$ rpki-client -vvf repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft File: AA90F6A6378710CD695B4CC742651F235E503C5B.mft (raw, json) Hash identifier: X+hVwpVd/a1m/Jq/XM8OUA4sJcXMtHCKHhTFofngM7c= Subject key identifier: 41:E6:63:CF:68:C2:50:5A:28:E3:0A:F7:93:28:DB:6C:D5:BD:C3:69 Authority key identifier: AA:90:F6:A6:37:87:10:CD:69:5B:4C:C7:42:65:1F:23:5E:50:3C:5B Certificate issuer: /CN=AA90F6A6378710CD695B4CC742651F235E503C5B Certificate serial: 415860BEB625F1A4B7A05DA868BBC45AFC521C91 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AA90F6A6378710CD695B4CC742651F235E503C5B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft Manifest number: 0106 Signing time: Thu 03 Jul 2025 00:10:43 +0000 Manifest this update: Thu 03 Jul 2025 00:05:43 +0000 Manifest next update: Sun 06 Jul 2025 01:22:43 +0000 Files and hashes: 1: 3138302e3133312e3132382e302f32342d3234203d3e20313532303136.roa (hash: YmpzZpg+cWSd+9uJixfrwNPdQ5zM3aLz4TuMuxHWLMU=) 2: AA90F6A6378710CD695B4CC742651F235E503C5B.crl (hash: IUMFeydvjnYJAa+XrQQbJqqsxXbC/w5Iqt8lGvx93k4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.crl rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AA90F6A6378710CD695B4CC742651F235E503C5B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 01:22:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:58:60:be:b6:25:f1:a4:b7:a0:5d:a8:68:bb:c4:5a:fc:52:1c:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA90F6A6378710CD695B4CC742651F235E503C5B Validity Not Before: Jul 3 00:05:43 2025 GMT Not After : Jul 6 01:22:43 2025 GMT Subject: CN=41E663CF68C2505A28E30AF79328DB6CD5BDC369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ee:ca:75:5a:8d:ea:3e:3c:60:7c:1f:e0:dd: 88:68:f0:20:2c:43:85:f7:a9:44:47:7d:07:29:1d: 23:f2:94:21:67:82:24:df:29:5d:5d:7e:25:ad:92: 34:28:88:35:db:67:e3:b4:9d:73:8a:9e:ec:e9:c0: 09:f0:c7:b7:31:59:df:06:90:db:0b:bf:e3:fa:b6: 28:9d:c7:04:77:b1:20:71:08:f9:6c:40:50:7b:c8: 36:03:d1:c9:a1:eb:87:c8:11:91:f3:2e:31:03:70: fe:4c:1a:82:fe:7c:25:ef:16:0b:53:35:97:1c:ec: 68:94:f1:35:f0:10:cd:92:43:9d:f7:b6:6e:8a:e4: c1:e7:6f:84:e8:6f:e0:0a:a6:5a:e3:a0:b0:12:79: 4a:9e:0a:b1:11:9b:89:35:73:e8:e4:59:42:ad:46: 5a:f9:aa:de:ba:4d:9d:88:d8:dd:d3:fb:c3:ff:38: c2:8b:1d:ad:ec:c8:b6:30:7d:a1:ca:a1:c0:34:71: f3:56:aa:9f:5a:9b:c8:87:b6:13:6c:65:01:15:80: 05:11:42:a9:7d:5e:09:e6:11:3a:61:24:17:bc:cf: 81:65:de:81:71:c5:25:04:cb:77:0b:06:cf:fd:5f: cb:69:29:f6:42:aa:39:c3:0b:bd:f1:d7:f2:87:5b: 8a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:E6:63:CF:68:C2:50:5A:28:E3:0A:F7:93:28:DB:6C:D5:BD:C3:69 X509v3 Authority Key Identifier: keyid:AA:90:F6:A6:37:87:10:CD:69:5B:4C:C7:42:65:1F:23:5E:50:3C:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AA90F6A6378710CD695B4CC742651F235E503C5B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:81:6d:0c:6d:d2:a1:30:cc:c5:74:51:33:34:8d:9f:7e:f9: d6:c4:b3:67:33:71:0c:ee:f8:ec:e2:89:ef:87:3a:22:1d:35: 22:58:a7:2f:ad:0b:dc:48:25:c6:36:ad:b5:86:56:dc:c1:f2: 13:20:54:e5:f1:f9:7d:33:5f:11:ef:1f:d9:bf:e0:e2:7c:cd: 9a:38:6a:4b:81:37:f2:06:a7:11:4d:74:71:16:d6:f2:3e:b4: 9e:5a:49:d1:28:b8:fe:b5:82:de:4d:84:ec:f0:40:4d:2b:85: ec:01:42:dd:e1:40:90:67:be:40:59:a7:44:f9:55:25:de:ce: 48:0d:b1:60:04:d6:bb:d5:cf:7b:ed:d6:b5:e0:df:d5:8e:cc: d3:b8:a1:49:68:ee:7b:26:4b:b0:7b:e3:b6:00:43:c1:9a:d6: be:dd:f5:e3:16:cc:60:51:8c:31:63:70:9a:6a:11:50:b8:ca: 92:89:4f:f5:ba:94:bc:f5:eb:24:80:bc:38:d4:cd:44:c1:0a: 8a:82:8f:42:1e:c9:ce:68:58:00:05:0c:49:8f:98:06:8d:23: 01:6e:e5:28:0a:09:0e:11:a1:78:9f:1f:88:f8:50:5a:24:29: af:98:29:b7:b7:33:04:95:f8:3a:c2:e1:21:46:dd:10:9f:3c: ca:cf:aa:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQVhgvrYl8aS3oF2oaLvEWvxSHJEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE5MEY2QTYzNzg3MTBDRDY5NUI0Q0M3NDI2NTFGMjM1 RTUwM0M1QjAeFw0yNTA3MDMwMDA1NDNaFw0yNTA3MDYwMTIyNDNaMDMxMTAvBgNV BAMTKDQxRTY2M0NGNjhDMjUwNUEyOEUzMEFGNzkzMjhEQjZDRDVCREMzNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf7sp1Wo3qPjxgfB/g3Yho8CAs Q4X3qURHfQcpHSPylCFngiTfKV1dfiWtkjQoiDXbZ+O0nXOKnuzpwAnwx7cxWd8G kNsLv+P6tiidxwR3sSBxCPlsQFB7yDYD0cmh64fIEZHzLjEDcP5MGoL+fCXvFgtT NZcc7GiU8TXwEM2SQ533tm6K5MHnb4Tob+AKplrjoLASeUqeCrERm4k1c+jkWUKt Rlr5qt66TZ2I2N3T+8P/OMKLHa3syLYwfaHKocA0cfNWqp9am8iHthNsZQEVgAUR Qql9XgnmETphJBe8z4Fl3oFxxSUEy3cLBs/9X8tpKfZCqjnDC73x1/KHW4rtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQeZjz2jCUFoo4wr3kyjbbNW9w2kwHwYDVR0j BBgwFoAUqpD2pjeHEM1pW0zHQmUfI15QPFswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDAyYTU4ZC1iOTU4LTQyMTktODZkMy02MWU0M2NlZTMxOWEvMC9BQTkwRjZBNjM3 ODcxMENENjk1QjRDQzc0MjY1MUYyMzVFNTAzQzVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUE5MEY2QTYzNzg3MTBDRDY5NUI0Q0M3NDI2NTFGMjM1RTUw M0M1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2QwMmE1OGQtYjk1OC00MjE5LTg2 ZDMtNjFlNDNjZWUzMTlhLzAvQUE5MEY2QTYzNzg3MTBDRDY5NUI0Q0M3NDI2NTFG MjM1RTUwM0M1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAaBbQxt0qEwzMV0UTM0jZ9++dbEs2czcQzu +Oziie+HOiIdNSJYpy+tC9xIJcY2rbWGVtzB8hMgVOXx+X0zXxHvH9m/4OJ8zZo4 akuBN/IGpxFNdHEW1vI+tJ5aSdEouP61gt5NhOzwQE0rhewBQt3hQJBnvkBZp0T5 VSXezkgNsWAE1rvVz3vt1rXg39WOzNO4oUlo7nsmS7B747YAQ8Ga1r7d9eMWzGBR jDFjcJpqEVC4ypKJT/W6lLz16ySAvDjUzUTBCoqCj0Ieyc5oWAAFDEmPmAaNIwFu 5SgKCQ4RoXifH4j4UFokKa+YKbe3MwSV+DrC4SFG3RCfPMrPqhM= -----END CERTIFICATE-----Generated at Fri Jul 4 09:59:39 2025 by rpki-client