$ rpki-client -vvf repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/90EF20986B3061451D9F1178EB4D439522186281.mft File: 90EF20986B3061451D9F1178EB4D439522186281.mft (raw, json) Hash identifier: 6Fx53wq9v3nD9oE+jN6XmZpyQoLf4VI3gsCpgCkL4w0= Subject key identifier: FF:18:AE:06:24:B6:5C:0B:8F:19:6D:85:32:89:5E:AA:08:AC:7C:FB Authority key identifier: 90:EF:20:98:6B:30:61:45:1D:9F:11:78:EB:4D:43:95:22:18:62:81 Certificate issuer: /CN=90EF20986B3061451D9F1178EB4D439522186281 Certificate serial: 0311A1C07CCE7E4B6BA0040A080FE20170C88BB3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90EF20986B3061451D9F1178EB4D439522186281.cer Subject info access: rsync://repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/90EF20986B3061451D9F1178EB4D439522186281.mft Manifest number: 028F Signing time: Fri 05 Sep 2025 18:31:53 +0000 Manifest this update: Fri 05 Sep 2025 18:26:53 +0000 Manifest next update: Tue 09 Sep 2025 06:24:53 +0000 Files and hashes: 1: 3130332e3137382e32302e302f32342d3234203d3e20313439333139.roa (hash: JSycxTOglnQdBUlrjThmP2GKqGp0iOUX7UEI4meYjIw=) 2: 3130332e3137382e32312e302f32342d3234203d3e20313439333139.roa (hash: 9Ryd3Iuo45mFpjlZiuD/h6nihGcwet3lKWcDNjIWflo=) 3: 90EF20986B3061451D9F1178EB4D439522186281.crl (hash: ollp2JCyQth7gG4z9L/VxAtD2XrLTixaVOLgXkJUViE=) 4: 3130332e3137382e32302e302f32332d3233203d3e20313439333139.roa (hash: vFQZ6zJmin+go144K352IonoJjOf81LutMdjmKX7MCM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/90EF20986B3061451D9F1178EB4D439522186281.crl rsync://repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/90EF20986B3061451D9F1178EB4D439522186281.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90EF20986B3061451D9F1178EB4D439522186281.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 06:24:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:11:a1:c0:7c:ce:7e:4b:6b:a0:04:0a:08:0f:e2:01:70:c8:8b:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90EF20986B3061451D9F1178EB4D439522186281 Validity Not Before: Sep 5 18:26:53 2025 GMT Not After : Sep 9 06:24:53 2025 GMT Subject: CN=FF18AE0624B65C0B8F196D8532895EAA08AC7CFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:88:42:bf:ad:f2:da:90:c8:03:eb:68:1f:d4: cb:9b:7a:3f:7a:80:ad:42:bc:c8:77:2d:53:c6:40: 58:bf:2d:02:70:52:50:14:a5:d5:a2:08:e4:2c:82: 41:6c:47:fd:95:e4:c7:e0:eb:61:a1:ae:c8:b9:95: 3e:13:07:60:f4:18:c3:9c:92:a3:7e:22:cc:98:98: 76:e1:aa:b2:07:18:1a:8e:14:e4:a4:18:af:64:94: f6:86:82:7d:76:45:94:f2:c1:d5:c0:e5:c2:a3:79: 7c:38:04:b7:9e:5a:53:39:86:5a:4f:c1:1e:92:96: ae:4c:5f:01:74:64:82:fc:cd:b4:47:11:39:01:73: 4f:f7:bd:56:49:a6:b0:2b:9c:09:c5:16:16:02:b4: 7b:d7:bf:f1:5d:91:d7:8b:12:67:c0:1b:78:2b:a8: f8:59:c8:eb:fd:39:ab:35:b3:6b:33:24:f0:25:96: 62:84:dd:48:56:f0:68:c7:27:c4:14:9d:ac:ec:1e: 32:a9:9c:23:32:9c:3a:7a:e6:e0:7b:dd:4b:5a:c3: 3b:02:9c:c5:40:33:89:a0:d8:00:0e:8c:a7:9c:98: ca:50:30:b0:65:23:be:13:c9:e1:18:cb:a6:b3:ce: b8:5a:ac:9e:af:bf:d1:d5:65:3e:1d:2c:2f:c5:21: 74:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:18:AE:06:24:B6:5C:0B:8F:19:6D:85:32:89:5E:AA:08:AC:7C:FB X509v3 Authority Key Identifier: keyid:90:EF:20:98:6B:30:61:45:1D:9F:11:78:EB:4D:43:95:22:18:62:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/90EF20986B3061451D9F1178EB4D439522186281.