$ rpki-client -vvf repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.mft File: 90508FF980097E19CEF65ED72A856616A6F690AB.mft (raw, json) Hash identifier: oPC7AgyOaTG4IVQv/xy/qk/Sw0oCEr2vZq7TICf8oCM= Subject key identifier: 04:73:D8:F0:1F:C9:17:DE:D3:6D:C7:19:E8:30:24:32:1A:C5:95:23 Authority key identifier: 90:50:8F:F9:80:09:7E:19:CE:F6:5E:D7:2A:85:66:16:A6:F6:90:AB Certificate issuer: /CN=90508FF980097E19CEF65ED72A856616A6F690AB Certificate serial: 4557657157F9A0ED047025D66E65018AF100CD20 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90508FF980097E19CEF65ED72A856616A6F690AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.mft Manifest number: 0518 Signing time: Sat 18 Oct 2025 06:32:03 +0000 Manifest this update: Sat 18 Oct 2025 06:27:03 +0000 Manifest next update: Tue 21 Oct 2025 12:20:03 +0000 Files and hashes: 1: 90508FF980097E19CEF65ED72A856616A6F690AB.crl (hash: JKVDknaLDl7JxtXZZIUopfXNXyS5I7EtQ71L7MSklgU=) 2: 3130332e3131392e3232382e302f32332d3234203d3e203634333135.roa (hash: JNjDlAZZhJPbXz9QnoPN2kXEdVorueRNiZ3y4BzRO+s=) 3: 3130332e3131392e3233312e302f32342d3234203d3e203634333135.roa (hash: Yz5xkZY0xzo/trvfbAdTc4aF9ack7BIeyFzB+WOAYgQ=) 4: 3130332e3131392e3233302e302f32342d3234203d3e203634333135.roa (hash: NUlokuFe9GARtT8KTw9qoKUuu+MeiOKu86jOn++3TJ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.crl rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90508FF980097E19CEF65ED72A856616A6F690AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 12:20:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:57:65:71:57:f9:a0:ed:04:70:25:d6:6e:65:01:8a:f1:00:cd:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90508FF980097E19CEF65ED72A856616A6F690AB Validity Not Before: Oct 18 06:27:03 2025 GMT Not After : Oct 21 12:20:03 2025 GMT Subject: CN=0473D8F01FC917DED36DC719E83024321AC59523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:39:c0:13:dd:a9:24:26:82:d5:7f:66:3e:6d: 37:92:46:37:6a:55:33:fc:f5:cc:d5:7b:0c:68:bf: d0:aa:d4:8e:55:56:2c:47:7b:0e:94:d2:62:34:52: 6f:bd:d6:36:85:ea:3f:60:7c:c0:ba:1f:2c:13:69: de:42:65:66:3f:04:45:14:72:f3:e0:fe:0d:a7:b5: 94:c7:70:e1:06:3b:f1:26:62:a6:4d:6b:d2:15:7a: 3e:d8:a8:31:ff:4d:c0:c5:73:1c:38:20:de:f1:25: 80:e0:94:7e:10:e9:80:cf:43:19:44:17:b1:da:7b: d3:8e:d8:42:4d:4a:b9:c7:53:6a:ae:28:7b:61:fa: e5:cf:1a:22:bb:2a:56:0d:b4:57:f7:67:b0:2c:f9: 2c:87:65:9a:86:e0:26:6a:e3:92:70:25:e5:9a:7d: ff:63:35:e0:8c:6f:9a:5b:33:95:41:ae:c1:0f:7a: fe:27:72:40:e1:ee:82:8e:0b:9e:4e:da:81:47:d8: 36:09:d9:2f:84:48:3b:96:84:5a:05:f4:48:bd:ca: 4d:3f:3c:34:29:98:44:14:0a:85:00:32:b0:09:95: d6:89:07:84:1f:7d:14:cc:0f:82:f8:4d:18:df:e2: 3f:99:6d:c5:de:2f:11:5a:bc:72:ec:1a:3d:2a:15: 48:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:73:D8:F0:1F:C9:17:DE:D3:6D:C7:19:E8:30:24:32:1A:C5:95:23 X509v3 Authority Key Identifier: keyid:90:50:8F:F9:80:09:7E:19:CE:F6:5E:D7:2A:85:66:16:A6:F6:90:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90508FF980097E19CEF65ED72A856616A6F690AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b883e3be-57e2-4125-a0c5-9a9ea501bf05/0/90508FF980097E19CEF65ED72A856616A6F690AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:38:c6:90:04:27:16:98:4c:d6:32:bc:6d:80:fa:0a:b4:c5: 83:50:5f:20:d0:97:d0:a7:89:a2:05:79:04:e9:99:4b:7d:6e: e1:4f:a7:d1:90:a6:7e:a9:00:8d:2c:7a:be:c2:c0:81:9f:f5: 27:30:9d:27:d8:ac:fb:75:06:48:97:38:77:85:a3:f1:d2:c4: c9:c2:07:02:f8:f9:eb:f7:31:75:be:7d:cd:9d:7c:c1:91:ad: 52:14:cd:09:52:f9:4a:f5:f9:64:f4:80:1b:e8:d8:78:c1:b5: 4e:61:e4:76:29:e0:c7:20:17:d4:7c:bc:90:cf:94:42:a3:fb: 90:ec:84:63:5a:d7:19:56:b2:7f:42:16:dc:3f:5f:7d:b3:29: 7f:65:28:93:eb:03:61:b3:08:6d:a2:29:68:c8:9b:c1:47:8b: ee:d7:1c:a2:eb:41:f8:19:b9:a5:44:ca:1e:c9:c6:b2:93:80: 7f:37:e7:04:3a:f8:5f:91:c3:44:eb:ba:42:25:37:14:63:e8: aa:fc:c9:68:9d:ed:43:ec:c7:db:aa:0d:b7:c5:77:f1:5a:2b: 56:a8:7f:67:4c:b7:2e:88:c3:24:d2:d8:f0:f0:18:8e:2e:d2: fa:03:51:85:16:cb:cd:7f:19:ef:4d:e4:d4:de:66:1d:bf:dc: 46:e2:c4:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURVdlcVf5oO0EcCXWbmUBivEAzSAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTA1MDhGRjk4MDA5N0UxOUNFRjY1RUQ3MkE4NTY2MTZB NkY2OTBBQjAeFw0yNTEwMTgwNjI3MDNaFw0yNTEwMjExMjIwMDNaMDMxMTAvBgNV BAMTKDA0NzNEOEYwMUZDOTE3REVEMzZEQzcxOUU4MzAyNDMyMUFDNTk1MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1OcAT3akkJoLVf2Y+bTeSRjdq VTP89czVewxov9Cq1I5VVixHew6U0mI0Um+91jaF6j9gfMC6HywTad5CZWY/BEUU cvPg/g2ntZTHcOEGO/EmYqZNa9IVej7YqDH/TcDFcxw4IN7xJYDglH4Q6YDPQxlE F7Hae9OO2EJNSrnHU2quKHth+uXPGiK7KlYNtFf3Z7As+SyHZZqG4CZq45JwJeWa ff9jNeCMb5pbM5VBrsEPev4nckDh7oKOC55O2oFH2DYJ2S+ESDuWhFoF9Ei9yk0/ PDQpmEQUCoUAMrAJldaJB4QffRTMD4L4TRjf4j+ZbcXeLxFavHLsGj0qFUjJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBHPY8B/JF97TbccZ6DAkMhrFlSMwHwYDVR0j BBgwFoAUkFCP+YAJfhnO9l7XKoVmFqb2kKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ODgzZTNiZS01N2UyLTQxMjUtYTBjNS05YTllYTUwMWJmMDUvMC85MDUwOEZGOTgw MDk3RTE5Q0VGNjVFRDcyQTg1NjYxNkE2RjY5MEFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTA1MDhGRjk4MDA5N0UxOUNFRjY1RUQ3MkE4NTY2MTZBNkY2 OTBBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjg4M2UzYmUtNTdlMi00MTI1LWEw YzUtOWE5ZWE1MDFiZjA1LzAvOTA1MDhGRjk4MDA5N0UxOUNFRjY1RUQ3MkE4NTY2 MTZBNkY2OTBBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK84xpAEJxaYTNYyvG2A+gq0xYNQXyDQl9Cn iaIFeQTpmUt9buFPp9GQpn6pAI0ser7CwIGf9ScwnSfYrPt1BkiXOHeFo/HSxMnC BwL4+ev3MXW+fc2dfMGRrVIUzQlS+Ur1+WT0gBvo2HjBtU5h5HYp4McgF9R8vJDP lEKj+5DshGNa1xlWsn9CFtw/X32zKX9lKJPrA2GzCG2iKWjIm8FHi+7XHKLrQfgZ uaVEyh7JxrKTgH835wQ6+F+Rw0TrukIlNxRj6Kr8yWid7UPsx9uqDbfFd/FaK1ao f2dMty6IwyTS2PDwGI4u0voDUYUWy81/Ge9N5NTeZh2/3EbixJ4= -----END CERTIFICATE-----Generated at Mon Oct 20 06:19:53 2025 by rpki-client