$ rpki-client -vvf repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft File: 90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft (raw, json) Hash identifier: IFE2gHMcaORoKCNxLPAcnWsCjP4DaRZZBbiyWruNmqk= Subject key identifier: F7:B7:C6:0F:A3:D8:5C:5A:24:87:FB:32:06:B6:A0:2C:33:0A:5A:E7 Authority key identifier: 90:31:7E:26:9F:FE:9F:71:3F:20:CF:BA:CE:64:2A:6F:60:F7:8F:CA Certificate issuer: /CN=90317E269FFE9F713F20CFBACE642A6F60F78FCA Certificate serial: 758004BC93C6651123B1F7D494BE20CC5E6C1B7B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90317E269FFE9F713F20CFBACE642A6F60F78FCA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft Manifest number: 8A Signing time: Mon 30 Jun 2025 15:10:04 +0000 Manifest this update: Mon 30 Jun 2025 15:05:04 +0000 Manifest next update: Fri 04 Jul 2025 02:14:04 +0000 Files and hashes: 1: 90317E269FFE9F713F20CFBACE642A6F60F78FCA.crl (hash: qUlwXEd5IqOSKZjiMRUwDgXlu+oUoVddReMvB9m/Daw=) 2: 323430313a633432303a3a2f33322d3438203d3e20313431303538.roa (hash: /agLGw0c81cHF8Topn/a9INtTEJnrvSh7/oHynB8qR0=) 3: 3130332e3135352e3131332e302f32342d3234203d3e20313431303538.roa (hash: Y3pOvFfrtyRbRGGWe5RbSl3GyhFyt942LzAk5FIpr9c=) 4: 3130332e33362e3235302e302f32342d3234203d3e20313431303538.roa (hash: gP8KkxonLoqcx7KZvnUv3ivtnAxFYtDlgM/zAdFC+W8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.crl rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90317E269FFE9F713F20CFBACE642A6F60F78FCA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 02:14:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:80:04:bc:93:c6:65:11:23:b1:f7:d4:94:be:20:cc:5e:6c:1b:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90317E269FFE9F713F20CFBACE642A6F60F78FCA Validity Not Before: Jun 30 15:05:04 2025 GMT Not After : Jul 4 02:14:04 2025 GMT Subject: CN=F7B7C60FA3D85C5A2487FB3206B6A02C330A5AE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:be:67:d9:f5:bd:5a:cb:8c:27:86:00:4e:e4: f9:90:1a:d8:81:91:e9:b5:51:4d:d0:de:54:a8:ef: 8f:bb:6a:6d:b8:01:8b:81:f4:0c:8b:0d:27:44:a5: fa:25:56:99:c7:0d:84:d7:e5:53:49:d4:fd:75:fe: 63:95:14:d0:4a:8d:89:8d:2c:7c:7f:6a:78:d8:17: 4c:f1:8c:41:1c:b0:e3:df:73:80:09:4a:eb:c3:05: d6:f2:45:5d:ec:a6:ab:3d:49:24:e3:36:80:1e:33: 8a:bc:76:15:76:ca:a0:bf:e3:9c:ee:60:22:85:0b: f8:d3:a4:de:fa:b0:c3:99:bb:95:b2:a1:33:58:71: 4d:ae:fb:83:54:8b:86:b5:8d:dc:5a:0b:9f:2f:80: 25:bb:a8:91:0c:13:33:09:20:d7:eb:9f:1c:59:e1: 63:ba:89:6e:a9:c6:82:2c:4a:a7:ef:2b:51:6f:f4: f7:35:14:f6:37:03:5e:29:54:9a:2a:c9:23:e7:e3: 28:9a:40:5a:ae:00:7f:37:5d:dc:77:50:31:e3:71: af:bc:27:72:ef:bf:61:9f:2a:c9:de:64:bd:47:5d: 52:1d:0a:79:29:00:08:25:e7:23:3f:3a:36:16:12: 95:40:00:4c:c5:5b:cf:36:d7:50:1d:5b:ac:0e:68: f8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:B7:C6:0F:A3:D8:5C:5A:24:87:FB:32:06:B6:A0:2C:33:0A:5A:E7 