$ rpki-client -vvf repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft File: AA90F6A6378710CD695B4CC742651F235E503C5B.mft (raw, json) Hash identifier: tn9HKEfvY+YqWsQXHSz0O6EtgB+dntvpCuDDy+/5qHU= Subject key identifier: A4:47:95:C8:F4:D4:30:11:01:09:F6:F6:9C:DF:2B:3E:02:42:9F:48 Authority key identifier: AA:90:F6:A6:37:87:10:CD:69:5B:4C:C7:42:65:1F:23:5E:50:3C:5B Certificate issuer: /CN=AA90F6A6378710CD695B4CC742651F235E503C5B Certificate serial: 32E2A83D6E6B9FF0E002C8A9EFDE2112893B94F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AA90F6A6378710CD695B4CC742651F235E503C5B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft Manifest number: 0122 Signing time: Thu 04 Sep 2025 06:20:43 +0000 Manifest this update: Thu 04 Sep 2025 06:15:43 +0000 Manifest next update: Sun 07 Sep 2025 17:14:43 +0000 Files and hashes: 1: AA90F6A6378710CD695B4CC742651F235E503C5B.crl (hash: 3jF113vlaNFJO9I9VP6YkjrDQhejBCahwUT6vuoYoa8=) 2: 3138302e3133312e3132382e302f32342d3234203d3e20313532303136.roa (hash: YmpzZpg+cWSd+9uJixfrwNPdQ5zM3aLz4TuMuxHWLMU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.crl rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AA90F6A6378710CD695B4CC742651F235E503C5B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 17:14:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:e2:a8:3d:6e:6b:9f:f0:e0:02:c8:a9:ef:de:21:12:89:3b:94:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA90F6A6378710CD695B4CC742651F235E503C5B Validity Not Before: Sep 4 06:15:43 2025 GMT Not After : Sep 7 17:14:43 2025 GMT Subject: CN=A44795C8F4D430110109F6F69CDF2B3E02429F48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:e8:aa:72:40:d1:86:84:96:c1:7b:24:90:c3: 4e:05:55:98:e7:0a:1d:b5:1e:77:4f:9f:4b:44:b3: 5f:79:bf:9b:43:75:eb:99:63:c5:a2:27:d3:ad:c5: 9b:7f:a6:30:ce:ac:ad:b6:d3:05:6e:26:41:b8:20: 7b:b2:44:c4:64:15:27:36:af:10:ec:18:70:13:2f: 16:1c:d1:bb:ea:23:0d:0d:2e:85:ab:65:18:88:5f: 5e:47:fc:b3:26:8c:f1:54:76:e1:a8:19:07:f5:58: 49:0a:0f:62:75:78:2b:f8:40:1c:16:ef:e1:40:8a: c9:ec:48:ff:4a:b8:b9:8e:32:cd:4c:4d:73:16:8a: 4f:6f:15:0b:97:08:d8:90:a0:15:ff:2a:0c:7c:6a: e5:f7:dd:66:05:01:ea:35:c7:21:3b:c0:e3:df:dc: 53:e4:5e:60:a7:42:36:e0:b2:65:a6:8d:d6:ab:e1: cb:1f:e5:c9:8f:91:1f:13:b3:6a:c0:f3:72:98:ed: b2:0b:37:7b:b6:a0:c5:95:94:d5:61:75:c3:c7:aa: 0c:fb:e6:d0:3c:2f:5f:b6:3c:b1:89:a7:8c:f8:6d: 02:d8:a0:e8:e2:4b:1b:e7:cc:3f:63:c6:4a:b7:70: a8:84:82:8c:b7:aa:50:85:47:7d:0b:ae:a4:4a:66: 85:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:47:95:C8:F4:D4:30:11:01:09:F6:F6:9C:DF:2B:3E:02:42:9F:48 X509v3 Authority Key Identifier: