$ rpki-client -vvf repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft File: 90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft (raw, json) Hash identifier: Z7PJKlxZqr0bKbgshSWBsvxbunhCrf4JJjWBU03Z+mI= Subject key identifier: 0D:63:8E:85:87:02:81:38:12:67:76:87:A7:9E:00:9D:98:B7:7A:58 Authority key identifier: 90:E2:CC:AC:A3:23:EA:B2:14:5F:54:B7:CF:65:C5:FA:EC:EF:83:A3 Certificate issuer: /CN=90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3 Certificate serial: 0B39A72F58ADBA07E2EA83CC6E59F1DABB01C848 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft Manifest number: 01D2 Signing time: Mon 20 Oct 2025 06:11:22 +0000 Manifest this update: Mon 20 Oct 2025 06:06:22 +0000 Manifest next update: Thu 23 Oct 2025 13:39:22 +0000 Files and hashes: 1: 90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.crl (hash: Y74UGBxOU1pJriZsSDVT4iAhSa2Kh6PRpLgNd8LPDwo=) 2: 3130332e3134352e35332e302f32342d3234203d3e20313339343535.roa (hash: t0f8hH0p5YUalqHFkiu1kyX28Ot7aEHcWn8PNYVXvq0=) 3: 3130332e3134352e35322e302f32342d3234203d3e20313339343535.roa (hash: AnirtwiQcqhih7uqF14RHtBvHcWSRInmlpBmELQD3Bc=) 4: 3130332e3134352e35322e302f32332d3233203d3e20313339343535.roa (hash: 7DJwBHtzGlb/NDl1/3zGyCjwc3DhiipUzCGFUXWXjoE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.crl rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:39:a7:2f:58:ad:ba:07:e2:ea:83:cc:6e:59:f1:da:bb:01:c8:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3 Validity Not Before: Oct 20 06:06:22 2025 GMT Not After : Oct 23 13:39:22 2025 GMT Subject: CN=0D638E858702813812677687A79E009D98B77A58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d8:ad:70:90:87:53:27:86:23:89:a3:80:86: 56:1f:2e:63:96:31:79:57:30:5d:d6:f4:ec:b5:e8: b5:58:44:35:8c:c7:2f:65:07:cb:b3:af:23:80:bd: f8:5f:0c:a4:bb:4b:c3:2a:a7:b8:a9:20:e9:5d:36: ff:64:83:93:0d:99:54:93:8e:ef:db:62:9b:4d:d2: 47:bf:21:f1:2c:0c:75:9d:68:74:8d:02:e0:74:4d: c1:88:23:9a:f5:d2:8e:6f:6e:91:cd:5b:96:ad:31: 83:f8:ac:13:7f:46:b8:cf:38:b6:34:15:ad:e2:25: ba:00:d6:df:a4:14:08:d0:f7:39:46:76:ba:36:db: 36:a5:e3:35:6d:9e:fd:0c:56:3b:db:18:e7:9b:fd: e4:14:71:8c:f8:89:05:eb:00:f4:01:e3:3f:f2:90: f3:b9:66:d6:23:de:ca:3f:a0:d7:95:eb:51:3c:b1: 1b:6f:a0:08:06:c5:2d:7b:3f:d6:2c:72:6d:e4:3a: f0:77:d7:f7:ec:16:e2:6b:ad:5b:c8:72:3e:f1:31: 22:f8:c0:8d:89:58:19:2e:db:aa:e3:a3:12:90:94: b6:23:48:06:cf:72:77:fe:ff:9a:c7:45:13:e6:b8: ab:eb:74:4d:44:f3:5a:fd:8e:40:de:4f:5d:87:3c: d4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:63:8E:85:87:02:81:38:12:67:76:87:A7:9E:00:9D:98:B7:7A:58 X509v3 Authority Key Identifier: keyid:90:E2:CC:AC:A3:23:EA:B2:14:5F:54:B7:CF:65:C5:FA:EC:EF:83:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:11:5f:c4:50:29:db:42:32:b0:28:5e:e1:d1:bf:45:b1:d9: 29:af:95:43:0f:53:7a:bd:ea:6c:8e:e3:d9:9a:be:c8:c6:4a: af:e0:1f:8e:28:cb:bf:36:b8:9f:e2:45:3b:aa:45:1a:15:67: 8c:5a:15:8a:68:b0:a8:b0:a1:e9:28:1e:99:b1:97:96:e4:3b: cc:7a:0c:a1:39:c0:b7:d6:b7:b0:5e:0e:40:fb:7d:56:ed:3d: 7e:af:ce:ff:d9:ca:ac:85:d9:24:78:f5:11:e1:ef:74:f3:22: 8a:f4:fa:7c:67:7a:1a:cb:78:a4:ba:38:14:c5:63:b5:2e:25: 0f:ce:e3:ad:06:cd:d3:d5:28:54:b2:79:a2:9a:c1:8b:f2:da: 79:c0:b8:74:13:cd:5d:94:f1:f9:91:05:5a:14:7f:f0:c7:4e: 46:3c:0c:7f:e9:d7:52:fa:1e:5f:28:a3:2b:11:79:e9:c8:3f: 75:e3:6d:bb:48:78:7e:51:64:a8:de:d6:ac:72:4c:03:ee:68: cb:2d:05:eb:59:82:bb:30:97:ff:68:c4:ef:38:cc:b5:ff:4f: b8:a2:0d:7d:5d:fe:d4:7a:c1:a4:0e:d3:26:66:61:f3:ce:09: 6c:60:c5:9f:79:d2:a5:4e:67:73:39:08:04:0d:2f:9f:2b:de: 89:03:ce:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCzmnL1itugfi6oPMblnx2rsByEgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTBFMkNDQUNBMzIzRUFCMjE0NUY1NEI3Q0Y2NUM1RkFF Q0VGODNBMzAeFw0yNTEwMjAwNjA2MjJaFw0yNTEwMjMxMzM5MjJaMDMxMTAvBgNV BAMTKDBENjM4RTg1ODcwMjgxMzgxMjY3NzY4N0E3OUUwMDlEOThCNzdBNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU2K1wkIdTJ4YjiaOAhlYfLmOW MXlXMF3W9Oy16LVYRDWMxy9lB8uzryOAvfhfDKS7S8Mqp7ipIOldNv9kg5MNmVST ju/bYptN0ke/IfEsDHWdaHSNAuB0TcGII5r10o5vbpHNW5atMYP4rBN/RrjPOLY0 Fa3iJboA1t+kFAjQ9zlGdro22zal4zVtnv0MVjvbGOeb/eQUcYz4iQXrAPQB4z/y kPO5ZtYj3so/oNeV61E8sRtvoAgGxS17P9Yscm3kOvB31/fsFuJrrVvIcj7xMSL4 wI2JWBku26rjoxKQlLYjSAbPcnf+/5rHRRPmuKvrdE1E81r9jkDeT12HPNS5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDWOOhYcCgTgSZ3aHp54AnZi3elgwHwYDVR0j BBgwFoAUkOLMrKMj6rIUX1S3z2XF+uzvg6MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzdmZmUyYS0zMWU0LTQ4MDAtOTdkNC03ODc0YzEyMzE5MTEvMC85MEUyQ0NBQ0Ez MjNFQUIyMTQ1RjU0QjdDRjY1QzVGQUVDRUY4M0EzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTBFMkNDQUNBMzIzRUFCMjE0NUY1NEI3Q0Y2NUM1RkFFQ0VG ODNBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjc3ZmZlMmEtMzFlNC00ODAwLTk3 ZDQtNzg3NGMxMjMxOTExLzAvOTBFMkNDQUNBMzIzRUFCMjE0NUY1NEI3Q0Y2NUM1 RkFFQ0VGODNBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF0RX8RQKdtCMrAoXuHRv0Wx2SmvlUMPU3q9 6myO49mavsjGSq/gH44oy782uJ/iRTuqRRoVZ4xaFYposKiwoekoHpmxl5bkO8x6 DKE5wLfWt7BeDkD7fVbtPX6vzv/ZyqyF2SR49RHh73TzIor0+nxnehrLeKS6OBTF Y7UuJQ/O460GzdPVKFSyeaKawYvy2nnAuHQTzV2U8fmRBVoUf/DHTkY8DH/p11L6 Hl8ooysReenIP3XjbbtIeH5RZKje1qxyTAPuaMstBetZgrswl/9oxO84zLX/T7ii DX1d/tR6waQO0yZmYfPOCWxgxZ950qVOZ3M5CAQNL58r3okDzig= -----END CERTIFICATE-----Generated at Mon Oct 20 12:55:37 2025 by rpki-client