$ rpki-client -vvf repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft File: D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft (raw, json) Hash identifier: AitHkEXCbrSjNY50YDR5C+AHg0k3a8krASZ2cDkTpB8= Subject key identifier: 4F:E8:0A:A6:E8:96:C3:5D:DD:D1:96:E6:6F:E6:A6:70:BF:B7:DD:C0 Authority key identifier: D9:0C:70:42:B5:DC:18:34:1D:CC:77:CA:5C:F8:F4:CA:21:0D:88:6B Certificate issuer: /CN=D90C7042B5DC18341DCC77CA5CF8F4CA210D886B Certificate serial: 2F643AC689C3CCEDB3336A0D52C9708FEC82C7EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft Manifest number: EC Signing time: Sun 07 Sep 2025 15:12:17 +0000 Manifest this update: Sun 07 Sep 2025 15:07:17 +0000 Manifest next update: Wed 10 Sep 2025 23:26:17 +0000 Files and hashes: 1: 3135372e36362e372e302f32342d3234203d3e20313338383239.roa (hash: zM59QgzH/K8O4i/tzNe37zwwVnS65qf7DZJku3UKUIg=) 2: D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.crl (hash: fUYzYsSAOmlFfVMi5dmpeRrAnqQ7tqLX8cHINZch1T0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.crl rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 23:26:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:64:3a:c6:89:c3:cc:ed:b3:33:6a:0d:52:c9:70:8f:ec:82:c7:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D90C7042B5DC18341DCC77CA5CF8F4CA210D886B Validity Not Before: Sep 7 15:07:17 2025 GMT Not After : Sep 10 23:26:17 2025 GMT Subject: CN=4FE80AA6E896C35DDDD196E66FE6A670BFB7DDC0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9e:52:4b:e6:9f:88:0d:9a:10:17:70:07:2b: cf:61:36:c1:11:3c:5f:66:d9:9d:a6:d5:fe:fa:35: d1:8f:8a:25:1e:9a:ea:95:ae:d4:1b:4e:14:2f:8f: 8e:63:ab:b4:ca:46:d6:f8:d8:31:54:27:9a:99:e5: 12:09:88:ca:a4:a6:b8:91:87:69:30:8d:fd:38:9a: 5c:e4:f3:4c:9c:77:9e:eb:d6:61:75:06:b2:9a:44: e8:24:ca:2c:d2:52:05:38:8b:32:9c:57:0d:ae:c7: 6d:c8:2f:97:a0:88:9f:ca:b6:79:6b:18:a4:c5:0c: d0:3c:5a:94:39:95:4e:dc:f5:fa:6b:af:5b:b8:46: 39:e2:34:88:34:bc:8d:04:3e:6c:2b:37:e8:08:5f: b7:d6:b1:de:f1:ce:12:3b:86:38:a5:48:00:ee:e7: d4:ef:41:cc:16:84:8e:06:16:8d:9c:0e:44:00:1f: f5:91:12:48:c6:27:e3:96:97:04:c0:dc:a1:a8:bb: 1b:14:db:a8:fa:96:0b:f1:60:95:35:75:9d:bb:ff: 75:e8:a4:90:11:8f:c8:9a:28:3f:e0:b0:aa:4c:bc: 79:eb:84:91:e4:f8:50:9f:1b:7c:2e:65:63:26:f2: 80:bb:14:e5:69:b5:d9:43:06:fd:4d:e0:de:e7:f4: eb:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:E8:0A:A6:E8:96:C3:5D:DD:D1:96:E6:6F:E6:A6:70:BF:B7:DD:C0 X509v3 Authority Key Identifier: keyid:D9:0C:70:42:B5:DC:18:34:1D:CC:77:CA:5C:F8:F4:CA:21:0D:88:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:ee:6b:6e:35:e6:ae:43:db:9e:1a:c1:bb:48:9d:f2:ad:c7: 