$ rpki-client -vvf repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft File: 90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft (raw, json) Hash identifier: 7zd/2Ls3kCbtrrvTp3TL0e90Aip70olWHZOkFSkBiW4= Subject key identifier: D5:C7:CD:40:CE:3F:8D:2B:88:40:44:06:35:C7:B8:E8:B7:CF:40:D7 Authority key identifier: 90:E2:CC:AC:A3:23:EA:B2:14:5F:54:B7:CF:65:C5:FA:EC:EF:83:A3 Certificate issuer: /CN=90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3 Certificate serial: 7C50D59D4D29FC862DDC9A4837B4C3DA34E9C1D1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft Manifest number: 01A0 Signing time: Mon 30 Jun 2025 19:21:21 +0000 Manifest this update: Mon 30 Jun 2025 19:16:21 +0000 Manifest next update: Fri 04 Jul 2025 05:11:21 +0000 Files and hashes: 1: 3130332e3134352e35322e302f32332d3233203d3e20313339343535.roa (hash: 7DJwBHtzGlb/NDl1/3zGyCjwc3DhiipUzCGFUXWXjoE=) 2: 90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.crl (hash: e6SquRphStxT+wNi/JIdFpMKZ+XL04ck45k/1pwCIr8=) 3: 3130332e3134352e35322e302f32342d3234203d3e20313339343535.roa (hash: AnirtwiQcqhih7uqF14RHtBvHcWSRInmlpBmELQD3Bc=) 4: 3130332e3134352e35332e302f32342d3234203d3e20313339343535.roa (hash: t0f8hH0p5YUalqHFkiu1kyX28Ot7aEHcWn8PNYVXvq0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.crl rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 05:11:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:50:d5:9d:4d:29:fc:86:2d:dc:9a:48:37:b4:c3:da:34:e9:c1:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3 Validity Not Before: Jun 30 19:16:21 2025 GMT Not After : Jul 4 05:11:21 2025 GMT Subject: CN=D5C7CD40CE3F8D2B8840440635C7B8E8B7CF40D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a4:5d:f2:00:19:57:81:23:4f:05:c8:87:b6: 4f:0d:7d:3a:4c:a6:7e:8d:d4:64:e3:7e:32:3a:fd: 74:84:a5:5d:4a:36:3d:bc:08:fa:18:d8:c5:2d:cb: e1:e3:43:a7:89:ac:fd:43:24:01:6d:38:b4:39:d1: 63:a8:f6:1f:74:4c:ba:cb:69:82:82:89:5c:9e:61: 90:6c:ab:be:c2:59:58:2f:e2:b2:32:f4:7e:c0:64: 48:9d:6a:81:fb:28:e9:97:ef:06:43:ba:46:a5:e1: 47:ff:3d:1d:24:55:e4:19:f4:55:11:f9:90:9f:fb: 37:27:22:d2:f7:fa:a3:9d:52:bd:8f:6d:7e:7a:3f: be:e6:86:4e:bc:ce:01:78:38:36:24:4f:39:66:d7: 3e:0c:5f:a2:70:37:52:6b:f8:84:95:8f:62:63:a1: 34:b6:67:21:e7:9f:12:6e:b6:df:7a:72:e0:84:c1: 60:e3:1f:53:db:1c:5a:ae:c3:d5:3a:22:bd:52:69: f8:1a:c8:9b:17:21:82:b2:5b:a2:b8:49:33:94:27: b1:04:9a:1a:b6:2a:1a:84:af:0d:c1:7e:4b:22:a0: e5:5d:c5:c6:f0:67:7d:0b:09:cb:a8:ce:f8:66:5f: 17:e1:25:4c:04:02:67:d0:80:9c:26:2a:8c:9e:ca: b1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:C7:CD:40:CE:3F:8D:2B:88:40:44:06:35:C7:B8:E8:B7:CF:40:D7 X509v3 Authority Key