X509v3 Authority Key Identifier: keyid:90:31:7E:26:9F:FE:9F:71:3F:20:CF:BA:CE:64:2A:6F:60:F7:8F:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90317E269FFE9F713F20CFBACE642A6F60F78FCA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:61:3f:49:e5:1b:cf:c4:cc:51:19:cf:8b:4b:62:83:a9:01: 6a:5b:18:1a:fa:c7:4b:28:7f:ba:41:5c:d2:d2:43:be:29:cd: 88:d0:61:6f:05:3c:35:60:d2:3f:51:66:ce:23:57:7e:2d:e0: 95:5f:dd:f7:3b:76:a1:4b:a0:70:39:d7:b8:a9:cc:99:a2:18: 53:02:8b:e1:a9:16:5c:15:75:56:3c:07:48:b4:19:56:b2:92: bd:4c:71:1e:0a:68:51:5c:4e:c3:3c:27:e9:b2:08:8e:de:ab: f0:4b:37:30:f1:94:2d:35:59:8c:e4:bb:44:cb:c3:02:35:d5: 45:4c:d0:fb:0d:e5:68:51:b5:76:91:67:6a:31:fa:97:6f:06: 1d:8c:47:bd:ca:28:ce:fa:3f:0e:a0:03:d6:25:92:b6:bc:00: 52:09:d5:eb:44:aa:2e:04:48:0a:5f:f9:d5:fc:2f:da:9a:f3: 2b:39:70:29:10:e4:72:f3:e0:99:21:5b:49:90:6c:51:ea:f5: 8e:e2:57:25:89:c9:60:44:e8:ed:a8:53:63:ce:1a:e5:38:53: fa:29:e9:ab:d9:ac:d8:25:41:fe:9a:6d:8b:24:94:dd:76:0f: f5:e0:35:40:13:61:35:66:81:e1:e6:ff:a8:11:8d:65:a6:ea: 29:90:a9:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdYAEvJPGZREjsffUlL4gzF5sG3swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTAzMTdFMjY5RkZFOUY3MTNGMjBDRkJBQ0U2NDJBNkY2 MEY3OEZDQTAeFw0yNTA2MzAxNTA1MDRaFw0yNTA3MDQwMjE0MDRaMDMxMTAvBgNV BAMTKEY3QjdDNjBGQTNEODVDNUEyNDg3RkIzMjA2QjZBMDJDMzMwQTVBRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8vmfZ9b1ay4wnhgBO5PmQGtiB kem1UU3Q3lSo74+7am24AYuB9AyLDSdEpfolVpnHDYTX5VNJ1P11/mOVFNBKjYmN LHx/anjYF0zxjEEcsOPfc4AJSuvDBdbyRV3spqs9SSTjNoAeM4q8dhV2yqC/45zu YCKFC/jTpN76sMOZu5WyoTNYcU2u+4NUi4a1jdxaC58vgCW7qJEMEzMJINfrnxxZ 4WO6iW6pxoIsSqfvK1Fv9Pc1FPY3A14pVJoqySPn4yiaQFquAH83Xdx3UDHjca+8 J3Lvv2GfKsneZL1HXVIdCnkpAAgl5yM/OjYWEpVAAEzFW88211AdW6wOaPhBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU97fGD6PYXFokh/syBragLDMKWucwHwYDVR0j BBgwFoAUkDF+Jp/+n3E/IM+6zmQqb2D3j8owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 M2I4NThmNi1kZTIwLTQxMjEtYmNlYS05MDc2ZWRjY2MwOTcvMC85MDMxN0UyNjlG RkU5RjcxM0YyMENGQkFDRTY0MkE2RjYwRjc4RkNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTAzMTdFMjY5RkZFOUY3MTNGMjBDRkJBQ0U2NDJBNkY2MEY3 OEZDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTNiODU4ZjYtZGUyMC00MTIxLWJj ZWEtOTA3NmVkY2NjMDk3LzAvOTAzMTdFMjY5RkZFOUY3MTNGMjBDRkJBQ0U2NDJB NkY2MEY3OEZDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIdhP0nlG8/EzFEZz4tLYoOpAWpbGBr6x0so f7pBXNLSQ74pzYjQYW8FPDVg0j9RZs4jV34t4JVf3fc7dqFLoHA517ipzJmiGFMC i+GpFlwVdVY8B0i0GVaykr1McR4KaFFcTsM8J+myCI7eq/BLNzDxlC01WYzku0TL wwI11UVM0PsN5WhRtXaRZ2ox+pdvBh2MR73KKM76Pw6gA9Ylkra8AFIJ1etEqi4E SApf+dX8L9qa8ys5cCkQ5HLz4JkhW0mQbFHq9Y7iVyWJyWBE6O2oU2POGuU4U/op 6avZrNglQf6abYsklN12D/XgNUATYTVmgeHm/6gRjWWm6imQqR4= -----END CERTIFICATE-----Generated at Tue Jul 1 15:59:38 2025 by rpki-client