$ rpki-client -vvf repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft File: AA90F6A6378710CD695B4CC742651F235E503C5B.mft (raw, json) Hash identifier: yF7fgh6s7cmKGB0oLhU+2BqeDBTwMaSwSfeKlhDjkO4= Subject key identifier: B6:49:BE:5C:80:AE:37:1D:7B:25:17:90:E4:CA:8A:4B:95:3E:4E:AD Authority key identifier: AA:90:F6:A6:37:87:10:CD:69:5B:4C:C7:42:65:1F:23:5E:50:3C:5B Certificate issuer: /CN=AA90F6A6378710CD695B4CC742651F235E503C5B Certificate serial: 6DBBC1311A01F467AFE2BBA841DD782B131F6F8D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AA90F6A6378710CD695B4CC742651F235E503C5B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft Manifest number: 0137 Signing time: Mon 20 Oct 2025 01:30:45 +0000 Manifest this update: Mon 20 Oct 2025 01:25:45 +0000 Manifest next update: Thu 23 Oct 2025 02:54:45 +0000 Files and hashes: 1: AA90F6A6378710CD695B4CC742651F235E503C5B.crl (hash: ZHMj53ArnLpG4q3k4doDqJ/sryxewn9IUMTMFtMJM9A=) 2: 3138302e3133312e3132382e302f32342d3234203d3e20313532303136.roa (hash: VFWMiazWmoGEVLtcrf1dTJMRZzx900Rx4cZwTnY4Hao=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.crl rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AA90F6A6378710CD695B4CC742651F235E503C5B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 02:54:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:bb:c1:31:1a:01:f4:67:af:e2:bb:a8:41:dd:78:2b:13:1f:6f:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA90F6A6378710CD695B4CC742651F235E503C5B Validity Not Before: Oct 20 01:25:45 2025 GMT Not After : Oct 23 02:54:45 2025 GMT Subject: CN=B649BE5C80AE371D7B251790E4CA8A4B953E4EAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:43:1b:7e:15:fa:f7:01:fe:f3:f5:b9:35:2c: cf:c4:4f:8f:ed:7f:e6:38:cd:bd:97:eb:63:10:db: 47:98:8e:7d:fc:f7:56:95:48:54:f2:c9:e2:f8:c5: e3:41:d8:92:d3:31:fd:68:da:dd:15:31:46:69:7d: 07:d5:ac:9d:8c:a4:10:3b:67:bc:4b:2a:92:68:c8: b2:4d:c5:1e:95:7f:01:e6:eb:07:af:c9:1e:eb:58: fa:59:f0:aa:58:3e:b1:2f:bd:47:26:87:8e:d9:1f: 36:7b:e1:70:25:b6:ed:9a:81:e3:7f:1c:25:82:08: ab:43:fe:19:48:94:af:b3:79:1a:84:4c:28:35:3a: 57:19:7c:0b:69:fa:12:94:72:c2:7d:20:dd:cc:66: cf:8b:ba:bc:35:8b:83:2b:90:9c:9b:a2:37:12:25: 0d:c7:20:24:a4:f3:62:23:9a:1f:12:0e:2f:69:0a: 5a:66:64:7c:ad:f6:c2:bc:2b:85:09:fc:62:8d:8c: 9c:ec:94:ea:51:3a:79:87:43:17:3c:c5:1a:c6:ef: 96:7d:03:32:89:77:c0:ec:bb:f0:97:1a:b1:b4:6b: 16:46:45:69:92:28:17:3e:88:c6:aa:a2:3a:ac:2f: b7:20:a7:6d:ae:90:e4:21:8e:dd:f3:4b:14:13:68: d1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:49:BE:5C:80:AE:37:1D:7B:25:17:90:E4:CA:8A:4B:95:3E:4E:AD X509v3 Authority Key Identifier: keyid:AA:90:F6:A6:37:87:10:CD:69:5B:4C:C7:42:65:1F:23:5E:50:3C:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AA90F6A6378710CD695B4CC742651F235E503C5B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:21:2c:e8:bc:0d:a2:50:6f:be:ef:e7:cd:a5:0e:7e:fd:0e: eb:43:7e:ff:ba:57:66:0a:17:58:a4:ac:a9:b4:5a:57:ad:98: 22:64:ce:0b:7b:fe:48:76:af:b0:b6:83:c2:34:14:33:2e:69: 6c:e0:b3:a6:42:3f:d2:1c:5b:cb:5e:53:4b:f8:96:8f:f3:74: 8a:e0:38:88:c2:a5:f8:16:0f:0f:18:42:23:cb:ff:f5:b4:1e: 4c:e0:99:a9:89:74:54:d1:74:1f:0f:39:be:9c:e4:1d:fe:54: 3b:2f:c4:6a:22:80:59:20:6e:28:e8:09:c8:78:02:fe:fe:65: d2:73:93:62:07:ed:64:16:13:25:3d:d0:73:35:61:e3:66:6c: 27:1e:1a:31:bc:62:6f:1e:c7:80:a1:11:f8:d9:d1:1b:ec:ef: 17:05:e4:ee:4e:bf:c9:b2:e6:6c:2e:70:95:9d:89:69:34:f7: 53:5b:87:f5:67:c2:e2:46:72:43:db:53:a3:08:e5:73:68:8e: c3:01:16:19:93:bc:9f:01:6d:ce:ff:48:ec:6f:20:42:8e:de: ec:bb:20:1f:39:f9:7a:90:51:e2:b3:bb:41:12:ec:64:db:b3: b9:ab:55:37:61:a0:ed:02:f8:58:d8:7f:dd:1d:00:0f:57:f6: 43:e1:b1:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbbvBMRoB9Gev4ruoQd14KxMfb40wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE5MEY2QTYzNzg3MTBDRDY5NUI0Q0M3NDI2NTFGMjM1 RTUwM0M1QjAeFw0yNTEwMjAwMTI1NDVaFw0yNTEwMjMwMjU0NDVaMDMxMTAvBgNV BAMTKEI2NDlCRTVDODBBRTM3MUQ3QjI1MTc5MEU0Q0E4QTRCOTUzRTRFQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTQxt+Ffr3Af7z9bk1LM/ET4/t f+Y4zb2X62MQ20eYjn3891aVSFTyyeL4xeNB2JLTMf1o2t0VMUZpfQfVrJ2MpBA7 Z7xLKpJoyLJNxR6VfwHm6wevyR7rWPpZ8KpYPrEvvUcmh47ZHzZ74XAltu2ageN/ HCWCCKtD/hlIlK+zeRqETCg1OlcZfAtp+hKUcsJ9IN3MZs+Lurw1i4MrkJybojcS JQ3HICSk82Ijmh8SDi9pClpmZHyt9sK8K4UJ/GKNjJzslOpROnmHQxc8xRrG75Z9 AzKJd8Dsu/CXGrG0axZGRWmSKBc+iMaqojqsL7cgp22ukOQhjt3zSxQTaNFlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtkm+XICuNx17JReQ5MqKS5U+Tq0wHwYDVR0j BBgwFoAUqpD2pjeHEM1pW0zHQmUfI15QPFswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDAyYTU4ZC1iOTU4LTQyMTktODZkMy02MWU0M2NlZTMxOWEvMC9BQTkwRjZBNjM3 ODcxMENENjk1QjRDQzc0MjY1MUYyMzVFNTAzQzVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUE5MEY2QTYzNzg3MTBDRDY5NUI0Q0M3NDI2NTFGMjM1RTUw M0M1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2QwMmE1OGQtYjk1OC00MjE5LTg2 ZDMtNjFlNDNjZWUzMTlhLzAvQUE5MEY2QTYzNzg3MTBDRDY5NUI0Q0M3NDI2NTFG MjM1RTUwM0M1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIghLOi8DaJQb77v582lDn79DutDfv+6V2YK F1ikrKm0WletmCJkzgt7/kh2r7C2g8I0FDMuaWzgs6ZCP9IcW8teU0v4lo/zdIrg OIjCpfgWDw8YQiPL//W0HkzgmamJdFTRdB8POb6c5B3+VDsvxGoigFkgbijoCch4 Av7+ZdJzk2IH7WQWEyU90HM1YeNmbCceGjG8Ym8ex4ChEfjZ0Rvs7xcF5O5Ov8my 5mwucJWdiWk091Nbh/VnwuJGckPbU6MI5XNojsMBFhmTvJ8Bbc7/SOxvIEKO3uy7 IB85+XqQUeKzu0ES7GTbs7mrVTdhoO0C+FjYf90dAA9X9kPhsbg= -----END CERTIFICATE-----Generated at Mon Oct 20 15:06:44 2025 by rpki-client