$ rpki-client -vvf repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft File: 90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft (raw, json) Hash identifier: H6Bs+a1KQeuBFfM7j5/YMmK1g/tfF+8Qng5u4VKEb4w= Subject key identifier: B4:7D:6F:EA:D3:CE:25:E2:91:1B:28:8A:9A:81:C8:B8:95:0D:D8:BD Authority key identifier: 90:31:7E:26:9F:FE:9F:71:3F:20:CF:BA:CE:64:2A:6F:60:F7:8F:CA Certificate issuer: /CN=90317E269FFE9F713F20CFBACE642A6F60F78FCA Certificate serial: 16D75E42B376F5BF1F0EC72081C32130DBCC9B69 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90317E269FFE9F713F20CFBACE642A6F60F78FCA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft Manifest number: 7D Signing time: Sun 01 Jun 2025 10:50:04 +0000 Manifest this update: Sun 01 Jun 2025 10:45:04 +0000 Manifest next update: Wed 04 Jun 2025 20:05:04 +0000 Files and hashes: 1: 90317E269FFE9F713F20CFBACE642A6F60F78FCA.crl (hash: KWD9cnTNBLBiae5SURvSpleiRyv5GOpj8HLUk7sluVM=) 2: 3130332e3135352e3131332e302f32342d3234203d3e20313431303538.roa (hash: Y3pOvFfrtyRbRGGWe5RbSl3GyhFyt942LzAk5FIpr9c=) 3: 323430313a633432303a3a2f33322d3438203d3e20313431303538.roa (hash: /agLGw0c81cHF8Topn/a9INtTEJnrvSh7/oHynB8qR0=) 4: 3130332e33362e3235302e302f32342d3234203d3e20313431303538.roa (hash: gP8KkxonLoqcx7KZvnUv3ivtnAxFYtDlgM/zAdFC+W8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.crl rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90317E269FFE9F713F20CFBACE642A6F60F78FCA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Jun 2025 20:05:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:d7:5e:42:b3:76:f5:bf:1f:0e:c7:20:81:c3:21:30:db:cc:9b:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90317E269FFE9F713F20CFBACE642A6F60F78FCA Validity Not Before: Jun 1 10:45:04 2025 GMT Not After : Jun 4 20:05:04 2025 GMT Subject: CN=B47D6FEAD3CE25E2911B288A9A81C8B8950DD8BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:60:5b:1f:b8:8d:58:8c:ba:d4:62:42:18:0e: 63:22:6b:9f:cf:bb:95:c2:a2:34:0b:e4:c8:1a:1b: f8:a2:e5:2d:26:c3:b6:ab:26:4a:86:d3:2f:a9:c8: c8:cc:74:9f:6d:ea:2d:71:74:4a:f8:9b:33:7b:ff: 53:1c:86:31:ff:66:d5:50:d6:57:67:36:7b:64:1c: 5f:43:15:48:af:fc:9f:63:97:e0:5e:78:84:ea:fe: 3f:1a:21:6d:db:eb:72:d6:4d:b8:c9:cf:4e:01:83: e5:86:cd:eb:36:35:f2:ae:7f:c3:38:59:d2:69:ba: fc:5a:e3:d3:c4:03:3e:78:ef:ec:43:a9:f3:fa:d9: 3f:1c:1b:1f:45:53:67:62:e6:78:f2:da:d5:46:52: 2d:83:5c:2e:50:14:ce:cb:9d:e1:95:14:d0:69:00: 47:f6:5b:72:36:d6:97:0e:ec:bf:59:41:2b:51:f1: f4:bb:48:e6:8e:7e:c0:1d:5e:40:6a:7f:d2:23:bb: be:a6:3b:a8:cd:47:cf:72:f6:92:49:06:5a:5a:4c: e1:e8:6b:1b:5d:0e:38:d8:89:b7:e0:83:59:49:01: be:ae:37:f0:a6:b2:94:6e:4b:ee:e1:48:7b:bc:53: a3:bf:c0:a7:02:06:6f:b1:76:1a:03:33:b7:0a:cb: 15:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:7D:6F:EA:D3:CE:25:E2:91:1B:28:8A:9A:81:C8:B8:95:0D:D8:BD X509v3 Authority Key Identifier: