$ rpki-client -vvf repo-rpki.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/2B90BB17E78B62C15179029C6583E42BD7E18277.mft File: 2B90BB17E78B62C15179029C6583E42BD7E18277.mft (raw, json) Hash identifier: 4NLqq7F6LM/BlBfUIJTmPrDTcsYQZ7obIqnz1Emlh0E= Subject key identifier: 48:2B:97:78:83:83:81:BE:16:D4:F7:65:22:42:57:54:A7:C0:40:95 Authority key identifier: 2B:90:BB:17:E7:8B:62:C1:51:79:02:9C:65:83:E4:2B:D7:E1:82:77 Certificate issuer: /CN=2B90BB17E78B62C15179029C6583E42BD7E18277 Certificate serial: 4D0C36F217E71E1E073BBC139805A8479FDBD5B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B90BB17E78B62C15179029C6583E42BD7E18277.cer Subject info access: rsync://repo-rpki.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/2B90BB17E78B62C15179029C6583E42BD7E18277.mft Manifest number: 6A Signing time: Mon 21 Jul 2025 15:40:37 +0000 Manifest this update: Mon 21 Jul 2025 15:35:37 +0000 Manifest next update: Thu 24 Jul 2025 22:59:37 +0000 Files and hashes: 1: 2B90BB17E78B62C15179029C6583E42BD7E18277.crl (hash: hkZBfuQYQCs32cPyl8ZEFddqdxDeon7BaBYSkMA+YwA=) 2: 3130332e38302e3231342e302f32332d3233203d3e20313533303932.roa (hash: kTHvzmqB/2veUohEP9ZdbxC595Rgd4EACGX8AypsPpY=) 3: 3130332e38302e3231342e302f32342d3234203d3e20313533303932.roa (hash: xGHUucKhH5kmQ+65YZMYfuYlyW3kJ8ie5abut/yqhlk=) 4: 3130332e38302e3231352e302f32342d3234203d3e20313533303932.roa (hash: 4Y5Ddm6yUymC+qHSs8fVActMjjMDZEcHLdC59v78BoQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/2B90BB17E78B62C15179029C6583E42BD7E18277.crl rsync://repo-rpki.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/2B90BB17E78B62C15179029C6583E42BD7E18277.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B90BB17E78B62C15179029C6583E42BD7E18277.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 22:59:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:0c:36:f2:17:e7:1e:1e:07:3b:bc:13:98:05:a8:47:9f:db:d5:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B90BB17E78B62C15179029C6583E42BD7E18277 Validity Not Before: Jul 21 15:35:37 2025 GMT Not After : Jul 24 22:59:37 2025 GMT Subject: CN=482B9778838381BE16D4F76522425754A7C04095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4e:7b:45:09:75:ff:a6:8b:23:25:42:39:1f: 26:61:e9:5b:72:96:40:a0:36:f0:66:00:0a:08:aa: 0e:66:93:fd:fe:45:91:17:5e:6f:81:e0:0c:9e:60: e1:58:4e:db:91:a3:f3:b3:6d:9e:66:98:0f:df:2c: 93:32:5d:f8:56:71:62:07:25:f1:14:95:fd:60:c7: 71:ce:3d:a2:01:ea:bb:35:14:73:50:de:d4:43:c0: df:bf:87:64:c1:26:d8:74:54:1b:37:89:55:f7:86: 08:cb:c1:37:a8:93:ac:9c:9d:f8:c8:45:b8:07:70: 3f:f8:35:f5:d0:21:f2:52:1e:3e:b2:67:f4:8b:fb: 01:70:86:b2:71:ef:5a:4f:a7:3a:71:8f:b9:92:3b: 52:80:bc:5b:c2:9c:8d:5d:cc:58:00:b8:d4:f8:01: 46:f8:c3:8e:04:05:83:2d:66:2d:7b:19:62:7b:8f: c5:e1:14:d8:e4:a4:11:18:2d:48:74:f4:3f:ec:4b: e9:8d:62:75:f5:42:88:22:e9:ef:8e:e6:f0:b6:3e: c6:d4:e8:53:10:0d:cf:4c:9f:1e:9d:4b:17:f6:39: 5b:21:99:75:7e:a3:93:b6:4c:bc:56:4d:3a:96:9e: 44:7c:ff:0b:99:61:ac:36:90:45:b6:10:05:69:05: 00:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:2B:97:78:83:83:81:BE:16:D4:F7:65:22:42:57:54:A7:C0:40:95 X509v3 Authority Key Identifier: keyid:2B:90:BB:17:E7:8B:62:C1:51:79:02:9C:65:83:E4:2B:D7:E1:82:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/2B90BB17E78B62C15179029C6583E42BD7E18277.