$ rpki-client -vvf repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.mft File: 90173425DBB7D1DBD164BBA26F4657B17A266A97.mft (raw, json) Hash identifier: 6H1O1roq9Ml3gFPBP3wkEak4MRDtSSVhVy+WJtD2yK8= Subject key identifier: 8B:FB:71:4B:36:10:C0:1F:FD:0A:2C:F3:EA:9B:4B:48:07:3F:CB:D1 Authority key identifier: 90:17:34:25:DB:B7:D1:DB:D1:64:BB:A2:6F:46:57:B1:7A:26:6A:97 Certificate issuer: /CN=90173425DBB7D1DBD164BBA26F4657B17A266A97 Certificate serial: 350F52C6C1012B0DEED9D23F8BB41E670A6C4C6E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90173425DBB7D1DBD164BBA26F4657B17A266A97.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.mft Manifest number: 0500 Signing time: Thu 21 Aug 2025 08:00:44 +0000 Manifest this update: Thu 21 Aug 2025 07:55:44 +0000 Manifest next update: Sun 24 Aug 2025 11:07:44 +0000 Files and hashes: 1: 323030313a6466373a376130303a3a2f34382d3438203d3e20313336303537.roa (hash: JVL+81yV9zQDwPcNgvThrCD77NCHFX7cSVK21vFtKao=) 2: 90173425DBB7D1DBD164BBA26F4657B17A266A97.crl (hash: ZDOYIP/MhAPlLBhdO4olzF8C11tjNGQDAdR3v565+0o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.crl rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90173425DBB7D1DBD164BBA26F4657B17A266A97.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 11:07:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:0f:52:c6:c1:01:2b:0d:ee:d9:d2:3f:8b:b4:1e:67:0a:6c:4c:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90173425DBB7D1DBD164BBA26F4657B17A266A97 Validity Not Before: Aug 21 07:55:44 2025 GMT Not After : Aug 24 11:07:44 2025 GMT Subject: CN=8BFB714B3610C01FFD0A2CF3EA9B4B48073FCBD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8c:62:b3:bb:13:9d:ec:15:56:fb:99:12:0f: 6a:39:30:df:d6:a6:75:65:3c:dc:a5:14:4c:e2:90: 9d:dc:6c:07:25:d9:4e:25:96:5b:a0:0f:89:73:1a: 37:1d:fe:61:34:f7:a4:2b:e6:64:51:6a:0e:b7:59: 06:84:5a:54:7b:97:54:27:cd:a7:cc:a1:e9:70:c3: c3:72:c7:3b:bf:7c:1b:25:ae:c3:99:90:c3:b1:2d: 6e:83:13:fd:be:33:91:e9:cd:54:59:00:fe:46:0f: 54:df:d0:50:77:f1:9b:33:e3:71:b1:58:d0:08:50: e3:2e:4a:78:03:bb:08:1e:01:f5:c3:d3:36:ce:c6: 4b:b1:c3:a1:16:aa:ed:a3:4a:35:42:8c:1b:6e:f7: f8:0b:93:79:eb:5b:5f:c4:53:f8:a4:8b:d7:30:fe: 6d:a6:72:8c:8e:f5:79:1c:59:1f:91:7c:b6:cb:73: d3:65:15:1c:4f:b1:4a:fc:69:11:5b:ec:27:72:af: 1c:bd:5f:00:99:26:a9:d9:9b:0e:a5:c3:5d:ba:10: 0d:82:35:21:a3:34:a5:24:e0:d8:ab:15:dc:a5:fd: 15:ca:1d:f6:0b:56:9e:b3:78:66:c4:d2:b3:e2:9c: af:18:f0:8a:87:de:cf:45:2e:ef:b2:7f:75:ff:1e: fa:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:FB:71:4B:36:10:C0:1F:FD:0A:2C:F3:EA:9B:4B:48:07:3F:CB:D1 X509v3 Authority Key Identifier: keyid:90:17:34:25:DB:B7:D1:DB:D1:64:BB:A2:6F:46:57:B1:7A:26:6A:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90173425DBB7D1DBD164BBA26F4657B17A266A97.