77:dd:c9:dc:9a:a7:c9:df:6c:db:ec:d4:99:d4:71:80:7e:6b: a8:4f:b3:21:70:1a:cb:9e:1d:2c:14:c8:d1:23:cc:16:d8:cb: 2d:9e:28:a4:ed:de:48:b7:35:15:35:5b:77:ed:41:34:4a:ee: f5:5a:f3:4d:50:1e:10:f7:35:13:b6:1d:de:4e:af:5b:0d:e3: e0:3b:9d:7a:0f:af:dc:21:f8:dc:0f:59:8b:56:eb:72:15:99: 87:61:3f:e4:16:e4:e0:b1:d4:15:38:d4:6c:25:59:d5:00:65: 30:94:51:ca:34:a1:19:53:0b:61:7e:8f:a1:1f:e6:73:e5:a9: 98:23:e8:57:71:24:8d:bc:14:48:4b:73:5e:61:5a:12:86:5e: 4a:c6:00:d2:f2:6d:c5:2f:49:c6:fa:cd:36:a6:25:0a:b9:2a: 48:93:fc:66:7c:f9:ae:73:2f:c2:12:5e:ed:e8:a1:eb:63:ac: b6:cb:b6:cc:4c:1f:50:ae:7a:5e:40:f4:fa:d6:02:fe:54:98: 3e:ed:5d:b7:d1:07:52:c5:85:db:41:30:f0:22:29:92:30:42: 91:d1:22:ec:a1:58:6a:68:8b:e1:55:96:a6:35:48:12:a2:e7: bf:b5:d8:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL2Q6xonDzO2zM2oNUslwj+yCx+owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDkwQzcwNDJCNURDMTgzNDFEQ0M3N0NBNUNGOEY0Q0Ey MTBEODg2QjAeFw0yNTA5MDcxNTA3MTdaFw0yNTA5MTAyMzI2MTdaMDMxMTAvBgNV BAMTKDRGRTgwQUE2RTg5NkMzNUREREQxOTZFNjZGRTZBNjcwQkZCN0REQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/nlJL5p+IDZoQF3AHK89hNsER PF9m2Z2m1f76NdGPiiUemuqVrtQbThQvj45jq7TKRtb42DFUJ5qZ5RIJiMqkpriR h2kwjf04mlzk80ycd57r1mF1BrKaROgkyizSUgU4izKcVw2ux23IL5egiJ/Ktnlr GKTFDNA8WpQ5lU7c9fprr1u4RjniNIg0vI0EPmwrN+gIX7fWsd7xzhI7hjilSADu 59TvQcwWhI4GFo2cDkQAH/WREkjGJ+OWlwTA3KGouxsU26j6lgvxYJU1dZ27/3Xo pJARj8iaKD/gsKpMvHnrhJHk+FCfG3wuZWMm8oC7FOVptdlDBv1N4N7n9Ot1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT+gKpuiWw13d0Zbmb+amcL+33cAwHwYDVR0j BBgwFoAU2QxwQrXcGDQdzHfKXPj0yiENiGswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MGE2ZmVhYS02YjRmLTQ3Y2YtOWUzYy0wMGFlYWM2N2EzMmEvMC9EOTBDNzA0MkI1 REMxODM0MURDQzc3Q0E1Q0Y4RjRDQTIxMEQ4ODZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDkwQzcwNDJCNURDMTgzNDFEQ0M3N0NBNUNGOEY0Q0EyMTBE ODg2Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDBhNmZlYWEtNmI0Zi00N2NmLTll M2MtMDBhZWFjNjdhMzJhLzAvRDkwQzcwNDJCNURDMTgzNDFEQ0M3N0NBNUNGOEY0 Q0EyMTBEODg2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB/ua2415q5D254awbtInfKtx3fdydyap8nf bNvs1JnUcYB+a6hPsyFwGsueHSwUyNEjzBbYyy2eKKTt3ki3NRU1W3ftQTRK7vVa 801QHhD3NRO2Hd5Or1sN4+A7nXoPr9wh+NwPWYtW63IVmYdhP+QW5OCx1BU41Gwl WdUAZTCUUco0oRlTC2F+j6Ef5nPlqZgj6FdxJI28FEhLc15hWhKGXkrGANLybcUv Scb6zTamJQq5KkiT/GZ8+a5zL8ISXu3ooetjrLbLtsxMH1Cuel5A9PrWAv5UmD7t XbfRB1LFhdtBMPAiKZIwQpHRIuyhWGpoi+FVlqY1SBKi57+12JE= -----END CERTIFICATE-----Generated at Mon Sep 8 08:28:58 2025 by rpki-client