$ rpki-client -vvf repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft File: AA90F6A6378710CD695B4CC742651F235E503C5B.mft (raw, json) Hash identifier: rh/t+dkcExt8jshqbEJOx8vdLbCZgDNCYg/Z17aJ+Fk= Subject key identifier: 09:D6:2B:EF:53:D0:28:0D:D6:EF:09:66:F0:65:B0:E0:E2:3E:00:FD Authority key identifier: AA:90:F6:A6:37:87:10:CD:69:5B:4C:C7:42:65:1F:23:5E:50:3C:5B Certificate issuer: /CN=AA90F6A6378710CD695B4CC742651F235E503C5B Certificate serial: 2486D76DA4FA964533EFE7D4B5A7C2BC715C1334 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AA90F6A6378710CD695B4CC742651F235E503C5B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft Manifest number: FA Signing time: Fri 06 Jun 2025 02:00:44 +0000 Manifest this update: Fri 06 Jun 2025 01:55:44 +0000 Manifest next update: Mon 09 Jun 2025 11:35:44 +0000 Files and hashes: 1: 3138302e3133312e3132382e302f32342d3234203d3e20313532303136.roa (hash: YmpzZpg+cWSd+9uJixfrwNPdQ5zM3aLz4TuMuxHWLMU=) 2: AA90F6A6378710CD695B4CC742651F235E503C5B.crl (hash: k4C3Te5n5jnu4Gl8b/TEQJiKmvgPOvH+KaedqHjtf+Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.crl rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AA90F6A6378710CD695B4CC742651F235E503C5B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 11:35:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:86:d7:6d:a4:fa:96:45:33:ef:e7:d4:b5:a7:c2:bc:71:5c:13:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA90F6A6378710CD695B4CC742651F235E503C5B Validity Not Before: Jun 6 01:55:44 2025 GMT Not After : Jun 9 11:35:44 2025 GMT Subject: CN=09D62BEF53D0280DD6EF0966F065B0E0E23E00FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b0:00:8c:66:ee:6b:1d:dc:ee:73:7c:32:7a: 1b:97:9c:0b:15:32:94:be:2b:32:99:78:cd:53:19: 03:35:c8:b0:64:11:71:a4:2d:fe:82:4c:92:42:d2: b0:f0:d3:81:0f:1e:5f:20:09:80:f4:55:2b:f5:f6: 7b:a2:8f:92:f0:46:4a:80:ec:85:b2:3c:81:f8:d4: ad:04:df:26:05:00:b6:c2:1b:b0:69:73:8b:94:ce: 6b:99:47:2f:7b:00:f4:d3:92:f6:c3:7d:a5:1e:69: 86:84:77:b3:fc:71:f5:98:4a:e2:63:98:c9:a9:b7: 49:c4:35:cf:cc:89:14:9e:19:ce:05:e8:4f:c5:0c: 22:8e:18:30:f5:5f:e3:b4:06:8b:85:cb:0d:09:02: e2:9d:40:4f:ba:61:46:5a:90:1d:0b:cb:c4:e7:d3: 15:78:b0:50:6c:06:16:81:17:fc:41:cc:8c:e2:aa: b7:af:df:84:e2:f3:17:06:69:e1:d0:dd:aa:a8:e8: 09:4a:3b:7e:9b:ca:d3:25:8b:4b:c1:7b:b0:a6:ae: c8:94:cd:d8:66:e7:34:23:13:34:b1:de:09:fa:c7: 22:b0:7a:46:c7:30:58:61:6b:82:5f:e6:83:51:09: a0:e6:d9:06:b4:ca:97:99:65:06:f5:95:bd:e8:5e: 68:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:D6:2B:EF:53:D0:28:0D:D6:EF:09:66:F0:65:B0:E0:E2:3E:00:FD X509v3 Authority Key Identifier: keyid:AA:90:F6:A6:37:87:10:CD:69:5B:4C:C7:42:65:1F:23:5E:50:3C:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AA90F6A6378710CD695B4CC742651F235E503C5B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d02a58d-b958-4219-86d3-61e43cee319a/0/AA90F6A6378710CD695B4CC742651F235E503C5B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:b1:a8:22:47:fa:03:0a:1d:70:34:0c:a2:66:dd:90:30:a9: 21:c0:9d:b2:54:bc:1b:1f:8a:42:a3:e0:2c:fe:75:b6:63:8d: 01:a7:56:66:f4:2d:9b:60:49:98:bf:c1:fb:f5:db:a9:f5:41: 03:36:73:a4:05:2e:d9:db:98:0d:97:3d:44:c9:d2:44:bd:02: e3:3e:95:46:80:b2:bd:b7:c0:7c:a8:b7:96:ac:a1:ad:d4:fc: 56:cf:65:e2:93:86:a0:9b:de:06:89:b2:b0:d1:5d:e0:ce:e1: 54:2f:8b:b4:0d:91:2f:52:98:ff:e4:b9:18:c1:0d:a2:cd:26: 0d:ee:89:39:e1:da:9b:5c:aa:9c:83:e6:14:de:41:a2:25:c8: 81:bb:2b:91:1e:ba:42:f6:01:5c:44:97:9c:1c:06:43:ce:35: ae:8e:31:74:20:28:74:b1:15:f9:68:73:44:ca:4f:d0:12:ff: 0a:ac:b2:dd:17:c8:18:24:dc:b8:92:f9:5c:82:8d:80:4a:8d: 0c:0d:83:f1:aa:dc:d3:d1:fb:f5:32:db:e5:d6:07:32:7a:f8: 35:ec:33:8f:c7:62:71:c6:da:64:e9:dc:f1:30:6f:cf:08:ed: 09:ec:9a:ce:64:a1:8c:7a:09:84:fd:36:9e:20:5a:3a:d0:e5: 9f:bd:d8:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJIbXbaT6lkUz7+fUtafCvHFcEzQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE5MEY2QTYzNzg3MTBDRDY5NUI0Q0M3NDI2NTFGMjM1 RTUwM0M1QjAeFw0yNTA2MDYwMTU1NDRaFw0yNTA2MDkxMTM1NDRaMDMxMTAvBgNV BAMTKDA5RDYyQkVGNTNEMDI4MERENkVGMDk2NkYwNjVCMEUwRTIzRTAwRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1sACMZu5rHdzuc3wyehuXnAsV MpS+KzKZeM1TGQM1yLBkEXGkLf6CTJJC0rDw04EPHl8gCYD0VSv19nuij5LwRkqA 7IWyPIH41K0E3yYFALbCG7Bpc4uUzmuZRy97APTTkvbDfaUeaYaEd7P8cfWYSuJj mMmpt0nENc/MiRSeGc4F6E/FDCKOGDD1X+O0BouFyw0JAuKdQE+6YUZakB0Ly8Tn 0xV4sFBsBhaBF/xBzIziqrev34Ti8xcGaeHQ3aqo6AlKO36bytMli0vBe7CmrsiU zdhm5zQjEzSx3gn6xyKwekbHMFhha4Jf5oNRCaDm2Qa0ypeZZQb1lb3oXmhHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCdYr71PQKA3W7wlm8GWw4OI+AP0wHwYDVR0j BBgwFoAUqpD2pjeHEM1pW0zHQmUfI15QPFswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDAyYTU4ZC1iOTU4LTQyMTktODZkMy02MWU0M2NlZTMxOWEvMC9BQTkwRjZBNjM3 ODcxMENENjk1QjRDQzc0MjY1MUYyMzVFNTAzQzVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUE5MEY2QTYzNzg3MTBDRDY5NUI0Q0M3NDI2NTFGMjM1RTUw M0M1Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2QwMmE1OGQtYjk1OC00MjE5LTg2 ZDMtNjFlNDNjZWUzMTlhLzAvQUE5MEY2QTYzNzg3MTBDRDY5NUI0Q0M3NDI2NTFG MjM1RTUwM0M1Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADyxqCJH+gMKHXA0DKJm3ZAwqSHAnbJUvBsf ikKj4Cz+dbZjjQGnVmb0LZtgSZi/wfv126n1QQM2c6QFLtnbmA2XPUTJ0kS9AuM+ lUaAsr23wHyot5asoa3U/FbPZeKThqCb3gaJsrDRXeDO4VQvi7QNkS9SmP/kuRjB DaLNJg3uiTnh2ptcqpyD5hTeQaIlyIG7K5EeukL2AVxEl5wcBkPONa6OMXQgKHSx Ffloc0TKT9AS/wqsst0XyBgk3LiS+VyCjYBKjQwNg/Gq3NPR+/Uy2+XWBzJ6+DXs M4/HYnHG2mTp3PEwb88I7Qnsms5koYx6CYT9Np4gWjrQ5Z+92IY= -----END CERTIFICATE-----Generated at Fri Jun 6 16:53:59 2025 by rpki-client