keyid:90:31:7E:26:9F:FE:9F:71:3F:20:CF:BA:CE:64:2A:6F:60:F7:8F:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90317E269FFE9F713F20CFBACE642A6F60F78FCA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53b858f6-de20-4121-bcea-9076edccc097/0/90317E269FFE9F713F20CFBACE642A6F60F78FCA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:a4:61:77:32:b2:e2:e4:98:07:50:1e:42:0d:19:6f:18:7c: cc:79:6b:e5:80:ff:97:19:9c:30:6e:34:b6:59:0a:58:10:c0: c2:0b:d6:8c:9f:c1:01:92:e3:82:58:a5:1c:4f:f4:9c:18:c0: c0:a8:a8:2a:d9:75:57:b6:6f:de:e0:18:c4:44:22:50:35:cf: 78:7b:aa:0b:6e:93:ab:4f:e0:85:fb:b6:c6:e6:34:d5:a9:58: 43:37:01:05:72:61:df:67:08:04:34:c8:e3:ac:62:42:b8:78: cd:99:02:e2:03:ee:ba:e0:77:59:63:5d:67:67:f7:cc:6e:85: 36:cf:88:36:92:45:d2:20:21:17:04:bd:7c:a9:9c:1c:e6:3f: 2a:15:f7:1a:a7:54:a6:4b:5e:e9:2c:81:bf:25:30:b4:1a:34: 01:32:62:36:7f:47:8a:f3:7b:15:7d:76:06:a2:8a:f7:5b:1f: 84:64:eb:0b:b3:c8:fb:b5:a3:08:6e:c6:e2:fe:4d:6d:fb:23: c4:6c:43:04:51:88:9c:35:f3:3a:f5:b6:de:65:d6:e5:8c:b1: 2b:c9:6f:7e:72:94:0e:a6:2b:c4:6d:a4:58:6f:b3:2a:45:bb: 7d:4b:e8:88:c8:43:59:8d:8b:89:32:7f:26:f6:9c:83:e2:85: 4f:e8:c3:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFtdeQrN29b8fDscggcMhMNvMm2kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTAzMTdFMjY5RkZFOUY3MTNGMjBDRkJBQ0U2NDJBNkY2 MEY3OEZDQTAeFw0yNTA2MDExMDQ1MDRaFw0yNTA2MDQyMDA1MDRaMDMxMTAvBgNV BAMTKEI0N0Q2RkVBRDNDRTI1RTI5MTFCMjg4QTlBODFDOEI4OTUwREQ4QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuYFsfuI1YjLrUYkIYDmMia5/P u5XCojQL5MgaG/ii5S0mw7arJkqG0y+pyMjMdJ9t6i1xdEr4mzN7/1MchjH/ZtVQ 1ldnNntkHF9DFUiv/J9jl+BeeITq/j8aIW3b63LWTbjJz04Bg+WGzes2NfKuf8M4 WdJpuvxa49PEAz547+xDqfP62T8cGx9FU2di5njy2tVGUi2DXC5QFM7LneGVFNBp AEf2W3I21pcO7L9ZQStR8fS7SOaOfsAdXkBqf9Iju76mO6jNR89y9pJJBlpaTOHo axtdDjjYibfgg1lJAb6uN/CmspRuS+7hSHu8U6O/wKcCBm+xdhoDM7cKyxVVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtH1v6tPOJeKRGyiKmoHIuJUN2L0wHwYDVR0j BBgwFoAUkDF+Jp/+n3E/IM+6zmQqb2D3j8owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 M2I4NThmNi1kZTIwLTQxMjEtYmNlYS05MDc2ZWRjY2MwOTcvMC85MDMxN0UyNjlG RkU5RjcxM0YyMENGQkFDRTY0MkE2RjYwRjc4RkNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTAzMTdFMjY5RkZFOUY3MTNGMjBDRkJBQ0U2NDJBNkY2MEY3 OEZDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTNiODU4ZjYtZGUyMC00MTIxLWJj ZWEtOTA3NmVkY2NjMDk3LzAvOTAzMTdFMjY5RkZFOUY3MTNGMjBDRkJBQ0U2NDJB NkY2MEY3OEZDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMykYXcysuLkmAdQHkINGW8YfMx5a+WA/5cZ nDBuNLZZClgQwMIL1oyfwQGS44JYpRxP9JwYwMCoqCrZdVe2b97gGMREIlA1z3h7 qgtuk6tP4IX7tsbmNNWpWEM3AQVyYd9nCAQ0yOOsYkK4eM2ZAuID7rrgd1ljXWdn 98xuhTbPiDaSRdIgIRcEvXypnBzmPyoV9xqnVKZLXuksgb8lMLQaNAEyYjZ/R4rz exV9dgaiivdbH4Rk6wuzyPu1owhuxuL+TW37I8RsQwRRiJw18zr1tt5l1uWMsSvJ b35ylA6mK8RtpFhvsypFu31L6IjIQ1mNi4kyfyb2nIPihU/ow9Y= -----END CERTIFICATE-----Generated at Tue Jun 3 23:41:54 2025 by rpki-client