$ rpki-client -vvf repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft File: 90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft (raw, json) Hash identifier: o3KtqO5cQ6sD9fNssGT3Ige+SFYrBsh5UDVLc8CzEPk= Subject key identifier: 93:88:E4:C9:83:DD:38:06:74:0F:D2:A0:0E:08:75:AA:EB:82:E0:9A Authority key identifier: 90:E2:CC:AC:A3:23:EA:B2:14:5F:54:B7:CF:65:C5:FA:EC:EF:83:A3 Certificate issuer: /CN=90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3 Certificate serial: 2D7409E6EA0AB78451FA13F065F8953CC0682665 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft Manifest number: 01B8 Signing time: Sat 23 Aug 2025 05:21:20 +0000 Manifest this update: Sat 23 Aug 2025 05:16:20 +0000 Manifest next update: Tue 26 Aug 2025 11:10:20 +0000 Files and hashes: 1: 90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.crl (hash: Vaww6kMaRo+A7jLvitphZs42DMo4gNGE8ar6z/kwy+k=) 2: 3130332e3134352e35322e302f32342d3234203d3e20313339343535.roa (hash: AnirtwiQcqhih7uqF14RHtBvHcWSRInmlpBmELQD3Bc=) 3: 3130332e3134352e35322e302f32332d3233203d3e20313339343535.roa (hash: 7DJwBHtzGlb/NDl1/3zGyCjwc3DhiipUzCGFUXWXjoE=) 4: 3130332e3134352e35332e302f32342d3234203d3e20313339343535.roa (hash: t0f8hH0p5YUalqHFkiu1kyX28Ot7aEHcWn8PNYVXvq0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.crl rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 11:10:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:74:09:e6:ea:0a:b7:84:51:fa:13:f0:65:f8:95:3c:c0:68:26:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3 Validity Not Before: Aug 23 05:16:20 2025 GMT Not After : Aug 26 11:10:20 2025 GMT Subject: CN=9388E4C983DD3806740FD2A00E0875AAEB82E09A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:09:aa:48:74:83:8b:09:6f:18:1c:93:e6:3e: 6f:d3:e6:6b:a6:ea:7b:61:87:b6:76:61:18:23:69: a0:49:f9:8a:52:a9:5a:e7:b9:2c:74:00:a4:e3:d8: 4a:cc:01:05:61:b9:91:06:da:aa:0e:8f:e1:92:14: 4a:36:45:0b:04:04:2a:a6:3c:33:f7:ad:ca:66:b9: 50:e6:07:6a:06:eb:ad:64:64:12:31:42:c2:2f:df: 84:4d:42:c3:03:f1:78:45:6b:7d:49:56:b3:eb:6e: c7:96:77:63:5f:1e:b8:59:c0:7b:f0:47:2c:a2:35: 5f:f2:32:f4:d7:a0:29:b1:af:e4:ce:3f:fd:ac:bd: c4:2e:b8:97:17:bd:4f:8d:13:2d:b2:d3:b5:2f:08: 9a:cd:f8:f0:22:51:95:39:8b:53:8a:4c:d2:52:fb: c0:ba:b5:b8:fd:d6:18:a4:9b:b9:60:16:31:cc:95: e0:d0:bf:b7:30:a8:1d:8e:82:61:ba:e5:c2:c8:78: 06:fc:51:5e:db:42:2b:bd:dc:23:94:d3:57:e7:29: 11:5c:4d:11:af:c2:25:28:83:ec:10:6b:57:33:5a: 4f:00:5c:cd:c4:d8:95:a0:fe:c5:dd:d6:47:f1:65: c3:ed:f8:b4:27:ca:7a:d6:bb:f6:4a:c4:04:97:97: e3:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:88:E4:C9:83:DD:38:06:74:0F:D2:A0:0E:08:75:AA:EB:82:E0:9A X509v3 Authority Key