$ rpki-client -vvf repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.mft File: 90508FF980097E19CEF65ED72A856616A6F690AB.mft (raw, json) Hash identifier: 7FDCnSEz0WAZvT9Gc7xfnlok+6G9lVLmIP8j1UQ4uDY= Subject key identifier: D6:FD:AB:70:22:98:CA:A7:7C:68:A8:42:60:8B:5A:64:64:82:51:7F Authority key identifier: 90:50:8F:F9:80:09:7E:19:CE:F6:5E:D7:2A:85:66:16:A6:F6:90:AB Certificate issuer: /CN=90508FF980097E19CEF65ED72A856616A6F690AB Certificate serial: 1010AF3CC5A257797FE677E8B5BCCF7F60599E4A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90508FF980097E19CEF65ED72A856616A6F690AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.mft Manifest number: 04CF Signing time: Tue 06 May 2025 21:21:59 +0000 Manifest this update: Tue 06 May 2025 21:16:59 +0000 Manifest next update: Sat 10 May 2025 07:21:59 +0000 Files and hashes: 1: 3130332e3131392e3233302e302f32342d3234203d3e203634333135.roa (hash: E5VrIwPMUJGpGOWBstudrK0mL8GWVlpLTgrf4pdK0FY=) 2: 3130332e3131392e3232382e302f32332d3234203d3e203634333135.roa (hash: m6OBWxFlKV5M4H7BD/tWn/T0f+v7YkM8XxkEk/L62sY=) 3: 3130332e3131392e3233312e302f32342d3234203d3e203634333135.roa (hash: Yz5xkZY0xzo/trvfbAdTc4aF9ack7BIeyFzB+WOAYgQ=) 4: 90508FF980097E19CEF65ED72A856616A6F690AB.crl (hash: tcQhXqG/vHQqq8z8KHytsaKvgapn4pLsHxHUZRV39M0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.crl rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90508FF980097E19CEF65ED72A856616A6F690AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 07:21:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:10:af:3c:c5:a2:57:79:7f:e6:77:e8:b5:bc:cf:7f:60:59:9e:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90508FF980097E19CEF65ED72A856616A6F690AB Validity Not Before: May 6 21:16:59 2025 GMT Not After : May 10 07:21:59 2025 GMT Subject: CN=D6FDAB702298CAA77C68A842608B5A646482517F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d8:6c:34:5c:50:14:f1:8d:ac:5c:f6:23:79: c4:ce:fb:51:ee:77:89:b7:f1:fd:db:ae:6d:55:a3: f7:f4:e5:d3:8b:e0:c1:03:ec:4e:2b:98:0a:89:0d: bf:50:61:12:79:8f:7f:9f:3e:1a:da:97:ec:27:26: 9d:fa:ff:8f:35:b6:e6:23:d6:bc:1c:13:fd:e8:f4: 22:f3:43:04:ea:fb:3c:96:c5:8b:99:8b:d3:5f:30: 22:88:74:45:50:0d:c6:e6:37:28:ff:9f:b7:66:24: 92:db:df:f8:80:17:46:31:18:6f:12:fa:1d:12:6b: 06:31:10:f1:00:e9:66:5f:08:35:f8:d2:3e:50:c2: e9:80:c9:bd:ab:9b:8a:4a:02:3b:f4:00:1f:d7:d8: b2:f0:4f:84:16:7d:7d:12:d1:1f:19:00:6e:8e:65: 0b:65:b9:9d:67:fa:99:82:8b:28:52:1b:a3:23:fc: 0e:2f:26:5b:78:24:da:11:3e:5e:74:6b:ce:d2:d1: c3:7c:8f:46:13:05:7e:af:4d:6d:ec:f6:cf:f0:17: aa:ef:8f:4f:39:28:af:da:6f:1f:fc:5e:e5:2c:d6: b2:6e:47:38:83:e9:80:6f:22:1d:b4:1b:59:9b:ab: db:d4:36:09:7a:1d:59:b1:a2:30:48:fa:7b:c3:cc: f4:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:FD:AB:70:22:98:CA:A7:7C:68:A8:42:60:8B:5A:64:64:82:51:7F