$ rpki-client -vvf repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.mft File: 90173425DBB7D1DBD164BBA26F4657B17A266A97.mft (raw, json) Hash identifier: TfDtDF7pj/BRai3V3CeRMAqhzinpiRcL6itkrf0kM98= Subject key identifier: F1:F7:9A:A0:42:BA:1A:CA:51:E2:93:B0:9D:28:53:76:73:66:6C:96 Authority key identifier: 90:17:34:25:DB:B7:D1:DB:D1:64:BB:A2:6F:46:57:B1:7A:26:6A:97 Certificate issuer: /CN=90173425DBB7D1DBD164BBA26F4657B17A266A97 Certificate serial: 49385DEB7C74D7E77ADDB5B2F878482D3F7135DA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90173425DBB7D1DBD164BBA26F4657B17A266A97.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.mft Manifest number: 04D1 Signing time: Thu 08 May 2025 23:01:15 +0000 Manifest this update: Thu 08 May 2025 22:56:15 +0000 Manifest next update: Mon 12 May 2025 04:03:15 +0000 Files and hashes: 1: 90173425DBB7D1DBD164BBA26F4657B17A266A97.crl (hash: LAvnQRGDp+l34LA9EN95AsfCi7HAqUNovnuFjM569yg=) 2: 323030313a6466373a376130303a3a2f34382d3438203d3e20313336303537.roa (hash: 6Z6gxTWfD3ARKqfG9o8QF6TpfuXdMJbjFHfFmTtyniQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.crl rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90173425DBB7D1DBD164BBA26F4657B17A266A97.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 04:03:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:38:5d:eb:7c:74:d7:e7:7a:dd:b5:b2:f8:78:48:2d:3f:71:35:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90173425DBB7D1DBD164BBA26F4657B17A266A97 Validity Not Before: May 8 22:56:15 2025 GMT Not After : May 12 04:03:15 2025 GMT Subject: CN=F1F79AA042BA1ACA51E293B09D28537673666C96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:79:73:2b:ef:2d:91:8c:63:74:40:3f:7f:e2: 0b:90:81:08:61:24:66:a3:ac:fa:a1:cb:3f:55:d2: 41:bf:65:bb:b1:05:da:4a:3c:75:87:78:4c:c9:c0: 4a:0a:14:ec:a9:a9:2d:46:72:3e:97:f5:ab:d9:be: 39:5b:e9:d0:e2:3e:ca:21:46:ab:52:28:c7:49:fb: f9:b5:21:61:6b:71:82:33:85:d8:bd:86:32:89:ad: 47:be:8a:af:06:38:4f:08:48:4d:f6:9f:8f:cf:d0: 04:78:e7:c6:e9:2f:d3:e4:28:ab:53:be:5c:83:53: e1:5a:7c:aa:2d:17:f4:bd:ae:e4:c7:aa:9f:c3:8d: 4b:90:57:a3:b8:74:94:8c:5e:17:a1:98:9e:7e:86: aa:5b:35:d9:5d:3f:57:06:77:94:6a:ab:49:49:56: 62:80:eb:80:48:9a:ea:3f:2f:e6:5c:2b:a9:0f:06: 8a:c2:35:21:8d:dd:d9:49:0d:30:d0:c8:99:63:eb: 92:a3:22:d9:74:6a:c0:5f:82:4b:26:e6:b3:a5:0f: 30:07:4f:d5:b9:59:23:6d:6a:c0:10:df:d8:da:95: 45:04:cb:cd:31:bb:ba:3f:3d:c1:0d:e6:df:cb:f4: f6:d1:9e:8c:6e:e9:7a:28:db:af:24:06:ad:da:12: fc:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:F7:9A:A0:42:BA:1A:CA:51:E2:93:B0:9D:28:53:76:73:66:6C:96 X509v3 Authority Key Identifier: keyid:90:17:34:25:DB:B7:D1:DB:D1:64:BB:A2:6F:46:57:B1:7A:26:6A:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90173425DBB7D1DBD164BBA26F4657B17A266A97.