$ rpki-client -vvf repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft File: 90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft (raw, json) Hash identifier: 0yfwLlJqWGO2RvJwwX6RRuOgbwZqAh1GfObMkTVtJts= Subject key identifier: 78:72:ED:7A:0C:AA:B8:62:32:13:53:AF:6D:0A:FE:82:61:7A:AB:B4 Authority key identifier: 90:E2:CC:AC:A3:23:EA:B2:14:5F:54:B7:CF:65:C5:FA:EC:EF:83:A3 Certificate issuer: /CN=90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3 Certificate serial: 2F68A56CE42B77D95E149C0EA4D02484D3490DC9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft Manifest number: 0189 Signing time: Sat 10 May 2025 08:51:17 +0000 Manifest this update: Sat 10 May 2025 08:46:17 +0000 Manifest next update: Tue 13 May 2025 11:01:17 +0000 Files and hashes: 1: 3130332e3134352e35322e302f32342d3234203d3e20313339343535.roa (hash: AnirtwiQcqhih7uqF14RHtBvHcWSRInmlpBmELQD3Bc=) 2: 90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.crl (hash: qCJm7r60POIIq3gEGxGbdHvcB0gVqOxsz6a1WZwUcfo=) 3: 3130332e3134352e35332e302f32342d3234203d3e20313339343535.roa (hash: t0f8hH0p5YUalqHFkiu1kyX28Ot7aEHcWn8PNYVXvq0=) 4: 3130332e3134352e35322e302f32332d3233203d3e20313339343535.roa (hash: 7DJwBHtzGlb/NDl1/3zGyCjwc3DhiipUzCGFUXWXjoE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.crl rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 11:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:68:a5:6c:e4:2b:77:d9:5e:14:9c:0e:a4:d0:24:84:d3:49:0d:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3 Validity Not Before: May 10 08:46:17 2025 GMT Not After : May 13 11:01:17 2025 GMT Subject: CN=7872ED7A0CAAB862321353AF6D0AFE82617AABB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:95:36:99:e5:b2:ae:26:40:f9:0c:06:40:b2: 54:90:fe:20:f8:86:a0:45:ac:da:6d:5e:51:fc:36: 5d:28:e2:5d:22:1e:2c:7c:d2:ca:96:7b:33:cf:92: 80:1f:e7:83:57:8e:96:3d:66:70:8c:fa:05:93:0b: e0:e3:0f:6b:26:8a:87:5a:b4:28:06:eb:75:72:91: 9b:de:a8:b3:89:cb:54:75:32:f6:4a:89:3a:e5:d7: ad:77:2b:1b:fb:b1:87:b3:b6:dc:cc:25:cb:90:cd: ba:15:3c:97:1a:d2:d3:15:4c:98:01:3c:5a:7a:48: 58:46:03:71:39:cb:c3:7a:77:a6:b5:8a:6e:93:da: 64:6b:76:ff:77:83:e9:1b:9d:80:24:4f:c4:2c:29: a8:2d:e9:5f:f3:73:65:a2:1c:f7:e0:2d:4c:6b:bd: 24:61:2b:f6:64:33:30:bb:7d:b9:3a:ba:2f:5a:46: d5:4e:e9:3d:bb:6a:8f:00:91:32:4f:cb:6e:79:ce: 00:4e:97:f8:64:34:80:6a:59:53:03:fc:45:02:4a: 8c:6b:5b:71:06:72:ef:2c:d6:94:0a:02:86:7e:93: ba:d3:e8:d8:0e:f1:b7:e3:4f:78:53:1c:37:46:40: 58:48:b4:0c:52:17:d8:7f:56:6a:9d:a4:f0:2f:9d: 01:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:72:ED:7A:0C:AA:B8:62:32:13:53:AF:6D:0A:FE:82:61:7A:AB:B4 X509v3 Authority Key