:d9:55: 3c:59:ff:23:ef:ec:f6:03:bd:37:7a:fb:1e:a1:d6: 18:5d:a1:59:a3:02:a4:5e:b7:05:72:1c:c2:9b:dd: 66:27:19:9e:38:51:cd:5f:14:43:b8:4e:ae:1c:87: 78:2a:66:86:07:d1:46:45:9e:9d:01:0b:99:b1:82: 4e:50:e8:77:e9:4d:29:3a:bc:92:34:5f:c9:7c:89: 38:c3:f2:0a:ac:a2:37:4d:6c:92:e3:ef:b3:db:16: a3:44:5f:a8:f7:a4:ce:4c:29:4c:26:5f:44:a7:37: 43:56:f3:0e:16:f9:fd:5d:30:39:bf:89:92:de:99: 43:0c:cc:8b:e7:ab:22:39:c0:e2:5c:cc:d5:33:0c: a7:3d:98:f2:39:53:37:64:e2:50:25:d2:fc:7a:0e: fe:d3:a0:72:f9:bb:cd:e5:fd:f7:48:36:40:24:88: 4f:96:1a:e3:75:8b:54:4c:7a:d5:c1:12:09:5d:09: 9d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:84:51:14:86:1E:F6:0D:12:E2:B2:C9:11:B9:BB:97:37:35:59:E0 X509v3 Authority Key Identifier: keyid:90:31:7E:26:9F:FE:9F:71:3F:20:CF:BA:CE:64:2A:6F:60:F7:8F:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90317E269FFE9F713F20CFBACE642A6F60F78FCA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:17:54:a4:6f:8b:a1:b3:88:49:20:60:2d:ac:73:12:11:0f: f6:ac:11:0f:e0:3e:9b:73:c1:89:a0:3c:47:c2:3b:5d:5b:a0: 11:36:ad:91:dc:85:8c:12:63:14:47:91:1a:80:b6:3d:a5:c8: d8:22:21:1c:4c:ae:b0:51:50:98:a0:ca:d5:43:05:1b:8d:f2: ff:41:28:4b:69:4f:cd:a5:3d:ad:b1:a8:33:d6:b2:1c:67:bc: 11:37:fb:92:5b:42:e3:d4:db:f8:8a:3e:3f:19:21:45:63:04: 1d:4a:eb:de:07:03:ff:99:be:7d:fa:7c:1e:3d:88:2e:0d:83: ca:47:39:39:82:a8:39:98:fe:a0:2a:91:10:f2:a7:7f:09:9f: 70:ff:02:40:98:9e:ab:62:e6:96:85:1e:4a:53:d7:a6:e4:7c: 7a:81:ff:eb:40:b7:80:af:aa:84:f5:a5:a7:60:ea:f1:50:db: e4:21:2e:e3:0a:42:99:44:ba:a8:ac:73:f1:f2:78:84:eb:27: 64:e6:fb:5b:10:94:a5:82:e1:6c:21:34:15:47:24:16:d9:2f: 9d:98:be:63:8e:a8:9c:d1:c6:69:a0:ce:31:df:6e:16:21:5c: f4:fb:7a:db:99:0f:01:e0:be:35:19:47:53:23:b0:b4:15:d5: 35:cf:01:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN1X4rFxhjWsv2Yh4U2Lz/CFV9M0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTAzMTdFMjY5RkZFOUY3MTNGMjBDRkJBQ0U2NDJBNkY2 MEY3OEZDQTAeFw0yNTA4MjEwMzI1MDRaFw0yNTA4MjQxMzQ1MDRaMDMxMTAvBgNV BAMTKDM5ODQ1MTE0ODYxRUY2MEQxMkUyQjJDOTExQjlCQjk3MzczNTU5RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/J1UWwmWSag8by8OUBaS4xC9+ 3MEKYBk9Doy/ZprJNAUISbVPF3SfFt0hhQI7B3tY0S3+ckWABKPwmSK9DSS84dYM BvdEfMbZVTxZ/yPv7PYDvTd6+x6h1hhdoVmjAqRetwVyHMKb3WYnGZ44Uc1fFEO4 Tq4ch3gqZoYH0UZFnp0BC5mxgk5Q6HfpTSk6vJI0X8l8iTjD8gqsojdNbJLj77Pb FqNEX6j3pM5MKUwmX0SnN0NW8w4W+f1dMDm/iZLemUMMzIvnqyI5wOJczNUzDKc9 mPI5Uzdk4lAl0vx6Dv7ToHL5u83l/fdINkAkiE+WGuN1i1RMetXBEgldCZ3/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOYRRFIYe9g0S4rLJEbm7lzc1WeAwHwYDVR0j BBgwFoAUkDF+Jp/+n3E/IM+6zmQqb2D3j8owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 M2I4NThmNi1kZTIwLTQxMjEtYmNlYS05MDc2ZWRjY2MwOTcvMC85MDMxN0UyNjlG RkU5RjcxM0YyMENGQkFDRTY0MkE2RjYwRjc4RkNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTAzMTdFMjY5RkZFOUY3MTNGMjBDRkJBQ0U2NDJBNkY2MEY3 OEZDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTNiODU4ZjYtZGUyMC00MTIxLWJj ZWEtOTA3NmVkY2NjMDk3LzAvOTAzMTdFMjY5RkZFOUY3MTNGMjBDRkJBQ0U2NDJB NkY2MEY3OEZDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACkXVKRvi6GziEkgYC2scxIRD/asEQ/gPptz wYmgPEfCO11boBE2rZHchYwSYxRHkRqAtj2lyNgiIRxMrrBRUJigytVDBRuN8v9B KEtpT82lPa2xqDPWshxnvBE3+5JbQuPU2/iKPj8ZIUVjBB1K694HA/+Zvn36fB49 iC4Ng8pHOTmCqDmY/qAqkRDyp38Jn3D/AkCYnqti5paFHkpT16bkfHqB/+tAt4Cv qoT1padg6vFQ2+QhLuMKQplEuqisc/HyeITrJ2Tm+1sQlKWC4WwhNBVHJBbZL52Y vmOOqJzRxmmgzjHfbhYhXPT7etuZDwHgvjUZR1MjsLQV1TXPAV4= -----END CERTIFICATE-----Generated at Sat Aug 23 12:28:18 2025 by rpki-client