$ rpki-client -vvf repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.mft File: 90173425DBB7D1DBD164BBA26F4657B17A266A97.mft (raw, json) Hash identifier: vCwkf9+D5WvnbbgRXhBt9zQ0XvZu1ANYkOjCPsuHVFM= Subject key identifier: E8:92:83:4B:83:C6:5E:F9:42:A6:D4:C5:34:AB:FF:BF:4B:4B:6C:D7 Authority key identifier: 90:17:34:25:DB:B7:D1:DB:D1:64:BB:A2:6F:46:57:B1:7A:26:6A:97 Certificate issuer: /CN=90173425DBB7D1DBD164BBA26F4657B17A266A97 Certificate serial: 2398E8E7253DAD23F04AA26D48D86310128D6421 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90173425DBB7D1DBD164BBA26F4657B17A266A97.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.mft Manifest number: 04E8 Signing time: Sun 29 Jun 2025 13:21:16 +0000 Manifest this update: Sun 29 Jun 2025 13:16:16 +0000 Manifest next update: Wed 02 Jul 2025 15:41:16 +0000 Files and hashes: 1: 323030313a6466373a376130303a3a2f34382d3438203d3e20313336303537.roa (hash: 6Z6gxTWfD3ARKqfG9o8QF6TpfuXdMJbjFHfFmTtyniQ=) 2: 90173425DBB7D1DBD164BBA26F4657B17A266A97.crl (hash: dPG68YYkhWNU8L3FLrNhHPCju7cCuTmJ8WOqVTSnOwU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.crl rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90173425DBB7D1DBD164BBA26F4657B17A266A97.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 15:41:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:98:e8:e7:25:3d:ad:23:f0:4a:a2:6d:48:d8:63:10:12:8d:64:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90173425DBB7D1DBD164BBA26F4657B17A266A97 Validity Not Before: Jun 29 13:16:16 2025 GMT Not After : Jul 2 15:41:16 2025 GMT Subject: CN=E892834B83C65EF942A6D4C534ABFFBF4B4B6CD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f0:60:e5:ca:e9:21:c6:cf:31:71:6b:b4:21: c2:53:a2:3a:6f:57:84:42:f3:d6:87:9e:69:6b:50: 54:87:48:25:43:e3:76:e4:31:2c:b0:87:27:23:53: 72:a6:3c:e7:ac:97:57:11:b6:83:5c:cc:36:c8:a4: 72:72:b3:25:28:9e:e0:9a:fb:99:c8:6e:11:3a:1e: 89:c5:2c:1f:57:b5:08:29:9f:34:b6:5f:be:43:15: ec:6b:06:32:1c:55:05:a6:0c:08:98:d6:60:7b:0f: 01:e6:83:52:ac:16:fd:34:8d:0e:6a:59:de:7f:40: 41:2b:47:27:3b:a1:51:0c:51:ef:b2:46:66:42:ea: b1:03:5a:b6:b1:fa:f9:d4:fb:0b:a8:70:9a:b7:40: 49:0c:87:59:8c:75:59:d6:79:1b:4b:f8:22:73:84: 1b:e3:8e:8c:59:a9:7b:96:7c:48:74:13:3f:01:31: 23:18:b5:5c:33:75:d0:00:db:d3:37:f1:28:6f:62: d4:f3:67:b9:d3:be:89:36:94:b7:b6:6a:25:0f:ca: eb:90:75:99:05:3c:9e:36:33:f8:f6:9d:97:8c:c1: eb:e7:69:d9:b9:9d:fa:8b:83:fe:b3:14:ec:66:58: 14:79:09:f5:08:09:4c:c6:24:f2:e4:89:49:96:e9: aa:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:92:83:4B:83:C6:5E:F9:42:A6:D4:C5:34:AB:FF:BF:4B:4B:6C:D7 X509v3 Authority Key Identifier: keyid:90:17:34:25:DB:B7:D1:DB:D1:64:BB:A2:6F:46:57:B1:7A:26:6A:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90173425DBB7D1DBD164BBA26F4657B17A266A97.