keyid:AA:90:F6:A6:37:87:10:CD:69:5B:4C:C7:42:65:1F:23:5E:50:3C:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AA90F6A6378710CD695B4CC742651F235E503C5B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:6b:25:52:00:6b:13:41:67:1e:c4:dc:76:4c:ba:a5:0c:d5: 43:6e:e1:ee:08:e7:33:cd:17:25:03:e4:7c:d2:5f:69:2a:c1: f1:64:3d:bd:67:58:51:3c:54:b6:68:31:10:77:12:a2:ac:38: 2f:c1:fe:d0:a6:31:b7:d7:f4:fb:5e:9b:d4:6b:f4:09:8d:77: 38:90:df:b9:38:85:14:ba:24:db:2f:6e:b5:a0:12:53:06:54: 8d:8a:c8:d8:47:c7:fb:2a:1e:a2:c6:28:34:43:8d:7c:33:33: b1:82:90:d7:25:a2:5b:82:9b:ca:ce:3d:28:81:68:66:ec:14: be:d1:75:48:00:c3:86:04:88:d5:04:7f:3a:6f:8f:3c:4e:d5: bf:68:b0:0a:ea:09:69:70:43:8a:ff:8d:78:68:4a:7f:72:dd: 06:b3:e7:06:26:c5:3f:16:72:22:95:3e:e8:a8:e5:47:82:81: 29:13:84:bc:14:78:cc:d0:53:58:a0:53:5b:62:b7:67:8b:af: 8b:bd:aa:7c:48:4e:95:53:91:3e:be:91:12:d9:a6:fd:8e:4a: 16:55:b9:19:af:bf:7b:9f:9e:31:37:dc:a2:e1:28:ee:d0:e3: 02:44:0d:1e:d2:9b:8e:39:1f:0e:85:51:3c:74:2b:d5:9e:cd: 4a:76:f9:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMuKoPW5rn/DgAsip794hEok7lPIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE5MEY2QTYzNzg3MTBDRDY5NUI0Q0M3NDI2NTFGMjM1 RTUwM0M1QjAeFw0yNTA5MDQwNjE1NDNaFw0yNTA5MDcxNzE0NDNaMDMxMTAvBgNV BAMTKEE0NDc5NUM4RjRENDMwMTEwMTA5RjZGNjlDREYyQjNFMDI0MjlGNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh6KpyQNGGhJbBeySQw04FVZjn Ch21HndPn0tEs195v5tDdeuZY8WiJ9OtxZt/pjDOrK220wVuJkG4IHuyRMRkFSc2 rxDsGHATLxYc0bvqIw0NLoWrZRiIX15H/LMmjPFUduGoGQf1WEkKD2J1eCv4QBwW 7+FAisnsSP9KuLmOMs1MTXMWik9vFQuXCNiQoBX/Kgx8auX33WYFAeo1xyE7wOPf 3FPkXmCnQjbgsmWmjdar4csf5cmPkR8Ts2rA83KY7bILN3u2oMWVlNVhdcPHqgz7 5tA8L1+2PLGJp4z4bQLYoOjiSxvnzD9jxkq3cKiEgoy3qlCFR30LrqRKZoVzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpEeVyPTUMBEBCfb2nN8rPgJCn0gwHwYDVR0j BBgwFoAUqpD2pjeHEM1pW0zHQmUfI15QPFswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDAyYTU4ZC1iOTU4LTQyMTktODZkMy02MWU0M2NlZTMxOWEvMC9BQTkwRjZBNjM3 ODcxMENENjk1QjRDQzc0MjY1MUYyMzVFNTAzQzVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUE5MEY2QTYzNzg3MTBDRDY5NUI0Q0M3NDI2NTFGMjM1RTUw M0M1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2QwMmE1OGQtYjk1OC00MjE5LTg2 ZDMtNjFlNDNjZWUzMTlhLzAvQUE5MEY2QTYzNzg3MTBDRDY5NUI0Q0M3NDI2NTFG MjM1RTUwM0M1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAxrJVIAaxNBZx7E3HZMuqUM1UNu4e4I5zPN FyUD5HzSX2kqwfFkPb1nWFE8VLZoMRB3EqKsOC/B/tCmMbfX9Ptem9Rr9AmNdziQ 37k4hRS6JNsvbrWgElMGVI2KyNhHx/sqHqLGKDRDjXwzM7GCkNcloluCm8rOPSiB aGbsFL7RdUgAw4YEiNUEfzpvjzxO1b9osArqCWlwQ4r/jXhoSn9y3Qaz5wYmxT8W ciKVPuio5UeCgSkThLwUeMzQU1igU1tit2eLr4u9qnxITpVTkT6+kRLZpv2OShZV uRmvv3ufnjE33KLhKO7Q4wJEDR7Sm445Hw6FUTx0K9WezUp2+XA= -----END CERTIFICATE-----Generated at Fri Sep 5 10:34:30 2025 by rpki-client