Identifier: keyid:90:E2:CC:AC:A3:23:EA:B2:14:5F:54:B7:CF:65:C5:FA:EC:EF:83:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:e7:f4:f1:2d:d9:cf:f4:51:c0:2f:eb:7a:b8:69:50:e1:22: 91:ef:15:7b:21:b1:80:e4:17:2e:b0:f9:5f:bb:35:21:26:9d: e7:b5:41:de:42:05:ba:50:8e:99:5a:98:0a:a4:9b:90:1e:37: e1:2b:29:12:81:c1:79:c5:f2:13:0c:01:0c:53:95:77:62:8b: c5:af:61:97:da:63:df:5e:d1:03:1c:65:f9:80:20:3e:f8:21: 74:36:a3:2f:eb:1c:80:17:04:09:45:36:5c:de:22:c2:05:a5: 98:2e:81:1c:3e:5a:56:fe:92:f2:2f:bd:65:c2:ba:fa:3b:82: 53:cf:69:03:3c:59:52:59:e0:e8:c8:57:da:6c:27:7e:0c:76: 73:d8:de:19:3f:11:9d:15:ad:fb:f7:fe:45:42:c1:9c:ba:20: 5e:65:0a:62:aa:12:c9:19:89:ad:10:66:0a:97:55:3e:6c:1c: 4f:1f:fa:bd:bf:ff:a7:85:dd:ab:d0:75:2d:9e:08:25:82:6e: 0c:93:d1:9d:ac:08:ad:dd:55:36:10:fe:49:a2:a4:48:0a:7d: 74:11:c1:a8:fe:2e:9d:a0:d1:9c:57:41:3a:5e:23:f6:98:7e: d5:ec:17:4e:6d:7c:10:3d:4e:ab:9b:7d:d5:a5:0a:59:7f:21: 1d:2d:db:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfFDVnU0p/IYt3JpIN7TD2jTpwdEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTBFMkNDQUNBMzIzRUFCMjE0NUY1NEI3Q0Y2NUM1RkFF Q0VGODNBMzAeFw0yNTA2MzAxOTE2MjFaFw0yNTA3MDQwNTExMjFaMDMxMTAvBgNV BAMTKEQ1QzdDRDQwQ0UzRjhEMkI4ODQwNDQwNjM1QzdCOEU4QjdDRjQwRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5pF3yABlXgSNPBciHtk8NfTpM pn6N1GTjfjI6/XSEpV1KNj28CPoY2MUty+HjQ6eJrP1DJAFtOLQ50WOo9h90TLrL aYKCiVyeYZBsq77CWVgv4rIy9H7AZEidaoH7KOmX7wZDukal4Uf/PR0kVeQZ9FUR +ZCf+zcnItL3+qOdUr2PbX56P77mhk68zgF4ODYkTzlm1z4MX6JwN1Jr+ISVj2Jj oTS2ZyHnnxJutt96cuCEwWDjH1PbHFquw9U6Ir1SafgayJsXIYKyW6K4STOUJ7EE mhq2KhqErw3BfksioOVdxcbwZ30LCcuozvhmXxfhJUwEAmfQgJwmKoyeyrERAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1cfNQM4/jSuIQEQGNce46LfPQNcwHwYDVR0j BBgwFoAUkOLMrKMj6rIUX1S3z2XF+uzvg6MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzdmZmUyYS0zMWU0LTQ4MDAtOTdkNC03ODc0YzEyMzE5MTEvMC85MEUyQ0NBQ0Ez MjNFQUIyMTQ1RjU0QjdDRjY1QzVGQUVDRUY4M0EzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTBFMkNDQUNBMzIzRUFCMjE0NUY1NEI3Q0Y2NUM1RkFFQ0VG ODNBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjc3ZmZlMmEtMzFlNC00ODAwLTk3 ZDQtNzg3NGMxMjMxOTExLzAvOTBFMkNDQUNBMzIzRUFCMjE0NUY1NEI3Q0Y2NUM1 RkFFQ0VGODNBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACLn9PEt2c/0UcAv63q4aVDhIpHvFXshsYDk Fy6w+V+7NSEmnee1Qd5CBbpQjplamAqkm5AeN+ErKRKBwXnF8hMMAQxTlXdii8Wv YZfaY99e0QMcZfmAID74IXQ2oy/rHIAXBAlFNlzeIsIFpZgugRw+Wlb+kvIvvWXC uvo7glPPaQM8WVJZ4OjIV9psJ34MdnPY3hk/EZ0Vrfv3/kVCwZy6IF5lCmKqEskZ ia0QZgqXVT5sHE8f+r2//6eF3avQdS2eCCWCbgyT0Z2sCK3dVTYQ/kmipEgKfXQR waj+Lp2g0ZxXQTpeI/aYftXsF05tfBA9TqubfdWlCll/IR0t274= -----END CERTIFICATE-----Generated at Tue Jul 1 05:16:50 2025 by rpki-client