Identifier: keyid:90:E2:CC:AC:A3:23:EA:B2:14:5F:54:B7:CF:65:C5:FA:EC:EF:83:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:6f:19:ea:17:c7:46:78:20:59:67:44:03:93:d7:4f:7c:36: 16:f6:66:cd:de:70:36:50:3a:17:1b:3d:07:9d:21:5a:20:76: 6d:89:a6:7f:6b:19:88:bf:90:7b:42:59:ca:be:85:f3:43:9e: 44:39:f3:d8:09:78:2e:b3:f0:1f:23:83:8b:aa:97:68:1d:bb: d4:5d:6a:a6:c0:b8:96:75:05:e8:9c:c0:dd:96:d3:34:a6:df: b0:55:df:4c:d0:f6:cc:53:2d:c4:cd:0e:c4:e3:41:94:d6:a7: b3:4d:83:d8:01:aa:41:79:2a:76:3e:07:42:c0:5e:91:65:41: c4:5e:09:2f:cc:fa:e0:95:8e:37:6f:f2:e9:93:11:36:c2:df: 2b:18:5c:e0:fa:da:58:9d:a2:5f:bd:d4:87:36:de:81:19:13: 15:55:57:a7:28:8a:30:bf:d6:4f:98:65:c3:fc:d1:dd:e2:a4: dc:2b:aa:d6:51:9d:2d:80:bb:26:43:e1:3b:6e:2c:c1:1e:d9: b2:28:0e:f2:8c:d0:f1:ac:dc:7c:2c:0d:cf:20:62:1a:23:60: fd:3f:12:fe:cc:5b:14:1b:eb:87:87:29:67:be:79:d7:ed:c2: 6e:cd:59:3e:7a:19:45:78:6c:46:59:a3:be:87:1b:9a:e6:4e: 51:95:c2:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL2ilbOQrd9leFJwOpNAkhNNJDckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTBFMkNDQUNBMzIzRUFCMjE0NUY1NEI3Q0Y2NUM1RkFF Q0VGODNBMzAeFw0yNTA1MTAwODQ2MTdaFw0yNTA1MTMxMTAxMTdaMDMxMTAvBgNV BAMTKDc4NzJFRDdBMENBQUI4NjIzMjEzNTNBRjZEMEFGRTgyNjE3QUFCQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYlTaZ5bKuJkD5DAZAslSQ/iD4 hqBFrNptXlH8Nl0o4l0iHix80sqWezPPkoAf54NXjpY9ZnCM+gWTC+DjD2smioda tCgG63VykZveqLOJy1R1MvZKiTrl1613Kxv7sYezttzMJcuQzboVPJca0tMVTJgB PFp6SFhGA3E5y8N6d6a1im6T2mRrdv93g+kbnYAkT8QsKagt6V/zc2WiHPfgLUxr vSRhK/ZkMzC7fbk6ui9aRtVO6T27ao8AkTJPy255zgBOl/hkNIBqWVMD/EUCSoxr W3EGcu8s1pQKAoZ+k7rT6NgO8bfjT3hTHDdGQFhItAxSF9h/VmqdpPAvnQFRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeHLtegyquGIyE1OvbQr+gmF6q7QwHwYDVR0j BBgwFoAUkOLMrKMj6rIUX1S3z2XF+uzvg6MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzdmZmUyYS0zMWU0LTQ4MDAtOTdkNC03ODc0YzEyMzE5MTEvMC85MEUyQ0NBQ0Ez MjNFQUIyMTQ1RjU0QjdDRjY1QzVGQUVDRUY4M0EzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTBFMkNDQUNBMzIzRUFCMjE0NUY1NEI3Q0Y2NUM1RkFFQ0VG ODNBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjc3ZmZlMmEtMzFlNC00ODAwLTk3 ZDQtNzg3NGMxMjMxOTExLzAvOTBFMkNDQUNBMzIzRUFCMjE0NUY1NEI3Q0Y2NUM1 RkFFQ0VGODNBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJNvGeoXx0Z4IFlnRAOT1098Nhb2Zs3ecDZQ OhcbPQedIVogdm2Jpn9rGYi/kHtCWcq+hfNDnkQ589gJeC6z8B8jg4uql2gdu9Rd aqbAuJZ1BeicwN2W0zSm37BV30zQ9sxTLcTNDsTjQZTWp7NNg9gBqkF5KnY+B0LA XpFlQcReCS/M+uCVjjdv8umTETbC3ysYXOD62lidol+91Ic23oEZExVVV6coijC/ 1k+YZcP80d3ipNwrqtZRnS2AuyZD4TtuLMEe2bIoDvKM0PGs3HwsDc8gYhojYP0/ Ev7MWxQb64eHKWe+edftwm7NWT56GUV4bEZZo76HG5rmTlGVwhA= -----END CERTIFICATE-----Generated at Mon May 12 02:22:58 2025 by rpki-client