$ rpki-client -vvf repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft File: AA90F6A6378710CD695B4CC742651F235E503C5B.mft (raw, json) Hash identifier: Wk48uOyqH2dEjp40Ts4D10XjJPf3F+0IN0CKvrmKdPY= Subject key identifier: CA:E2:C2:66:42:38:17:12:5D:CE:A3:EC:00:98:A3:BA:1A:85:D3:D1 Authority key identifier: AA:90:F6:A6:37:87:10:CD:69:5B:4C:C7:42:65:1F:23:5E:50:3C:5B Certificate issuer: /CN=AA90F6A6378710CD695B4CC742651F235E503C5B Certificate serial: 6CB1B00B77E9B3FE807C08F4ED4CFEB454DCE8CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AA90F6A6378710CD695B4CC742651F235E503C5B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft Manifest number: 011C Signing time: Thu 21 Aug 2025 11:20:44 +0000 Manifest this update: Thu 21 Aug 2025 11:15:44 +0000 Manifest next update: Sun 24 Aug 2025 14:53:44 +0000 Files and hashes: 1: AA90F6A6378710CD695B4CC742651F235E503C5B.crl (hash: ythQIaN16hLkclADeC2+/O2GLsh6PNTSqJOeGvUnhWM=) 2: 3138302e3133312e3132382e302f32342d3234203d3e20313532303136.roa (hash: YmpzZpg+cWSd+9uJixfrwNPdQ5zM3aLz4TuMuxHWLMU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.crl rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AA90F6A6378710CD695B4CC742651F235E503C5B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 14:53:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:b1:b0:0b:77:e9:b3:fe:80:7c:08:f4:ed:4c:fe:b4:54:dc:e8:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA90F6A6378710CD695B4CC742651F235E503C5B Validity Not Before: Aug 21 11:15:44 2025 GMT Not After : Aug 24 14:53:44 2025 GMT Subject: CN=CAE2C266423817125DCEA3EC0098A3BA1A85D3D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:36:67:62:8b:b5:35:44:5f:76:f7:15:4c:12: d0:d3:a9:d3:f2:15:67:28:d6:ab:f8:97:e3:82:d5: 79:d9:93:de:18:00:45:c2:67:95:50:36:ef:9f:37: 39:81:c9:26:78:31:64:8c:ca:c4:59:68:fe:c1:76: 3d:14:b7:b0:51:5b:81:e3:ec:8b:3b:a0:14:03:a0: 4e:8c:24:b1:0d:bb:24:ae:0c:01:1b:54:18:27:9c: c8:69:5a:60:39:97:43:ae:17:b7:07:29:89:ac:f7: 1c:ca:0c:ee:5d:f6:b3:a7:7d:42:a1:7d:46:84:3f: 8d:69:d3:e0:79:0d:b5:37:db:24:bc:21:85:13:21: 3e:01:66:b6:ed:6e:0c:34:18:de:51:ec:21:59:11: 55:1a:2b:0b:cf:93:f2:76:30:07:63:33:ac:0f:18: 9a:90:a2:b8:28:fe:9e:de:e6:7d:26:01:8f:34:43: ca:4e:c7:e0:59:f9:d4:86:e0:a5:8f:1c:63:97:1f: fe:53:6a:94:3d:bf:38:3b:bd:c2:33:e0:1a:1d:de: 24:6b:0f:c4:37:46:53:fc:40:b4:16:de:6f:32:18: bf:87:0b:f3:8e:89:bb:50:57:0a:bb:88:82:e6:51: 0b:39:8d:1d:60:ba:6a:a0:f3:cf:30:d1:b7:cb:94: e5:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:E2:C2:66:42:38:17:12:5D:CE:A3:EC:00:98:A3:BA:1A:85:D3:D1 X509v3 Authority Key Identifier: keyid:AA:90:F6:A6:37:87:10:CD:69:5B:4C:C7:42:65:1F:23:5E:50:3C:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AA90F6A6378710CD695B4CC742651F235E503C5B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:53:c8:eb:f2:db:03:50:e9:6d:35:f1:36:8c:b5:ea:e2:66: 4d:0b:46:f0:9e:f0:7c:ab:fc:fe:21:09:26:7f:23:4f:16:1c: d4:c9:9c:40:28:7b:c6:39:be:ff:89:7b:09:c4:6b:06:a6:c8: 57:2a:ab:75:ff:1d:74:04:43:7f:d1:42:85:7a:ee:82:6d:45: db:65:22:b5:73:17:bf:4c:f1:46:d5:5e:45:14:40:c0:1c:97: 0a:30:d5:52:e8:1c:fa:ed:3b:b7:e2:76:17:f3:ce:8c:7f:06: 4f:44:12:8b:88:e3:e2:d1:aa:98:92:f5:f5:fb:76:a2:51:8f: a2:b6:3e:6c:34:43:20:ff:87:69:c6:c8:a1:53:17:54:4a:86: 93:30:38:52:94:e7:57:06:e6:75:d1:a1:3e:46:52:20:18:50: a5:56:f7:db:0d:f7:64:f9:ff:4e:20:cd:8b:ba:38:d5:c6:69: 31:a3:6b:eb:94:27:b2:4a:6b:c6:82:ff:89:1d:42:df:8e:b2: d0:56:ae:3e:28:0e:59:04:9c:30:c3:a9:1b:0d:6a:11:2a:8d: b1:35:10:ed:42:fb:0a:ac:6e:2d:60:0e:c7:47:a8:a9:e5:1b: 91:6b:fb:08:1b:a1:d7:71:be:0c:bf:8e:3c:b8:b6:79:25:31: 50:09:d5:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbLGwC3fps/6AfAj07Uz+tFTc6M8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE5MEY2QTYzNzg3MTBDRDY5NUI0Q0M3NDI2NTFGMjM1 RTUwM0M1QjAeFw0yNTA4MjExMTE1NDRaFw0yNTA4MjQxNDUzNDRaMDMxMTAvBgNV BAMTKENBRTJDMjY2NDIzODE3MTI1RENFQTNFQzAwOThBM0JBMUE4NUQzRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMNmdii7U1RF929xVMEtDTqdPy FWco1qv4l+OC1XnZk94YAEXCZ5VQNu+fNzmBySZ4MWSMysRZaP7Bdj0Ut7BRW4Hj 7Is7oBQDoE6MJLENuySuDAEbVBgnnMhpWmA5l0OuF7cHKYms9xzKDO5d9rOnfUKh fUaEP41p0+B5DbU32yS8IYUTIT4BZrbtbgw0GN5R7CFZEVUaKwvPk/J2MAdjM6wP GJqQorgo/p7e5n0mAY80Q8pOx+BZ+dSG4KWPHGOXH/5TapQ9vzg7vcIz4Bod3iRr D8Q3RlP8QLQW3m8yGL+HC/OOibtQVwq7iILmUQs5jR1gumqg888w0bfLlOXTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyuLCZkI4FxJdzqPsAJijuhqF09EwHwYDVR0j BBgwFoAUqpD2pjeHEM1pW0zHQmUfI15QPFswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDAyYTU4ZC1iOTU4LTQyMTktODZkMy02MWU0M2NlZTMxOWEvMC9BQTkwRjZBNjM3 ODcxMENENjk1QjRDQzc0MjY1MUYyMzVFNTAzQzVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUE5MEY2QTYzNzg3MTBDRDY5NUI0Q0M3NDI2NTFGMjM1RTUw M0M1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2QwMmE1OGQtYjk1OC00MjE5LTg2 ZDMtNjFlNDNjZWUzMTlhLzAvQUE5MEY2QTYzNzg3MTBDRDY5NUI0Q0M3NDI2NTFG MjM1RTUwM0M1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE1TyOvy2wNQ6W018TaMteriZk0LRvCe8Hyr /P4hCSZ/I08WHNTJnEAoe8Y5vv+JewnEawamyFcqq3X/HXQEQ3/RQoV67oJtRdtl IrVzF79M8UbVXkUUQMAclwow1VLoHPrtO7fidhfzzox/Bk9EEouI4+LRqpiS9fX7 dqJRj6K2Pmw0QyD/h2nGyKFTF1RKhpMwOFKU51cG5nXRoT5GUiAYUKVW99sN92T5 /04gzYu6ONXGaTGja+uUJ7JKa8aC/4kdQt+OstBWrj4oDlkEnDDDqRsNahEqjbE1 EO1C+wqsbi1gDsdHqKnlG5Fr+wgboddxvgy/jjy4tnklMVAJ1Wg= -----END CERTIFICATE-----Generated at Sat Aug 23 14:14:04 2025 by rpki-client