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:36:b0:57:0e:59:fb:e2:ac:85:7f:a6:57:fb:25:51:74:15: 4e:e3:52:fa:bc:24:59:a3:62:91:b5:74:08:a4:db:7c:83:11: ed:86:41:96:27:07:3d:d6:03:8d:80:72:10:0e:f5:63:5e:cd: b7:e4:7a:ca:b2:30:d3:01:36:33:8e:da:b6:38:a2:6d:35:74: bb:35:c6:30:47:ed:a6:5a:fd:30:1e:32:99:0c:22:5d:3a:65: 64:0f:d5:e0:8d:d2:f0:8f:7a:a6:dd:1b:88:b2:0c:81:ce:2c: d3:92:4c:b7:0d:84:cc:4b:55:fd:31:cc:be:58:e6:46:37:a9: 0d:10:6b:ba:ad:a8:fa:cb:d1:6c:99:d6:27:98:e3:a4:7c:4b: 64:0c:2c:cc:c1:ae:f4:42:7f:6f:37:a5:fe:ad:67:89:46:02: 46:fe:de:03:3c:04:8e:c8:80:1f:35:cb:98:2d:43:15:bf:f7: 34:87:fa:6b:4e:2b:48:95:a8:b6:21:f7:ec:ae:c4:11:4d:3d: ae:d1:40:37:11:c5:96:73:39:13:7e:62:5e:ad:0b:ff:03:0d: 98:4c:8f:9e:26:81:39:8f:b8:03:d6:32:0f:83:81:67:ce:e4: 88:61:a7:0c:12:c5:43:5a:7d:b9:4a:d5:af:fd:1b:b3:10:c9: 86:71:b7:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI5jo5yU9rSPwSqJtSNhjEBKNZCEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTAxNzM0MjVEQkI3RDFEQkQxNjRCQkEyNkY0NjU3QjE3 QTI2NkE5NzAeFw0yNTA2MjkxMzE2MTZaFw0yNTA3MDIxNTQxMTZaMDMxMTAvBgNV BAMTKEU4OTI4MzRCODNDNjVFRjk0MkE2RDRDNTM0QUJGRkJGNEI0QjZDRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC68GDlyukhxs8xcWu0IcJTojpv V4RC89aHnmlrUFSHSCVD43bkMSywhycjU3KmPOesl1cRtoNczDbIpHJysyUonuCa +5nIbhE6HonFLB9XtQgpnzS2X75DFexrBjIcVQWmDAiY1mB7DwHmg1KsFv00jQ5q Wd5/QEErRyc7oVEMUe+yRmZC6rEDWrax+vnU+wuocJq3QEkMh1mMdVnWeRtL+CJz hBvjjoxZqXuWfEh0Ez8BMSMYtVwzddAA29M38ShvYtTzZ7nTvok2lLe2aiUPyuuQ dZkFPJ42M/j2nZeMwevnadm5nfqLg/6zFOxmWBR5CfUICUzGJPLkiUmW6arHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6JKDS4PGXvlCptTFNKv/v0tLbNcwHwYDVR0j BBgwFoAUkBc0Jdu30dvRZLuib0ZXsXomapcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YmQ0MzQwYi0yMWM0LTRmYzctYTI1OS1lMjM1NGM1M2ZkZDIvMC85MDE3MzQyNURC QjdEMURCRDE2NEJCQTI2RjQ2NTdCMTdBMjY2QTk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTAxNzM0MjVEQkI3RDFEQkQxNjRCQkEyNkY0NjU3QjE3QTI2 NkE5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWJkNDM0MGItMjFjNC00ZmM3LWEy NTktZTIzNTRjNTNmZGQyLzAvOTAxNzM0MjVEQkI3RDFEQkQxNjRCQkEyNkY0NjU3 QjE3QTI2NkE5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEY2sFcOWfvirIV/plf7JVF0FU7jUvq8JFmj YpG1dAik23yDEe2GQZYnBz3WA42AchAO9WNezbfkesqyMNMBNjOO2rY4om01dLs1 xjBH7aZa/TAeMpkMIl06ZWQP1eCN0vCPeqbdG4iyDIHOLNOSTLcNhMxLVf0xzL5Y 5kY3qQ0Qa7qtqPrL0WyZ1ieY46R8S2QMLMzBrvRCf283pf6tZ4lGAkb+3gM8BI7I gB81y5gtQxW/9zSH+mtOK0iVqLYh9+yuxBFNPa7RQDcRxZZzORN+Yl6tC/8DDZhM j54mgTmPuAPWMg+DgWfO5IhhpwwSxUNafblK1a/9G7MQyYZxt1s= -----END CERTIFICATE-----Generated at Mon Jun 30 18:50:46 2025 by rpki-client