X509v3 Authority Key Identifier: keyid:90:50:8F:F9:80:09:7E:19:CE:F6:5E:D7:2A:85:66:16:A6:F6:90:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90508FF980097E19CEF65ED72A856616A6F690AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:d9:fa:9a:a7:25:8e:90:e9:16:05:4a:3a:8a:9f:2c:8c:16: 4f:34:9d:20:83:b5:06:a3:67:50:80:1b:31:d2:b0:64:6b:c1: 37:56:a5:ea:4e:13:00:51:a5:db:98:39:79:f2:f8:5e:c3:56: 8d:58:2b:0f:2a:f5:42:47:dd:61:3e:e4:6d:bf:a9:ef:d4:48: 10:e5:33:05:7f:fa:a8:d3:40:48:45:19:d2:6c:5e:06:1d:62: b3:af:b0:d8:db:82:0b:39:41:3f:91:7d:06:a7:43:53:c7:11: 89:9c:2e:26:fe:03:7a:24:52:82:49:fc:0c:4a:7b:65:62:42: bb:41:f7:ad:8e:38:5e:de:15:4f:da:3c:50:41:f9:c8:d0:1b: 09:0b:7e:bb:aa:92:d7:14:ca:3f:84:4a:81:35:ef:49:73:f7: 6c:47:dd:c5:61:43:62:f2:ce:9f:09:4e:9b:dd:54:dd:0e:b8: d4:d9:18:8a:44:5a:3c:f2:42:74:e8:d4:16:f1:98:8f:2c:da: 20:fd:65:5b:cb:77:d6:a6:c5:50:f9:1b:db:21:e0:6a:d6:ca: 93:29:70:1f:5f:b5:cd:c6:e9:29:d1:28:68:a1:2a:ca:cb:f6: 32:83:77:58:42:ae:be:d5:42:3c:79:b3:da:46:f7:6f:ce:40: 97:7c:8f:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEBCvPMWiV3l/5nfotbzPf2BZnkowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTA1MDhGRjk4MDA5N0UxOUNFRjY1RUQ3MkE4NTY2MTZB NkY2OTBBQjAeFw0yNTA1MDYyMTE2NTlaFw0yNTA1MTAwNzIxNTlaMDMxMTAvBgNV BAMTKEQ2RkRBQjcwMjI5OENBQTc3QzY4QTg0MjYwOEI1QTY0NjQ4MjUxN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy2Gw0XFAU8Y2sXPYjecTO+1Hu d4m38f3brm1Vo/f05dOL4MED7E4rmAqJDb9QYRJ5j3+fPhral+wnJp36/481tuYj 1rwcE/3o9CLzQwTq+zyWxYuZi9NfMCKIdEVQDcbmNyj/n7dmJJLb3/iAF0YxGG8S +h0SawYxEPEA6WZfCDX40j5QwumAyb2rm4pKAjv0AB/X2LLwT4QWfX0S0R8ZAG6O ZQtluZ1n+pmCiyhSG6Mj/A4vJlt4JNoRPl50a87S0cN8j0YTBX6vTW3s9s/wF6rv j085KK/abx/8XuUs1rJuRziD6YBvIh20G1mbq9vUNgl6HVmxojBI+nvDzPTtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1v2rcCKYyqd8aKhCYItaZGSCUX8wHwYDVR0j BBgwFoAUkFCP+YAJfhnO9l7XKoVmFqb2kKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ODgzZTNiZS01N2UyLTQxMjUtYTBjNS05YTllYTUwMWJmMDUvMC85MDUwOEZGOTgw MDk3RTE5Q0VGNjVFRDcyQTg1NjYxNkE2RjY5MEFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTA1MDhGRjk4MDA5N0UxOUNFRjY1RUQ3MkE4NTY2MTZBNkY2 OTBBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjg4M2UzYmUtNTdlMi00MTI1LWEw YzUtOWE5ZWE1MDFiZjA1LzAvOTA1MDhGRjk4MDA5N0UxOUNFRjY1RUQ3MkE4NTY2 MTZBNkY2OTBBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAELZ+pqnJY6Q6RYFSjqKnyyMFk80nSCDtQaj Z1CAGzHSsGRrwTdWpepOEwBRpduYOXny+F7DVo1YKw8q9UJH3WE+5G2/qe/USBDl MwV/+qjTQEhFGdJsXgYdYrOvsNjbggs5QT+RfQanQ1PHEYmcLib+A3okUoJJ/AxK e2ViQrtB962OOF7eFU/aPFBB+cjQGwkLfruqktcUyj+ESoE170lz92xH3cVhQ2Ly zp8JTpvdVN0OuNTZGIpEWjzyQnTo1BbxmI8s2iD9ZVvLd9amxVD5G9sh4GrWypMp cB9ftc3G6SnRKGihKsrL9jKDd1hCrr7VQjx5s9pG92/OQJd8j8s= -----END CERTIFICATE-----Generated at Thu May 8 22:37:36 2025 by rpki-client