$ rpki-client -vvf repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.mft File: B90B0AED87ECD7C87066450AB56ADE2996647CD5.mft (raw, json) Hash identifier: Qv86EnVfVkTf7ALQTRWbUrYo9jLjug9yk5PvZ9nDQug= Subject key identifier: 5E:52:39:4A:CA:77:FA:B1:5E:BC:77:C6:5C:FD:72:DE:50:DF:B7:01 Authority key identifier: B9:0B:0A:ED:87:EC:D7:C8:70:66:45:0A:B5:6A:DE:29:96:64:7C:D5 Certificate issuer: /CN=B90B0AED87ECD7C87066450AB56ADE2996647CD5 Certificate serial: 5E8BFCB7F731FDA74CB877FF2DB4AB078070535E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B90B0AED87ECD7C87066450AB56ADE2996647CD5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.mft Manifest number: 0239 Signing time: Fri 09 May 2025 02:21:27 +0000 Manifest this update: Fri 09 May 2025 02:16:27 +0000 Manifest next update: Mon 12 May 2025 07:33:27 +0000 Files and hashes: 1: 3130332e3137302e33332e302f32342d3234203d3e20313432333933.roa (hash: Y898pFGpBLNuRCPjm01v0/pmUXmwJOu+OeM8IgqOT94=) 2: B90B0AED87ECD7C87066450AB56ADE2996647CD5.crl (hash: XO0Gsntux0TmRzDcA63PvZAbCNpBwxoYDkloXZ0IFWw=) 3: 3130332e3137302e33322e302f32342d3234203d3e20313432333631.roa (hash: lzUMPrw8n3pOIcK3z918mZsLDeZOm1wMYf7ktj1KFkU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.crl rsync://repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B90B0AED87ECD7C87066450AB56ADE2996647CD5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 02:15:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:8b:fc:b7:f7:31:fd:a7:4c:b8:77:ff:2d:b4:ab:07:80:70:53:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B90B0AED87ECD7C87066450AB56ADE2996647CD5 Validity Not Before: May 9 02:16:27 2025 GMT Not After : May 12 07:33:27 2025 GMT Subject: CN=5E52394ACA77FAB15EBC77C65CFD72DE50DFB701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:14:0b:d4:6a:b4:1b:c3:80:85:b0:f7:ec:0b: 08:64:82:7e:2a:60:6e:03:c7:a4:41:2d:27:82:5e: 77:bf:c1:55:c7:e8:3b:5d:5a:b6:6f:9f:90:ee:13: 89:9b:f2:89:6b:dd:aa:73:df:e2:56:11:b6:06:75: 0d:e6:6d:96:4a:88:d6:64:8b:1b:56:f6:7d:ad:17: 03:74:77:af:51:54:3e:89:42:ec:18:73:27:28:a4: a9:73:d5:2e:4c:82:d9:b2:f6:af:4b:a8:26:04:6e: a0:e8:10:82:c8:59:b0:e2:b9:d7:5f:ce:81:56:ca: 56:63:11:7e:00:30:ff:66:0d:8d:9e:14:1a:27:3e: 02:82:87:58:f9:74:75:54:f8:9b:d8:a2:7c:6c:6f: 0b:d6:6e:10:db:e8:61:1f:0f:d2:43:90:5d:d5:8f: e8:99:ea:ec:2d:8e:8b:97:e8:c7:80:a9:61:0d:bd: 01:0a:38:95:1d:2d:c2:ab:e8:a5:95:c5:1b:16:12: 70:4a:c4:61:f2:f4:a6:43:5c:a3:18:81:0e:71:88: 07:16:51:0e:7b:ca:93:3d:c9:e9:6c:a0:45:1f:9f: 4f:00:0f:1c:ef:ff:ac:05:36:d7:4e:8a:5e:04:87: 9c:0d:5e:f0:f7:1e:f2:4f:d5:b4:43:c9:5f:f3:39: ac:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:52:39:4A:CA:77:FA:B1:5E:BC:77:C6:5C:FD:72:DE:50:DF:B7:01 X509v3 Authority Key Identifier: keyid:B9:0B:0A:ED:87:EC:D7:C8:70:66:45:0A:B5:6A:DE:29:96:64:7C:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B90B0AED87ECD7C87066450AB56ADE2996647CD5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:20:bb:43:13:f7:f8:be:08:95:a4:d3:de:14:73:eb:46:1d: 23:01:33:3b:e0:4a:59:07:24:62:3c:4f:73:49:3e:a4:d7:2b: ce:36:f0:d1:9a:d4:0c:c2:27:43:de:6f:d9:0c:f1:dc:42:5b: 67:cc:28:04:fd:a5:ac:43:a0:66:29:89:98:d5:ad:d4:47:bb: f3:33:ce:0b:ee:de:83:6d:76:f2:7a:a4:4a:1d:2b:35:c0:45: ff:d7:c8:3f:3a:1c:d9:df:36:2a:49:6f:87:6f:a2:5c:fc:62: 4a:22:75:d1:f4:36:43:3b:17:1d:48:6f:fc:45:a1:08:dc:90: 98:06:09:fc:a7:e7:06:94:c1:3b:4c:bb:8a:f3:aa:e1:54:61: bb:7b:2d:b1:71:56:69:6b:bd:d8:51:43:bf:96:24:f9:95:32: a2:29:ce:09:96:1f:b6:f3:98:be:58:c6:59:e7:05:d7:98:f9: 8b:8f:3a:0d:08:76:3c:e2:91:df:f3:98:4b:4c:52:9d:ef:56: 47:da:17:2f:3f:e2:8a:0c:2c:0a:c7:aa:09:e4:40:83:ce:3c: 81:c4:a5:db:15:2a:48:7a:7b:41:5a:81:a2:4d:97:6a:f8:04: 91:76:b9:16:77:36:06:6f:93:a3:fc:30:3c:5f:a4:d9:54:89: 83:d1:38:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXov8t/cx/adMuHf/LbSrB4BwU14wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkwQjBBRUQ4N0VDRDdDODcwNjY0NTBBQjU2QURFMjk5 NjY0N0NENTAeFw0yNTA1MDkwMjE2MjdaFw0yNTA1MTIwNzMzMjdaMDMxMTAvBgNV BAMTKDVFNTIzOTRBQ0E3N0ZBQjE1RUJDNzdDNjVDRkQ3MkRFNTBERkI3MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+FAvUarQbw4CFsPfsCwhkgn4q YG4Dx6RBLSeCXne/wVXH6DtdWrZvn5DuE4mb8olr3apz3+JWEbYGdQ3mbZZKiNZk ixtW9n2tFwN0d69RVD6JQuwYcycopKlz1S5Mgtmy9q9LqCYEbqDoEILIWbDiuddf zoFWylZjEX4AMP9mDY2eFBonPgKCh1j5dHVU+JvYonxsbwvWbhDb6GEfD9JDkF3V j+iZ6uwtjouX6MeAqWENvQEKOJUdLcKr6KWVxRsWEnBKxGHy9KZDXKMYgQ5xiAcW UQ57ypM9yelsoEUfn08ADxzv/6wFNtdOil4Eh5wNXvD3HvJP1bRDyV/zOax1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXlI5Ssp3+rFevHfGXP1y3lDftwEwHwYDVR0j BBgwFoAUuQsK7Yfs18hwZkUKtWreKZZkfNUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWU2Mzc5ZS1iODg2LTQzNmUtYjBlZC0zYWFmZjljMDg1MDEvMC9COTBCMEFFRDg3 RUNEN0M4NzA2NjQ1MEFCNTZBREUyOTk2NjQ3Q0Q1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjkwQjBBRUQ4N0VDRDdDODcwNjY0NTBBQjU2QURFMjk5NjY0 N0NENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFlNjM3OWUtYjg4Ni00MzZlLWIw ZWQtM2FhZmY5YzA4NTAxLzAvQjkwQjBBRUQ4N0VDRDdDODcwNjY0NTBBQjU2QURF Mjk5NjY0N0NENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEAgu0MT9/i+CJWk094Uc+tGHSMBMzvgSlkH JGI8T3NJPqTXK8428NGa1AzCJ0Peb9kM8dxCW2fMKAT9paxDoGYpiZjVrdRHu/Mz zgvu3oNtdvJ6pEodKzXARf/XyD86HNnfNipJb4dvolz8YkoiddH0NkM7Fx1Ib/xF oQjckJgGCfyn5waUwTtMu4rzquFUYbt7LbFxVmlrvdhRQ7+WJPmVMqIpzgmWH7bz mL5YxlnnBdeY+YuPOg0Idjzikd/zmEtMUp3vVkfaFy8/4ooMLArHqgnkQIPOPIHE pdsVKkh6e0FagaJNl2r4BJF2uRZ3NgZvk6P8MDxfpNlUiYPROFU= -----END CERTIFICATE-----Generated at Fri May 9 04:09:54 2025 by rpki-client