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90EF20986B3061451D9F1178EB4D439522186281.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/90EF20986B3061451D9F1178EB4D439522186281.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:d8:e5:66:e6:06:c9:a0:04:4e:72:5f:e4:83:8b:11:0a:b8: 9f:0a:23:a1:5d:dc:a5:d9:61:48:2e:33:4c:2a:fa:7e:85:d4: ed:7f:00:61:c5:ba:7b:5b:53:34:0c:25:5d:0d:9e:e1:3f:94: 8e:5a:6c:20:10:6f:9e:be:c9:83:17:2e:92:b6:06:87:4a:04: e2:1f:7a:8f:3c:5c:5e:c5:f0:b9:42:d0:bc:c0:8b:18:ed:8b: 3f:d3:60:bd:b8:be:28:20:93:b9:28:07:17:58:cb:fd:71:a0: ab:18:ad:cb:9b:41:07:9d:5b:46:7d:ad:0c:24:7f:9b:65:e4: 0a:36:cc:01:7b:f6:66:6b:61:67:30:86:48:94:fa:db:4d:11: d2:9a:06:d7:ab:d4:44:5a:bc:4f:d7:b4:81:72:c8:97:28:cb: c4:29:3e:ec:f0:ed:17:f4:21:f0:aa:c3:b7:d1:40:c5:77:c4: 0b:b6:c1:60:22:37:bf:1a:6e:68:77:2a:2e:42:89:72:f9:18: 96:49:43:80:88:ee:6d:03:fb:51:a9:6e:05:b3:e7:42:2b:87: 42:9d:41:d1:d5:84:b0:a7:1d:04:09:c4:d9:85:9b:7f:70:6b: 1f:eb:9e:a7:1f:09:b6:d6:82:73:2d:f7:03:63:a8:e9:36:24: 9f:43:7c:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAxGhwHzOfktroAQKCA/iAXDIi7MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTBFRjIwOTg2QjMwNjE0NTFEOUYxMTc4RUI0RDQzOTUy MjE4NjI4MTAeFw0yNTA5MDUxODI2NTNaFw0yNTA5MDkwNjI0NTNaMDMxMTAvBgNV BAMTKEZGMThBRTA2MjRCNjVDMEI4RjE5NkQ4NTMyODk1RUFBMDhBQzdDRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxiEK/rfLakMgD62gf1Mubej96 gK1CvMh3LVPGQFi/LQJwUlAUpdWiCOQsgkFsR/2V5Mfg62Ghrsi5lT4TB2D0GMOc kqN+IsyYmHbhqrIHGBqOFOSkGK9klPaGgn12RZTywdXA5cKjeXw4BLeeWlM5hlpP wR6Slq5MXwF0ZIL8zbRHETkBc0/3vVZJprArnAnFFhYCtHvXv/FdkdeLEmfAG3gr qPhZyOv9Oas1s2szJPAllmKE3UhW8GjHJ8QUnazsHjKpnCMynDp65uB73UtawzsC nMVAM4mg2AAOjKecmMpQMLBlI74TyeEYy6azzrharJ6vv9HVZT4dLC/FIXT1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/xiuBiS2XAuPGW2FMoleqgisfPswHwYDVR0j BBgwFoAUkO8gmGswYUUdnxF4601DlSIYYoEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NmZkOWE1OC1hOTA2LTQwMjktOTJlMi1hZGNiNTZhZTE4YmQvMC85MEVGMjA5ODZC MzA2MTQ1MUQ5RjExNzhFQjRENDM5NTIyMTg2MjgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTBFRjIwOTg2QjMwNjE0NTFEOUYxMTc4RUI0RDQzOTUyMjE4 NjI4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTZmZDlhNTgtYTkwNi00MDI5LTky ZTItYWRjYjU2YWUxOGJkLzAvOTBFRjIwOTg2QjMwNjE0NTFEOUYxMTc4RUI0RDQz OTUyMjE4NjI4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABrY5WbmBsmgBE5yX+SDixEKuJ8KI6Fd3KXZ YUguM0wq+n6F1O1/AGHFuntbUzQMJV0NnuE/lI5abCAQb56+yYMXLpK2BodKBOIf eo88XF7F8LlC0LzAixjtiz/TYL24viggk7koBxdYy/1xoKsYrcubQQedW0Z9rQwk f5tl5Ao2zAF79mZrYWcwhkiU+ttNEdKaBter1ERavE/XtIFyyJcoy8QpPuzw7Rf0 IfCqw7fRQMV3xAu2wWAiN78abmh3Ki5CiXL5GJZJQ4CI7m0D+1GpbgWz50Irh0Kd QdHVhLCnHQQJxNmFm39wax/rnqcfCbbWgnMt9wNjqOk2JJ9DfMg= -----END CERTIFICATE-----Generated at Sun Sep 7 13:53:52 2025 by rpki-client