$ rpki-client -vvf repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.mft File: 90173425DBB7D1DBD164BBA26F4657B17A266A97.mft (raw, json) Hash identifier: EGU26m1TLcbtMrqafEVWBX7nYU58lDb6iIDLGF8GsEI= Subject key identifier: 12:C0:A8:BD:F8:83:7E:D5:56:21:A6:D0:A4:BD:8A:8A:41:AD:C9:4C Authority key identifier: 90:17:34:25:DB:B7:D1:DB:D1:64:BB:A2:6F:46:57:B1:7A:26:6A:97 Certificate issuer: /CN=90173425DBB7D1DBD164BBA26F4657B17A266A97 Certificate serial: 2B6FF1899A05D6CBD8F8B0EB4C72BF90D6E8ACD1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90173425DBB7D1DBD164BBA26F4657B17A266A97.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.mft Manifest number: 0508 Signing time: Sun 07 Sep 2025 05:41:18 +0000 Manifest this update: Sun 07 Sep 2025 05:36:18 +0000 Manifest next update: Wed 10 Sep 2025 17:38:18 +0000 Files and hashes: 1: 323030313a6466373a376130303a3a2f34382d3438203d3e20313336303537.roa (hash: JVL+81yV9zQDwPcNgvThrCD77NCHFX7cSVK21vFtKao=) 2: 90173425DBB7D1DBD164BBA26F4657B17A266A97.crl (hash: EsTTEFpamwI3Xz19iW9G6ua60yPFhkw5tapSDtvxXNQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.crl rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90173425DBB7D1DBD164BBA26F4657B17A266A97.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:6f:f1:89:9a:05:d6:cb:d8:f8:b0:eb:4c:72:bf:90:d6:e8:ac:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90173425DBB7D1DBD164BBA26F4657B17A266A97 Validity Not Before: Sep 7 05:36:18 2025 GMT Not After : Sep 10 17:38:18 2025 GMT Subject: CN=12C0A8BDF8837ED55621A6D0A4BD8A8A41ADC94C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:83:99:e7:c9:9e:22:ca:63:90:b1:51:d1:af: b5:28:94:25:0c:e9:6a:e6:5a:fc:05:5c:ca:21:5c: 98:eb:10:b5:f6:b9:4a:46:82:04:90:4f:a3:e3:52: 95:f0:85:63:6c:0a:a6:9e:20:42:f2:77:45:56:19: 5b:be:7e:a3:74:79:4b:be:43:28:e0:70:3b:ac:7a: 5c:df:71:f8:dd:2f:6b:c2:8b:0e:2f:6e:83:48:97: e8:2b:56:90:b1:31:32:77:24:75:15:f6:64:b6:63: cd:d0:eb:89:51:68:98:69:11:73:dc:8a:2b:30:c6: 80:2c:bc:a7:07:f0:af:6b:52:85:15:ae:6c:9e:1a: 87:be:d0:7c:a3:fc:bd:1b:ff:7d:15:4e:16:20:cb: c3:24:13:b5:8f:cb:34:51:99:de:76:0f:47:40:98: ec:47:56:3e:2e:00:0b:50:f2:8e:87:46:f4:ba:68: e4:f3:1c:e4:37:cb:55:02:2d:fc:7b:63:ad:c4:46: 0a:27:68:8d:47:fd:5c:7d:8a:74:70:71:59:0f:f3: 54:2c:15:29:3a:ce:c9:16:86:5d:4b:56:0d:10:c7: 3a:50:eb:fb:9c:e9:82:27:56:1b:66:e5:a3:e4:de: c5:77:04:14:58:e8:75:cb:7c:bd:49:c3:e6:17:e3: fc:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:C0:A8:BD:F8:83:7E:D5:56:21:A6:D0:A4:BD:8A:8A:41:AD:C9:4C X509v3 Authority Key Identifier: keyid:90:17:34:25:DB:B7:D1:DB:D1:64:BB:A2:6F:46:57:B1:7A:26:6A:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90173425DBB7D1DBD164BBA26F4657B17A266A97.