$ rpki-client -vvf repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.mft File: B90B0AED87ECD7C87066450AB56ADE2996647CD5.mft (raw, json) Hash identifier: CvgObSJriTjqlPacL7RKTkJZYkMjJLm+DPbbvxJHQ5w= Subject key identifier: 36:3B:C7:48:D1:F3:2B:6B:C2:14:47:0A:9A:09:EA:BD:B0:A4:F0:BB Authority key identifier: B9:0B:0A:ED:87:EC:D7:C8:70:66:45:0A:B5:6A:DE:29:96:64:7C:D5 Certificate issuer: /CN=B90B0AED87ECD7C87066450AB56ADE2996647CD5 Certificate serial: 72DBB7D4E0823EF3B200521584DE0B123FA75C78 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B90B0AED87ECD7C87066450AB56ADE2996647CD5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.mft Manifest number: 0267 Signing time: Thu 21 Aug 2025 14:21:28 +0000 Manifest this update: Thu 21 Aug 2025 14:16:28 +0000 Manifest next update: Mon 25 Aug 2025 01:39:28 +0000 Files and hashes: 1: B90B0AED87ECD7C87066450AB56ADE2996647CD5.crl (hash: Mt4HoHPq3y03BRSp870458UN/cck7hBwRbURvDzowLw=) 2: 3130332e3137302e33322e302f32342d3234203d3e20313432333631.roa (hash: lzUMPrw8n3pOIcK3z918mZsLDeZOm1wMYf7ktj1KFkU=) 3: 3130332e3137302e33332e302f32342d3234203d3e20313432333933.roa (hash: Y898pFGpBLNuRCPjm01v0/pmUXmwJOu+OeM8IgqOT94=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.crl rsync://repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B90B0AED87ECD7C87066450AB56ADE2996647CD5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 01:39:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:db:b7:d4:e0:82:3e:f3:b2:00:52:15:84:de:0b:12:3f:a7:5c:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B90B0AED87ECD7C87066450AB56ADE2996647CD5 Validity Not Before: Aug 21 14:16:28 2025 GMT Not After : Aug 25 01:39:28 2025 GMT Subject: CN=363BC748D1F32B6BC214470A9A09EABDB0A4F0BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:25:af:04:3e:17:3b:66:c2:72:84:62:23:72: e9:e6:0b:bc:c2:4e:3d:98:15:be:e9:66:5d:dc:89: 5b:99:39:ae:c0:e9:6c:bc:d0:8a:b6:06:bd:cd:95: 1e:b2:da:c6:d8:de:b2:97:b1:b6:c2:4d:8a:df:06: 1a:f4:0a:2c:0f:a5:44:be:dc:ff:eb:4b:1f:11:53: 5d:f5:0a:b3:1e:39:9f:47:ce:8a:75:36:92:ff:c5: 18:91:ea:85:4e:cf:bd:de:91:ac:4b:ac:ed:67:fc: a5:b2:69:95:d5:33:cc:1c:3f:7a:44:41:cb:cd:54: f0:a4:fc:c5:99:a3:9f:b5:0c:32:95:90:dd:42:3c: ca:b5:d9:b5:73:1b:3d:b6:88:3f:a1:28:a5:29:8f: 28:3e:b5:11:97:39:97:ee:8e:0c:e2:53:fa:47:96: 25:d5:9a:89:7e:c3:e1:15:f1:8b:fd:22:9a:49:1d: c1:63:f0:e0:c5:cf:73:40:4c:be:5f:b7:04:4b:94: ff:23:97:d4:ea:ef:b1:ec:7f:89:13:c0:45:9f:8b: 1b:ef:7d:3f:7c:29:be:8a:75:fe:e7:fd:76:a2:af: a5:e7:e9:5d:6b:3b:a9:cd:ac:cf:eb:be:9f:b9:73: 15:5b:8a:34:45:71:c5:a1:e6:bd:4c:f3:3e:5b:dc: fa:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:3B:C7:48:D1:F3:2B:6B:C2:14:47:0A:9A:09:EA:BD:B0:A4:F0:BB X509v3 Authority Key Identifier: keyid:B9:0B:0A:ED:87:EC:D7:C8:70:66:45:0A:B5:6A:DE:29:96:64:7C:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B90B0AED87ECD7C87066450AB56ADE2996647CD5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:44:e5:16:a2:14:23:3d:af:1c:46:bc:09:69:8d:37:19:86: e6:71:a8:27:2c:dd:e0:1c:40:09:7f:51:f3:28:21:00:23:77: 97:da:b4:ea:d9:9c:f9:c5:ad:17:0b:1c:03:f1:c6:f1:3d:a0: 67:f0:e0:c6:c4:1b:ea:cc:25:40:1f:e6:bf:38:2f:a3:5d:45: 12:7f:b6:7b:52:3c:d2:9f:67:ca:f9:40:92:86:a8:ca:ee:ce: b1:38:57:04:9c:df:de:57:ea:9a:24:17:f9:c5:17:77:b3:98: 7b:be:56:71:da:43:8c:cc:eb:b4:ef:00:9a:55:af:89:b1:e2: 9d:63:a6:9b:b7:32:fb:c5:67:e3:88:0b:de:4c:9a:de:88:05: a7:76:22:e6:4c:37:48:a0:7e:d7:6f:b8:92:c8:28:8d:34:84: 53:a9:9e:7f:9c:b0:19:02:10:a5:7e:5b:37:3b:bd:3e:62:16: c0:fa:1b:46:4f:ef:68:1f:19:ec:af:e2:6c:78:f4:43:70:05: c3:d8:49:2a:c9:8d:fb:9f:bb:94:29:25:3d:08:1a:15:7a:b6: 1d:7e:8a:c0:25:9a:83:a5:ef:ed:cd:7e:40:64:29:d2:df:29: 54:78:96:75:b8:a2:97:02:24:ca:90:ac:f7:f0:7f:d7:0b:0f: ac:7f:25:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUctu31OCCPvOyAFIVhN4LEj+nXHgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkwQjBBRUQ4N0VDRDdDODcwNjY0NTBBQjU2QURFMjk5 NjY0N0NENTAeFw0yNTA4MjExNDE2MjhaFw0yNTA4MjUwMTM5MjhaMDMxMTAvBgNV BAMTKDM2M0JDNzQ4RDFGMzJCNkJDMjE0NDcwQTlBMDlFQUJEQjBBNEYwQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtJa8EPhc7ZsJyhGIjcunmC7zC Tj2YFb7pZl3ciVuZOa7A6Wy80Iq2Br3NlR6y2sbY3rKXsbbCTYrfBhr0CiwPpUS+ 3P/rSx8RU131CrMeOZ9Hzop1NpL/xRiR6oVOz73ekaxLrO1n/KWyaZXVM8wcP3pE QcvNVPCk/MWZo5+1DDKVkN1CPMq12bVzGz22iD+hKKUpjyg+tRGXOZfujgziU/pH liXVmol+w+EV8Yv9IppJHcFj8ODFz3NATL5ftwRLlP8jl9Tq77Hsf4kTwEWfixvv fT98Kb6Kdf7n/Xair6Xn6V1rO6nNrM/rvp+5cxVbijRFccWh5r1M8z5b3Pq/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNjvHSNHzK2vCFEcKmgnqvbCk8LswHwYDVR0j BBgwFoAUuQsK7Yfs18hwZkUKtWreKZZkfNUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWU2Mzc5ZS1iODg2LTQzNmUtYjBlZC0zYWFmZjljMDg1MDEvMC9COTBCMEFFRDg3 RUNEN0M4NzA2NjQ1MEFCNTZBREUyOTk2NjQ3Q0Q1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjkwQjBBRUQ4N0VDRDdDODcwNjY0NTBBQjU2QURFMjk5NjY0 N0NENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFlNjM3OWUtYjg4Ni00MzZlLWIw ZWQtM2FhZmY5YzA4NTAxLzAvQjkwQjBBRUQ4N0VDRDdDODcwNjY0NTBBQjU2QURF Mjk5NjY0N0NENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG1E5RaiFCM9rxxGvAlpjTcZhuZxqCcs3eAc QAl/UfMoIQAjd5fatOrZnPnFrRcLHAPxxvE9oGfw4MbEG+rMJUAf5r84L6NdRRJ/ tntSPNKfZ8r5QJKGqMruzrE4VwSc395X6pokF/nFF3ezmHu+VnHaQ4zM67TvAJpV r4mx4p1jppu3MvvFZ+OIC95Mmt6IBad2IuZMN0igftdvuJLIKI00hFOpnn+csBkC EKV+Wzc7vT5iFsD6G0ZP72gfGeyv4mx49ENwBcPYSSrJjfufu5QpJT0IGhV6th1+ isAlmoOl7+3NfkBkKdLfKVR4lnW4opcCJMqQrPfwf9cLD6x/Jcc= -----END CERTIFICATE-----Generated at Sat Aug 23 15:45:38 2025 by rpki-client