$ rpki-client -vvf repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft File: D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft (raw, json) Hash identifier: /cOYUUPqrZ15ewEdz0z/Tef0ClEasTc4EWJhHUNJ9Lw= Subject key identifier: 21:D2:09:F7:69:C6:DD:99:CB:8C:C1:5E:9B:FF:D4:14:36:6B:0D:72 Authority key identifier: D9:0C:70:42:B5:DC:18:34:1D:CC:77:CA:5C:F8:F4:CA:21:0D:88:6B Certificate issuer: /CN=D90C7042B5DC18341DCC77CA5CF8F4CA210D886B Certificate serial: 45136F91F15A049F9E706FCFBAB50DA158542012 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft Manifest number: D6 Signing time: Mon 21 Jul 2025 09:22:16 +0000 Manifest this update: Mon 21 Jul 2025 09:17:16 +0000 Manifest next update: Thu 24 Jul 2025 13:41:16 +0000 Files and hashes: 1: D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.crl (hash: 82GAjLMF5Ugis4Y71ugFL9xREyx0Tq2KHTldRw+i7lw=) 2: 3135372e36362e372e302f32342d3234203d3e20313338383239.roa (hash: zM59QgzH/K8O4i/tzNe37zwwVnS65qf7DZJku3UKUIg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.crl rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 13:41:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:13:6f:91:f1:5a:04:9f:9e:70:6f:cf:ba:b5:0d:a1:58:54:20:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D90C7042B5DC18341DCC77CA5CF8F4CA210D886B Validity Not Before: Jul 21 09:17:16 2025 GMT Not After : Jul 24 13:41:16 2025 GMT Subject: CN=21D209F769C6DD99CB8CC15E9BFFD414366B0D72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:1f:6d:f7:e6:0b:f0:34:0c:91:06:62:74:62: fc:2c:d1:7f:35:62:af:b0:9c:50:68:66:6f:2e:ea: a1:91:9e:66:91:21:8f:6a:0b:a9:00:3a:bf:a5:8d: d2:e8:fd:37:b6:e2:95:04:e7:31:43:fd:f8:6e:67: f7:18:01:31:92:a7:6d:b7:f4:b4:aa:30:4f:8a:2b: 25:62:e6:7b:c8:a8:12:74:74:92:4d:34:50:bb:c0: 40:4e:03:b1:9f:1e:6d:77:ed:56:4f:8e:58:34:b2: 08:a7:74:89:81:04:79:c5:57:04:41:6b:68:af:e0: 4d:80:e4:15:f0:93:86:23:70:80:a5:6b:e0:0c:a8: e4:f9:9e:25:d4:34:da:5b:42:24:cd:5d:02:3b:0e: e6:95:0d:29:6a:31:d2:15:92:dd:18:d3:46:5e:0f: 8d:a1:e6:d2:68:c8:2b:68:3d:36:ec:a1:66:87:49: 4d:8b:84:fd:ea:75:e5:e0:ec:99:71:4b:7d:00:e3: e6:2c:e2:13:2b:05:9c:b1:ca:03:4c:49:2f:bc:34: 89:db:56:57:a0:ec:e5:76:6b:3c:fc:a0:bd:72:34: dc:b9:b0:c6:44:44:95:f0:cb:17:c3:64:45:28:b8: 27:d7:58:cf:48:81:36:e4:99:c5:ee:a4:0b:c1:e6: 16:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:D2:09:F7:69:C6:DD:99:CB:8C:C1:5E:9B:FF:D4:14:36:6B:0D:72 X509v3 Authority Key Identifier: keyid:D9:0C:70:42:B5:DC:18:34:1D:CC:77:CA:5C:F8:F4:CA:21:0D:88:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:10:ef:36:58:18:61:81:a1:a0:1e:d6:d9:46:f0:6c:d7:00: d7:4d:8a:39:9d:2a:39:1e:e5:10:64:09:19:33:cd:3a:4b:f8: 15:0d:31:09:f5:f0:c8:4d:4d:52:83:37:f1:00:fe:61:11:53: 56:06:df:26:fe:0b:14:ce:88:f6:23:e4:90:9a:63:2a:23:b7: 6f:43:54:a5:c5:db:85:38:2e:59:ba:99:da:1a:14:8f:b1:bc: 20:4f:08:73:22:b2:b3:f3:2c:55:66:8e:3e:ad:9a:5c:65:8c: a0:34:f5:9c:7d:be:40:96:71:3d:1a:20:ff:80:3d:3e:8b:a8: 81:f4:ea:0a:89:ff:46:6e:dc:4d:e9:76:23:05:96:ce:03:69: fa:fd:fc:90:d5:e7:95:0a:0a:a8:89:25:30:44:65:aa:86:19: 8b:20:de:b6:6e:78:bf:ea:22:fc:c6:22:2e:3c:16:06:a5:9e: 3c:71:60:65:e4:34:e4:84:d0:b8:0c:64:62:70:3c:cf:fc:d0: 1b:0b:10:27:53:a0:db:40:98:04:69:5a:e7:91:b2:a8:85:79: 2b:09:81:8b:bc:e1:ac:a4:4d:8e:aa:6d:dc:4e:8c:e0:24:d2: a6:e6:5f:50:9a:c8:d9:49:52:12:a7:b5:c3:0c:a9:82:1d:8d: ec:16:1f:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURRNvkfFaBJ+ecG/PurUNoVhUIBIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDkwQzcwNDJCNURDMTgzNDFEQ0M3N0NBNUNGOEY0Q0Ey MTBEODg2QjAeFw0yNTA3MjEwOTE3MTZaFw0yNTA3MjQxMzQxMTZaMDMxMTAvBgNV BAMTKDIxRDIwOUY3NjlDNkREOTlDQjhDQzE1RTlCRkZENDE0MzY2QjBENzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtH2335gvwNAyRBmJ0Yvws0X81 Yq+wnFBoZm8u6qGRnmaRIY9qC6kAOr+ljdLo/Te24pUE5zFD/fhuZ/cYATGSp223 9LSqME+KKyVi5nvIqBJ0dJJNNFC7wEBOA7GfHm137VZPjlg0sgindImBBHnFVwRB a2iv4E2A5BXwk4YjcICla+AMqOT5niXUNNpbQiTNXQI7DuaVDSlqMdIVkt0Y00Ze D42h5tJoyCtoPTbsoWaHSU2LhP3qdeXg7JlxS30A4+Ys4hMrBZyxygNMSS+8NInb Vleg7OV2azz8oL1yNNy5sMZERJXwyxfDZEUouCfXWM9IgTbkmcXupAvB5hbNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIdIJ92nG3ZnLjMFem//UFDZrDXIwHwYDVR0j BBgwFoAU2QxwQrXcGDQdzHfKXPj0yiENiGswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MGE2ZmVhYS02YjRmLTQ3Y2YtOWUzYy0wMGFlYWM2N2EzMmEvMC9EOTBDNzA0MkI1 REMxODM0MURDQzc3Q0E1Q0Y4RjRDQTIxMEQ4ODZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDkwQzcwNDJCNURDMTgzNDFEQ0M3N0NBNUNGOEY0Q0EyMTBE ODg2Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDBhNmZlYWEtNmI0Zi00N2NmLTll M2MtMDBhZWFjNjdhMzJhLzAvRDkwQzcwNDJCNURDMTgzNDFEQ0M3N0NBNUNGOEY0 Q0EyMTBEODg2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEQQ7zZYGGGBoaAe1tlG8GzXANdNijmdKjke 5RBkCRkzzTpL+BUNMQn18MhNTVKDN/EA/mERU1YG3yb+CxTOiPYj5JCaYyojt29D VKXF24U4Llm6mdoaFI+xvCBPCHMisrPzLFVmjj6tmlxljKA09Zx9vkCWcT0aIP+A PT6LqIH06gqJ/0Zu3E3pdiMFls4Dafr9/JDV55UKCqiJJTBEZaqGGYsg3rZueL/q IvzGIi48FgalnjxxYGXkNOSE0LgMZGJwPM/80BsLECdToNtAmARpWueRsqiFeSsJ gYu84aykTY6qbdxOjOAk0qbmX1CayNlJUhKntcMMqYIdjewWH+A= -----END CERTIFICATE-----Generated at Mon Jul 21 23:43:42 2025 by rpki-client