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:63:4b:c7:a3:56:cd:d4:44:89:4d:6a:b0:7b:fe:28:a3:26: 6f:78:a4:a5:bd:62:cd:41:3d:5a:c1:1a:9f:76:eb:25:e7:dd: 27:ab:b8:ef:e2:50:a6:43:ae:7d:bf:6d:d3:6c:9f:01:e9:00: 33:72:24:12:4e:9c:a5:e5:22:67:bc:3f:55:bd:c4:02:ba:42: 36:e1:b3:06:14:f5:cc:64:2f:9a:a2:d5:da:99:2f:62:fa:be: b9:72:50:49:06:e8:53:dd:85:b2:20:97:87:8d:ca:2c:e6:d2: c7:9e:2a:3e:3f:e8:12:d1:90:f6:86:c8:80:ab:86:cb:76:bd: 35:45:b3:cd:3d:93:93:57:9e:c6:52:f2:6c:8f:97:c0:da:40: 18:a0:2c:ae:a4:0d:94:85:b8:0c:40:9e:7a:e9:ce:aa:74:72: 4f:f3:a7:85:94:5c:9a:dd:a2:e2:37:94:6b:a5:93:6b:04:ac: 12:e2:25:a2:ff:19:f4:ee:38:9b:4f:94:ae:d4:3c:fb:92:29: 26:8b:d2:06:6b:33:1c:93:a7:0e:d4:78:da:5f:f6:28:53:6d: 4d:e7:50:78:c7:51:27:1c:bc:d6:7e:23:3d:8c:f0:81:6f:a2: 35:7b:46:0f:4e:87:74:53:54:17:7a:9d:be:16:bc:ee:b3:62: 28:08:b4:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSThd63x01+d63bWy+HhILT9xNdowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTAxNzM0MjVEQkI3RDFEQkQxNjRCQkEyNkY0NjU3QjE3 QTI2NkE5NzAeFw0yNTA1MDgyMjU2MTVaFw0yNTA1MTIwNDAzMTVaMDMxMTAvBgNV BAMTKEYxRjc5QUEwNDJCQTFBQ0E1MUUyOTNCMDlEMjg1Mzc2NzM2NjZDOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5eXMr7y2RjGN0QD9/4guQgQhh JGajrPqhyz9V0kG/ZbuxBdpKPHWHeEzJwEoKFOypqS1Gcj6X9avZvjlb6dDiPsoh RqtSKMdJ+/m1IWFrcYIzhdi9hjKJrUe+iq8GOE8ISE32n4/P0AR458bpL9PkKKtT vlyDU+FafKotF/S9ruTHqp/DjUuQV6O4dJSMXhehmJ5+hqpbNdldP1cGd5Rqq0lJ VmKA64BImuo/L+ZcK6kPBorCNSGN3dlJDTDQyJlj65KjItl0asBfgksm5rOlDzAH T9W5WSNtasAQ39jalUUEy80xu7o/PcEN5t/L9PbRnoxu6Xoo268kBq3aEvzzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8feaoEK6GspR4pOwnShTdnNmbJYwHwYDVR0j BBgwFoAUkBc0Jdu30dvRZLuib0ZXsXomapcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YmQ0MzQwYi0yMWM0LTRmYzctYTI1OS1lMjM1NGM1M2ZkZDIvMC85MDE3MzQyNURC QjdEMURCRDE2NEJCQTI2RjQ2NTdCMTdBMjY2QTk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTAxNzM0MjVEQkI3RDFEQkQxNjRCQkEyNkY0NjU3QjE3QTI2 NkE5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWJkNDM0MGItMjFjNC00ZmM3LWEy NTktZTIzNTRjNTNmZGQyLzAvOTAxNzM0MjVEQkI3RDFEQkQxNjRCQkEyNkY0NjU3 QjE3QTI2NkE5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJZjS8ejVs3URIlNarB7/iijJm94pKW9Ys1B PVrBGp926yXn3SeruO/iUKZDrn2/bdNsnwHpADNyJBJOnKXlIme8P1W9xAK6Qjbh swYU9cxkL5qi1dqZL2L6vrlyUEkG6FPdhbIgl4eNyizm0seeKj4/6BLRkPaGyICr hst2vTVFs809k5NXnsZS8myPl8DaQBigLK6kDZSFuAxAnnrpzqp0ck/zp4WUXJrd ouI3lGulk2sErBLiJaL/GfTuOJtPlK7UPPuSKSaL0gZrMxyTpw7UeNpf9ihTbU3n UHjHUSccvNZ+Iz2M8IFvojV7Rg9Oh3RTVBd6nb4WvO6zYigItBI= -----END CERTIFICATE-----Generated at Sat May 10 17:02:23 2025 by rpki-client