$ rpki-client -vvf repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.mft File: 90173425DBB7D1DBD164BBA26F4657B17A266A97.mft (raw, json) Hash identifier: 8mqRqVCti5AqLaiK1R2hpCsHay+P5daguALjtRKWktI= Subject key identifier: 69:FD:51:02:35:B2:7A:F2:6E:9C:71:09:11:90:F8:0D:BF:DD:D9:B8 Authority key identifier: 90:17:34:25:DB:B7:D1:DB:D1:64:BB:A2:6F:46:57:B1:7A:26:6A:97 Certificate issuer: /CN=90173425DBB7D1DBD164BBA26F4657B17A266A97 Certificate serial: 53B6AF2A5E02EA14990F97BA1B9EF1BC131BB952 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90173425DBB7D1DBD164BBA26F4657B17A266A97.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.mft Manifest number: 051B Signing time: Mon 20 Oct 2025 02:51:19 +0000 Manifest this update: Mon 20 Oct 2025 02:46:19 +0000 Manifest next update: Thu 23 Oct 2025 10:14:19 +0000 Files and hashes: 1: 90173425DBB7D1DBD164BBA26F4657B17A266A97.crl (hash: yYJ1SWg7Q2zVwkn5Hg72qTY/mjlKmKwrDxBt3pxbNf8=) 2: 323030313a6466373a376130303a3a2f34382d3438203d3e20313336303537.roa (hash: JVL+81yV9zQDwPcNgvThrCD77NCHFX7cSVK21vFtKao=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.crl rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90173425DBB7D1DBD164BBA26F4657B17A266A97.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 10:14:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:b6:af:2a:5e:02:ea:14:99:0f:97:ba:1b:9e:f1:bc:13:1b:b9:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90173425DBB7D1DBD164BBA26F4657B17A266A97 Validity Not Before: Oct 20 02:46:19 2025 GMT Not After : Oct 23 10:14:19 2025 GMT Subject: CN=69FD510235B27AF26E9C71091190F80DBFDDD9B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c3:47:41:12:2c:34:83:32:60:0a:e3:7b:34: 1c:0e:49:8c:1b:38:56:86:dc:04:ec:dc:44:2f:2d: ec:99:95:91:e6:a2:c5:58:f0:e5:1f:84:8c:94:81: ab:65:9f:3e:ce:7e:8c:16:9a:86:d8:70:4c:5e:a0: 27:e5:4f:cc:10:f1:14:70:ba:ec:6f:01:8a:47:93: 58:88:64:44:51:5e:5e:6b:b9:98:97:d4:6c:0a:58: 2f:2e:06:c7:42:86:5e:3e:28:a9:02:08:b5:e1:b8: 7e:e7:82:96:c2:90:3f:51:05:cd:91:c7:27:9b:1f: 5e:d7:ab:9d:be:af:86:b6:c9:95:45:98:70:d7:19: fd:00:9f:f4:da:d6:e2:73:82:06:71:5f:51:f6:ff: 2b:3b:62:12:54:36:aa:7e:d0:05:ba:a1:6a:ce:5c: d5:35:50:4a:52:53:a4:14:88:c6:8e:d8:64:ae:cf: da:3e:73:af:ca:da:ce:80:8b:42:3c:96:d0:1f:24: bb:2b:9b:a1:89:0d:98:74:f8:97:fc:81:eb:72:5b: f0:24:8b:38:a8:d8:cf:18:4a:34:63:e8:91:cc:80: 6f:e7:da:11:b6:7c:03:87:34:5d:ef:35:87:69:5d: 3d:a9:41:f0:b1:35:e1:e2:7b:a1:fa:d4:30:82:42: 5b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:FD:51:02:35:B2:7A:F2:6E:9C:71:09:11:90:F8:0D:BF:DD:D9:B8 X509v3 Authority Key Identifier: keyid:90:17:34:25:DB:B7:D1:DB:D1:64:BB:A2:6F:46:57:B1:7A:26:6A:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90173425DBB7D1DBD164BBA26F4657B17A266A97.