$ rpki-client -vvf repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.mft File: B90B0AED87ECD7C87066450AB56ADE2996647CD5.mft (raw, json) Hash identifier: 3gnBgU7Xif1PnQzAIy77cC2XxAhcW5KvAupjLCGHM50= Subject key identifier: E7:0B:94:E6:CB:FE:76:AF:15:98:89:D5:0D:FB:F1:8E:78:23:E6:6E Authority key identifier: B9:0B:0A:ED:87:EC:D7:C8:70:66:45:0A:B5:6A:DE:29:96:64:7C:D5 Certificate issuer: /CN=B90B0AED87ECD7C87066450AB56ADE2996647CD5 Certificate serial: 6E766B61DB2F23B26316FF2B2EF7875F7897D9DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B90B0AED87ECD7C87066450AB56ADE2996647CD5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.mft Manifest number: 026E Signing time: Sat 06 Sep 2025 05:41:28 +0000 Manifest this update: Sat 06 Sep 2025 05:36:28 +0000 Manifest next update: Tue 09 Sep 2025 11:44:28 +0000 Files and hashes: 1: B90B0AED87ECD7C87066450AB56ADE2996647CD5.crl (hash: wCvLZHtl3tpXkQVgoPLTKQISBtcq2/8CURwvxRMQiOk=) 2: 3130332e3137302e33332e302f32342d3234203d3e20313432333933.roa (hash: Y898pFGpBLNuRCPjm01v0/pmUXmwJOu+OeM8IgqOT94=) 3: 3130332e3137302e33322e302f32342d3234203d3e20313432333631.roa (hash: lzUMPrw8n3pOIcK3z918mZsLDeZOm1wMYf7ktj1KFkU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.crl rsync://repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B90B0AED87ECD7C87066450AB56ADE2996647CD5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 11:44:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:76:6b:61:db:2f:23:b2:63:16:ff:2b:2e:f7:87:5f:78:97:d9:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B90B0AED87ECD7C87066450AB56ADE2996647CD5 Validity Not Before: Sep 6 05:36:28 2025 GMT Not After : Sep 9 11:44:28 2025 GMT Subject: CN=E70B94E6CBFE76AF159889D50DFBF18E7823E66E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3c:43:97:70:bf:80:08:51:f0:3c:cb:16:5d: cf:65:38:01:97:8e:c1:c6:9a:00:a3:71:08:e5:86: 97:05:39:e6:c5:69:e6:97:c5:e7:6e:ff:69:ce:a8: 03:aa:f4:d3:2b:53:0f:33:16:4a:54:74:b5:c8:a2: 02:02:9e:6f:25:80:05:4c:e7:93:19:b4:3a:ce:3a: 49:0a:f2:57:30:b8:3b:49:95:b0:93:92:2f:4a:94: 9c:f1:8c:74:d8:00:99:cb:78:40:86:eb:44:47:7d: 38:4d:85:d6:fc:6f:96:d1:61:3e:bb:29:04:dc:d6: 9b:bd:1a:05:8a:53:9a:4a:5e:f6:72:66:b9:09:b6: f5:06:b9:ff:25:11:5d:b7:11:95:8b:68:c5:d2:05: f8:93:d4:2b:fd:22:14:01:b6:83:4b:37:39:85:18: c6:71:c3:58:d3:b1:28:40:3a:ea:5d:95:e9:e4:7b: 70:1c:92:9d:00:34:37:a7:d7:a2:93:e9:9d:78:2b: c8:5f:ed:53:fd:49:44:4e:67:91:1d:55:e7:27:3b: 3b:84:48:9f:77:64:0d:58:de:7a:6a:ad:0b:bf:61: 52:74:fc:57:0d:1c:30:88:9c:bd:a6:b6:00:5e:12: 3f:10:f8:d9:e0:6f:93:09:b6:96:f0:2a:4d:b9:1c: a9:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:0B:94:E6:CB:FE:76:AF:15:98:89:D5:0D:FB:F1:8E:78:23:E6:6E X509v3 Authority Key Identifier: keyid:B9:0B:0A:ED:87:EC:D7:C8:70:66:45:0A:B5:6A:DE:29:96:64:7C:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B90B0AED87ECD7C87066450AB56ADE2996647CD5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aae6379e-b886-436e-b0ed-3aaff9c08501/0/B90B0AED87ECD7C87066450AB56ADE2996647CD5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:13:e8:56:a3:d6:cc:fd:66:37:7e:a3:13:ec:53:82:51:a8: 50:14:d2:f3:f1:b3:85:e3:df:5d:d6:49:b9:2e:17:81:b4:bd: 25:28:8a:33:6c:dc:78:c2:f6:45:54:67:4e:35:d8:85:41:5d: 83:28:84:e5:b6:f5:7e:af:f3:27:ec:16:8d:3c:32:97:f7:09: eb:05:d6:35:54:84:1d:5e:9c:c0:32:6d:1d:15:5c:64:b6:99: ff:26:04:cd:43:df:d0:ce:b9:93:f6:be:80:c9:a5:dc:41:f0: 4c:52:5b:0b:a9:dc:1c:bc:37:2f:4a:e7:0e:03:6e:6e:60:7f: 6c:50:99:78:d7:8c:44:01:39:82:ee:c3:24:f8:f1:04:d5:eb: ab:50:2c:e1:32:10:ef:3b:1d:ea:b4:a1:aa:19:c9:39:be:2d: a5:dd:99:96:18:e2:b4:4d:ce:ae:3f:4f:02:38:ee:ee:20:9f: 6e:87:86:c7:e1:4e:8d:05:b2:30:db:69:93:60:fd:b6:45:30: 82:3b:f3:a8:cc:51:ef:13:45:dd:40:22:0a:04:81:9f:e0:52: d3:94:65:ac:69:3e:d2:e2:b1:45:4a:42:ad:aa:13:75:01:fe: 16:a4:aa:8c:d1:99:42:9a:2b:58:23:c4:2d:47:36:1f:cc:4d: b1:5b:d7:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbnZrYdsvI7JjFv8rLveHX3iX2d4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjkwQjBBRUQ4N0VDRDdDODcwNjY0NTBBQjU2QURFMjk5 NjY0N0NENTAeFw0yNTA5MDYwNTM2MjhaFw0yNTA5MDkxMTQ0MjhaMDMxMTAvBgNV BAMTKEU3MEI5NEU2Q0JGRTc2QUYxNTk4ODlENTBERkJGMThFNzgyM0U2NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBPEOXcL+ACFHwPMsWXc9lOAGX jsHGmgCjcQjlhpcFOebFaeaXxedu/2nOqAOq9NMrUw8zFkpUdLXIogICnm8lgAVM 55MZtDrOOkkK8lcwuDtJlbCTki9KlJzxjHTYAJnLeECG60RHfThNhdb8b5bRYT67 KQTc1pu9GgWKU5pKXvZyZrkJtvUGuf8lEV23EZWLaMXSBfiT1Cv9IhQBtoNLNzmF GMZxw1jTsShAOupdlenke3Ackp0ANDen16KT6Z14K8hf7VP9SUROZ5EdVecnOzuE SJ93ZA1Y3npqrQu/YVJ0/FcNHDCInL2mtgBeEj8Q+Nngb5MJtpbwKk25HKmrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5wuU5sv+dq8VmInVDfvxjngj5m4wHwYDVR0j BBgwFoAUuQsK7Yfs18hwZkUKtWreKZZkfNUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YWU2Mzc5ZS1iODg2LTQzNmUtYjBlZC0zYWFmZjljMDg1MDEvMC9COTBCMEFFRDg3 RUNEN0M4NzA2NjQ1MEFCNTZBREUyOTk2NjQ3Q0Q1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjkwQjBBRUQ4N0VDRDdDODcwNjY0NTBBQjU2QURFMjk5NjY0 N0NENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWFlNjM3OWUtYjg4Ni00MzZlLWIw ZWQtM2FhZmY5YzA4NTAxLzAvQjkwQjBBRUQ4N0VDRDdDODcwNjY0NTBBQjU2QURF Mjk5NjY0N0NENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHAT6Faj1sz9Zjd+oxPsU4JRqFAU0vPxs4Xj 313WSbkuF4G0vSUoijNs3HjC9kVUZ0412IVBXYMohOW29X6v8yfsFo08Mpf3CesF 1jVUhB1enMAybR0VXGS2mf8mBM1D39DOuZP2voDJpdxB8ExSWwup3By8Ny9K5w4D bm5gf2xQmXjXjEQBOYLuwyT48QTV66tQLOEyEO87Heq0oaoZyTm+LaXdmZYY4rRN zq4/TwI47u4gn26HhsfhTo0FsjDbaZNg/bZFMII786jMUe8TRd1AIgoEgZ/gUtOU ZaxpPtLisUVKQq2qE3UB/hakqozRmUKaK1gjxC1HNh/MTbFb16w= -----END CERTIFICATE-----Generated at Sun Sep 7 15:28:45 2025 by rpki-client