Identifier: keyid:90:E2:CC:AC:A3:23:EA:B2:14:5F:54:B7:CF:65:C5:FA:EC:EF:83:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:74:4b:c7:09:f5:1c:27:49:0c:60:7e:ce:6a:1a:9b:bf:08: af:c6:f2:10:83:25:ed:71:c4:d4:79:6c:43:7c:47:26:a3:83: 5a:db:12:87:5b:d2:4c:72:9e:25:d2:5f:65:3c:18:82:38:be: d3:df:e1:48:7f:9c:74:f3:b8:df:b7:fc:7b:f1:d0:d8:19:f1: 3e:58:98:8f:0c:82:00:73:d7:e9:5e:5f:b2:d5:69:77:84:37: 85:d2:65:5c:a2:aa:e9:88:d2:46:3c:f5:d4:f0:76:92:f9:1b: 88:42:8a:a2:25:f8:a7:aa:9d:62:e9:93:79:07:53:ce:b5:e9: 24:cb:0d:52:0c:09:9f:f3:4e:62:8c:83:45:d6:27:59:43:1a: bf:7b:b6:4f:72:ad:34:08:92:4f:ed:5f:2e:f4:e5:70:e9:5c: 48:62:81:23:4f:b1:36:e9:74:9b:fb:35:0d:96:4f:e3:98:5a: be:65:d0:86:f4:1b:25:d8:83:4a:4c:94:c6:ab:0f:98:75:9a: 29:fb:bc:58:70:0e:8d:4c:b1:23:fd:8b:19:eb:29:86:6e:04: 55:dc:7a:17:f3:4a:b5:a9:a0:e8:f5:2c:2d:7a:1f:9e:ae:2e: 13:69:28:5f:d0:c5:c5:4e:dd:24:14:fb:50:c0:8a:28:13:8c: c9:b3:40:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULXQJ5uoKt4RR+hPwZfiVPMBoJmUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTBFMkNDQUNBMzIzRUFCMjE0NUY1NEI3Q0Y2NUM1RkFF Q0VGODNBMzAeFw0yNTA4MjMwNTE2MjBaFw0yNTA4MjYxMTEwMjBaMDMxMTAvBgNV BAMTKDkzODhFNEM5ODNERDM4MDY3NDBGRDJBMDBFMDg3NUFBRUI4MkUwOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRCapIdIOLCW8YHJPmPm/T5mum 6nthh7Z2YRgjaaBJ+YpSqVrnuSx0AKTj2ErMAQVhuZEG2qoOj+GSFEo2RQsEBCqm PDP3rcpmuVDmB2oG661kZBIxQsIv34RNQsMD8XhFa31JVrPrbseWd2NfHrhZwHvw RyyiNV/yMvTXoCmxr+TOP/2svcQuuJcXvU+NEy2y07UvCJrN+PAiUZU5i1OKTNJS +8C6tbj91hikm7lgFjHMleDQv7cwqB2OgmG65cLIeAb8UV7bQiu93COU01fnKRFc TRGvwiUog+wQa1czWk8AXM3E2JWg/sXd1kfxZcPt+LQnynrWu/ZKxASXl+PjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk4jkyYPdOAZ0D9KgDgh1quuC4JowHwYDVR0j BBgwFoAUkOLMrKMj6rIUX1S3z2XF+uzvg6MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzdmZmUyYS0zMWU0LTQ4MDAtOTdkNC03ODc0YzEyMzE5MTEvMC85MEUyQ0NBQ0Ez MjNFQUIyMTQ1RjU0QjdDRjY1QzVGQUVDRUY4M0EzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTBFMkNDQUNBMzIzRUFCMjE0NUY1NEI3Q0Y2NUM1RkFFQ0VG ODNBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjc3ZmZlMmEtMzFlNC00ODAwLTk3 ZDQtNzg3NGMxMjMxOTExLzAvOTBFMkNDQUNBMzIzRUFCMjE0NUY1NEI3Q0Y2NUM1 RkFFQ0VGODNBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEd0S8cJ9RwnSQxgfs5qGpu/CK/G8hCDJe1x xNR5bEN8Ryajg1rbEodb0kxyniXSX2U8GII4vtPf4Uh/nHTzuN+3/Hvx0NgZ8T5Y mI8MggBz1+leX7LVaXeEN4XSZVyiqumI0kY89dTwdpL5G4hCiqIl+KeqnWLpk3kH U8616STLDVIMCZ/zTmKMg0XWJ1lDGr97tk9yrTQIkk/tXy705XDpXEhigSNPsTbp dJv7NQ2WT+OYWr5l0Ib0GyXYg0pMlMarD5h1min7vFhwDo1MsSP9ixnrKYZuBFXc ehfzSrWpoOj1LC16H56uLhNpKF/QxcVO3SQU+1DAiigTjMmzQEE= -----END CERTIFICATE-----Generated at Sat Aug 23 10:21:26 2025 by rpki-client