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:d1:ea:f1:55:1b:1b:3a:e3:e2:c8:42:ee:cd:c8:5a:2f:03: 03:9b:69:ec:7e:8b:90:c0:c9:db:da:fe:4f:29:66:69:6b:08: 1b:b8:3e:27:81:8e:a9:83:f2:13:79:63:8a:1f:7b:dc:17:ef: fb:c4:cc:17:e5:02:0b:a5:94:8e:1f:cd:6a:3e:a9:92:06:fc: 25:fe:a3:9f:9d:60:28:ad:3e:f0:0c:7f:13:bd:36:0a:d5:25: 84:2d:4f:1c:e4:3b:bd:09:4c:10:0a:67:98:73:d8:07:85:57: cc:4f:48:81:fd:a4:71:73:36:e6:b5:03:7d:0d:cf:fa:0f:87: c7:ed:65:b0:3d:9b:34:fd:a8:42:6f:f1:8a:b7:ca:5c:36:45: 89:4f:b6:6e:cf:74:d1:b4:c5:ac:b2:2f:83:1b:39:76:c3:1b: a3:d2:55:91:62:d7:93:4a:e1:d4:f8:68:35:4a:11:d3:8a:2c: e2:7c:fd:7c:d7:b5:e2:da:c0:04:21:37:44:de:33:de:45:c2: b0:83:4c:78:74:0b:c2:02:8c:55:72:6e:fe:73:0f:60:3b:1c: c5:fc:5a:26:74:cd:4b:bb:e3:07:a8:3f:ee:6a:73:52:6f:bd: 65:09:c3:20:8c:fd:a5:ca:61:cd:92:53:7a:1f:ef:f0:d7:38: b6:02:3b:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU7avKl4C6hSZD5e6G57xvBMbuVIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTAxNzM0MjVEQkI3RDFEQkQxNjRCQkEyNkY0NjU3QjE3 QTI2NkE5NzAeFw0yNTEwMjAwMjQ2MTlaFw0yNTEwMjMxMDE0MTlaMDMxMTAvBgNV BAMTKDY5RkQ1MTAyMzVCMjdBRjI2RTlDNzEwOTExOTBGODBEQkZEREQ5QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrw0dBEiw0gzJgCuN7NBwOSYwb OFaG3ATs3EQvLeyZlZHmosVY8OUfhIyUgatlnz7OfowWmobYcExeoCflT8wQ8RRw uuxvAYpHk1iIZERRXl5ruZiX1GwKWC8uBsdChl4+KKkCCLXhuH7ngpbCkD9RBc2R xyebH17Xq52+r4a2yZVFmHDXGf0An/Ta1uJzggZxX1H2/ys7YhJUNqp+0AW6oWrO XNU1UEpSU6QUiMaO2GSuz9o+c6/K2s6Ai0I8ltAfJLsrm6GJDZh0+Jf8getyW/Ak izio2M8YSjRj6JHMgG/n2hG2fAOHNF3vNYdpXT2pQfCxNeHie6H61DCCQltnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaf1RAjWyevJunHEJEZD4Db/d2bgwHwYDVR0j BBgwFoAUkBc0Jdu30dvRZLuib0ZXsXomapcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YmQ0MzQwYi0yMWM0LTRmYzctYTI1OS1lMjM1NGM1M2ZkZDIvMC85MDE3MzQyNURC QjdEMURCRDE2NEJCQTI2RjQ2NTdCMTdBMjY2QTk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTAxNzM0MjVEQkI3RDFEQkQxNjRCQkEyNkY0NjU3QjE3QTI2 NkE5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWJkNDM0MGItMjFjNC00ZmM3LWEy NTktZTIzNTRjNTNmZGQyLzAvOTAxNzM0MjVEQkI3RDFEQkQxNjRCQkEyNkY0NjU3 QjE3QTI2NkE5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABbR6vFVGxs64+LIQu7NyFovAwObaex+i5DA ydva/k8pZmlrCBu4PieBjqmD8hN5Y4ofe9wX7/vEzBflAgullI4fzWo+qZIG/CX+ o5+dYCitPvAMfxO9NgrVJYQtTxzkO70JTBAKZ5hz2AeFV8xPSIH9pHFzNua1A30N z/oPh8ftZbA9mzT9qEJv8Yq3ylw2RYlPtm7PdNG0xayyL4MbOXbDG6PSVZFi15NK 4dT4aDVKEdOKLOJ8/XzXteLawAQhN0TeM95FwrCDTHh0C8ICjFVybv5zD2A7HMX8 WiZ0zUu74weoP+5qc1JvvWUJwyCM/aXKYc2SU3of7/DXOLYCO4Y= -----END CERTIFICATE-----Generated at Mon Oct 20 09:26:40 2025 by rpki-client