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B90BB17E78B62C15179029C6583E42BD7E18277.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/2B90BB17E78B62C15179029C6583E42BD7E18277.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:fb:a9:2a:0c:7e:cb:e7:58:9d:0a:2f:ec:28:33:aa:32:67: 84:95:0e:d9:d9:9c:44:11:89:52:88:8e:7e:f3:df:e0:ce:77: fd:f9:b7:33:29:66:f5:0b:08:e0:dd:0e:46:19:86:eb:30:7e: b4:d1:7e:a2:72:b1:da:28:00:a0:97:00:89:e1:ce:7f:c0:6e: 99:95:5b:7c:33:d7:01:52:54:d4:bb:72:2d:d0:22:bf:1e:66: bb:9c:0d:54:f8:88:8c:f9:e9:54:9f:44:72:e3:d2:db:00:5b: 02:50:0f:91:24:15:12:99:45:1f:95:ec:53:07:07:29:7a:da: f0:d5:48:4e:c0:f6:54:00:46:ac:0d:93:57:84:0e:2b:0e:2e: 7a:cf:78:31:c2:ce:b6:0e:92:eb:eb:e0:a1:f9:da:77:1f:fa: e5:20:61:21:29:5e:de:84:8c:44:76:5d:ca:d9:a2:a4:37:db: be:bd:63:de:5e:cb:74:76:57:26:5f:c8:5a:7d:eb:e6:35:0c: a1:5a:d3:b3:93:e9:9e:8a:74:73:89:bc:c1:3b:23:60:85:7e: 79:a0:bc:9d:35:45:6c:b9:d9:7e:67:a7:e4:41:35:89:97:2e: 7a:93:7b:26:de:9b:b9:b7:a1:e2:0a:59:10:a2:63:9b:e6:27: 19:bf:5c:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTQw28hfnHh4HO7wTmAWoR5/b1bIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkI5MEJCMTdFNzhCNjJDMTUxNzkwMjlDNjU4M0U0MkJE N0UxODI3NzAeFw0yNTA3MjExNTM1MzdaFw0yNTA3MjQyMjU5MzdaMDMxMTAvBgNV BAMTKDQ4MkI5Nzc4ODM4MzgxQkUxNkQ0Rjc2NTIyNDI1NzU0QTdDMDQwOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHTntFCXX/posjJUI5HyZh6Vty lkCgNvBmAAoIqg5mk/3+RZEXXm+B4AyeYOFYTtuRo/OzbZ5mmA/fLJMyXfhWcWIH JfEUlf1gx3HOPaIB6rs1FHNQ3tRDwN+/h2TBJth0VBs3iVX3hgjLwTeok6ycnfjI RbgHcD/4NfXQIfJSHj6yZ/SL+wFwhrJx71pPpzpxj7mSO1KAvFvCnI1dzFgAuNT4 AUb4w44EBYMtZi17GWJ7j8XhFNjkpBEYLUh09D/sS+mNYnX1Qogi6e+O5vC2PsbU 6FMQDc9Mnx6dSxf2OVshmXV+o5O2TLxWTTqWnkR8/wuZYaw2kEW2EAVpBQB9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSCuXeIODgb4W1PdlIkJXVKfAQJUwHwYDVR0j BBgwFoAUK5C7F+eLYsFReQKcZYPkK9fhgncwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZTVhNWU2ZC05MWVlLTQ0OTctYjQxNy04ZDMyZjY1M2U0YjAvMC8yQjkwQkIxN0U3 OEI2MkMxNTE3OTAyOUM2NTgzRTQyQkQ3RTE4Mjc3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkI5MEJCMTdFNzhCNjJDMTUxNzkwMjlDNjU4M0U0MkJEN0Ux ODI3Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGU1YTVlNmQtOTFlZS00NDk3LWI0 MTctOGQzMmY2NTNlNGIwLzAvMkI5MEJCMTdFNzhCNjJDMTUxNzkwMjlDNjU4M0U0 MkJEN0UxODI3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH/7qSoMfsvnWJ0KL+woM6oyZ4SVDtnZnEQR iVKIjn7z3+DOd/35tzMpZvULCODdDkYZhuswfrTRfqJysdooAKCXAInhzn/AbpmV W3wz1wFSVNS7ci3QIr8eZrucDVT4iIz56VSfRHLj0tsAWwJQD5EkFRKZRR+V7FMH Byl62vDVSE7A9lQARqwNk1eEDisOLnrPeDHCzrYOkuvr4KH52ncf+uUgYSEpXt6E jER2XcrZoqQ32769Y95ey3R2VyZfyFp96+Y1DKFa07OT6Z6KdHOJvME7I2CFfnmg vJ01RWy52X5np+RBNYmXLnqTeybem7m3oeIKWRCiY5vmJxm/XE4= -----END CERTIFICATE-----Generated at Wed Jul 23 12:05:46 2025 by rpki-client