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:bf:02:60:45:c5:f3:60:5d:fd:78:78:58:f3:5d:c7:26:d8: c3:b1:65:dc:7a:6b:3d:50:dd:b0:a9:e8:16:ae:e1:6a:3f:09: d1:15:c8:e6:3c:cd:a3:25:19:78:77:0d:c9:ca:bb:c2:33:c4: a2:06:0f:fc:e2:0d:aa:b3:05:80:38:bb:56:9f:36:5b:5f:61: ea:3a:13:1c:bb:4f:9c:d2:ef:e8:c5:9a:7f:ae:f7:ef:e4:a0: 33:18:db:0f:8c:ab:5a:0c:4a:e4:7c:93:32:48:dc:b4:84:00: 00:9d:66:ad:24:73:6b:08:7e:e5:b5:44:1a:37:f7:a4:40:9d: cf:f7:11:59:f5:2a:bd:00:1a:3b:97:bb:d9:01:7e:96:bd:7a: 58:5c:0e:2c:e8:9a:c1:87:70:12:6e:e3:1c:ec:81:6c:d2:cf: 3a:7d:ba:1e:a0:82:55:83:dc:fb:6f:d7:34:51:f0:4c:ac:7e: a9:c1:a9:66:6e:cd:96:04:3d:38:df:15:35:cc:2f:63:2d:72: 8e:83:df:97:a3:9d:58:89:4d:17:97:b3:4a:54:f2:5a:a3:ec: 13:ab:44:df:84:9c:d3:6c:7c:86:db:bd:88:ca:3d:0e:56:1d: a7:92:c1:91:25:f9:4c:ba:c8:09:49:61:64:cf:22:78:b1:5f: c8:5b:fe:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNQ9SxsEBKw3u2dI/i7QeZwpsTG4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTAxNzM0MjVEQkI3RDFEQkQxNjRCQkEyNkY0NjU3QjE3 QTI2NkE5NzAeFw0yNTA4MjEwNzU1NDRaFw0yNTA4MjQxMTA3NDRaMDMxMTAvBgNV BAMTKDhCRkI3MTRCMzYxMEMwMUZGRDBBMkNGM0VBOUI0QjQ4MDczRkNCRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCijGKzuxOd7BVW+5kSD2o5MN/W pnVlPNylFEzikJ3cbAcl2U4lllugD4lzGjcd/mE096Qr5mRRag63WQaEWlR7l1Qn zafMoelww8Nyxzu/fBslrsOZkMOxLW6DE/2+M5HpzVRZAP5GD1Tf0FB38Zsz43Gx WNAIUOMuSngDuwgeAfXD0zbOxkuxw6EWqu2jSjVCjBtu9/gLk3nrW1/EU/iki9cw /m2mcoyO9XkcWR+RfLbLc9NlFRxPsUr8aRFb7Cdyrxy9XwCZJqnZmw6lw126EA2C NSGjNKUk4NirFdyl/RXKHfYLVp6zeGbE0rPinK8Y8IqH3s9FLu+yf3X/HvqHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi/txSzYQwB/9Cizz6ptLSAc/y9EwHwYDVR0j BBgwFoAUkBc0Jdu30dvRZLuib0ZXsXomapcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YmQ0MzQwYi0yMWM0LTRmYzctYTI1OS1lMjM1NGM1M2ZkZDIvMC85MDE3MzQyNURC QjdEMURCRDE2NEJCQTI2RjQ2NTdCMTdBMjY2QTk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTAxNzM0MjVEQkI3RDFEQkQxNjRCQkEyNkY0NjU3QjE3QTI2 NkE5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWJkNDM0MGItMjFjNC00ZmM3LWEy NTktZTIzNTRjNTNmZGQyLzAvOTAxNzM0MjVEQkI3RDFEQkQxNjRCQkEyNkY0NjU3 QjE3QTI2NkE5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACy/AmBFxfNgXf14eFjzXccm2MOxZdx6az1Q 3bCp6Bau4Wo/CdEVyOY8zaMlGXh3DcnKu8IzxKIGD/ziDaqzBYA4u1afNltfYeo6 Exy7T5zS7+jFmn+u9+/koDMY2w+Mq1oMSuR8kzJI3LSEAACdZq0kc2sIfuW1RBo3 96RAnc/3EVn1Kr0AGjuXu9kBfpa9elhcDizomsGHcBJu4xzsgWzSzzp9uh6gglWD 3Ptv1zRR8EysfqnBqWZuzZYEPTjfFTXML2Mtco6D35ejnViJTReXs0pU8lqj7BOr RN+EnNNsfIbbvYjKPQ5WHaeSwZEl+Uy6yAlJYWTPInixX8hb/ns= -----END CERTIFICATE-----Generated at Sat Aug 23 12:05:22 2025 by rpki-client