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:ec:6c:0a:ea:80:3f:09:ea:b1:da:79:e8:67:de:2a:b6:ee: be:86:d7:53:c6:a7:89:df:b8:24:0a:ab:18:d8:9a:f6:3d:2b: 07:ff:13:84:5e:46:e8:17:d6:74:48:df:18:bc:92:3b:88:ed: ee:27:37:02:19:bf:4c:16:4e:88:ae:f2:a5:6c:2a:44:89:77: 40:56:f6:bb:12:39:ea:59:be:14:c5:82:14:88:ce:50:f5:4a: 3b:3c:63:f3:9e:b3:89:b1:1a:8c:e3:5a:3d:de:d5:c6:27:6d: 9c:5e:03:bb:69:9d:2c:ee:22:21:1b:03:dd:24:ca:c6:ac:73: 60:10:c0:ba:3a:cd:d0:df:82:8a:84:5a:6f:5b:35:81:b2:b2: 28:47:67:bf:f9:78:12:4b:35:e8:e5:d0:e6:bb:c3:6c:df:ad: ad:51:0c:b2:0d:ea:af:a6:bd:9c:e5:af:2e:69:cb:13:cb:11: c6:15:be:20:bd:66:87:f9:25:3f:33:cf:3e:25:c6:e4:9a:28: 8f:ac:88:19:4f:6a:6f:07:fc:c4:cb:50:1a:ce:92:3a:eb:55: 91:55:e1:19:c9:b0:25:eb:8c:93:af:42:d2:bf:72:10:87:9a: 13:83:e5:32:2a:b8:3e:f7:74:f9:95:7a:2f:8e:be:92:a9:4f: 8d:c0:f5:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK2/xiZoF1svY+LDrTHK/kNborNEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTAxNzM0MjVEQkI3RDFEQkQxNjRCQkEyNkY0NjU3QjE3 QTI2NkE5NzAeFw0yNTA5MDcwNTM2MThaFw0yNTA5MTAxNzM4MThaMDMxMTAvBgNV BAMTKDEyQzBBOEJERjg4MzdFRDU1NjIxQTZEMEE0QkQ4QThBNDFBREM5NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpg5nnyZ4iymOQsVHRr7UolCUM 6WrmWvwFXMohXJjrELX2uUpGggSQT6PjUpXwhWNsCqaeIELyd0VWGVu+fqN0eUu+ QyjgcDuselzfcfjdL2vCiw4vboNIl+grVpCxMTJ3JHUV9mS2Y83Q64lRaJhpEXPc iiswxoAsvKcH8K9rUoUVrmyeGoe+0Hyj/L0b/30VThYgy8MkE7WPyzRRmd52D0dA mOxHVj4uAAtQ8o6HRvS6aOTzHOQ3y1UCLfx7Y63ERgonaI1H/Vx9inRwcVkP81Qs FSk6zskWhl1LVg0QxzpQ6/uc6YInVhtm5aPk3sV3BBRY6HXLfL1Jw+YX4/y7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEsCovfiDftVWIabQpL2KikGtyUwwHwYDVR0j BBgwFoAUkBc0Jdu30dvRZLuib0ZXsXomapcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YmQ0MzQwYi0yMWM0LTRmYzctYTI1OS1lMjM1NGM1M2ZkZDIvMC85MDE3MzQyNURC QjdEMURCRDE2NEJCQTI2RjQ2NTdCMTdBMjY2QTk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTAxNzM0MjVEQkI3RDFEQkQxNjRCQkEyNkY0NjU3QjE3QTI2 NkE5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWJkNDM0MGItMjFjNC00ZmM3LWEy NTktZTIzNTRjNTNmZGQyLzAvOTAxNzM0MjVEQkI3RDFEQkQxNjRCQkEyNkY0NjU3 QjE3QTI2NkE5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHTsbArqgD8J6rHaeehn3iq27r6G11PGp4nf uCQKqxjYmvY9Kwf/E4ReRugX1nRI3xi8kjuI7e4nNwIZv0wWToiu8qVsKkSJd0BW 9rsSOepZvhTFghSIzlD1Sjs8Y/Oes4mxGozjWj3e1cYnbZxeA7tpnSzuIiEbA90k ysasc2AQwLo6zdDfgoqEWm9bNYGysihHZ7/5eBJLNejl0Oa7w2zfra1RDLIN6q+m vZzlry5pyxPLEcYVviC9Zof5JT8zzz4lxuSaKI+siBlPam8H/MTLUBrOkjrrVZFV 4RnJsCXrjJOvQtK/chCHmhOD5TIquD73dPmVei+OvpKpT43A9TA= -----END CERTIFICATE-----Generated at Sun Sep 7 14:05:24 2025 by rpki-client